- Resolves: RHEL-220502 - CVE-2026-18355 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasl_io_start_packet() [rhel-9.8.z] - Resolves: RHEL-222321 - CVE-2026-18453 389-ds-base: pre-authentication NULL pointer dereference via paged results and USE_ONE_BACKEND control in op_shared_search [rhel-9.8.z] - Resolves: RHEL-232854 - CVE-2026-18922 389-ds-base: SASL PLAIN authentication allows privilege escalation to Directory Manager via stale identity in Cyrus SASL auxiliary property [rhel-9.8.z] - Resolves: RHEL-244467 - lib389: set nsDS5ReplicaBindDNGroup before ensure_agreement() [rhel-9.8.z] - Resolves: RHEL-245374 - CVE-2026-76560 389-ds-base: anonymous LDAP client can defeat SELFDN ACI bind-rule checks via empty bind DN [rhel-9.8.z] - Resolves: RHEL-247865 - CVE-2026-78701 389-ds-base: CVE-2026-11610 incomplete fix may introduce a connection-stall DoS [rhel-9.8.z] - Resolves: RHEL-248766 - CVE-2026-11770 fix breaks replication total init when nsDS5ReplicaBindDNGroup is set after agreement creation [rhel-9.8.z] - Resolves: RHEL-183082 - CVE-2026-11770 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check [rhel-9.8.z] - Resolves: RHEL-190775 - CVE-2026-11788 389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser [rhel-9.8.z] - Resolves: RHEL-210875 - CVE-2026-15722 389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing [rhel-9.8.z] - Resolves: RHEL-182159 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-9.8.z] - Resolves: RHEL-183103 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow [rhel-9.8.z] - Resolves: RHEL-152356 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. [rhel-9.8.z] - Resolves: RHEL-168967 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. [rhel-9.8.z] - Resolves: RHEL-170269 - DS 12 does not handle escape char in bind user [rhel-9.8.z] - Resolves: RHEL-174524 - [RFE] Add OS-level thread names to all server threads [rhel-9.8.z] - Resolves: RHEL-178086 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-9.8] - Resolves: RHEL-180716 - Online export is failing when using the option "-s" [rhel-9.8.z] - Resolves: RHEL-183895 - Server shutdown during online reindex may lead to data loss [rhel-9.8.z] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-137084 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-152338 - Crash ( Segmentation fault ) in atomic_compare_exchange() [rhel-9.8] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-150907 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-111229 - Error showing local password policy on web UI [rhel-9] - Resolves: RHEL-112680 - Statistics about index lookup report a wrong duration [rhel-9] - Resolves: RHEL-116426 - RetroCL plugin generates invalid LDIF [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-117748 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-117771 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default - Resolves: RHEL-117782 - Ignore the memberOfDeferredUpdate setting when LMDB is used. [rhel-9] - Resolves: RHEL-121170 - Units for changing MDB max size are not consistent across different tools [rhel-9] - Resolves: RHEL-123231 - Improve the way to detect asynchronous operations in the access logs [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123258 - Typo in errors log after a Memberof fixup task. [rhel-9] - Resolves: RHEL-123272 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-123368 - IPA health check up script shows time skew is over 24 hours [rhel-9] - Resolves: RHEL-123766 - 389-ds-base OpenScanHub Leaks Detected [rhel-9] - Resolves: RHEL-123893 - Improve output dsctl dbverify when backend does not exist [rhel-9] - Resolves: RHEL-123897 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9] - Resolves: RHEL-123923 - Changelog trimming - add number of scanned entries to the log [rhel-9] - Resolves: RHEL-126552 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly [rhel-9] - Resolves: RHEL-129559 - Online initialization of consumers fails with error -23 [rhel-9] - Resolves: RHEL-129580 - Fix paged result search locking [rhel-9] - Resolves: RHEL-138481 - Memory leak observed in ns-slapd with 389-ds-base-2.6.1-12 [rhel-9] - Resolves: RHEL-139825 - Rebase 389-ds-base to 2.8.x - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-216720 - ERR - idl_new_range_fetch - Failed to build range candidate list on entryusn index [rhel-9.8.z] - Resolves: RHEL-234360 - Online reinitialization is failing with the supplier being busy calling idrange_add_id() [rhel-9.8.z] - Resolves: RHEL-252559 - MOD_REPLACE on groups/link attributes modifies overlap targets [rhel-9.8.z] - Resolves: RHEL-256995 - large IdM host group, missing memberof host group, authentication failures, high traffic and contention [rhel-9.8.z] - Resolves: RHEL-257002 - WARN - keys2idl - received NULL idl from index_read_ext_allids [rhel-9.8.z] - Resolves: RHEL-267288 - dsEntryDN is being updated when nsslapd-return-original-entrydn is set to off [rhel-9.8.z] - Resolves: RHEL-267317 - When fetching an entry from the DB, if nsslapd-return-original-entrydn is enabled the return dsEntryDN rather than normalized DN [rhel-9.8.z] - Resolves: RHEL-267322 - Differences on export ldif using online of off-line method on RHDS [rhel-9.8.z] - Resolves: RHEL-220502 - CVE-2026-18355 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasl_io_start_packet() [rhel-9.8.z] - Resolves: RHEL-222321 - CVE-2026-18453 389-ds-base: pre-authentication NULL pointer dereference via paged results and USE_ONE_BACKEND control in op_shared_search [rhel-9.8.z] - Resolves: RHEL-232854 - CVE-2026-18922 389-ds-base: SASL PLAIN authentication allows privilege escalation to Directory Manager via stale identity in Cyrus SASL auxiliary property [rhel-9.8.z] - Resolves: RHEL-244467 - lib389: set nsDS5ReplicaBindDNGroup before ensure_agreement() [rhel-9.8.z] - Resolves: RHEL-245374 - CVE-2026-76560 389-ds-base: anonymous LDAP client can defeat SELFDN ACI bind-rule checks via empty bind DN [rhel-9.8.z] - Resolves: RHEL-247865 - CVE-2026-78701 389-ds-base: CVE-2026-11610 incomplete fix may introduce a connection-stall DoS [rhel-9.8.z] - Resolves: RHEL-248766 - CVE-2026-11770 fix breaks replication total init when nsDS5ReplicaBindDNGroup is set after agreement creation [rhel-9.8.z] - Resolves: RHEL-183082 - CVE-2026-11770 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check [rhel-9.8.z] - Resolves: RHEL-190775 - CVE-2026-11788 389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser [rhel-9.8.z] - Resolves: RHEL-210875 - CVE-2026-15722 389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing [rhel-9.8.z] - Resolves: RHEL-182159 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-9.8.z] - Resolves: RHEL-183103 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow [rhel-9.8.z] - Resolves: RHEL-152356 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. [rhel-9.8.z] - Resolves: RHEL-168967 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. [rhel-9.8.z] - Resolves: RHEL-170269 - DS 12 does not handle escape char in bind user [rhel-9.8.z] - Resolves: RHEL-174524 - [RFE] Add OS-level thread names to all server threads [rhel-9.8.z] - Resolves: RHEL-178086 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-9.8] - Resolves: RHEL-180716 - Online export is failing when using the option "-s" [rhel-9.8.z] - Resolves: RHEL-183895 - Server shutdown during online reindex may lead to data loss [rhel-9.8.z] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-137084 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-152338 - Crash ( Segmentation fault ) in atomic_compare_exchange() [rhel-9.8] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-150907 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-137084 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-152338 - Crash ( Segmentation fault ) in atomic_compare_exchange() [rhel-9.8] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-150907 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-111229 - Error showing local password policy on web UI [rhel-9] - Resolves: RHEL-112680 - Statistics about index lookup report a wrong duration [rhel-9] - Resolves: RHEL-116426 - RetroCL plugin generates invalid LDIF [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-117748 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-117771 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default - Resolves: RHEL-117782 - Ignore the memberOfDeferredUpdate setting when LMDB is used. [rhel-9] - Resolves: RHEL-121170 - Units for changing MDB max size are not consistent across different tools [rhel-9] - Resolves: RHEL-123231 - Improve the way to detect asynchronous operations in the access logs [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123258 - Typo in errors log after a Memberof fixup task. [rhel-9] - Resolves: RHEL-123272 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-123368 - IPA health check up script shows time skew is over 24 hours [rhel-9] - Resolves: RHEL-123766 - 389-ds-base OpenScanHub Leaks Detected [rhel-9] - Resolves: RHEL-123893 - Improve output dsctl dbverify when backend does not exist [rhel-9] - Resolves: RHEL-123897 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9] - Resolves: RHEL-123923 - Changelog trimming - add number of scanned entries to the log [rhel-9] - Resolves: RHEL-126552 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly [rhel-9] - Resolves: RHEL-129559 - Online initialization of consumers fails with error -23 [rhel-9] - Resolves: RHEL-129580 - Fix paged result search locking [rhel-9] - Resolves: RHEL-138481 - Memory leak observed in ns-slapd with 389-ds-base-2.6.1-12 [rhel-9] - Resolves: RHEL-139825 - Rebase 389-ds-base to 2.8.x - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-104591 - RHDS12: Web console doesn't show Server Version [rhel-9] - Resolves: RHEL-104593 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-109034 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9] - Resolves: RHEL-109885 - Wrong backend database name syntax causes "Red Hat Directory Server" => "Databases" menu blank in Cockpit [rhel-9] - Resolves: RHEL-109889 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9] - Resolves: RHEL-109892 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy. [rhel-9] - Resolves: RHEL-109897 - AddressSanitizer: leak in do_search [rhel-9] - Resolves: RHEL-113981 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9] - Resolves: RHEL-89762 - dsidm Error: float() argument must be a string or a number, not 'NoneType' [rhel-9] - Resolves: RHEL-92041 - Memory leak in roles_cache_create_object_from_entry - Resolves: RHEL-95444 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] [rhel-9] - Resolves: RHEL-104821 - ipa-restore fails to restore SELinux contexts, causes ns-slapd AVC denials on /dev/shm after restore. - Resolves: RHEL-107005 - Failure to get Server monitoring data when NDN cache is disabled. [rhel-9] - Resolves: RHEL-107581 - segfault - error 4 in libpthread-2.28.so [rhel-9] - Resolves: RHEL-107585 - ns-slapd crashed when we add nsslapd-referral [rhel-9] - Resolves: RHEL-107586 - CWE-284 dirsrv log rotation creates files with world readable permission [rhel-9] - Resolves: RHEL-107587 - CWE-532 Created user password hash available to see in audit log [rhel-9] - Resolves: RHEL-107588 - CWE-778 Log doesn't show what user gets password changed by administrator [rhel-9] - Resolves: RHEL-61347 - Directory Server is unavailable after a restart with nsslapd-readonly=on and consumes 100% CPU - Resolves: RHEL-77983 - Defects found by OpenScanHub - Resolves: RHEL-79673 - Improve the "result" field of ipa-healthcheck if replicas are busy - Resolves: RHEL-80496 - Can't rename users member of automember rule [rhel-9] - Resolves: RHEL-81141 - Healthcheck tool should warn admin about creating a substring index on membership attribute [rhel-9] - Resolves: RHEL-89736 - dsconf backend replication monitor fails if replica id starts with 0 [rhel-9] - Resolves: RHEL-89745 - ns-slapd crash in dbmdb_import_prepare_worker_entry() [rhel-9] - Resolves: RHEL-89753 - Nested group does not receive memberOf attribute [rhel-9] - Resolves: RHEL-89769 - Crash in __strlen_sse2 when using the nsRole filter rewriter. [rhel-9] - Resolves: RHEL-89782 - RHDS12.2 NSMMReplicationPlugin - release_replica Unable to parse the response [rhel-9] - Resolves: RHEL-95768 - Improve error message when bulk import connection is closed [rhel-9] - Resolves: RHEL-101189 - lib389/replica.py is using unexisting datetime.UTC in python3.9 - Resolves: RHEL-152356 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. [rhel-9.8.z] - Resolves: RHEL-168967 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. [rhel-9.8.z] - Resolves: RHEL-170269 - DS 12 does not handle escape char in bind user [rhel-9.8.z] - Resolves: RHEL-174524 - [RFE] Add OS-level thread names to all server threads [rhel-9.8.z] - Resolves: RHEL-178086 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-9.8] - Resolves: RHEL-180716 - Online export is failing when using the option "-s" [rhel-9.8.z] - Resolves: RHEL-183895 - Server shutdown during online reindex may lead to data loss [rhel-9.8.z] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-137084 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-152338 - Crash ( Segmentation fault ) in atomic_compare_exchange() [rhel-9.8] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-150907 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-111229 - Error showing local password policy on web UI [rhel-9] - Resolves: RHEL-112680 - Statistics about index lookup report a wrong duration [rhel-9] - Resolves: RHEL-116426 - RetroCL plugin generates invalid LDIF [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-117748 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-117771 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default - Resolves: RHEL-117782 - Ignore the memberOfDeferredUpdate setting when LMDB is used. [rhel-9] - Resolves: RHEL-121170 - Units for changing MDB max size are not consistent across different tools [rhel-9] - Resolves: RHEL-123231 - Improve the way to detect asynchronous operations in the access logs [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123258 - Typo in errors log after a Memberof fixup task. [rhel-9] - Resolves: RHEL-123272 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-123368 - IPA health check up script shows time skew is over 24 hours [rhel-9] - Resolves: RHEL-123766 - 389-ds-base OpenScanHub Leaks Detected [rhel-9] - Resolves: RHEL-123893 - Improve output dsctl dbverify when backend does not exist [rhel-9] - Resolves: RHEL-123897 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9] - Resolves: RHEL-123923 - Changelog trimming - add number of scanned entries to the log [rhel-9] - Resolves: RHEL-126552 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly [rhel-9] - Resolves: RHEL-129559 - Online initialization of consumers fails with error -23 [rhel-9] - Resolves: RHEL-129580 - Fix paged result search locking [rhel-9] - Resolves: RHEL-138481 - Memory leak observed in ns-slapd with 389-ds-base-2.6.1-12 [rhel-9] - Resolves: RHEL-139825 - Rebase 389-ds-base to 2.8.x - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-104591 - RHDS12: Web console doesn't show Server Version [rhel-9] - Resolves: RHEL-104593 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-109034 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9] - Resolves: RHEL-109885 - Wrong backend database name syntax causes "Red Hat Directory Server" => "Databases" menu blank in Cockpit [rhel-9] - Resolves: RHEL-109889 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9] - Resolves: RHEL-109892 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy. [rhel-9] - Resolves: RHEL-109897 - AddressSanitizer: leak in do_search [rhel-9] - Resolves: RHEL-113981 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9] - Resolves: RHEL-89762 - dsidm Error: float() argument must be a string or a number, not 'NoneType' [rhel-9] - Resolves: RHEL-92041 - Memory leak in roles_cache_create_object_from_entry - Resolves: RHEL-95444 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] [rhel-9] - Resolves: RHEL-104821 - ipa-restore fails to restore SELinux contexts, causes ns-slapd AVC denials on /dev/shm after restore. - Resolves: RHEL-107005 - Failure to get Server monitoring data when NDN cache is disabled. [rhel-9] - Resolves: RHEL-107581 - segfault - error 4 in libpthread-2.28.so [rhel-9] - Resolves: RHEL-107585 - ns-slapd crashed when we add nsslapd-referral [rhel-9] - Resolves: RHEL-107586 - CWE-284 dirsrv log rotation creates files with world readable permission [rhel-9] - Resolves: RHEL-107587 - CWE-532 Created user password hash available to see in audit log [rhel-9] - Resolves: RHEL-107588 - CWE-778 Log doesn't show what user gets password changed by administrator [rhel-9] - Resolves: RHEL-61347 - Directory Server is unavailable after a restart with nsslapd-readonly=on and consumes 100% CPU - Resolves: RHEL-182159 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-9.8.z] - Resolves: RHEL-183103 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow [rhel-9.8.z] - Resolves: RHEL-152356 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. [rhel-9.8.z] - Resolves: RHEL-168967 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. [rhel-9.8.z] - Resolves: RHEL-170269 - DS 12 does not handle escape char in bind user [rhel-9.8.z] - Resolves: RHEL-174524 - [RFE] Add OS-level thread names to all server threads [rhel-9.8.z] - Resolves: RHEL-178086 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-9.8] - Resolves: RHEL-180716 - Online export is failing when using the option "-s" [rhel-9.8.z] - Resolves: RHEL-183895 - Server shutdown during online reindex may lead to data loss [rhel-9.8.z] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-137084 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-152338 - Crash ( Segmentation fault ) in atomic_compare_exchange() [rhel-9.8] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-150907 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-111229 - Error showing local password policy on web UI [rhel-9] - Resolves: RHEL-112680 - Statistics about index lookup report a wrong duration [rhel-9] - Resolves: RHEL-116426 - RetroCL plugin generates invalid LDIF [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-117748 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-117771 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default - Resolves: RHEL-117782 - Ignore the memberOfDeferredUpdate setting when LMDB is used. [rhel-9] - Resolves: RHEL-121170 - Units for changing MDB max size are not consistent across different tools [rhel-9] - Resolves: RHEL-123231 - Improve the way to detect asynchronous operations in the access logs [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123258 - Typo in errors log after a Memberof fixup task. [rhel-9] - Resolves: RHEL-123272 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-123368 - IPA health check up script shows time skew is over 24 hours [rhel-9] - Resolves: RHEL-123766 - 389-ds-base OpenScanHub Leaks Detected [rhel-9] - Resolves: RHEL-123893 - Improve output dsctl dbverify when backend does not exist [rhel-9] - Resolves: RHEL-123897 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9] - Resolves: RHEL-123923 - Changelog trimming - add number of scanned entries to the log [rhel-9] - Resolves: RHEL-126552 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly [rhel-9] - Resolves: RHEL-129559 - Online initialization of consumers fails with error -23 [rhel-9] - Resolves: RHEL-129580 - Fix paged result search locking [rhel-9] - Resolves: RHEL-138481 - Memory leak observed in ns-slapd with 389-ds-base-2.6.1-12 [rhel-9] - Resolves: RHEL-139825 - Rebase 389-ds-base to 2.8.x - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-104591 - RHDS12: Web console doesn't show Server Version [rhel-9] - Resolves: RHEL-104593 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-109034 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9] - Resolves: RHEL-109885 - Wrong backend database name syntax causes "Red Hat Directory Server" => "Databases" menu blank in Cockpit [rhel-9] - Resolves: RHEL-109889 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9] - Resolves: RHEL-109892 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy. [rhel-9] - Resolves: RHEL-109897 - AddressSanitizer: leak in do_search [rhel-9] - Resolves: RHEL-113981 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9] - Resolves: RHEL-89762 - dsidm Error: float() argument must be a string or a number, not 'NoneType' [rhel-9] - Resolves: RHEL-92041 - Memory leak in roles_cache_create_object_from_entry - Resolves: RHEL-95444 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] [rhel-9] - Resolves: RHEL-104821 - ipa-restore fails to restore SELinux contexts, causes ns-slapd AVC denials on /dev/shm after restore. - Resolves: RHEL-107005 - Failure to get Server monitoring data when NDN cache is disabled. [rhel-9] - Resolves: RHEL-107581 - segfault - error 4 in libpthread-2.28.so [rhel-9] - Resolves: RHEL-107585 - ns-slapd crashed when we add nsslapd-referral [rhel-9] - Resolves: RHEL-107586 - CWE-284 dirsrv log rotation creates files with world readable permission [rhel-9] - Resolves: RHEL-107587 - CWE-532 Created user password hash available to see in audit log [rhel-9] - Resolves: RHEL-107588 - CWE-778 Log doesn't show what user gets password changed by administrator [rhel-9] - Resolves: RHEL-183082 - CVE-2026-11770 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check [rhel-9.8.z] - Resolves: RHEL-190775 - CVE-2026-11788 389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser [rhel-9.8.z] - Resolves: RHEL-210875 - CVE-2026-15722 389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing [rhel-9.8.z] - Resolves: RHEL-182159 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-9.8.z] - Resolves: RHEL-183103 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow [rhel-9.8.z] - Resolves: RHEL-152356 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. [rhel-9.8.z] - Resolves: RHEL-168967 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. [rhel-9.8.z] - Resolves: RHEL-170269 - DS 12 does not handle escape char in bind user [rhel-9.8.z] - Resolves: RHEL-174524 - [RFE] Add OS-level thread names to all server threads [rhel-9.8.z] - Resolves: RHEL-178086 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-9.8] - Resolves: RHEL-180716 - Online export is failing when using the option "-s" [rhel-9.8.z] - Resolves: RHEL-183895 - Server shutdown during online reindex may lead to data loss [rhel-9.8.z] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-137084 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-152338 - Crash ( Segmentation fault ) in atomic_compare_exchange() [rhel-9.8] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-150907 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-111229 - Error showing local password policy on web UI [rhel-9] - Resolves: RHEL-112680 - Statistics about index lookup report a wrong duration [rhel-9] - Resolves: RHEL-116426 - RetroCL plugin generates invalid LDIF [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-117748 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-117771 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default - Resolves: RHEL-117782 - Ignore the memberOfDeferredUpdate setting when LMDB is used. [rhel-9] - Resolves: RHEL-121170 - Units for changing MDB max size are not consistent across different tools [rhel-9] - Resolves: RHEL-123231 - Improve the way to detect asynchronous operations in the access logs [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123258 - Typo in errors log after a Memberof fixup task. [rhel-9] - Resolves: RHEL-123272 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-123368 - IPA health check up script shows time skew is over 24 hours [rhel-9] - Resolves: RHEL-123766 - 389-ds-base OpenScanHub Leaks Detected [rhel-9] - Resolves: RHEL-123893 - Improve output dsctl dbverify when backend does not exist [rhel-9] - Resolves: RHEL-123897 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9] - Resolves: RHEL-123923 - Changelog trimming - add number of scanned entries to the log [rhel-9] - Resolves: RHEL-126552 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly [rhel-9] - Resolves: RHEL-129559 - Online initialization of consumers fails with error -23 [rhel-9] - Resolves: RHEL-129580 - Fix paged result search locking [rhel-9] - Resolves: RHEL-138481 - Memory leak observed in ns-slapd with 389-ds-base-2.6.1-12 [rhel-9] - Resolves: RHEL-139825 - Rebase 389-ds-base to 2.8.x - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-104591 - RHDS12: Web console doesn't show Server Version [rhel-9] - Resolves: RHEL-104593 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-109034 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9] - Resolves: RHEL-109885 - Wrong backend database name syntax causes "Red Hat Directory Server" => "Databases" menu blank in Cockpit [rhel-9] - Resolves: RHEL-109889 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9] - Resolves: RHEL-109892 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy. [rhel-9] - Resolves: RHEL-109897 - AddressSanitizer: leak in do_search [rhel-9] - Resolves: RHEL-113981 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9] - Resolves: RHEL-220502 - CVE-2026-18355 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasl_io_start_packet() [rhel-9.8.z] - Resolves: RHEL-222321 - CVE-2026-18453 389-ds-base: pre-authentication NULL pointer dereference via paged results and USE_ONE_BACKEND control in op_shared_search [rhel-9.8.z] - Resolves: RHEL-232854 - CVE-2026-18922 389-ds-base: SASL PLAIN authentication allows privilege escalation to Directory Manager via stale identity in Cyrus SASL auxiliary property [rhel-9.8.z] - Resolves: RHEL-244467 - lib389: set nsDS5ReplicaBindDNGroup before ensure_agreement() [rhel-9.8.z] - Resolves: RHEL-245374 - CVE-2026-76560 389-ds-base: anonymous LDAP client can defeat SELFDN ACI bind-rule checks via empty bind DN [rhel-9.8.z] - Resolves: RHEL-247865 - CVE-2026-78701 389-ds-base: CVE-2026-11610 incomplete fix may introduce a connection-stall DoS [rhel-9.8.z] - Resolves: RHEL-248766 - CVE-2026-11770 fix breaks replication total init when nsDS5ReplicaBindDNGroup is set after agreement creation [rhel-9.8.z] - Resolves: RHEL-183082 - CVE-2026-11770 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check [rhel-9.8.z] - Resolves: RHEL-190775 - CVE-2026-11788 389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser [rhel-9.8.z] - Resolves: RHEL-210875 - CVE-2026-15722 389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing [rhel-9.8.z] - Resolves: RHEL-182159 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-9.8.z] - Resolves: RHEL-183103 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow [rhel-9.8.z] - Resolves: RHEL-152356 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. [rhel-9.8.z] - Resolves: RHEL-168967 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. [rhel-9.8.z] - Resolves: RHEL-170269 - DS 12 does not handle escape char in bind user [rhel-9.8.z] - Resolves: RHEL-174524 - [RFE] Add OS-level thread names to all server threads [rhel-9.8.z] - Resolves: RHEL-178086 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-9.8] - Resolves: RHEL-180716 - Online export is failing when using the option "-s" [rhel-9.8.z] - Resolves: RHEL-183895 - Server shutdown during online reindex may lead to data loss [rhel-9.8.z] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-137084 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-152338 - Crash ( Segmentation fault ) in atomic_compare_exchange() [rhel-9.8] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-150907 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-111229 - Error showing local password policy on web UI [rhel-9] - Resolves: RHEL-112680 - Statistics about index lookup report a wrong duration [rhel-9] - Resolves: RHEL-116426 - RetroCL plugin generates invalid LDIF [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-117748 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-117771 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default - Resolves: RHEL-117782 - Ignore the memberOfDeferredUpdate setting when LMDB is used. [rhel-9] - Resolves: RHEL-121170 - Units for changing MDB max size are not consistent across different tools [rhel-9] - Resolves: RHEL-123231 - Improve the way to detect asynchronous operations in the access logs [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123258 - Typo in errors log after a Memberof fixup task. [rhel-9] - Resolves: RHEL-123272 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-123368 - IPA health check up script shows time skew is over 24 hours [rhel-9] - Resolves: RHEL-123766 - 389-ds-base OpenScanHub Leaks Detected [rhel-9] - Resolves: RHEL-123893 - Improve output dsctl dbverify when backend does not exist [rhel-9] - Resolves: RHEL-123897 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9] - Resolves: RHEL-123923 - Changelog trimming - add number of scanned entries to the log [rhel-9] - Resolves: RHEL-126552 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly [rhel-9] - Resolves: RHEL-129559 - Online initialization of consumers fails with error -23 [rhel-9] - Resolves: RHEL-129580 - Fix paged result search locking [rhel-9] - Resolves: RHEL-138481 - Memory leak observed in ns-slapd with 389-ds-base-2.6.1-12 [rhel-9] - Resolves: RHEL-139825 - Rebase 389-ds-base to 2.8.x - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-216720 - ERR - idl_new_range_fetch - Failed to build range candidate list on entryusn index [rhel-9.8.z] - Resolves: RHEL-234360 - Online reinitialization is failing with the supplier being busy calling idrange_add_id() [rhel-9.8.z] - Resolves: RHEL-252559 - MOD_REPLACE on groups/link attributes modifies overlap targets [rhel-9.8.z] - Resolves: RHEL-256995 - large IdM host group, missing memberof host group, authentication failures, high traffic and contention [rhel-9.8.z] - Resolves: RHEL-257002 - WARN - keys2idl - received NULL idl from index_read_ext_allids [rhel-9.8.z] - Resolves: RHEL-267288 - dsEntryDN is being updated when nsslapd-return-original-entrydn is set to off [rhel-9.8.z] - Resolves: RHEL-267317 - When fetching an entry from the DB, if nsslapd-return-original-entrydn is enabled the return dsEntryDN rather than normalized DN [rhel-9.8.z] - Resolves: RHEL-267322 - Differences on export ldif using online of off-line method on RHDS [rhel-9.8.z] - Resolves: RHEL-220502 - CVE-2026-18355 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasl_io_start_packet() [rhel-9.8.z] - Resolves: RHEL-222321 - CVE-2026-18453 389-ds-base: pre-authentication NULL pointer dereference via paged results and USE_ONE_BACKEND control in op_shared_search [rhel-9.8.z] - Resolves: RHEL-232854 - CVE-2026-18922 389-ds-base: SASL PLAIN authentication allows privilege escalation to Directory Manager via stale identity in Cyrus SASL auxiliary property [rhel-9.8.z] - Resolves: RHEL-244467 - lib389: set nsDS5ReplicaBindDNGroup before ensure_agreement() [rhel-9.8.z] - Resolves: RHEL-245374 - CVE-2026-76560 389-ds-base: anonymous LDAP client can defeat SELFDN ACI bind-rule checks via empty bind DN [rhel-9.8.z] - Resolves: RHEL-247865 - CVE-2026-78701 389-ds-base: CVE-2026-11610 incomplete fix may introduce a connection-stall DoS [rhel-9.8.z] - Resolves: RHEL-248766 - CVE-2026-11770 fix breaks replication total init when nsDS5ReplicaBindDNGroup is set after agreement creation [rhel-9.8.z] - Resolves: RHEL-183082 - CVE-2026-11770 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check [rhel-9.8.z] - Resolves: RHEL-190775 - CVE-2026-11788 389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser [rhel-9.8.z] - Resolves: RHEL-210875 - CVE-2026-15722 389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing [rhel-9.8.z] - Resolves: RHEL-182159 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-9.8.z] - Resolves: RHEL-183103 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow [rhel-9.8.z] - Resolves: RHEL-152356 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. [rhel-9.8.z] - Resolves: RHEL-168967 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. [rhel-9.8.z] - Resolves: RHEL-170269 - DS 12 does not handle escape char in bind user [rhel-9.8.z] - Resolves: RHEL-174524 - [RFE] Add OS-level thread names to all server threads [rhel-9.8.z] - Resolves: RHEL-178086 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-9.8] - Resolves: RHEL-180716 - Online export is failing when using the option "-s" [rhel-9.8.z] - Resolves: RHEL-183895 - Server shutdown during online reindex may lead to data loss [rhel-9.8.z] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-137084 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-152338 - Crash ( Segmentation fault ) in atomic_compare_exchange() [rhel-9.8] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-150907 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-137084 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-152338 - Crash ( Segmentation fault ) in atomic_compare_exchange() [rhel-9.8] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-150907 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-111229 - Error showing local password policy on web UI [rhel-9] - Resolves: RHEL-112680 - Statistics about index lookup report a wrong duration [rhel-9] - Resolves: RHEL-116426 - RetroCL plugin generates invalid LDIF [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-117748 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-117771 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default - Resolves: RHEL-117782 - Ignore the memberOfDeferredUpdate setting when LMDB is used. [rhel-9] - Resolves: RHEL-121170 - Units for changing MDB max size are not consistent across different tools [rhel-9] - Resolves: RHEL-123231 - Improve the way to detect asynchronous operations in the access logs [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123258 - Typo in errors log after a Memberof fixup task. [rhel-9] - Resolves: RHEL-123272 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-123368 - IPA health check up script shows time skew is over 24 hours [rhel-9] - Resolves: RHEL-123766 - 389-ds-base OpenScanHub Leaks Detected [rhel-9] - Resolves: RHEL-123893 - Improve output dsctl dbverify when backend does not exist [rhel-9] - Resolves: RHEL-123897 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9] - Resolves: RHEL-123923 - Changelog trimming - add number of scanned entries to the log [rhel-9] - Resolves: RHEL-126552 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly [rhel-9] - Resolves: RHEL-129559 - Online initialization of consumers fails with error -23 [rhel-9] - Resolves: RHEL-129580 - Fix paged result search locking [rhel-9] - Resolves: RHEL-138481 - Memory leak observed in ns-slapd with 389-ds-base-2.6.1-12 [rhel-9] - Resolves: RHEL-139825 - Rebase 389-ds-base to 2.8.x - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-104591 - RHDS12: Web console doesn't show Server Version [rhel-9] - Resolves: RHEL-104593 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-109034 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9] - Resolves: RHEL-109885 - Wrong backend database name syntax causes "Red Hat Directory Server" => "Databases" menu blank in Cockpit [rhel-9] - Resolves: RHEL-109889 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9] - Resolves: RHEL-109892 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy. [rhel-9] - Resolves: RHEL-109897 - AddressSanitizer: leak in do_search [rhel-9] - Resolves: RHEL-113981 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9] - Resolves: RHEL-89762 - dsidm Error: float() argument must be a string or a number, not 'NoneType' [rhel-9] - Resolves: RHEL-92041 - Memory leak in roles_cache_create_object_from_entry - Resolves: RHEL-95444 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] [rhel-9] - Resolves: RHEL-104821 - ipa-restore fails to restore SELinux contexts, causes ns-slapd AVC denials on /dev/shm after restore. - Resolves: RHEL-107005 - Failure to get Server monitoring data when NDN cache is disabled. [rhel-9] - Resolves: RHEL-107581 - segfault - error 4 in libpthread-2.28.so [rhel-9] - Resolves: RHEL-107585 - ns-slapd crashed when we add nsslapd-referral [rhel-9] - Resolves: RHEL-107586 - CWE-284 dirsrv log rotation creates files with world readable permission [rhel-9] - Resolves: RHEL-107587 - CWE-532 Created user password hash available to see in audit log [rhel-9] - Resolves: RHEL-107588 - CWE-778 Log doesn't show what user gets password changed by administrator [rhel-9] - Resolves: RHEL-61347 - Directory Server is unavailable after a restart with nsslapd-readonly=on and consumes 100% CPU - Resolves: RHEL-77983 - Defects found by OpenScanHub - Resolves: RHEL-79673 - Improve the "result" field of ipa-healthcheck if replicas are busy - Resolves: RHEL-80496 - Can't rename users member of automember rule [rhel-9] - Resolves: RHEL-81141 - Healthcheck tool should warn admin about creating a substring index on membership attribute [rhel-9] - Resolves: RHEL-89736 - dsconf backend replication monitor fails if replica id starts with 0 [rhel-9] - Resolves: RHEL-89745 - ns-slapd crash in dbmdb_import_prepare_worker_entry() [rhel-9] - Resolves: RHEL-89753 - Nested group does not receive memberOf attribute [rhel-9] - Resolves: RHEL-89769 - Crash in __strlen_sse2 when using the nsRole filter rewriter. [rhel-9] - Resolves: RHEL-89782 - RHDS12.2 NSMMReplicationPlugin - release_replica Unable to parse the response [rhel-9] - Resolves: RHEL-95768 - Improve error message when bulk import connection is closed [rhel-9] - Resolves: RHEL-101189 - lib389/replica.py is using unexisting datetime.UTC in python3.9 - Resolves: RHEL-152356 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. [rhel-9.8.z] - Resolves: RHEL-168967 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. [rhel-9.8.z] - Resolves: RHEL-170269 - DS 12 does not handle escape char in bind user [rhel-9.8.z] - Resolves: RHEL-174524 - [RFE] Add OS-level thread names to all server threads [rhel-9.8.z] - Resolves: RHEL-178086 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-9.8] - Resolves: RHEL-180716 - Online export is failing when using the option "-s" [rhel-9.8.z] - Resolves: RHEL-183895 - Server shutdown during online reindex may lead to data loss [rhel-9.8.z] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-137084 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-152338 - Crash ( Segmentation fault ) in atomic_compare_exchange() [rhel-9.8] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-150907 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-111229 - Error showing local password policy on web UI [rhel-9] - Resolves: RHEL-112680 - Statistics about index lookup report a wrong duration [rhel-9] - Resolves: RHEL-116426 - RetroCL plugin generates invalid LDIF [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-117748 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-117771 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default - Resolves: RHEL-117782 - Ignore the memberOfDeferredUpdate setting when LMDB is used. [rhel-9] - Resolves: RHEL-121170 - Units for changing MDB max size are not consistent across different tools [rhel-9] - Resolves: RHEL-123231 - Improve the way to detect asynchronous operations in the access logs [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123258 - Typo in errors log after a Memberof fixup task. [rhel-9] - Resolves: RHEL-123272 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-123368 - IPA health check up script shows time skew is over 24 hours [rhel-9] - Resolves: RHEL-123766 - 389-ds-base OpenScanHub Leaks Detected [rhel-9] - Resolves: RHEL-123893 - Improve output dsctl dbverify when backend does not exist [rhel-9] - Resolves: RHEL-123897 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9] - Resolves: RHEL-123923 - Changelog trimming - add number of scanned entries to the log [rhel-9] - Resolves: RHEL-126552 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly [rhel-9] - Resolves: RHEL-129559 - Online initialization of consumers fails with error -23 [rhel-9] - Resolves: RHEL-129580 - Fix paged result search locking [rhel-9] - Resolves: RHEL-138481 - Memory leak observed in ns-slapd with 389-ds-base-2.6.1-12 [rhel-9] - Resolves: RHEL-139825 - Rebase 389-ds-base to 2.8.x - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-104591 - RHDS12: Web console doesn't show Server Version [rhel-9] - Resolves: RHEL-104593 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-109034 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9] - Resolves: RHEL-109885 - Wrong backend database name syntax causes "Red Hat Directory Server" => "Databases" menu blank in Cockpit [rhel-9] - Resolves: RHEL-109889 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9] - Resolves: RHEL-109892 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy. [rhel-9] - Resolves: RHEL-109897 - AddressSanitizer: leak in do_search [rhel-9] - Resolves: RHEL-113981 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9] - Resolves: RHEL-89762 - dsidm Error: float() argument must be a string or a number, not 'NoneType' [rhel-9] - Resolves: RHEL-92041 - Memory leak in roles_cache_create_object_from_entry - Resolves: RHEL-95444 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] [rhel-9] - Resolves: RHEL-104821 - ipa-restore fails to restore SELinux contexts, causes ns-slapd AVC denials on /dev/shm after restore. - Resolves: RHEL-107005 - Failure to get Server monitoring data when NDN cache is disabled. [rhel-9] - Resolves: RHEL-107581 - segfault - error 4 in libpthread-2.28.so [rhel-9] - Resolves: RHEL-107585 - ns-slapd crashed when we add nsslapd-referral [rhel-9] - Resolves: RHEL-107586 - CWE-284 dirsrv log rotation creates files with world readable permission [rhel-9] - Resolves: RHEL-107587 - CWE-532 Created user password hash available to see in audit log [rhel-9] - Resolves: RHEL-107588 - CWE-778 Log doesn't show what user gets password changed by administrator [rhel-9] - Resolves: RHEL-61347 - Directory Server is unavailable after a restart with nsslapd-readonly=on and consumes 100% CPU - Resolves: RHEL-182159 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-9.8.z] - Resolves: RHEL-183103 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow [rhel-9.8.z] - Resolves: RHEL-152356 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. [rhel-9.8.z] - Resolves: RHEL-168967 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. [rhel-9.8.z] - Resolves: RHEL-170269 - DS 12 does not handle escape char in bind user [rhel-9.8.z] - Resolves: RHEL-174524 - [RFE] Add OS-level thread names to all server threads [rhel-9.8.z] - Resolves: RHEL-178086 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-9.8] - Resolves: RHEL-180716 - Online export is failing when using the option "-s" [rhel-9.8.z] - Resolves: RHEL-183895 - Server shutdown during online reindex may lead to data loss [rhel-9.8.z] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-137084 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-152338 - Crash ( Segmentation fault ) in atomic_compare_exchange() [rhel-9.8] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-150907 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-111229 - Error showing local password policy on web UI [rhel-9] - Resolves: RHEL-112680 - Statistics about index lookup report a wrong duration [rhel-9] - Resolves: RHEL-116426 - RetroCL plugin generates invalid LDIF [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-117748 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-117771 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default - Resolves: RHEL-117782 - Ignore the memberOfDeferredUpdate setting when LMDB is used. [rhel-9] - Resolves: RHEL-121170 - Units for changing MDB max size are not consistent across different tools [rhel-9] - Resolves: RHEL-123231 - Improve the way to detect asynchronous operations in the access logs [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123258 - Typo in errors log after a Memberof fixup task. [rhel-9] - Resolves: RHEL-123272 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-123368 - IPA health check up script shows time skew is over 24 hours [rhel-9] - Resolves: RHEL-123766 - 389-ds-base OpenScanHub Leaks Detected [rhel-9] - Resolves: RHEL-123893 - Improve output dsctl dbverify when backend does not exist [rhel-9] - Resolves: RHEL-123897 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9] - Resolves: RHEL-123923 - Changelog trimming - add number of scanned entries to the log [rhel-9] - Resolves: RHEL-126552 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly [rhel-9] - Resolves: RHEL-129559 - Online initialization of consumers fails with error -23 [rhel-9] - Resolves: RHEL-129580 - Fix paged result search locking [rhel-9] - Resolves: RHEL-138481 - Memory leak observed in ns-slapd with 389-ds-base-2.6.1-12 [rhel-9] - Resolves: RHEL-139825 - Rebase 389-ds-base to 2.8.x - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-104591 - RHDS12: Web console doesn't show Server Version [rhel-9] - Resolves: RHEL-104593 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-109034 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9] - Resolves: RHEL-109885 - Wrong backend database name syntax causes "Red Hat Directory Server" => "Databases" menu blank in Cockpit [rhel-9] - Resolves: RHEL-109889 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9] - Resolves: RHEL-109892 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy. [rhel-9] - Resolves: RHEL-109897 - AddressSanitizer: leak in do_search [rhel-9] - Resolves: RHEL-113981 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9] - Resolves: RHEL-89762 - dsidm Error: float() argument must be a string or a number, not 'NoneType' [rhel-9] - Resolves: RHEL-92041 - Memory leak in roles_cache_create_object_from_entry - Resolves: RHEL-95444 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] [rhel-9] - Resolves: RHEL-104821 - ipa-restore fails to restore SELinux contexts, causes ns-slapd AVC denials on /dev/shm after restore. - Resolves: RHEL-107005 - Failure to get Server monitoring data when NDN cache is disabled. [rhel-9] - Resolves: RHEL-107581 - segfault - error 4 in libpthread-2.28.so [rhel-9] - Resolves: RHEL-107585 - ns-slapd crashed when we add nsslapd-referral [rhel-9] - Resolves: RHEL-107586 - CWE-284 dirsrv log rotation creates files with world readable permission [rhel-9] - Resolves: RHEL-107587 - CWE-532 Created user password hash available to see in audit log [rhel-9] - Resolves: RHEL-107588 - CWE-778 Log doesn't show what user gets password changed by administrator [rhel-9] - Resolves: RHEL-183082 - CVE-2026-11770 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check [rhel-9.8.z] - Resolves: RHEL-190775 - CVE-2026-11788 389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser [rhel-9.8.z] - Resolves: RHEL-210875 - CVE-2026-15722 389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing [rhel-9.8.z] - Resolves: RHEL-182159 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-9.8.z] - Resolves: RHEL-183103 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow [rhel-9.8.z] - Resolves: RHEL-152356 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. [rhel-9.8.z] - Resolves: RHEL-168967 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. [rhel-9.8.z] - Resolves: RHEL-170269 - DS 12 does not handle escape char in bind user [rhel-9.8.z] - Resolves: RHEL-174524 - [RFE] Add OS-level thread names to all server threads [rhel-9.8.z] - Resolves: RHEL-178086 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-9.8] - Resolves: RHEL-180716 - Online export is failing when using the option "-s" [rhel-9.8.z] - Resolves: RHEL-183895 - Server shutdown during online reindex may lead to data loss [rhel-9.8.z] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-137084 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-152338 - Crash ( Segmentation fault ) in atomic_compare_exchange() [rhel-9.8] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-150907 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-111229 - Error showing local password policy on web UI [rhel-9] - Resolves: RHEL-112680 - Statistics about index lookup report a wrong duration [rhel-9] - Resolves: RHEL-116426 - RetroCL plugin generates invalid LDIF [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-117748 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-117771 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default - Resolves: RHEL-117782 - Ignore the memberOfDeferredUpdate setting when LMDB is used. [rhel-9] - Resolves: RHEL-121170 - Units for changing MDB max size are not consistent across different tools [rhel-9] - Resolves: RHEL-123231 - Improve the way to detect asynchronous operations in the access logs [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123258 - Typo in errors log after a Memberof fixup task. [rhel-9] - Resolves: RHEL-123272 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-123368 - IPA health check up script shows time skew is over 24 hours [rhel-9] - Resolves: RHEL-123766 - 389-ds-base OpenScanHub Leaks Detected [rhel-9] - Resolves: RHEL-123893 - Improve output dsctl dbverify when backend does not exist [rhel-9] - Resolves: RHEL-123897 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9] - Resolves: RHEL-123923 - Changelog trimming - add number of scanned entries to the log [rhel-9] - Resolves: RHEL-126552 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly [rhel-9] - Resolves: RHEL-129559 - Online initialization of consumers fails with error -23 [rhel-9] - Resolves: RHEL-129580 - Fix paged result search locking [rhel-9] - Resolves: RHEL-138481 - Memory leak observed in ns-slapd with 389-ds-base-2.6.1-12 [rhel-9] - Resolves: RHEL-139825 - Rebase 389-ds-base to 2.8.x - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-104591 - RHDS12: Web console doesn't show Server Version [rhel-9] - Resolves: RHEL-104593 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-109034 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9] - Resolves: RHEL-109885 - Wrong backend database name syntax causes "Red Hat Directory Server" => "Databases" menu blank in Cockpit [rhel-9] - Resolves: RHEL-109889 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9] - Resolves: RHEL-109892 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy. [rhel-9] - Resolves: RHEL-109897 - AddressSanitizer: leak in do_search [rhel-9] - Resolves: RHEL-113981 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9] - Resolves: RHEL-220502 - CVE-2026-18355 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasl_io_start_packet() [rhel-9.8.z] - Resolves: RHEL-222321 - CVE-2026-18453 389-ds-base: pre-authentication NULL pointer dereference via paged results and USE_ONE_BACKEND control in op_shared_search [rhel-9.8.z] - Resolves: RHEL-232854 - CVE-2026-18922 389-ds-base: SASL PLAIN authentication allows privilege escalation to Directory Manager via stale identity in Cyrus SASL auxiliary property [rhel-9.8.z] - Resolves: RHEL-244467 - lib389: set nsDS5ReplicaBindDNGroup before ensure_agreement() [rhel-9.8.z] - Resolves: RHEL-245374 - CVE-2026-76560 389-ds-base: anonymous LDAP client can defeat SELFDN ACI bind-rule checks via empty bind DN [rhel-9.8.z] - Resolves: RHEL-247865 - CVE-2026-78701 389-ds-base: CVE-2026-11610 incomplete fix may introduce a connection-stall DoS [rhel-9.8.z] - Resolves: RHEL-248766 - CVE-2026-11770 fix breaks replication total init when nsDS5ReplicaBindDNGroup is set after agreement creation [rhel-9.8.z] - Resolves: RHEL-183082 - CVE-2026-11770 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check [rhel-9.8.z] - Resolves: RHEL-190775 - CVE-2026-11788 389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser [rhel-9.8.z] - Resolves: RHEL-210875 - CVE-2026-15722 389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing [rhel-9.8.z] - Resolves: RHEL-182159 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-9.8.z] - Resolves: RHEL-183103 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow [rhel-9.8.z] - Resolves: RHEL-152356 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. [rhel-9.8.z] - Resolves: RHEL-168967 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. [rhel-9.8.z] - Resolves: RHEL-170269 - DS 12 does not handle escape char in bind user [rhel-9.8.z] - Resolves: RHEL-174524 - [RFE] Add OS-level thread names to all server threads [rhel-9.8.z] - Resolves: RHEL-178086 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-9.8] - Resolves: RHEL-180716 - Online export is failing when using the option "-s" [rhel-9.8.z] - Resolves: RHEL-183895 - Server shutdown during online reindex may lead to data loss [rhel-9.8.z] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-137084 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-152338 - Crash ( Segmentation fault ) in atomic_compare_exchange() [rhel-9.8] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-150907 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-111229 - Error showing local password policy on web UI [rhel-9] - Resolves: RHEL-112680 - Statistics about index lookup report a wrong duration [rhel-9] - Resolves: RHEL-116426 - RetroCL plugin generates invalid LDIF [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-117748 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-117771 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default - Resolves: RHEL-117782 - Ignore the memberOfDeferredUpdate setting when LMDB is used. [rhel-9] - Resolves: RHEL-121170 - Units for changing MDB max size are not consistent across different tools [rhel-9] - Resolves: RHEL-123231 - Improve the way to detect asynchronous operations in the access logs [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123258 - Typo in errors log after a Memberof fixup task. [rhel-9] - Resolves: RHEL-123272 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-123368 - IPA health check up script shows time skew is over 24 hours [rhel-9] - Resolves: RHEL-123766 - 389-ds-base OpenScanHub Leaks Detected [rhel-9] - Resolves: RHEL-123893 - Improve output dsctl dbverify when backend does not exist [rhel-9] - Resolves: RHEL-123897 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9] - Resolves: RHEL-123923 - Changelog trimming - add number of scanned entries to the log [rhel-9] - Resolves: RHEL-126552 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly [rhel-9] - Resolves: RHEL-129559 - Online initialization of consumers fails with error -23 [rhel-9] - Resolves: RHEL-129580 - Fix paged result search locking [rhel-9] - Resolves: RHEL-138481 - Memory leak observed in ns-slapd with 389-ds-base-2.6.1-12 [rhel-9] - Resolves: RHEL-139825 - Rebase 389-ds-base to 2.8.x - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-216720 - ERR - idl_new_range_fetch - Failed to build range candidate list on entryusn index [rhel-9.8.z] - Resolves: RHEL-234360 - Online reinitialization is failing with the supplier being busy calling idrange_add_id() [rhel-9.8.z] - Resolves: RHEL-252559 - MOD_REPLACE on groups/link attributes modifies overlap targets [rhel-9.8.z] - Resolves: RHEL-256995 - large IdM host group, missing memberof host group, authentication failures, high traffic and contention [rhel-9.8.z] - Resolves: RHEL-257002 - WARN - keys2idl - received NULL idl from index_read_ext_allids [rhel-9.8.z] - Resolves: RHEL-267288 - dsEntryDN is being updated when nsslapd-return-original-entrydn is set to off [rhel-9.8.z] - Resolves: RHEL-267317 - When fetching an entry from the DB, if nsslapd-return-original-entrydn is enabled the return dsEntryDN rather than normalized DN [rhel-9.8.z] - Resolves: RHEL-267322 - Differences on export ldif using online of off-line method on RHDS [rhel-9.8.z] - Resolves: RHEL-220502 - CVE-2026-18355 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasl_io_start_packet() [rhel-9.8.z] - Resolves: RHEL-222321 - CVE-2026-18453 389-ds-base: pre-authentication NULL pointer dereference via paged results and USE_ONE_BACKEND control in op_shared_search [rhel-9.8.z] - Resolves: RHEL-232854 - CVE-2026-18922 389-ds-base: SASL PLAIN authentication allows privilege escalation to Directory Manager via stale identity in Cyrus SASL auxiliary property [rhel-9.8.z] - Resolves: RHEL-244467 - lib389: set nsDS5ReplicaBindDNGroup before ensure_agreement() [rhel-9.8.z] - Resolves: RHEL-245374 - CVE-2026-76560 389-ds-base: anonymous LDAP client can defeat SELFDN ACI bind-rule checks via empty bind DN [rhel-9.8.z] - Resolves: RHEL-247865 - CVE-2026-78701 389-ds-base: CVE-2026-11610 incomplete fix may introduce a connection-stall DoS [rhel-9.8.z] - Resolves: RHEL-248766 - CVE-2026-11770 fix breaks replication total init when nsDS5ReplicaBindDNGroup is set after agreement creation [rhel-9.8.z] - Resolves: RHEL-183082 - CVE-2026-11770 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check [rhel-9.8.z] - Resolves: RHEL-190775 - CVE-2026-11788 389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser [rhel-9.8.z] - Resolves: RHEL-210875 - CVE-2026-15722 389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing [rhel-9.8.z] - Resolves: RHEL-182159 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-9.8.z] - Resolves: RHEL-183103 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow [rhel-9.8.z] - Resolves: RHEL-152356 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. [rhel-9.8.z] - Resolves: RHEL-168967 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. [rhel-9.8.z] - Resolves: RHEL-170269 - DS 12 does not handle escape char in bind user [rhel-9.8.z] - Resolves: RHEL-174524 - [RFE] Add OS-level thread names to all server threads [rhel-9.8.z] - Resolves: RHEL-178086 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-9.8] - Resolves: RHEL-180716 - Online export is failing when using the option "-s" [rhel-9.8.z] - Resolves: RHEL-183895 - Server shutdown during online reindex may lead to data loss [rhel-9.8.z] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-137084 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-152338 - Crash ( Segmentation fault ) in atomic_compare_exchange() [rhel-9.8] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-150907 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-137084 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-152338 - Crash ( Segmentation fault ) in atomic_compare_exchange() [rhel-9.8] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-150907 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-111229 - Error showing local password policy on web UI [rhel-9] - Resolves: RHEL-112680 - Statistics about index lookup report a wrong duration [rhel-9] - Resolves: RHEL-116426 - RetroCL plugin generates invalid LDIF [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-117748 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-117771 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default - Resolves: RHEL-117782 - Ignore the memberOfDeferredUpdate setting when LMDB is used. [rhel-9] - Resolves: RHEL-121170 - Units for changing MDB max size are not consistent across different tools [rhel-9] - Resolves: RHEL-123231 - Improve the way to detect asynchronous operations in the access logs [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123258 - Typo in errors log after a Memberof fixup task. [rhel-9] - Resolves: RHEL-123272 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-123368 - IPA health check up script shows time skew is over 24 hours [rhel-9] - Resolves: RHEL-123766 - 389-ds-base OpenScanHub Leaks Detected [rhel-9] - Resolves: RHEL-123893 - Improve output dsctl dbverify when backend does not exist [rhel-9] - Resolves: RHEL-123897 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9] - Resolves: RHEL-123923 - Changelog trimming - add number of scanned entries to the log [rhel-9] - Resolves: RHEL-126552 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly [rhel-9] - Resolves: RHEL-129559 - Online initialization of consumers fails with error -23 [rhel-9] - Resolves: RHEL-129580 - Fix paged result search locking [rhel-9] - Resolves: RHEL-138481 - Memory leak observed in ns-slapd with 389-ds-base-2.6.1-12 [rhel-9] - Resolves: RHEL-139825 - Rebase 389-ds-base to 2.8.x - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-104591 - RHDS12: Web console doesn't show Server Version [rhel-9] - Resolves: RHEL-104593 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-109034 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9] - Resolves: RHEL-109885 - Wrong backend database name syntax causes "Red Hat Directory Server" => "Databases" menu blank in Cockpit [rhel-9] - Resolves: RHEL-109889 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9] - Resolves: RHEL-109892 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy. [rhel-9] - Resolves: RHEL-109897 - AddressSanitizer: leak in do_search [rhel-9] - Resolves: RHEL-113981 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9] - Resolves: RHEL-89762 - dsidm Error: float() argument must be a string or a number, not 'NoneType' [rhel-9] - Resolves: RHEL-92041 - Memory leak in roles_cache_create_object_from_entry - Resolves: RHEL-95444 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] [rhel-9] - Resolves: RHEL-104821 - ipa-restore fails to restore SELinux contexts, causes ns-slapd AVC denials on /dev/shm after restore. - Resolves: RHEL-107005 - Failure to get Server monitoring data when NDN cache is disabled. [rhel-9] - Resolves: RHEL-107581 - segfault - error 4 in libpthread-2.28.so [rhel-9] - Resolves: RHEL-107585 - ns-slapd crashed when we add nsslapd-referral [rhel-9] - Resolves: RHEL-107586 - CWE-284 dirsrv log rotation creates files with world readable permission [rhel-9] - Resolves: RHEL-107587 - CWE-532 Created user password hash available to see in audit log [rhel-9] - Resolves: RHEL-107588 - CWE-778 Log doesn't show what user gets password changed by administrator [rhel-9] - Resolves: RHEL-61347 - Directory Server is unavailable after a restart with nsslapd-readonly=on and consumes 100% CPU - Resolves: RHEL-77983 - Defects found by OpenScanHub - Resolves: RHEL-79673 - Improve the "result" field of ipa-healthcheck if replicas are busy - Resolves: RHEL-80496 - Can't rename users member of automember rule [rhel-9] - Resolves: RHEL-81141 - Healthcheck tool should warn admin about creating a substring index on membership attribute [rhel-9] - Resolves: RHEL-89736 - dsconf backend replication monitor fails if replica id starts with 0 [rhel-9] - Resolves: RHEL-89745 - ns-slapd crash in dbmdb_import_prepare_worker_entry() [rhel-9] - Resolves: RHEL-89753 - Nested group does not receive memberOf attribute [rhel-9] - Resolves: RHEL-89769 - Crash in __strlen_sse2 when using the nsRole filter rewriter. [rhel-9] - Resolves: RHEL-89782 - RHDS12.2 NSMMReplicationPlugin - release_replica Unable to parse the response [rhel-9] - Resolves: RHEL-95768 - Improve error message when bulk import connection is closed [rhel-9] - Resolves: RHEL-101189 - lib389/replica.py is using unexisting datetime.UTC in python3.9 - Resolves: RHEL-152356 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. [rhel-9.8.z] - Resolves: RHEL-168967 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. [rhel-9.8.z] - Resolves: RHEL-170269 - DS 12 does not handle escape char in bind user [rhel-9.8.z] - Resolves: RHEL-174524 - [RFE] Add OS-level thread names to all server threads [rhel-9.8.z] - Resolves: RHEL-178086 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-9.8] - Resolves: RHEL-180716 - Online export is failing when using the option "-s" [rhel-9.8.z] - Resolves: RHEL-183895 - Server shutdown during online reindex may lead to data loss [rhel-9.8.z] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-137084 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-152338 - Crash ( Segmentation fault ) in atomic_compare_exchange() [rhel-9.8] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-150907 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-111229 - Error showing local password policy on web UI [rhel-9] - Resolves: RHEL-112680 - Statistics about index lookup report a wrong duration [rhel-9] - Resolves: RHEL-116426 - RetroCL plugin generates invalid LDIF [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-117748 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-117771 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default - Resolves: RHEL-117782 - Ignore the memberOfDeferredUpdate setting when LMDB is used. [rhel-9] - Resolves: RHEL-121170 - Units for changing MDB max size are not consistent across different tools [rhel-9] - Resolves: RHEL-123231 - Improve the way to detect asynchronous operations in the access logs [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123258 - Typo in errors log after a Memberof fixup task. [rhel-9] - Resolves: RHEL-123272 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-123368 - IPA health check up script shows time skew is over 24 hours [rhel-9] - Resolves: RHEL-123766 - 389-ds-base OpenScanHub Leaks Detected [rhel-9] - Resolves: RHEL-123893 - Improve output dsctl dbverify when backend does not exist [rhel-9] - Resolves: RHEL-123897 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9] - Resolves: RHEL-123923 - Changelog trimming - add number of scanned entries to the log [rhel-9] - Resolves: RHEL-126552 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly [rhel-9] - Resolves: RHEL-129559 - Online initialization of consumers fails with error -23 [rhel-9] - Resolves: RHEL-129580 - Fix paged result search locking [rhel-9] - Resolves: RHEL-138481 - Memory leak observed in ns-slapd with 389-ds-base-2.6.1-12 [rhel-9] - Resolves: RHEL-139825 - Rebase 389-ds-base to 2.8.x - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-104591 - RHDS12: Web console doesn't show Server Version [rhel-9] - Resolves: RHEL-104593 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-109034 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9] - Resolves: RHEL-109885 - Wrong backend database name syntax causes "Red Hat Directory Server" => "Databases" menu blank in Cockpit [rhel-9] - Resolves: RHEL-109889 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9] - Resolves: RHEL-109892 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy. [rhel-9] - Resolves: RHEL-109897 - AddressSanitizer: leak in do_search [rhel-9] - Resolves: RHEL-113981 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9] - Resolves: RHEL-89762 - dsidm Error: float() argument must be a string or a number, not 'NoneType' [rhel-9] - Resolves: RHEL-92041 - Memory leak in roles_cache_create_object_from_entry - Resolves: RHEL-95444 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] [rhel-9] - Resolves: RHEL-104821 - ipa-restore fails to restore SELinux contexts, causes ns-slapd AVC denials on /dev/shm after restore. - Resolves: RHEL-107005 - Failure to get Server monitoring data when NDN cache is disabled. [rhel-9] - Resolves: RHEL-107581 - segfault - error 4 in libpthread-2.28.so [rhel-9] - Resolves: RHEL-107585 - ns-slapd crashed when we add nsslapd-referral [rhel-9] - Resolves: RHEL-107586 - CWE-284 dirsrv log rotation creates files with world readable permission [rhel-9] - Resolves: RHEL-107587 - CWE-532 Created user password hash available to see in audit log [rhel-9] - Resolves: RHEL-107588 - CWE-778 Log doesn't show what user gets password changed by administrator [rhel-9] - Resolves: RHEL-61347 - Directory Server is unavailable after a restart with nsslapd-readonly=on and consumes 100% CPU - Resolves: RHEL-182159 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-9.8.z] - Resolves: RHEL-183103 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow [rhel-9.8.z] - Resolves: RHEL-152356 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. [rhel-9.8.z] - Resolves: RHEL-168967 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. [rhel-9.8.z] - Resolves: RHEL-170269 - DS 12 does not handle escape char in bind user [rhel-9.8.z] - Resolves: RHEL-174524 - [RFE] Add OS-level thread names to all server threads [rhel-9.8.z] - Resolves: RHEL-178086 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-9.8] - Resolves: RHEL-180716 - Online export is failing when using the option "-s" [rhel-9.8.z] - Resolves: RHEL-183895 - Server shutdown during online reindex may lead to data loss [rhel-9.8.z] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-137084 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-152338 - Crash ( Segmentation fault ) in atomic_compare_exchange() [rhel-9.8] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-150907 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-111229 - Error showing local password policy on web UI [rhel-9] - Resolves: RHEL-112680 - Statistics about index lookup report a wrong duration [rhel-9] - Resolves: RHEL-116426 - RetroCL plugin generates invalid LDIF [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-117748 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-117771 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default - Resolves: RHEL-117782 - Ignore the memberOfDeferredUpdate setting when LMDB is used. [rhel-9] - Resolves: RHEL-121170 - Units for changing MDB max size are not consistent across different tools [rhel-9] - Resolves: RHEL-123231 - Improve the way to detect asynchronous operations in the access logs [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123258 - Typo in errors log after a Memberof fixup task. [rhel-9] - Resolves: RHEL-123272 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-123368 - IPA health check up script shows time skew is over 24 hours [rhel-9] - Resolves: RHEL-123766 - 389-ds-base OpenScanHub Leaks Detected [rhel-9] - Resolves: RHEL-123893 - Improve output dsctl dbverify when backend does not exist [rhel-9] - Resolves: RHEL-123897 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9] - Resolves: RHEL-123923 - Changelog trimming - add number of scanned entries to the log [rhel-9] - Resolves: RHEL-126552 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly [rhel-9] - Resolves: RHEL-129559 - Online initialization of consumers fails with error -23 [rhel-9] - Resolves: RHEL-129580 - Fix paged result search locking [rhel-9] - Resolves: RHEL-138481 - Memory leak observed in ns-slapd with 389-ds-base-2.6.1-12 [rhel-9] - Resolves: RHEL-139825 - Rebase 389-ds-base to 2.8.x - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-104591 - RHDS12: Web console doesn't show Server Version [rhel-9] - Resolves: RHEL-104593 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-109034 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9] - Resolves: RHEL-109885 - Wrong backend database name syntax causes "Red Hat Directory Server" => "Databases" menu blank in Cockpit [rhel-9] - Resolves: RHEL-109889 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9] - Resolves: RHEL-109892 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy. [rhel-9] - Resolves: RHEL-109897 - AddressSanitizer: leak in do_search [rhel-9] - Resolves: RHEL-113981 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9] - Resolves: RHEL-89762 - dsidm Error: float() argument must be a string or a number, not 'NoneType' [rhel-9] - Resolves: RHEL-92041 - Memory leak in roles_cache_create_object_from_entry - Resolves: RHEL-95444 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] [rhel-9] - Resolves: RHEL-104821 - ipa-restore fails to restore SELinux contexts, causes ns-slapd AVC denials on /dev/shm after restore. - Resolves: RHEL-107005 - Failure to get Server monitoring data when NDN cache is disabled. [rhel-9] - Resolves: RHEL-107581 - segfault - error 4 in libpthread-2.28.so [rhel-9] - Resolves: RHEL-107585 - ns-slapd crashed when we add nsslapd-referral [rhel-9] - Resolves: RHEL-107586 - CWE-284 dirsrv log rotation creates files with world readable permission [rhel-9] - Resolves: RHEL-107587 - CWE-532 Created user password hash available to see in audit log [rhel-9] - Resolves: RHEL-107588 - CWE-778 Log doesn't show what user gets password changed by administrator [rhel-9] - Resolves: RHEL-183082 - CVE-2026-11770 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check [rhel-9.8.z] - Resolves: RHEL-190775 - CVE-2026-11788 389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser [rhel-9.8.z] - Resolves: RHEL-210875 - CVE-2026-15722 389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing [rhel-9.8.z] - Resolves: RHEL-182159 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-9.8.z] - Resolves: RHEL-183103 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow [rhel-9.8.z] - Resolves: RHEL-152356 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. [rhel-9.8.z] - Resolves: RHEL-168967 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. [rhel-9.8.z] - Resolves: RHEL-170269 - DS 12 does not handle escape char in bind user [rhel-9.8.z] - Resolves: RHEL-174524 - [RFE] Add OS-level thread names to all server threads [rhel-9.8.z] - Resolves: RHEL-178086 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-9.8] - Resolves: RHEL-180716 - Online export is failing when using the option "-s" [rhel-9.8.z] - Resolves: RHEL-183895 - Server shutdown during online reindex may lead to data loss [rhel-9.8.z] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-137084 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-152338 - Crash ( Segmentation fault ) in atomic_compare_exchange() [rhel-9.8] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-150907 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-111229 - Error showing local password policy on web UI [rhel-9] - Resolves: RHEL-112680 - Statistics about index lookup report a wrong duration [rhel-9] - Resolves: RHEL-116426 - RetroCL plugin generates invalid LDIF [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-117748 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-117771 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default - Resolves: RHEL-117782 - Ignore the memberOfDeferredUpdate setting when LMDB is used. [rhel-9] - Resolves: RHEL-121170 - Units for changing MDB max size are not consistent across different tools [rhel-9] - Resolves: RHEL-123231 - Improve the way to detect asynchronous operations in the access logs [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123258 - Typo in errors log after a Memberof fixup task. [rhel-9] - Resolves: RHEL-123272 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-123368 - IPA health check up script shows time skew is over 24 hours [rhel-9] - Resolves: RHEL-123766 - 389-ds-base OpenScanHub Leaks Detected [rhel-9] - Resolves: RHEL-123893 - Improve output dsctl dbverify when backend does not exist [rhel-9] - Resolves: RHEL-123897 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9] - Resolves: RHEL-123923 - Changelog trimming - add number of scanned entries to the log [rhel-9] - Resolves: RHEL-126552 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly [rhel-9] - Resolves: RHEL-129559 - Online initialization of consumers fails with error -23 [rhel-9] - Resolves: RHEL-129580 - Fix paged result search locking [rhel-9] - Resolves: RHEL-138481 - Memory leak observed in ns-slapd with 389-ds-base-2.6.1-12 [rhel-9] - Resolves: RHEL-139825 - Rebase 389-ds-base to 2.8.x - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-104591 - RHDS12: Web console doesn't show Server Version [rhel-9] - Resolves: RHEL-104593 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-109034 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9] - Resolves: RHEL-109885 - Wrong backend database name syntax causes "Red Hat Directory Server" => "Databases" menu blank in Cockpit [rhel-9] - Resolves: RHEL-109889 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9] - Resolves: RHEL-109892 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy. [rhel-9] - Resolves: RHEL-109897 - AddressSanitizer: leak in do_search [rhel-9] - Resolves: RHEL-113981 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9] - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - disable building BOX2D_BUILD_UNIT_TESTS due to "SIGSTKSZ ... no longer constant on Linux ... redefined to sysconf(_SC_SIGSTKSZ)" https://github.com/bminor/glibc/blob/master/NEWS causing build failure - reduce unnecessary dependencies - Use make macros - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 2.4.1 - 2.4.0 with patch for cmake shared libs. - Fix FTBFS. - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - New upstream version - New upstream version - New upstream version - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Initial package version - Remove timestamp to make the man pages non-conflicting Resolves: #1915251 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Don't pass gcc-only compiler flags to other compilers, e.g. clang (based on https://src.fedoraproject.org/rpms/Judy/pull-request/3 from Timm Baeder) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fix CVE-2026-51235 Resolves: RHEL-219221 - Fix CVE-2026-21413 and CVE-2026-24450 Resolves: RHEL-165374, RHEL-165461 - Fix CVE-2026-21413 and CVE-2026-24450 Resolves: RHEL-165373, RHEL-165456 - Add hard dependency on iputils (RHEL-134751) - Update to 1.54.3 - Fix CVE-2025-9615 (RHEL-111783) - Update to 1.54.2 - Support setting protocol version of HSR/PRP (RHEL-122172) - Support interlink for HSR/PRP (RHEL-122175) - Improve logging of networking off (RHEL-122173 ) - Don't delete unrelated OVS ports (RHEL-121104) - Update to 1.54.1 - Adding a VF configuration resets and re-configures all other VFs (RHEL-113954) - Fix connection.autoconnect-ports of OVS ports (RHEL-114200) - Global DNS config without domains silently ignored from D-Bus (RHEL-115973) - Update to 1.54.0 - Fix reaply on bridge port VLAN (RHEL-102743) - Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787) - Update to 1.54.0 (rc3) - Fix ipv6 static route deleted with dualstack (RHEL-102772) - Allow setting IP method to disabled in port connection (RHEL-102768) - Update to 1.54.0 (rc2) - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728) - Fix a race condition in ovs tun interface (RHEL-98551) - Update to 1.54.0 (rc1) - Devices not becoming managed sometimes (RHEL-93108) - Crash on _l3cfg_notify_cb (RHEL-92314) - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610) - Update to 1.53.4 (dev) - initrd: add new NBFT parser (RHEL-83061) - Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083) - Support reapply on OVS settings (RHEL-86877) - Add support for configuring the loopback interface in nmtui (RHEL-85770) - Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764) - NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778) - Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168) Resolves: RHEL-83061 Resolves: RHEL-59083 Resolves: RHEL-87596 Resolves: RHEL-85770 Resolves: RHEL-85764 Resolves: RHEL-85778 Resolves: RHEL-87168 - Update to 1.53.3 (dev) - Add more IPv6 prefix delegation options (RHEL-85765) - Fix order of parsing port/controller properties in nmcli (RHEL-85767) - Improve interface activation logic (RHEL-85766) - Fix WireGuard IPv6 firewall rules (RHEL-85763) - Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-77148) - Fix 802.1x auth for bridge interface (RHEL-151941) - Add hard dependency on iputils (RHEL-134751) - Update to 1.54.3 - Fix CVE-2025-9615 (RHEL-111783) - Update to 1.54.2 - Support setting protocol version of HSR/PRP (RHEL-122172) - Support interlink for HSR/PRP (RHEL-122175) - Improve logging of networking off (RHEL-122173 ) - Don't delete unrelated OVS ports (RHEL-121104) - Update to 1.54.1 - Adding a VF configuration resets and re-configures all other VFs (RHEL-113954) - Fix connection.autoconnect-ports of OVS ports (RHEL-114200) - Global DNS config without domains silently ignored from D-Bus (RHEL-115973) - Update to 1.54.0 - Fix reaply on bridge port VLAN (RHEL-102743) - Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787) - Update to 1.54.0 (rc3) - Fix ipv6 static route deleted with dualstack (RHEL-102772) - Allow setting IP method to disabled in port connection (RHEL-102768) - Update to 1.54.0 (rc2) - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728) - Fix a race condition in ovs tun interface (RHEL-98551) - Update to 1.54.0 (rc1) - Devices not becoming managed sometimes (RHEL-93108) - Crash on _l3cfg_notify_cb (RHEL-92314) - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610) - Update to 1.53.4 (dev) - initrd: add new NBFT parser (RHEL-83061) - Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083) - Support reapply on OVS settings (RHEL-86877) - Add support for configuring the loopback interface in nmtui (RHEL-85770) - Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764) - NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778) - Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168) Resolves: RHEL-83061 Resolves: RHEL-59083 Resolves: RHEL-87596 Resolves: RHEL-85770 Resolves: RHEL-85764 Resolves: RHEL-85778 Resolves: RHEL-87168 - Fix arp_missed_max error on 802.3ad bond reapply (RHEL-182629) - Fix 802.1x auth for bridge interface (RHEL-151941) - Add hard dependency on iputils (RHEL-134751) - Update to 1.54.3 - Fix CVE-2025-9615 (RHEL-111783) - Update to 1.54.2 - Support setting protocol version of HSR/PRP (RHEL-122172) - Support interlink for HSR/PRP (RHEL-122175) - Improve logging of networking off (RHEL-122173 ) - Don't delete unrelated OVS ports (RHEL-121104) - Update to 1.54.1 - Adding a VF configuration resets and re-configures all other VFs (RHEL-113954) - Fix connection.autoconnect-ports of OVS ports (RHEL-114200) - Global DNS config without domains silently ignored from D-Bus (RHEL-115973) - Update to 1.54.0 - Fix reaply on bridge port VLAN (RHEL-102743) - Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787) - Update to 1.54.0 (rc3) - Fix ipv6 static route deleted with dualstack (RHEL-102772) - Allow setting IP method to disabled in port connection (RHEL-102768) - Update to 1.54.0 (rc2) - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728) - Fix a race condition in ovs tun interface (RHEL-98551) - Update to 1.54.0 (rc1) - Devices not becoming managed sometimes (RHEL-93108) - Crash on _l3cfg_notify_cb (RHEL-92314) - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610) - Fix CVE-2026-10805 (RHEL-191624) - Fix arp_missed_max error on 802.3ad bond reapply (RHEL-182629) - Fix 802.1x auth for bridge interface (RHEL-151941) - Add hard dependency on iputils (RHEL-134751) - Update to 1.54.3 - Fix CVE-2025-9615 (RHEL-111783) - Update to 1.54.2 - Support setting protocol version of HSR/PRP (RHEL-122172) - Support interlink for HSR/PRP (RHEL-122175) - Improve logging of networking off (RHEL-122173 ) - Don't delete unrelated OVS ports (RHEL-121104) - Update to 1.54.1 - Adding a VF configuration resets and re-configures all other VFs (RHEL-113954) - Fix connection.autoconnect-ports of OVS ports (RHEL-114200) - Global DNS config without domains silently ignored from D-Bus (RHEL-115973) - Update to 1.54.0 - Fix reaply on bridge port VLAN (RHEL-102743) - Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787) - Update to 1.54.0 (rc3) - Fix ipv6 static route deleted with dualstack (RHEL-102772) - Allow setting IP method to disabled in port connection (RHEL-102768) - Update to 1.54.0 (rc2) - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728) - Fix a race condition in ovs tun interface (RHEL-98551) - Add hard dependency on iputils (RHEL-134751) - Update to 1.54.3 - Fix CVE-2025-9615 (RHEL-111783) - Update to 1.54.2 - Support setting protocol version of HSR/PRP (RHEL-122172) - Support interlink for HSR/PRP (RHEL-122175) - Improve logging of networking off (RHEL-122173 ) - Don't delete unrelated OVS ports (RHEL-121104) - Update to 1.54.1 - Adding a VF configuration resets and re-configures all other VFs (RHEL-113954) - Fix connection.autoconnect-ports of OVS ports (RHEL-114200) - Global DNS config without domains silently ignored from D-Bus (RHEL-115973) - Update to 1.54.0 - Fix reaply on bridge port VLAN (RHEL-102743) - Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787) - Update to 1.54.0 (rc3) - Fix ipv6 static route deleted with dualstack (RHEL-102772) - Allow setting IP method to disabled in port connection (RHEL-102768) - Update to 1.54.0 (rc2) - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728) - Fix a race condition in ovs tun interface (RHEL-98551) - Update to 1.54.0 (rc1) - Devices not becoming managed sometimes (RHEL-93108) - Crash on _l3cfg_notify_cb (RHEL-92314) - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610) - Update to 1.53.4 (dev) - initrd: add new NBFT parser (RHEL-83061) - Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083) - Support reapply on OVS settings (RHEL-86877) - Add support for configuring the loopback interface in nmtui (RHEL-85770) - Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764) - NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778) - Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168) Resolves: RHEL-83061 Resolves: RHEL-59083 Resolves: RHEL-87596 Resolves: RHEL-85770 Resolves: RHEL-85764 Resolves: RHEL-85778 Resolves: RHEL-87168 - Update to 1.53.3 (dev) - Add more IPv6 prefix delegation options (RHEL-85765) - Fix order of parsing port/controller properties in nmcli (RHEL-85767) - Improve interface activation logic (RHEL-85766) - Fix WireGuard IPv6 firewall rules (RHEL-85763) - Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-77148) - Fix 802.1x auth for bridge interface (RHEL-151941) - Add hard dependency on iputils (RHEL-134751) - Update to 1.54.3 - Fix CVE-2025-9615 (RHEL-111783) - Update to 1.54.2 - Support setting protocol version of HSR/PRP (RHEL-122172) - Support interlink for HSR/PRP (RHEL-122175) - Improve logging of networking off (RHEL-122173 ) - Don't delete unrelated OVS ports (RHEL-121104) - Update to 1.54.1 - Adding a VF configuration resets and re-configures all other VFs (RHEL-113954) - Fix connection.autoconnect-ports of OVS ports (RHEL-114200) - Global DNS config without domains silently ignored from D-Bus (RHEL-115973) - Update to 1.54.0 - Fix reaply on bridge port VLAN (RHEL-102743) - Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787) - Update to 1.54.0 (rc3) - Fix ipv6 static route deleted with dualstack (RHEL-102772) - Allow setting IP method to disabled in port connection (RHEL-102768) - Update to 1.54.0 (rc2) - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728) - Fix a race condition in ovs tun interface (RHEL-98551) - Update to 1.54.0 (rc1) - Devices not becoming managed sometimes (RHEL-93108) - Crash on _l3cfg_notify_cb (RHEL-92314) - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610) - Update to 1.53.4 (dev) - initrd: add new NBFT parser (RHEL-83061) - Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083) - Support reapply on OVS settings (RHEL-86877) - Add support for configuring the loopback interface in nmtui (RHEL-85770) - Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764) - NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778) - Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168) Resolves: RHEL-83061 Resolves: RHEL-59083 Resolves: RHEL-87596 Resolves: RHEL-85770 Resolves: RHEL-85764 Resolves: RHEL-85778 Resolves: RHEL-87168 - Fix arp_missed_max error on 802.3ad bond reapply (RHEL-182629) - Fix 802.1x auth for bridge interface (RHEL-151941) - Add hard dependency on iputils (RHEL-134751) - Update to 1.54.3 - Fix CVE-2025-9615 (RHEL-111783) - Update to 1.54.2 - Support setting protocol version of HSR/PRP (RHEL-122172) - Support interlink for HSR/PRP (RHEL-122175) - Improve logging of networking off (RHEL-122173 ) - Don't delete unrelated OVS ports (RHEL-121104) - Update to 1.54.1 - Adding a VF configuration resets and re-configures all other VFs (RHEL-113954) - Fix connection.autoconnect-ports of OVS ports (RHEL-114200) - Global DNS config without domains silently ignored from D-Bus (RHEL-115973) - Update to 1.54.0 - Fix reaply on bridge port VLAN (RHEL-102743) - Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787) - Update to 1.54.0 (rc3) - Fix ipv6 static route deleted with dualstack (RHEL-102772) - Allow setting IP method to disabled in port connection (RHEL-102768) - Update to 1.54.0 (rc2) - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728) - Fix a race condition in ovs tun interface (RHEL-98551) - Update to 1.54.0 (rc1) - Devices not becoming managed sometimes (RHEL-93108) - Crash on _l3cfg_notify_cb (RHEL-92314) - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610) - Fix CVE-2026-10805 (RHEL-191624) - Fix arp_missed_max error on 802.3ad bond reapply (RHEL-182629) - Fix 802.1x auth for bridge interface (RHEL-151941) - Add hard dependency on iputils (RHEL-134751) - Update to 1.54.3 - Fix CVE-2025-9615 (RHEL-111783) - Update to 1.54.2 - Support setting protocol version of HSR/PRP (RHEL-122172) - Support interlink for HSR/PRP (RHEL-122175) - Improve logging of networking off (RHEL-122173 ) - Don't delete unrelated OVS ports (RHEL-121104) - Update to 1.54.1 - Adding a VF configuration resets and re-configures all other VFs (RHEL-113954) - Fix connection.autoconnect-ports of OVS ports (RHEL-114200) - Global DNS config without domains silently ignored from D-Bus (RHEL-115973) - Update to 1.54.0 - Fix reaply on bridge port VLAN (RHEL-102743) - Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787) - Update to 1.54.0 (rc3) - Fix ipv6 static route deleted with dualstack (RHEL-102772) - Allow setting IP method to disabled in port connection (RHEL-102768) - Update to 1.54.0 (rc2) - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728) - Fix a race condition in ovs tun interface (RHEL-98551) - Add hard dependency on iputils (RHEL-134751) - Update to 1.54.3 - Fix CVE-2025-9615 (RHEL-111783) - Update to 1.54.2 - Support setting protocol version of HSR/PRP (RHEL-122172) - Support interlink for HSR/PRP (RHEL-122175) - Improve logging of networking off (RHEL-122173 ) - Don't delete unrelated OVS ports (RHEL-121104) - Update to 1.54.1 - Adding a VF configuration resets and re-configures all other VFs (RHEL-113954) - Fix connection.autoconnect-ports of OVS ports (RHEL-114200) - Global DNS config without domains silently ignored from D-Bus (RHEL-115973) - Update to 1.54.0 - Fix reaply on bridge port VLAN (RHEL-102743) - Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787) - Update to 1.54.0 (rc3) - Fix ipv6 static route deleted with dualstack (RHEL-102772) - Allow setting IP method to disabled in port connection (RHEL-102768) - Update to 1.54.0 (rc2) - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728) - Fix a race condition in ovs tun interface (RHEL-98551) - Update to 1.54.0 (rc1) - Devices not becoming managed sometimes (RHEL-93108) - Crash on _l3cfg_notify_cb (RHEL-92314) - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610) - Update to 1.53.4 (dev) - initrd: add new NBFT parser (RHEL-83061) - Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083) - Support reapply on OVS settings (RHEL-86877) - Add support for configuring the loopback interface in nmtui (RHEL-85770) - Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764) - NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778) - Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168) Resolves: RHEL-83061 Resolves: RHEL-59083 Resolves: RHEL-87596 Resolves: RHEL-85770 Resolves: RHEL-85764 Resolves: RHEL-85778 Resolves: RHEL-87168 - Update to 1.53.3 (dev) - Add more IPv6 prefix delegation options (RHEL-85765) - Fix order of parsing port/controller properties in nmcli (RHEL-85767) - Improve interface activation logic (RHEL-85766) - Fix WireGuard IPv6 firewall rules (RHEL-85763) - Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-77148) - Fix 802.1x auth for bridge interface (RHEL-151941) - Add hard dependency on iputils (RHEL-134751) - Update to 1.54.3 - Fix CVE-2025-9615 (RHEL-111783) - Update to 1.54.2 - Support setting protocol version of HSR/PRP (RHEL-122172) - Support interlink for HSR/PRP (RHEL-122175) - Improve logging of networking off (RHEL-122173 ) - Don't delete unrelated OVS ports (RHEL-121104) - Update to 1.54.1 - Adding a VF configuration resets and re-configures all other VFs (RHEL-113954) - Fix connection.autoconnect-ports of OVS ports (RHEL-114200) - Global DNS config without domains silently ignored from D-Bus (RHEL-115973) - Update to 1.54.0 - Fix reaply on bridge port VLAN (RHEL-102743) - Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787) - Update to 1.54.0 (rc3) - Fix ipv6 static route deleted with dualstack (RHEL-102772) - Allow setting IP method to disabled in port connection (RHEL-102768) - Update to 1.54.0 (rc2) - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728) - Fix a race condition in ovs tun interface (RHEL-98551) - Update to 1.54.0 (rc1) - Devices not becoming managed sometimes (RHEL-93108) - Crash on _l3cfg_notify_cb (RHEL-92314) - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610) - Update to 1.53.4 (dev) - initrd: add new NBFT parser (RHEL-83061) - Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083) - Support reapply on OVS settings (RHEL-86877) - Add support for configuring the loopback interface in nmtui (RHEL-85770) - Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764) - NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778) - Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168) Resolves: RHEL-83061 Resolves: RHEL-59083 Resolves: RHEL-87596 Resolves: RHEL-85770 Resolves: RHEL-85764 Resolves: RHEL-85778 Resolves: RHEL-87168 - Fix arp_missed_max error on 802.3ad bond reapply (RHEL-182629) - Fix 802.1x auth for bridge interface (RHEL-151941) - Add hard dependency on iputils (RHEL-134751) - Update to 1.54.3 - Fix CVE-2025-9615 (RHEL-111783) - Update to 1.54.2 - Support setting protocol version of HSR/PRP (RHEL-122172) - Support interlink for HSR/PRP (RHEL-122175) - Improve logging of networking off (RHEL-122173 ) - Don't delete unrelated OVS ports (RHEL-121104) - Update to 1.54.1 - Adding a VF configuration resets and re-configures all other VFs (RHEL-113954) - Fix connection.autoconnect-ports of OVS ports (RHEL-114200) - Global DNS config without domains silently ignored from D-Bus (RHEL-115973) - Update to 1.54.0 - Fix reaply on bridge port VLAN (RHEL-102743) - Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787) - Update to 1.54.0 (rc3) - Fix ipv6 static route deleted with dualstack (RHEL-102772) - Allow setting IP method to disabled in port connection (RHEL-102768) - Update to 1.54.0 (rc2) - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728) - Fix a race condition in ovs tun interface (RHEL-98551) - Update to 1.54.0 (rc1) - Devices not becoming managed sometimes (RHEL-93108) - Crash on _l3cfg_notify_cb (RHEL-92314) - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610) - Fix CVE-2026-10805 (RHEL-191624) - Fix arp_missed_max error on 802.3ad bond reapply (RHEL-182629) - Fix 802.1x auth for bridge interface (RHEL-151941) - Add hard dependency on iputils (RHEL-134751) - Update to 1.54.3 - Fix CVE-2025-9615 (RHEL-111783) - Update to 1.54.2 - Support setting protocol version of HSR/PRP (RHEL-122172) - Support interlink for HSR/PRP (RHEL-122175) - Improve logging of networking off (RHEL-122173 ) - Don't delete unrelated OVS ports (RHEL-121104) - Update to 1.54.1 - Adding a VF configuration resets and re-configures all other VFs (RHEL-113954) - Fix connection.autoconnect-ports of OVS ports (RHEL-114200) - Global DNS config without domains silently ignored from D-Bus (RHEL-115973) - Update to 1.54.0 - Fix reaply on bridge port VLAN (RHEL-102743) - Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787) - Update to 1.54.0 (rc3) - Fix ipv6 static route deleted with dualstack (RHEL-102772) - Allow setting IP method to disabled in port connection (RHEL-102768) - Update to 1.54.0 (rc2) - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728) - Fix a race condition in ovs tun interface (RHEL-98551) - Upgrade to 1.2.30 - Declare supports-safe-private-file-access (RHEL-140610) - Upgrade to 1.2.29 - Support creating both ends of IPsec (Libreswan) tunnels. (RHEL-85789) - Support leftprotoport and rightprotoport options. (RHEL-130907) - Fix error on duplicate key 'phase2alg'. (RHEL-131233) - Fix import connection with RSA key. (RHEL-127863) - Fix potentional crash in malformed items import - Fix small nm-auto-defaults issue - Symetric import/export with nm-auto-default (RHEL-122306) - Esp param properly exported (RHEL-122626) - Correct leftid export when it contains @ - Update to later upstream release to address regressions (RHEL-56551) - Support rightca in ipsec section (RHEL-118819) - Fix regression on phase2alg/esp for IKEv1 (RHEL-85768) - Add support for nm-auto-defaults (RHEL-85768) - Update to 1.2.26 release - Add support for leftsubnets/rightsubnets (RHEL-56553) - Update to 1.2.24 release - Fix improper escaping of Libreswan configuration (CVE-2024-9050) - Upgrade to 1.2.30 - Declare supports-safe-private-file-access (RHEL-140610) - Upgrade to 1.2.29 - Support creating both ends of IPsec (Libreswan) tunnels. (RHEL-85789) - Support leftprotoport and rightprotoport options. (RHEL-130907) - Fix error on duplicate key 'phase2alg'. (RHEL-131233) - Fix import connection with RSA key. (RHEL-127863) - Fix potentional crash in malformed items import - Fix small nm-auto-defaults issue - Symetric import/export with nm-auto-default (RHEL-122306) - Esp param properly exported (RHEL-122626) - Correct leftid export when it contains @ - Update to later upstream release to address regressions (RHEL-56551) - Support rightca in ipsec section (RHEL-118819) - Fix regression on phase2alg/esp for IKEv1 (RHEL-85768) - Add support for nm-auto-defaults (RHEL-85768) - Update to 1.2.26 release - Add support for leftsubnets/rightsubnets (RHEL-56553) - Update to 1.2.24 release - Fix improper escaping of Libreswan configuration (CVE-2024-9050) - Add hard dependency on iputils (RHEL-134751) - Update to 1.54.3 - Fix CVE-2025-9615 (RHEL-111783) - Update to 1.54.2 - Support setting protocol version of HSR/PRP (RHEL-122172) - Support interlink for HSR/PRP (RHEL-122175) - Improve logging of networking off (RHEL-122173 ) - Don't delete unrelated OVS ports (RHEL-121104) - Update to 1.54.1 - Adding a VF configuration resets and re-configures all other VFs (RHEL-113954) - Fix connection.autoconnect-ports of OVS ports (RHEL-114200) - Global DNS config without domains silently ignored from D-Bus (RHEL-115973) - Update to 1.54.0 - Fix reaply on bridge port VLAN (RHEL-102743) - Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787) - Update to 1.54.0 (rc3) - Fix ipv6 static route deleted with dualstack (RHEL-102772) - Allow setting IP method to disabled in port connection (RHEL-102768) - Update to 1.54.0 (rc2) - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728) - Fix a race condition in ovs tun interface (RHEL-98551) - Update to 1.54.0 (rc1) - Devices not becoming managed sometimes (RHEL-93108) - Crash on _l3cfg_notify_cb (RHEL-92314) - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610) - Update to 1.53.4 (dev) - initrd: add new NBFT parser (RHEL-83061) - Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083) - Support reapply on OVS settings (RHEL-86877) - Add support for configuring the loopback interface in nmtui (RHEL-85770) - Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764) - NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778) - Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168) Resolves: RHEL-83061 Resolves: RHEL-59083 Resolves: RHEL-87596 Resolves: RHEL-85770 Resolves: RHEL-85764 Resolves: RHEL-85778 Resolves: RHEL-87168 - Update to 1.53.3 (dev) - Add more IPv6 prefix delegation options (RHEL-85765) - Fix order of parsing port/controller properties in nmcli (RHEL-85767) - Improve interface activation logic (RHEL-85766) - Fix WireGuard IPv6 firewall rules (RHEL-85763) - Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-77148) - Fix 802.1x auth for bridge interface (RHEL-151941) - Add hard dependency on iputils (RHEL-134751) - Update to 1.54.3 - Fix CVE-2025-9615 (RHEL-111783) - Update to 1.54.2 - Support setting protocol version of HSR/PRP (RHEL-122172) - Support interlink for HSR/PRP (RHEL-122175) - Improve logging of networking off (RHEL-122173 ) - Don't delete unrelated OVS ports (RHEL-121104) - Update to 1.54.1 - Adding a VF configuration resets and re-configures all other VFs (RHEL-113954) - Fix connection.autoconnect-ports of OVS ports (RHEL-114200) - Global DNS config without domains silently ignored from D-Bus (RHEL-115973) - Update to 1.54.0 - Fix reaply on bridge port VLAN (RHEL-102743) - Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787) - Update to 1.54.0 (rc3) - Fix ipv6 static route deleted with dualstack (RHEL-102772) - Allow setting IP method to disabled in port connection (RHEL-102768) - Update to 1.54.0 (rc2) - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728) - Fix a race condition in ovs tun interface (RHEL-98551) - Update to 1.54.0 (rc1) - Devices not becoming managed sometimes (RHEL-93108) - Crash on _l3cfg_notify_cb (RHEL-92314) - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610) - Update to 1.53.4 (dev) - initrd: add new NBFT parser (RHEL-83061) - Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083) - Support reapply on OVS settings (RHEL-86877) - Add support for configuring the loopback interface in nmtui (RHEL-85770) - Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764) - NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778) - Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168) Resolves: RHEL-83061 Resolves: RHEL-59083 Resolves: RHEL-87596 Resolves: RHEL-85770 Resolves: RHEL-85764 Resolves: RHEL-85778 Resolves: RHEL-87168 - Fix arp_missed_max error on 802.3ad bond reapply (RHEL-182629) - Fix 802.1x auth for bridge interface (RHEL-151941) - Add hard dependency on iputils (RHEL-134751) - Update to 1.54.3 - Fix CVE-2025-9615 (RHEL-111783) - Update to 1.54.2 - Support setting protocol version of HSR/PRP (RHEL-122172) - Support interlink for HSR/PRP (RHEL-122175) - Improve logging of networking off (RHEL-122173 ) - Don't delete unrelated OVS ports (RHEL-121104) - Update to 1.54.1 - Adding a VF configuration resets and re-configures all other VFs (RHEL-113954) - Fix connection.autoconnect-ports of OVS ports (RHEL-114200) - Global DNS config without domains silently ignored from D-Bus (RHEL-115973) - Update to 1.54.0 - Fix reaply on bridge port VLAN (RHEL-102743) - Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787) - Update to 1.54.0 (rc3) - Fix ipv6 static route deleted with dualstack (RHEL-102772) - Allow setting IP method to disabled in port connection (RHEL-102768) - Update to 1.54.0 (rc2) - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728) - Fix a race condition in ovs tun interface (RHEL-98551) - Update to 1.54.0 (rc1) - Devices not becoming managed sometimes (RHEL-93108) - Crash on _l3cfg_notify_cb (RHEL-92314) - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610) - Fix CVE-2026-10805 (RHEL-191624) - Fix arp_missed_max error on 802.3ad bond reapply (RHEL-182629) - Fix 802.1x auth for bridge interface (RHEL-151941) - Add hard dependency on iputils (RHEL-134751) - Update to 1.54.3 - Fix CVE-2025-9615 (RHEL-111783) - Update to 1.54.2 - Support setting protocol version of HSR/PRP (RHEL-122172) - Support interlink for HSR/PRP (RHEL-122175) - Improve logging of networking off (RHEL-122173 ) - Don't delete unrelated OVS ports (RHEL-121104) - Update to 1.54.1 - Adding a VF configuration resets and re-configures all other VFs (RHEL-113954) - Fix connection.autoconnect-ports of OVS ports (RHEL-114200) - Global DNS config without domains silently ignored from D-Bus (RHEL-115973) - Update to 1.54.0 - Fix reaply on bridge port VLAN (RHEL-102743) - Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787) - Update to 1.54.0 (rc3) - Fix ipv6 static route deleted with dualstack (RHEL-102772) - Allow setting IP method to disabled in port connection (RHEL-102768) - Update to 1.54.0 (rc2) - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728) - Fix a race condition in ovs tun interface (RHEL-98551) - Add hard dependency on iputils (RHEL-134751) - Update to 1.54.3 - Fix CVE-2025-9615 (RHEL-111783) - Update to 1.54.2 - Support setting protocol version of HSR/PRP (RHEL-122172) - Support interlink for HSR/PRP (RHEL-122175) - Improve logging of networking off (RHEL-122173 ) - Don't delete unrelated OVS ports (RHEL-121104) - Update to 1.54.1 - Adding a VF configuration resets and re-configures all other VFs (RHEL-113954) - Fix connection.autoconnect-ports of OVS ports (RHEL-114200) - Global DNS config without domains silently ignored from D-Bus (RHEL-115973) - Update to 1.54.0 - Fix reaply on bridge port VLAN (RHEL-102743) - Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787) - Update to 1.54.0 (rc3) - Fix ipv6 static route deleted with dualstack (RHEL-102772) - Allow setting IP method to disabled in port connection (RHEL-102768) - Update to 1.54.0 (rc2) - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728) - Fix a race condition in ovs tun interface (RHEL-98551) - Update to 1.54.0 (rc1) - Devices not becoming managed sometimes (RHEL-93108) - Crash on _l3cfg_notify_cb (RHEL-92314) - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610) - Update to 1.53.4 (dev) - initrd: add new NBFT parser (RHEL-83061) - Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083) - Support reapply on OVS settings (RHEL-86877) - Add support for configuring the loopback interface in nmtui (RHEL-85770) - Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764) - NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778) - Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168) Resolves: RHEL-83061 Resolves: RHEL-59083 Resolves: RHEL-87596 Resolves: RHEL-85770 Resolves: RHEL-85764 Resolves: RHEL-85778 Resolves: RHEL-87168 - Update to 1.53.3 (dev) - Add more IPv6 prefix delegation options (RHEL-85765) - Fix order of parsing port/controller properties in nmcli (RHEL-85767) - Improve interface activation logic (RHEL-85766) - Fix WireGuard IPv6 firewall rules (RHEL-85763) - Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-77148) - Fix 802.1x auth for bridge interface (RHEL-151941) - Add hard dependency on iputils (RHEL-134751) - Update to 1.54.3 - Fix CVE-2025-9615 (RHEL-111783) - Update to 1.54.2 - Support setting protocol version of HSR/PRP (RHEL-122172) - Support interlink for HSR/PRP (RHEL-122175) - Improve logging of networking off (RHEL-122173 ) - Don't delete unrelated OVS ports (RHEL-121104) - Update to 1.54.1 - Adding a VF configuration resets and re-configures all other VFs (RHEL-113954) - Fix connection.autoconnect-ports of OVS ports (RHEL-114200) - Global DNS config without domains silently ignored from D-Bus (RHEL-115973) - Update to 1.54.0 - Fix reaply on bridge port VLAN (RHEL-102743) - Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787) - Update to 1.54.0 (rc3) - Fix ipv6 static route deleted with dualstack (RHEL-102772) - Allow setting IP method to disabled in port connection (RHEL-102768) - Update to 1.54.0 (rc2) - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728) - Fix a race condition in ovs tun interface (RHEL-98551) - Update to 1.54.0 (rc1) - Devices not becoming managed sometimes (RHEL-93108) - Crash on _l3cfg_notify_cb (RHEL-92314) - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610) - Update to 1.53.4 (dev) - initrd: add new NBFT parser (RHEL-83061) - Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083) - Support reapply on OVS settings (RHEL-86877) - Add support for configuring the loopback interface in nmtui (RHEL-85770) - Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764) - NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778) - Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168) Resolves: RHEL-83061 Resolves: RHEL-59083 Resolves: RHEL-87596 Resolves: RHEL-85770 Resolves: RHEL-85764 Resolves: RHEL-85778 Resolves: RHEL-87168 - Fix arp_missed_max error on 802.3ad bond reapply (RHEL-182629) - Fix 802.1x auth for bridge interface (RHEL-151941) - Add hard dependency on iputils (RHEL-134751) - Update to 1.54.3 - Fix CVE-2025-9615 (RHEL-111783) - Update to 1.54.2 - Support setting protocol version of HSR/PRP (RHEL-122172) - Support interlink for HSR/PRP (RHEL-122175) - Improve logging of networking off (RHEL-122173 ) - Don't delete unrelated OVS ports (RHEL-121104) - Update to 1.54.1 - Adding a VF configuration resets and re-configures all other VFs (RHEL-113954) - Fix connection.autoconnect-ports of OVS ports (RHEL-114200) - Global DNS config without domains silently ignored from D-Bus (RHEL-115973) - Update to 1.54.0 - Fix reaply on bridge port VLAN (RHEL-102743) - Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787) - Update to 1.54.0 (rc3) - Fix ipv6 static route deleted with dualstack (RHEL-102772) - Allow setting IP method to disabled in port connection (RHEL-102768) - Update to 1.54.0 (rc2) - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728) - Fix a race condition in ovs tun interface (RHEL-98551) - Update to 1.54.0 (rc1) - Devices not becoming managed sometimes (RHEL-93108) - Crash on _l3cfg_notify_cb (RHEL-92314) - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610) - Fix CVE-2026-10805 (RHEL-191624) - Fix arp_missed_max error on 802.3ad bond reapply (RHEL-182629) - Fix 802.1x auth for bridge interface (RHEL-151941) - Add hard dependency on iputils (RHEL-134751) - Update to 1.54.3 - Fix CVE-2025-9615 (RHEL-111783) - Update to 1.54.2 - Support setting protocol version of HSR/PRP (RHEL-122172) - Support interlink for HSR/PRP (RHEL-122175) - Improve logging of networking off (RHEL-122173 ) - Don't delete unrelated OVS ports (RHEL-121104) - Update to 1.54.1 - Adding a VF configuration resets and re-configures all other VFs (RHEL-113954) - Fix connection.autoconnect-ports of OVS ports (RHEL-114200) - Global DNS config without domains silently ignored from D-Bus (RHEL-115973) - Update to 1.54.0 - Fix reaply on bridge port VLAN (RHEL-102743) - Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787) - Update to 1.54.0 (rc3) - Fix ipv6 static route deleted with dualstack (RHEL-102772) - Allow setting IP method to disabled in port connection (RHEL-102768) - Update to 1.54.0 (rc2) - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728) - Fix a race condition in ovs tun interface (RHEL-98551) - Update to 2.0.36 - Update to 2.0.36 - Update to 2.0.36 - Backport fix for CVE-2026-41651. - Resolves: #RHEL-170504 - Backport fix for CVE-2026-41651. - Resolves: #RHEL-170504 - Backport fix for CVE-2026-41651. - Resolves: #RHEL-170504 - Backport fix for CVE-2026-41651. - Resolves: #RHEL-170504 - Backport fix for CVE-2026-41651. - Resolves: #RHEL-170504 - Update to 2.26.0 Resolves: rhbz#2051959 - Drop backported patches included in this release - Backport Wayland fixes with Wayland-by-default from upstream Resolves: rhbz#2051963 - Update to 2.0.20 Resolves: rhbz#2039137 - Drop backported patches included in this release - Move libSDL2main to -devel and refresh split CMake target patch Resolves: rhbz#2038390 - Update to 2.0.18 Resolves: rhbz#2028076 - Fix multilib conflict with SDL_revision.h (rhbz#2008838) - Backport fix for building against wayland-1.20+ - Add patch to split SDL2 CMake targets for static libraries (rhbz#1965359) - Re-enable libdecor support now that it's available in RHEL 9 Resolves: rhbz#2003471 - Build with SDL_STATIC_PIC and SDL_STATIC to actually make the static version of SDL2 - Build with SDL_STATIC_PIC instead of SDL_STATIC - Disable libdecor until it is added to centos/RHEL9 - Update to 2.0.16 - Update to 2.26.0 Resolves: rhbz#2051959 - Drop backported patches included in this release - Backport Wayland fixes with Wayland-by-default from upstream Resolves: rhbz#2051963 - Update to 2.0.20 Resolves: rhbz#2039137 - Drop backported patches included in this release - Move libSDL2main to -devel and refresh split CMake target patch Resolves: rhbz#2038390 - Update to 2.0.18 Resolves: rhbz#2028076 - Fix multilib conflict with SDL_revision.h (rhbz#2008838) - Backport fix for building against wayland-1.20+ - Add patch to split SDL2 CMake targets for static libraries (rhbz#1965359) - Re-enable libdecor support now that it's available in RHEL 9 Resolves: rhbz#2003471 - Build with SDL_STATIC_PIC and SDL_STATIC to actually make the static version of SDL2 - Build with SDL_STATIC_PIC instead of SDL_STATIC - Disable libdecor until it is added to centos/RHEL9 - Update to 2.0.16 - wla-Change-redhat-waagent-network-setup.service-path-to-.patch [RHEL-82232] - Resolves: RHEL-82232 ([Azure][image mode][WALA][RHEL-9] Unable to setup the persistent firewall rules) - wla-Jira-https-issues.redhat.com-browse-RHEL-133507.patch [RHEL-133507] - Resolves: RHEL-133507 (Backport ConditionVirtualization=|microsoft for waagent in RHEL 9.x) - wla-Remove-10-azure-unmanaged-sriov.rules.patch [RHEL-124218] - Resolves: RHEL-124218 ([Azure][WALA][RHEL-9] Remove 10-azure-unmanaged-sriov.rules) - Rebase to 2.14.0.1 [RHEL-116436] - Resolves: RHEL-116436 (Rebase to v2.14.0.1) - wla-Use-systemctl-instead-of-service-to-manager-services.patch [RHEL-97572] - Resolves: RHEL-97572 ([Azure][RHEL-9][WALA][Image mode] Cannot find 'service' command) - wla-docs-add-waagent-manpage-3401.patch [RHEL-109496] - Resolves: RHEL-109496 ([Azure][WALA][RHEL-9] Missing man page) * Rebase to 2.13.1.1 [RHEL-91090] - Resolves: RHEL-91090 (Rebase to v2.13.1.1 [rhel-9]) - wla-redhat-Include-10-azure-unmanaged-sriov.rules-into-i.patch [RHEL-40957] - Resolves: RHEL-40957 ([Azure][ARM][RHEL-9] Kdump cannot save vmcore via ssh or nfs) - wla-redhat-Include-10-azure-unmanaged-sriov.rules-into-i.patch [RHEL-40957] - Resolves: RHEL-40957 ([Azure][ARM][RHEL-9] Kdump cannot save vmcore via ssh or nfs) - wla-redhat-Add-a-udev-rule-to-avoid-managing-slave-NICs-.patch [RHEL-5880] - Resolves: RHEL-5880 ([Azure][RHEL-9]68-azure-sriov-nm-unmanaged.rules cannot stop NetworkManager-wait-online.service checking SRIOV interface) - wla-Change-redhat-waagent-network-setup.service-path-to-.patch [RHEL-82232] - Resolves: RHEL-82232 ([Azure][image mode][WALA][RHEL-9] Unable to setup the persistent firewall rules) - wla-Jira-https-issues.redhat.com-browse-RHEL-133507.patch [RHEL-133507] - Resolves: RHEL-133507 (Backport ConditionVirtualization=|microsoft for waagent in RHEL 9.x) - wla-Remove-10-azure-unmanaged-sriov.rules.patch [RHEL-124218] - Resolves: RHEL-124218 ([Azure][WALA][RHEL-9] Remove 10-azure-unmanaged-sriov.rules) - Rebase to 2.14.0.1 [RHEL-116436] - Resolves: RHEL-116436 (Rebase to v2.14.0.1) - wla-Use-systemctl-instead-of-service-to-manager-services.patch [RHEL-97572] - Resolves: RHEL-97572 ([Azure][RHEL-9][WALA][Image mode] Cannot find 'service' command) - wla-docs-add-waagent-manpage-3401.patch [RHEL-109496] - Resolves: RHEL-109496 ([Azure][WALA][RHEL-9] Missing man page) * Rebase to 2.13.1.1 [RHEL-91090] - Resolves: RHEL-91090 (Rebase to v2.13.1.1 [rhel-9]) - wla-redhat-Include-10-azure-unmanaged-sriov.rules-into-i.patch [RHEL-40957] - Resolves: RHEL-40957 ([Azure][ARM][RHEL-9] Kdump cannot save vmcore via ssh or nfs) - wla-redhat-Include-10-azure-unmanaged-sriov.rules-into-i.patch [RHEL-40957] - Resolves: RHEL-40957 ([Azure][ARM][RHEL-9] Kdump cannot save vmcore via ssh or nfs) - wla-redhat-Add-a-udev-rule-to-avoid-managing-slave-NICs-.patch [RHEL-5880] - Resolves: RHEL-5880 ([Azure][RHEL-9]68-azure-sriov-nm-unmanaged.rules cannot stop NetworkManager-wait-online.service checking SRIOV interface) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Add source tarbal PGP signature verification - Update to 1.6.3 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - update to https://github.com/containers/aardvark-dns/releases/tag/v1.17.0 - Resolves: RHEL-85839 - update to https://github.com/containers/aardvark-dns/releases/tag/v1.16.0 - Related: RHEL-80816 - update to https://github.com/containers/aardvark-dns/releases/tag/v1.15.0 - Related: RHEL-80816 - fix dep issues in tests subpackage - Resolves: RHEL-80816 - rebuilt to try TMT tests in osci - Resolves: RHEL-80816 - update to https://github.com/containers/aardvark-dns/releases/tag/v1.14.0 - Related: RHEL-60277 - update to https://github.com/containers/aardvark-dns/releases/tag/v1.13.1 - Related: RHEL-60277 - update to https://github.com/containers/aardvark-dns/releases/tag/v1.17.1 - Resolves: RHEL-170152 - update to https://github.com/containers/aardvark-dns/releases/tag/v1.17.0 - Resolves: RHEL-85839 - update to https://github.com/containers/aardvark-dns/releases/tag/v1.16.0 - Related: RHEL-80816 - update to https://github.com/containers/aardvark-dns/releases/tag/v1.15.0 - Related: RHEL-80816 - fix dep issues in tests subpackage - Resolves: RHEL-80816 - rebuilt to try TMT tests in osci - Resolves: RHEL-80816 - update to https://github.com/containers/aardvark-dns/releases/tag/v1.14.0 - Related: RHEL-60277 - update to https://github.com/containers/aardvark-dns/releases/tag/v1.13.1 - Related: RHEL-60277 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 0.301 - Add the substitution rule for system-ui in fontconfig config. - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 0.201 - Synchronize permissions and group ownership for icon and users dirs between rpm file manifest and daemon expectations. Resolves: #2057576 - Bring in RHEL-8 patches Resolves: #2014692 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild + accountsservice-0.6.55-5 - Own /usr/share/accountsservice - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Synchronize permissions and group ownership for icon and users dirs between rpm file manifest and daemon expectations. Resolves: #2057576 - Bring in RHEL-8 patches Resolves: #2014692 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild + accountsservice-0.6.55-5 - Own /usr/share/accountsservice - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Updated socket path from /var/run => /run in acpid.socket Resolves: rhbz#2159568 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - remove mention of Fedora from desc - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - remove mention of Fedora from desc - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - remove mention of Fedora from desc - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt to ship adwaita-icon-theme-devel in CRB - Resolves: #2021357 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 40.1.1 - Update to 40.0 - Update upstream URLs - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 + adwaita-icon-theme-40.0~rc-1 - Update to 40.rc - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 3.38.0 - Update to 3.37.92 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Split highcontrast-icon-theme out to a new subpackage - Explicitly require cursor and icon themes required for the gtk2 themes - Make adwaita-gtk2-theme recommends conditional on gtk2 being installed - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt to ship adwaita-icon-theme-devel in CRB - Resolves: #2021357 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 40.1.1 - Update to 40.0 - Update upstream URLs - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 + adwaita-icon-theme-40.0~rc-1 - Update to 40.rc - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 3.38.0 - Update to 3.37.92 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 1.4.2 Resolves: bz#2175754 - Bump build to build against correct Qt version Resolves: bz#2061416 - Rebuild (Qt 5.15.3) Resolves: bz#2061416 - 1.4.1 Resolves: bz#2023181 - 1.4.0 Resolves: bz#1968275 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - new version - new version - new version - New release - New release - Add gcp-hostname.patch - New release - Update legacy-providers patch to work with new release source - new version - new version - new version - New release - New release - Add gcp-hostname.patch - New release - Update legacy-providers patch to work with new release source - Adjust default config to avoid false positives in /etc Resolves: RHEL-83776 - /boot/grub2/grubenv is excluded from check due to boot_success implementation Resolves: RHEL-83776 - Do not monitor link count in /var/log/journal Resolves: RHEL-83776 RHEL 9.8.0 ERRATUM - Modernize config file Resolves: RHEL-83776 RHEL 9.8.0 ERRATUM - rebase to 0.19.2 Resolves: RHEL-110573 - Switch to libnettle for hashing - prevent aide from crashing if database is a HTTPS URL Resolves: RHEL-76014 - prevent aide from exiting if a file is truncated during check Resolves: RHEL-1569 RHEL 9.7 ERRATUM - CVE-2025-54389 aide: improper output neutralization enables bypassing Resolves: RHEL-109912 RHEL 9.6.0 ERRATUM - /boot/grub2/grubenv's timestamp is getting modified continuously due to "boot_success" implementation Resolves: RHEL-4331 RHEL 9.5.0 ERRATUM - aide fails with "Not enough parameters in db:15384. Trying to continue." unexpectedly Resolves: RHEL-27606 - AIDE fails when using root_prefix option Resolves: RHEL-28882 - Re-add syslog_format config option dropped during rebase to 0.19.2 Resolves: RHEL-178539 - Add aide-migrate-config to automate config migration from pre-0.19 syntax - Adjust default config to avoid false positives in /etc Resolves: RHEL-83776 - /boot/grub2/grubenv is excluded from check due to boot_success implementation Resolves: RHEL-83776 - Do not monitor link count in /var/log/journal Resolves: RHEL-83776 RHEL 9.8.0 ERRATUM - Modernize config file Resolves: RHEL-83776 RHEL 9.8.0 ERRATUM - rebase to 0.19.2 Resolves: RHEL-110573 - Switch to libnettle for hashing - prevent aide from crashing if database is a HTTPS URL Resolves: RHEL-76014 - prevent aide from exiting if a file is truncated during check Resolves: RHEL-1569 RHEL 9.7 ERRATUM - CVE-2025-54389 aide: improper output neutralization enables bypassing Resolves: RHEL-109912 RHEL 9.6.0 ERRATUM - /boot/grub2/grubenv's timestamp is getting modified continuously due to "boot_success" implementation Resolves: RHEL-4331 - Add ipa modern-ui artwork - Add pixmaps/fedora-logo.ico - Update webserver testpage - Drop splashtolss.sh build requirements - Update index.html to fix link on the logo. - Added updated index.html to sources. - Updated prep and install sections. - Revise AlmaLinux description not to hostile towards CentOS - Add ipa modern-ui artwork - Add pixmaps/fedora-logo.ico - Update webserver testpage - Drop splashtolss.sh build requirements - Add ipa modern-ui artwork - Add pixmaps/fedora-logo.ico - Update webserver testpage - Drop splashtolss.sh build requirements - Add ipa modern-ui artwork - Add pixmaps/fedora-logo.ico - Update webserver testpage - Drop splashtolss.sh build requirements - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Updated to 1.2.4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Removed Intel SOF firmware files (moved to alsa-sof-firmware package) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Updated Intel SOF firmware files to 1.4.2 - Intel SOF firmware files to 1.4.1 fixes (symlinks) - Updated Intel SOF firmware files to 1.4.1 - update to alsa-lib 1.2.15.3 and alsa-ucm-conf 1.2.15.3 - update to alsa-lib 1.2.14 and alsa-ucm-conf 1.2.14 - update to alsa-lib 1.2.13 and alsa-ucm-conf 1.2.13 - update to alsa-lib 1.2.12 and alsa-ucm-conf 1.2.12 - update to alsa-lib 1.2.15.3 and alsa-ucm-conf 1.2.15.3 - update to alsa-lib 1.2.14 and alsa-ucm-conf 1.2.14 - update to alsa-lib 1.2.13 and alsa-ucm-conf 1.2.13 - update to alsa-lib 1.2.12 and alsa-ucm-conf 1.2.12 - Updated to 1.2.7.1 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - -pulseaudio: Requires: pulseaudio-daemon - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Updated to 1.2.7.1 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - -pulseaudio: Requires: pulseaudio-daemon - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Updated to 1.2.7.1 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - -pulseaudio: Requires: pulseaudio-daemon - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Updated to 1.2.7.1 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - -pulseaudio: Requires: pulseaudio-daemon - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Updated to 1.2.7.1 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - -pulseaudio: Requires: pulseaudio-daemon - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Updated to 1.2.7.1 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - -pulseaudio: Requires: pulseaudio-daemon - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Updated to 1.2.7.1 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - -pulseaudio: Requires: pulseaudio-daemon - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Updated to 1.2.7.1 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - -pulseaudio: Requires: pulseaudio-daemon - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Updated to 1.2.7.1 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - -pulseaudio: Requires: pulseaudio-daemon - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to v2025.12.2 - Update to v2025.05 - Add sof-ipc4-lib directory - Update to v2024.09.2 - Update to v2024.09.1 - Update to v2024.09 - Update to v2024.03 - Add AVS topology files v2024.02 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Updated to 1.2.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - update to alsa-lib 1.2.15.3 and alsa-ucm-conf 1.2.15.3 - update to alsa-lib 1.2.14 and alsa-ucm-conf 1.2.14 - update to alsa-lib 1.2.13 and alsa-ucm-conf 1.2.13 - update to alsa-lib 1.2.12 and alsa-ucm-conf 1.2.12 * Updated to 1.2.15.2 * Updated to 1.2.14 * Updated to 1.2.13 * Updated to 1.2.12 - AlmaLinux changes - Fix user input in driver disk menu is not displayed (adamkankovsky) Resolves: RHEL-4737 - Only show compatible translations in text mode (mkolman) Resolves: RHEL-144834 - Fix permissions of the ssh config created by Anaconda (ppolawsk) Resolves: RHEL-129787 - pyanaconda: rpm_ostree: fix _handle_boot_if_not_mount_point method issues (k.koukiou) Related: RHEL-74145 - ostree needs to have /boot be bindmounted into sysroot. (a.badger) Resolves: RHEL-74145 - bootloader: efi: utilize grub2-common script for handling config file generation (k.koukiou) Resolves: RHEL-36187 - Fixing authselect logical differences not resolved during backporting (adamkankovsky) Resolves: RHEL-85175 - Set Authselect agruments after run in Security module (adamkankovsky) Resolves: RHEL-85175 - Authselect code simplification (adamkankovsky) Resolves: RHEL-85175 - custom: Reallocate partitions when removing a partition (vtrefny) Resolves: RHEL-114169 - Fix: UnboundLocalError: local variable 'e' referenced before assignment (k.koukiou) Related to: RHEL-4705 - Emit authselect in KS when fingerprint is enabled (adamkankovsky) Resolves: RHEL-85175 - pyanaconda: payload: return exception details for payload failures (k.koukiou) - ui: tui: installation_source: show error message in the TUI screen (k.koukiou) Resolves: RHEL-4705 - storage: fix mount point assignment of non-formatted swap partitions (rvykydal) Related: RHEL-16355 - storage: include only fstab devices in fsset swap devices property (rvykydal) Resolves: RHEL-16355 - Fix vconsole layout doesn't work for ostree (jkonecny) Resolves: RHEL-101057 - test: make dnf substitutions test check only relevant values (rvykydal) - test: add new substitution members in dnf tests (rvykydal) - AlmaLinux changes - Fix user input in driver disk menu is not displayed (adamkankovsky) Resolves: RHEL-4737 - Only show compatible translations in text mode (mkolman) Resolves: RHEL-144834 - Fix permissions of the ssh config created by Anaconda (ppolawsk) Resolves: RHEL-129787 - pyanaconda: rpm_ostree: fix _handle_boot_if_not_mount_point method issues (k.koukiou) Related: RHEL-74145 - ostree needs to have /boot be bindmounted into sysroot. (a.badger) Resolves: RHEL-74145 - bootloader: efi: utilize grub2-common script for handling config file generation (k.koukiou) Resolves: RHEL-36187 - Fixing authselect logical differences not resolved during backporting (adamkankovsky) Resolves: RHEL-85175 - Set Authselect agruments after run in Security module (adamkankovsky) Resolves: RHEL-85175 - Authselect code simplification (adamkankovsky) Resolves: RHEL-85175 - custom: Reallocate partitions when removing a partition (vtrefny) Resolves: RHEL-114169 - Fix: UnboundLocalError: local variable 'e' referenced before assignment (k.koukiou) Related to: RHEL-4705 - Emit authselect in KS when fingerprint is enabled (adamkankovsky) Resolves: RHEL-85175 - pyanaconda: payload: return exception details for payload failures (k.koukiou) - ui: tui: installation_source: show error message in the TUI screen (k.koukiou) Resolves: RHEL-4705 - storage: fix mount point assignment of non-formatted swap partitions (rvykydal) Related: RHEL-16355 - storage: include only fstab devices in fsset swap devices property (rvykydal) Resolves: RHEL-16355 - Fix vconsole layout doesn't work for ostree (jkonecny) Resolves: RHEL-101057 - test: make dnf substitutions test check only relevant values (rvykydal) - test: add new substitution members in dnf tests (rvykydal) - AlmaLinux changes - Fix user input in driver disk menu is not displayed (adamkankovsky) Resolves: RHEL-4737 - Only show compatible translations in text mode (mkolman) Resolves: RHEL-144834 - Fix permissions of the ssh config created by Anaconda (ppolawsk) Resolves: RHEL-129787 - pyanaconda: rpm_ostree: fix _handle_boot_if_not_mount_point method issues (k.koukiou) Related: RHEL-74145 - ostree needs to have /boot be bindmounted into sysroot. (a.badger) Resolves: RHEL-74145 - bootloader: efi: utilize grub2-common script for handling config file generation (k.koukiou) Resolves: RHEL-36187 - Fixing authselect logical differences not resolved during backporting (adamkankovsky) Resolves: RHEL-85175 - Set Authselect agruments after run in Security module (adamkankovsky) Resolves: RHEL-85175 - Authselect code simplification (adamkankovsky) Resolves: RHEL-85175 - custom: Reallocate partitions when removing a partition (vtrefny) Resolves: RHEL-114169 - Fix: UnboundLocalError: local variable 'e' referenced before assignment (k.koukiou) Related to: RHEL-4705 - Emit authselect in KS when fingerprint is enabled (adamkankovsky) Resolves: RHEL-85175 - pyanaconda: payload: return exception details for payload failures (k.koukiou) - ui: tui: installation_source: show error message in the TUI screen (k.koukiou) Resolves: RHEL-4705 - storage: fix mount point assignment of non-formatted swap partitions (rvykydal) Related: RHEL-16355 - storage: include only fstab devices in fsset swap devices property (rvykydal) Resolves: RHEL-16355 - Fix vconsole layout doesn't work for ostree (jkonecny) Resolves: RHEL-101057 - test: make dnf substitutions test check only relevant values (rvykydal) - test: add new substitution members in dnf tests (rvykydal) - AlmaLinux changes - Fix user input in driver disk menu is not displayed (adamkankovsky) Resolves: RHEL-4737 - Only show compatible translations in text mode (mkolman) Resolves: RHEL-144834 - Fix permissions of the ssh config created by Anaconda (ppolawsk) Resolves: RHEL-129787 - pyanaconda: rpm_ostree: fix _handle_boot_if_not_mount_point method issues (k.koukiou) Related: RHEL-74145 - ostree needs to have /boot be bindmounted into sysroot. (a.badger) Resolves: RHEL-74145 - bootloader: efi: utilize grub2-common script for handling config file generation (k.koukiou) Resolves: RHEL-36187 - Fixing authselect logical differences not resolved during backporting (adamkankovsky) Resolves: RHEL-85175 - Set Authselect agruments after run in Security module (adamkankovsky) Resolves: RHEL-85175 - Authselect code simplification (adamkankovsky) Resolves: RHEL-85175 - custom: Reallocate partitions when removing a partition (vtrefny) Resolves: RHEL-114169 - Fix: UnboundLocalError: local variable 'e' referenced before assignment (k.koukiou) Related to: RHEL-4705 - Emit authselect in KS when fingerprint is enabled (adamkankovsky) Resolves: RHEL-85175 - pyanaconda: payload: return exception details for payload failures (k.koukiou) - ui: tui: installation_source: show error message in the TUI screen (k.koukiou) Resolves: RHEL-4705 - storage: fix mount point assignment of non-formatted swap partitions (rvykydal) Related: RHEL-16355 - storage: include only fstab devices in fsset swap devices property (rvykydal) Resolves: RHEL-16355 - Fix vconsole layout doesn't work for ostree (jkonecny) Resolves: RHEL-101057 - test: make dnf substitutions test check only relevant values (rvykydal) - test: add new substitution members in dnf tests (rvykydal) - AlmaLinux changes - Fix user input in driver disk menu is not displayed (adamkankovsky) Resolves: RHEL-4737 - Only show compatible translations in text mode (mkolman) Resolves: RHEL-144834 - Fix permissions of the ssh config created by Anaconda (ppolawsk) Resolves: RHEL-129787 - pyanaconda: rpm_ostree: fix _handle_boot_if_not_mount_point method issues (k.koukiou) Related: RHEL-74145 - ostree needs to have /boot be bindmounted into sysroot. (a.badger) Resolves: RHEL-74145 - bootloader: efi: utilize grub2-common script for handling config file generation (k.koukiou) Resolves: RHEL-36187 - Fixing authselect logical differences not resolved during backporting (adamkankovsky) Resolves: RHEL-85175 - Set Authselect agruments after run in Security module (adamkankovsky) Resolves: RHEL-85175 - Authselect code simplification (adamkankovsky) Resolves: RHEL-85175 - custom: Reallocate partitions when removing a partition (vtrefny) Resolves: RHEL-114169 - Fix: UnboundLocalError: local variable 'e' referenced before assignment (k.koukiou) Related to: RHEL-4705 - Emit authselect in KS when fingerprint is enabled (adamkankovsky) Resolves: RHEL-85175 - pyanaconda: payload: return exception details for payload failures (k.koukiou) - ui: tui: installation_source: show error message in the TUI screen (k.koukiou) Resolves: RHEL-4705 - storage: fix mount point assignment of non-formatted swap partitions (rvykydal) Related: RHEL-16355 - storage: include only fstab devices in fsset swap devices property (rvykydal) Resolves: RHEL-16355 - Fix vconsole layout doesn't work for ostree (jkonecny) Resolves: RHEL-101057 - test: make dnf substitutions test check only relevant values (rvykydal) - test: add new substitution members in dnf tests (rvykydal) - AlmaLinux changes - Fix user input in driver disk menu is not displayed (adamkankovsky) Resolves: RHEL-4737 - Only show compatible translations in text mode (mkolman) Resolves: RHEL-144834 - Fix permissions of the ssh config created by Anaconda (ppolawsk) Resolves: RHEL-129787 - pyanaconda: rpm_ostree: fix _handle_boot_if_not_mount_point method issues (k.koukiou) Related: RHEL-74145 - ostree needs to have /boot be bindmounted into sysroot. (a.badger) Resolves: RHEL-74145 - bootloader: efi: utilize grub2-common script for handling config file generation (k.koukiou) Resolves: RHEL-36187 - Fixing authselect logical differences not resolved during backporting (adamkankovsky) Resolves: RHEL-85175 - Set Authselect agruments after run in Security module (adamkankovsky) Resolves: RHEL-85175 - Authselect code simplification (adamkankovsky) Resolves: RHEL-85175 - custom: Reallocate partitions when removing a partition (vtrefny) Resolves: RHEL-114169 - Fix: UnboundLocalError: local variable 'e' referenced before assignment (k.koukiou) Related to: RHEL-4705 - Emit authselect in KS when fingerprint is enabled (adamkankovsky) Resolves: RHEL-85175 - pyanaconda: payload: return exception details for payload failures (k.koukiou) - ui: tui: installation_source: show error message in the TUI screen (k.koukiou) Resolves: RHEL-4705 - storage: fix mount point assignment of non-formatted swap partitions (rvykydal) Related: RHEL-16355 - storage: include only fstab devices in fsset swap devices property (rvykydal) Resolves: RHEL-16355 - Fix vconsole layout doesn't work for ostree (jkonecny) Resolves: RHEL-101057 - test: make dnf substitutions test check only relevant values (rvykydal) - test: add new substitution members in dnf tests (rvykydal) - AlmaLinux changes - Fix user input in driver disk menu is not displayed (adamkankovsky) Resolves: RHEL-4737 - Only show compatible translations in text mode (mkolman) Resolves: RHEL-144834 - Fix permissions of the ssh config created by Anaconda (ppolawsk) Resolves: RHEL-129787 - pyanaconda: rpm_ostree: fix _handle_boot_if_not_mount_point method issues (k.koukiou) Related: RHEL-74145 - ostree needs to have /boot be bindmounted into sysroot. (a.badger) Resolves: RHEL-74145 - bootloader: efi: utilize grub2-common script for handling config file generation (k.koukiou) Resolves: RHEL-36187 - Fixing authselect logical differences not resolved during backporting (adamkankovsky) Resolves: RHEL-85175 - Set Authselect agruments after run in Security module (adamkankovsky) Resolves: RHEL-85175 - Authselect code simplification (adamkankovsky) Resolves: RHEL-85175 - custom: Reallocate partitions when removing a partition (vtrefny) Resolves: RHEL-114169 - Fix: UnboundLocalError: local variable 'e' referenced before assignment (k.koukiou) Related to: RHEL-4705 - Emit authselect in KS when fingerprint is enabled (adamkankovsky) Resolves: RHEL-85175 - pyanaconda: payload: return exception details for payload failures (k.koukiou) - ui: tui: installation_source: show error message in the TUI screen (k.koukiou) Resolves: RHEL-4705 - storage: fix mount point assignment of non-formatted swap partitions (rvykydal) Related: RHEL-16355 - storage: include only fstab devices in fsset swap devices property (rvykydal) Resolves: RHEL-16355 - Fix vconsole layout doesn't work for ostree (jkonecny) Resolves: RHEL-101057 - test: make dnf substitutions test check only relevant values (rvykydal) - test: add new substitution members in dnf tests (rvykydal) - AlmaLinux debrand - update help content for RHEL 9.2 Resolves: rhbz#2071652 - initial help content for RHEL 9.0 Resolves: rhbz#1995939 - AlmaLinux changes - Fix user input in driver disk menu is not displayed (adamkankovsky) Resolves: RHEL-4737 - Only show compatible translations in text mode (mkolman) Resolves: RHEL-144834 - Fix permissions of the ssh config created by Anaconda (ppolawsk) Resolves: RHEL-129787 - pyanaconda: rpm_ostree: fix _handle_boot_if_not_mount_point method issues (k.koukiou) Related: RHEL-74145 - ostree needs to have /boot be bindmounted into sysroot. (a.badger) Resolves: RHEL-74145 - bootloader: efi: utilize grub2-common script for handling config file generation (k.koukiou) Resolves: RHEL-36187 - Fixing authselect logical differences not resolved during backporting (adamkankovsky) Resolves: RHEL-85175 - Set Authselect agruments after run in Security module (adamkankovsky) Resolves: RHEL-85175 - Authselect code simplification (adamkankovsky) Resolves: RHEL-85175 - custom: Reallocate partitions when removing a partition (vtrefny) Resolves: RHEL-114169 - Fix: UnboundLocalError: local variable 'e' referenced before assignment (k.koukiou) Related to: RHEL-4705 - Emit authselect in KS when fingerprint is enabled (adamkankovsky) Resolves: RHEL-85175 - pyanaconda: payload: return exception details for payload failures (k.koukiou) - ui: tui: installation_source: show error message in the TUI screen (k.koukiou) Resolves: RHEL-4705 - storage: fix mount point assignment of non-formatted swap partitions (rvykydal) Related: RHEL-16355 - storage: include only fstab devices in fsset swap devices property (rvykydal) Resolves: RHEL-16355 - Fix vconsole layout doesn't work for ostree (jkonecny) Resolves: RHEL-101057 - test: make dnf substitutions test check only relevant values (rvykydal) - test: add new substitution members in dnf tests (rvykydal) - NVR bump to allow rebuilding against LLVM v21. (RHEL-144392) - Rebase to 12.98. (RHEL-105574) - Improve configure and meson files for consistent builds. - Annocheck: Delete the temporary debug info directory after the tests have finished. - Annocheck: Fix bugs in debug rpm location code. Add more glibc exceptions. (RHEL-95216) - Annocheck: Improve performance with multiple debug info files and multiple files to scan. (#2366180) - Annocheck: Update heuristic for detecting gcc files to cope with gcc 15. (#2365824) - Rebuild against LLVM v20. (RHEL-82001) - Rebase to 12.93. - Annocheck: Fix test for GO revision. (RHEL-56031) - Generate latest-annobin.tar.xz at prep phase (RHEL-82899) - Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files. (RHEL-79264) - Annocheck: Fix resource leak. (RHEL-79253) - Annocheck: Fix double free. Add special handling for COMBOOT modules. - Annocheck: Improve diagnostics when a separate debug info file cannot be found. - Annocheck: Look for -fstack-clash-protection in DW_AT_producer string. (RHEL-77489) - Annocheck: Fix locating string notes (again). Add exception for glibc benchmark tests. (RHEL-76809) - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries. (RHEL-76040) - Annocheck: Fix the --debug-dir option. - NVR bump to allow rebuilding against LLVM v21. (RHEL-144392) - Rebase to 12.98. (RHEL-105574) - Improve configure and meson files for consistent builds. - Annocheck: Delete the temporary debug info directory after the tests have finished. - Annocheck: Fix bugs in debug rpm location code. Add more glibc exceptions. (RHEL-95216) - Annocheck: Improve performance with multiple debug info files and multiple files to scan. (#2366180) - Annocheck: Update heuristic for detecting gcc files to cope with gcc 15. (#2365824) - Rebuild against LLVM v20. (RHEL-82001) - Rebase to 12.93. - Annocheck: Fix test for GO revision. (RHEL-56031) - Generate latest-annobin.tar.xz at prep phase (RHEL-82899) - Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files. (RHEL-79264) - Annocheck: Fix resource leak. (RHEL-79253) - Annocheck: Fix double free. Add special handling for COMBOOT modules. - Annocheck: Improve diagnostics when a separate debug info file cannot be found. - Annocheck: Look for -fstack-clash-protection in DW_AT_producer string. (RHEL-77489) - Annocheck: Fix locating string notes (again). Add exception for glibc benchmark tests. (RHEL-76809) - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries. (RHEL-76040) - Annocheck: Fix the --debug-dir option. - provide ad_integration_sssd_settings to set proper krb5_canonicalize Resolves: RHEL-135863 - test: use post quantum crypto for certs where available (#368) - fix: Fix templates/configure_ag.j2 for Ansible 2.19 Resolves: RHEL-106149 - refactor: support ansible 2.19 Resolves: RHEL-106149 - Add mssql_ha_ag_is_contained and mssql_ha_ag_reuse_system_db to allow creating AG as contained and reuse system database Resolves: RHEL-92712 - Add mssql_ha_ag_is_contained and mssql_ha_ag_reuse_system_db to allow creating AG as contained and reuse system database Resolves: RHEL-92712 - Add secondary_role_allow_connections and mssql_ha_read_only_routing_list Resolves: RHEL-92718 - Fail on RHEL or CentOS 10 because it's not supported Resolves: RHEL-67804 - Use new adutil functionality to enable AES encryption Resolves: RHEL-67807 - Add mssql_tools_versions, mssql_tls_self_sign to allow installing different versions of mssql-tools Resolves: RHEL-68374 - Deprecate mssql_accept_microsoft_odbc_driver_17_for_sql_server_eula Resolves: RHEL-69311 - Revert ExcludeArch: i686 due to TFT-2460 Resolves: RHEL-16342 - Add support for running SQL Server as a SELinux unconfined application with SELinux in enforcing mode on RHEL 9 Resolves: RHEL-16342 - ExcludeArch: i686 - Update to latest upstream version 1.7.4 - Resolves: RHEL-153381 : Fix the role failing on steps that copy logs to the controller EL9 - Fix spec file to require rhel-system-roles package - Resolves: RHEL-117252 : [RFE] Add ansible-collection-redhat-leapp to RHEL9 - Update to latest upstream version via commit hash - Resolves: RHEL-117252 : [RFE] Add ansible-collection-redhat-leapp to RHEL9 - Replace upstream value of leapp_system_roles_collection with downstream redhat.rhel_system_roles. - Resolves: RHEL-117252 : [RFE] Add ansible-collection-redhat-leapp to RHEL9 - Initialize the package - Resolves: RHEL-117252 : [RFE] Add ansible-collection-redhat-leapp to RHEL9 - Add redfish_* modules from community.general - Create collection artifact subpackage, disabled by default Taken from rhel-system-roles. - Initial version - Fix selinux AVC denial when telemetry is enabled (RHEL-148293) - Add telemetry for RHEL (RHEL-123003) - ansible-core 2.14.18 release (RHEL-69086) - Fix license file path - ansible-core 2.14.17 release (RHEL-38539) - Fix CVE-2026-11332 (prevent arbitrary git configuration via role requirements) (RHEL-194134) - Fix selinux AVC denial when telemetry is enabled (RHEL-148293) - Add telemetry for RHEL (RHEL-123003) - ansible-core 2.14.18 release (RHEL-69086) - Fix license file path - Update to version 1.16.0 https://github.com/freeipa/ansible-freeipa/releases/tag/v1.16.0 Resolves: RHEL-139144 - Add suppport for passkey management Resolves: RHEL-139257 - Add suppport for sysaccount management Resolves: RHEL-140601 - ipadnsrecord: Allow to set any IP address if create_reverse is false Resolves: RHEL-140607 - Update to version 1.15.1 Resolves: RHEL-104652 - ipaclient: client_dns has new statestore arg with IPA change e6445b8 Resolves: RHEL-106558 - Update to version 1.15.0 Resolves: RHEL-104652 - ipaclient: Fix AttributeError by defaulting dns_over_tls to False Resolves: RHEL-92844 - Provide compatibility for AAH naming Resolves: RHEL-94769 - Ensure ipaidrange required parameters are correct on recent versions of IPA Resolves: RHEL-79820 - Add support for DNS-over-TLS for ipaclient, ipareplica and ipaserver roles Resolves: RHEL-78636 - Update to version 1.14.6 - Fix CA certificates iteration in ipaclient role Resolves: RHEL-88206 - Update to version 1.14.5 Resolves: RHEL-67566 - ipa* deployment roles: Hotfix for dns_over_tls (Freeipa#7343) Resolves: RHEL-78230 - Update to version 1.14.4 Resolves: RHEL-67566 - Fix management of AD objects for ipagroup Resolves: RHEL-25009 - Update to version 1.14.3 Resolves: RHEL-67566 - Fix management of AD objects for ipagroup Resolves: RHEL-25009 - Update to version 1.14.2 https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.2 Resolves: RHEL-67566 - ipareplica: Pass ipareplica_ip_addresses to ipaclient Resolves: RHEL-40227 - ipagroup: Correctly handle externalmember in member actions Resolves: RHEL-25009 - ipasudorule: Evaluate all members related to hosts and users Resolves: RHEL-68439 - ipacert: Correctly handle removFromCRL revocation Resolves: RHEL-70016 - Collection: No more role module duplication Resolves: RHEL-71123 - Update to version 1.14.1 https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.1 Resolves: RHEL-67566 - Fix requirements for ansible-core Resolves: RHEL-69146 - Update to version 1.14.0 https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.0 Resolves: RHEL-67566 - Multi sudorule management with the ipasudorule module Resolves: RHEL-61431 - Update to version 1.16.0 https://github.com/freeipa/ansible-freeipa/releases/tag/v1.16.0 Resolves: RHEL-139144 - Add suppport for passkey management Resolves: RHEL-139257 - Add suppport for sysaccount management Resolves: RHEL-140601 - ipadnsrecord: Allow to set any IP address if create_reverse is false Resolves: RHEL-140607 - Update to version 1.15.1 Resolves: RHEL-104652 - ipaclient: client_dns has new statestore arg with IPA change e6445b8 Resolves: RHEL-106558 - Update to version 1.15.0 Resolves: RHEL-104652 - ipaclient: Fix AttributeError by defaulting dns_over_tls to False Resolves: RHEL-92844 - Provide compatibility for AAH naming Resolves: RHEL-94769 - Ensure ipaidrange required parameters are correct on recent versions of IPA Resolves: RHEL-79820 - Add support for DNS-over-TLS for ipaclient, ipareplica and ipaserver roles Resolves: RHEL-78636 - Update to version 1.14.6 - Fix CA certificates iteration in ipaclient role Resolves: RHEL-88206 - Update to version 1.14.5 Resolves: RHEL-67566 - ipa* deployment roles: Hotfix for dns_over_tls (Freeipa#7343) Resolves: RHEL-78230 - Update to version 1.14.4 Resolves: RHEL-67566 - Fix management of AD objects for ipagroup Resolves: RHEL-25009 - Update to version 1.14.3 Resolves: RHEL-67566 - Fix management of AD objects for ipagroup Resolves: RHEL-25009 - Update to version 1.14.2 https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.2 Resolves: RHEL-67566 - ipareplica: Pass ipareplica_ip_addresses to ipaclient Resolves: RHEL-40227 - ipagroup: Correctly handle externalmember in member actions Resolves: RHEL-25009 - ipasudorule: Evaluate all members related to hosts and users Resolves: RHEL-68439 - ipacert: Correctly handle removFromCRL revocation Resolves: RHEL-70016 - Collection: No more role module duplication Resolves: RHEL-71123 - Update to version 1.14.1 https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.1 Resolves: RHEL-67566 - Fix requirements for ansible-core Resolves: RHEL-69146 - Update to version 1.14.0 https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.0 Resolves: RHEL-67566 - Multi sudorule management with the ipasudorule module Resolves: RHEL-61431 - Update to version 1.16.0 https://github.com/freeipa/ansible-freeipa/releases/tag/v1.16.0 Resolves: RHEL-139144 - Add suppport for passkey management Resolves: RHEL-139257 - Add suppport for sysaccount management Resolves: RHEL-140601 - ipadnsrecord: Allow to set any IP address if create_reverse is false Resolves: RHEL-140607 - Update to version 1.15.1 Resolves: RHEL-104652 - ipaclient: client_dns has new statestore arg with IPA change e6445b8 Resolves: RHEL-106558 - Update to version 1.15.0 Resolves: RHEL-104652 - ipaclient: Fix AttributeError by defaulting dns_over_tls to False Resolves: RHEL-92844 - Provide compatibility for AAH naming Resolves: RHEL-94769 - Ensure ipaidrange required parameters are correct on recent versions of IPA Resolves: RHEL-79820 - Add support for DNS-over-TLS for ipaclient, ipareplica and ipaserver roles Resolves: RHEL-78636 - Update to version 1.14.6 - Fix CA certificates iteration in ipaclient role Resolves: RHEL-88206 - Update to version 1.14.5 Resolves: RHEL-67566 - ipa* deployment roles: Hotfix for dns_over_tls (Freeipa#7343) Resolves: RHEL-78230 - Update to version 1.14.4 Resolves: RHEL-67566 - Fix management of AD objects for ipagroup Resolves: RHEL-25009 - Update to version 1.14.3 Resolves: RHEL-67566 - Fix management of AD objects for ipagroup Resolves: RHEL-25009 - Update to version 1.14.2 https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.2 Resolves: RHEL-67566 - ipareplica: Pass ipareplica_ip_addresses to ipaclient Resolves: RHEL-40227 - ipagroup: Correctly handle externalmember in member actions Resolves: RHEL-25009 - ipasudorule: Evaluate all members related to hosts and users Resolves: RHEL-68439 - ipacert: Correctly handle removFromCRL revocation Resolves: RHEL-70016 - Collection: No more role module duplication Resolves: RHEL-71123 - Update to version 1.14.1 https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.1 Resolves: RHEL-67566 - Fix requirements for ansible-core Resolves: RHEL-69146 - Update to version 1.14.0 https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.0 Resolves: RHEL-67566 - Multi sudorule management with the ipasudorule module Resolves: RHEL-61431 - Latest upstream release (RHEL-17430) - Latest upstream release (BZ 2132847) - Switch to using bcond spec file mechanisms - Latest upstream release (BZ 2059464) - RHEL8.6+, RHEL9+, Fedora - add "ansible-core or ansible" dep - Fix selinux AVC denial when telemetry is enabled (RHEL-148293) - Add telemetry for RHEL (RHEL-123003) - ansible-core 2.14.18 release (RHEL-69086) - Fix license file path - ansible-core 2.14.17 release (RHEL-38539) - Fix CVE-2026-11332 (prevent arbitrary git configuration via role requirements) (RHEL-194134) - Fix selinux AVC denial when telemetry is enabled (RHEL-148293) - Add telemetry for RHEL (RHEL-123003) - ansible-core 2.14.18 release (RHEL-69086) - Fix license file path - Implement new Java bindings and fix ant-manual license - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519 - Fix test declarations - Add noarch to ExclusiveArch - Disable building on i686 - Fix the usage ot patch macro - Add OpenJDK bindings in a separate configuration file - Resolves: RHEL-62405 - Add OpenJDK bindings - Resolves: RHEL-62405 - Fix test failures due to JPEG CMYK support in OpenJDK - Resolves: RHEL-5354 - Implement new Java bindings and fix ant-manual license - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519 - Fix test declarations - Add noarch to ExclusiveArch - Disable building on i686 - Fix the usage ot patch macro - Add OpenJDK bindings in a separate configuration file - Resolves: RHEL-62405 - Add OpenJDK bindings - Resolves: RHEL-62405 - Fix test failures due to JPEG CMYK support in OpenJDK - Resolves: RHEL-5354 - Implement new Java bindings and fix ant-manual license - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519 - Fix test declarations - Add noarch to ExclusiveArch - Disable building on i686 - Fix the usage ot patch macro - Add OpenJDK bindings in a separate configuration file - Resolves: RHEL-62405 - Add OpenJDK bindings - Resolves: RHEL-62405 - Fix test failures due to JPEG CMYK support in OpenJDK - Resolves: RHEL-5354 - Implement new Java bindings and fix ant-manual license - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519 - Fix test declarations - Add noarch to ExclusiveArch - Disable building on i686 - Fix the usage ot patch macro - Add OpenJDK bindings in a separate configuration file - Resolves: RHEL-62405 - Add OpenJDK bindings - Resolves: RHEL-62405 - Fix test failures due to JPEG CMYK support in OpenJDK - Resolves: RHEL-5354 - Implement new Java bindings and fix ant-manual license - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519 - Fix test declarations - Add noarch to ExclusiveArch - Disable building on i686 - Fix the usage ot patch macro - Add OpenJDK bindings in a separate configuration file - Resolves: RHEL-62405 - Add OpenJDK bindings - Resolves: RHEL-62405 - Fix test failures due to JPEG CMYK support in OpenJDK - Resolves: RHEL-5354 - Implement new Java bindings and fix ant-manual license - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519 - Fix test declarations - Add noarch to ExclusiveArch - Disable building on i686 - Fix the usage ot patch macro - Add OpenJDK bindings in a separate configuration file - Resolves: RHEL-62405 - Add OpenJDK bindings - Resolves: RHEL-62405 - Fix test failures due to JPEG CMYK support in OpenJDK - Resolves: RHEL-5354 - Implement new Java bindings and fix ant-manual license - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519 - Fix test declarations - Add noarch to ExclusiveArch - Disable building on i686 - Fix the usage ot patch macro - Add OpenJDK bindings in a separate configuration file - Resolves: RHEL-62405 - Add OpenJDK bindings - Resolves: RHEL-62405 - Fix test failures due to JPEG CMYK support in OpenJDK - Resolves: RHEL-5354 - Implement new Java bindings and fix ant-manual license - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519 - Fix test declarations - Add noarch to ExclusiveArch - Disable building on i686 - Fix the usage ot patch macro - Add OpenJDK bindings in a separate configuration file - Resolves: RHEL-62405 - Add OpenJDK bindings - Resolves: RHEL-62405 - Fix test failures due to JPEG CMYK support in OpenJDK - Resolves: RHEL-5354 - Implement new Java bindings and fix ant-manual license - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519 - Fix test declarations - Add noarch to ExclusiveArch - Disable building on i686 - Fix the usage ot patch macro - Add OpenJDK bindings in a separate configuration file - Resolves: RHEL-62405 - Add OpenJDK bindings - Resolves: RHEL-62405 - Fix test failures due to JPEG CMYK support in OpenJDK - Resolves: RHEL-5354 - Implement new Java bindings and fix ant-manual license - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519 - Fix test declarations - Add noarch to ExclusiveArch - Disable building on i686 - Fix the usage ot patch macro - Add OpenJDK bindings in a separate configuration file - Resolves: RHEL-62405 - Add OpenJDK bindings - Resolves: RHEL-62405 - Fix test failures due to JPEG CMYK support in OpenJDK - Resolves: RHEL-5354 - Implement new Java bindings and fix ant-manual license - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519 - Fix test declarations - Add noarch to ExclusiveArch - Disable building on i686 - Fix the usage ot patch macro - Add OpenJDK bindings in a separate configuration file - Resolves: RHEL-62405 - Add OpenJDK bindings - Resolves: RHEL-62405 - Fix test failures due to JPEG CMYK support in OpenJDK - Resolves: RHEL-5354 - Implement new Java bindings and fix ant-manual license - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519 - Fix test declarations - Add noarch to ExclusiveArch - Disable building on i686 - Fix the usage ot patch macro - Add OpenJDK bindings in a separate configuration file - Resolves: RHEL-62405 - Add OpenJDK bindings - Resolves: RHEL-62405 - Fix test failures due to JPEG CMYK support in OpenJDK - Resolves: RHEL-5354 - Implement new Java bindings and fix ant-manual license - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519 - Fix test declarations - Add noarch to ExclusiveArch - Disable building on i686 - Fix the usage ot patch macro - Add OpenJDK bindings in a separate configuration file - Resolves: RHEL-62405 - Add OpenJDK bindings - Resolves: RHEL-62405 - Fix test failures due to JPEG CMYK support in OpenJDK - Resolves: RHEL-5354 - Implement new Java bindings and fix ant-manual license - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519 - Fix test declarations - Add noarch to ExclusiveArch - Disable building on i686 - Fix the usage ot patch macro - Add OpenJDK bindings in a separate configuration file - Resolves: RHEL-62405 - Add OpenJDK bindings - Resolves: RHEL-62405 - Fix test failures due to JPEG CMYK support in OpenJDK - Resolves: RHEL-5354 - Implement new Java bindings and fix ant-manual license - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519 - Fix test declarations - Add noarch to ExclusiveArch - Disable building on i686 - Fix the usage ot patch macro - Add OpenJDK bindings in a separate configuration file - Resolves: RHEL-62405 - Add OpenJDK bindings - Resolves: RHEL-62405 - Fix test failures due to JPEG CMYK support in OpenJDK - Resolves: RHEL-5354 - Implement new Java bindings and fix ant-manual license - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519 - Fix test declarations - Add noarch to ExclusiveArch - Disable building on i686 - Fix the usage ot patch macro - Add OpenJDK bindings in a separate configuration file - Resolves: RHEL-62405 - Add OpenJDK bindings - Resolves: RHEL-62405 - Fix test failures due to JPEG CMYK support in OpenJDK - Resolves: RHEL-5354 - Implement new Java bindings and fix ant-manual license - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519 - Fix test declarations - Add noarch to ExclusiveArch - Disable building on i686 - Fix the usage ot patch macro - Add OpenJDK bindings in a separate configuration file - Resolves: RHEL-62405 - Add OpenJDK bindings - Resolves: RHEL-62405 - Fix test failures due to JPEG CMYK support in OpenJDK - Resolves: RHEL-5354 - Implement new Java bindings and fix ant-manual license - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519 - Fix test declarations - Add noarch to ExclusiveArch - Disable building on i686 - Fix the usage ot patch macro - Add OpenJDK bindings in a separate configuration file - Resolves: RHEL-62405 - Add OpenJDK bindings - Resolves: RHEL-62405 - Fix test failures due to JPEG CMYK support in OpenJDK - Resolves: RHEL-5354 - Implement new Java bindings and fix ant-manual license - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519 - Fix test declarations - Add noarch to ExclusiveArch - Disable building on i686 - Fix the usage ot patch macro - Add OpenJDK bindings in a separate configuration file - Resolves: RHEL-62405 - Add OpenJDK bindings - Resolves: RHEL-62405 - Fix test failures due to JPEG CMYK support in OpenJDK - Resolves: RHEL-5354 - Implement new Java bindings and fix ant-manual license - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519 - Fix test declarations - Add noarch to ExclusiveArch - Disable building on i686 - Fix the usage ot patch macro - Add OpenJDK bindings in a separate configuration file - Resolves: RHEL-62405 - Add OpenJDK bindings - Resolves: RHEL-62405 - Fix test failures due to JPEG CMYK support in OpenJDK - Resolves: RHEL-5354 - Implement new Java bindings and fix ant-manual license - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519 - Fix test declarations - Add noarch to ExclusiveArch - Disable building on i686 - Fix the usage ot patch macro - Add OpenJDK bindings in a separate configuration file - Resolves: RHEL-62405 - Add OpenJDK bindings - Resolves: RHEL-62405 - Fix test failures due to JPEG CMYK support in OpenJDK - Resolves: RHEL-5354 - Implement new Java bindings and fix ant-manual license - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519 - Fix test declarations - Add noarch to ExclusiveArch - Disable building on i686 - Fix the usage ot patch macro - Add OpenJDK bindings in a separate configuration file - Resolves: RHEL-62405 - Add OpenJDK bindings - Resolves: RHEL-62405 - Fix test failures due to JPEG CMYK support in OpenJDK - Resolves: RHEL-5354 - Implement new Java bindings and fix ant-manual license - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519 - Fix test declarations - Add noarch to ExclusiveArch - Disable building on i686 - Fix the usage ot patch macro - Add OpenJDK bindings in a separate configuration file - Resolves: RHEL-62405 - Add OpenJDK bindings - Resolves: RHEL-62405 - Fix test failures due to JPEG CMYK support in OpenJDK - Resolves: RHEL-5354 - Implement new Java bindings and fix ant-manual license - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519 - Fix test declarations - Add noarch to ExclusiveArch - Disable building on i686 - Fix the usage ot patch macro - Add OpenJDK bindings in a separate configuration file - Resolves: RHEL-62405 - Add OpenJDK bindings - Resolves: RHEL-62405 - Fix test failures due to JPEG CMYK support in OpenJDK - Resolves: RHEL-5354 - Fix covscan report. Related: rhbz#2068287 - Rebuild to add anthy-unicode-devel to CRB. Related: rhbz#2068287 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix covscan report. Related: rhbz#1963073 - Delete unnecessary xemacs in tests/tests.yml. Related: rhbz#1956212 - Enable CI. Related: rhbz#1956212 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Bump 1.0.0.20201109 - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - set javac source / target version to 1.8 to fix issues with Java 11 - Rebuild - Rebuild - Fix patch usage - Rebuild with regenerated Requires on Java - Update javapackages test plan to f42 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Rebuilt for java-21-openjdk as system jdk - bump of release for for java-21-openjdk as system jdk - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild to regenerate auto-Requires on java - Convert License tag to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Add noarch to ExclusiveArch - Disable building on i686 - Rebuild with regenerated Requires on Java - Rebuild to regenerate auto-requires - Rebuild to regenerate auto-requires - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Rebuilt for java-17-openjdk as system jdk - Update javapackages test plan to f42 - Use %autosetup -C - Update to upstream version 1.9.0 - Resolves: rhbz#2305042 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update to upstream version 1.8.0 - Rebuilt for java-21-openjdk as system jdk - bump of release for for java-21-openjdk as system jdk - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to upstream version 1.6.0 - Add noarch to ExclusiveArch - Disable building on i686 - Rebuild with regenerated Requires on Java - Rebuild to regenerate auto-requires - Rebuild to regenerate auto-requires - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Rebuilt for java-17-openjdk as system jdk - Update javapackages test plan to f42 - Use %autosetup -C - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update to upstream version 1.17.1 - Update to upstream version 1.16.1 - Rebuilt for java-21-openjdk as system jdk - bump of release for for java-21-openjdk as system jdk - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild to regenerate auto-Requires on java - Rebuild to regenerate auto-requires - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Update to upstream version 2.11.0 - Rebuilt for java-17-openjdk as system jdk - Update javapackages test plan to f42 - Use %autosetup -C - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update to upstream version 2.16.1 - Rebuilt for java-21-openjdk as system jdk - bump of release for for java-21-openjdk as system jdk - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild to regenerate auto-Requires on java - Rebuild - Add noarch to ExclusiveArch - Disable building on i686 - Fix patch usage - Rebuild with regenerated Requires on Java - Rebuild to regenerate auto-requires - Add noarch to ExclusiveArch - Disable building on i686 - Fix patch usage - Rebuild with regenerated Requires on Java - Rebuild to regenerate auto-requires - Rebuild to regenerate auto-requires - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Workaround build issue with RPM 4.18 - Rebuilt for java-17-openjdk as system jdk - Add noarch to ExclusiveArch - Disable building on i686 - Rebuild with regenerated Requires on Java - Rebuild with regenerated Requires on Java - Add noarch to ExclusiveArch - Disable building on i686 - Rebuild with regenerated Requires on Java - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for PHP 8. Related rhbz#1949319 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - update to 5.1.20 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - update to 5.1.19 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - update to 5.1.18 - update to 5.1.21 for PHP 8.1 #2070040 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for PHP 8. Related rhbz#1949319 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - update to 5.1.20 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - update to 5.1.19 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - update to 5.1.23 for PHP 8.2 RHEL-14699 - update to 5.1.21 for PHP 8.1 #2070040 - update to 5.1.23 for PHP 8.2 RHEL-14699 - update to 5.1.21 for PHP 8.1 #2070040 - update to 5.1.23 for PHP 8.2 RHEL-14699 - update to 5.1.21 for PHP 8.1 #2070040 - Rebase to 0.16.1 Resolves: rhbz#2169103 - Drop unneeded downstream hacks to build with older Meson - Create symlinks manually to make it build (the symlinks were not created because of reverting the patch to upgrade to Meson 0.62) - Rebase to 0.15.5 Resolves: rhbz#2134785 - Rebase to 0.14.5 Resolves: rhbz#1998881 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Build appstream-compose library for appstream-generator >= 0.8.4 - 0.14.3 - 0.14.2 - 0.14.1 - New metadata version - Do not ship fedora-specific files - Resolves: #RHEL-4522 - Resolves: #RHEL-19012 - New metadata version - Resolves: rhbz#2062807 - New metadata version - Resolves: rhbz#2062807 - fix integer bounds checking in apr_encode_* Resolves: RHEL-17123 - fix integer bounds checking in apr_encode_* Resolves: RHEL-17123 - Related: #2168760 - mod_auth_openidc fails with IPv6 OIDCMemCacheServers - Resolves: #2168760 - mod_auth_openidc fails with IPv6 OIDCMemCacheServers - Resolves: #2196576 - CVE-2022-25147 apr-util: out-of-bounds writes in the apr_base64 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild to pick up OpenSSL 3.0 Beta ABI (#1984097) - Resolves: RHEL-236631 - apr-util: Apache Portable Runtime Utility: Information disclosure via timing attack in password validation (CVE-2025-49506) - Resolves: RHEL-236266 - apr-util: Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client (CVE-2026-34502) - Resolves: RHEL-236478 - apr-util: Apache Portable Runtime Utility: Heap buffer overflow in redis client (CVE-2026-34501) - Resolves: RHEL-235670 - apr-util: APR-util: Denial of Service via XML stack recursion attack (CVE-2026-32327) - Related: #2168760 - mod_auth_openidc fails with IPv6 OIDCMemCacheServers - Resolves: #2168760 - mod_auth_openidc fails with IPv6 OIDCMemCacheServers - Resolves: #2196576 - CVE-2022-25147 apr-util: out-of-bounds writes in the apr_base64 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild to pick up OpenSSL 3.0 Beta ABI (#1984097) - Resolves: RHEL-236631 - apr-util: Apache Portable Runtime Utility: Information disclosure via timing attack in password validation (CVE-2025-49506) - Resolves: RHEL-236266 - apr-util: Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client (CVE-2026-34502) - Resolves: RHEL-236478 - apr-util: Apache Portable Runtime Utility: Heap buffer overflow in redis client (CVE-2026-34501) - Resolves: RHEL-235670 - apr-util: APR-util: Denial of Service via XML stack recursion attack (CVE-2026-32327) - Related: #2168760 - mod_auth_openidc fails with IPv6 OIDCMemCacheServers - Resolves: #2168760 - mod_auth_openidc fails with IPv6 OIDCMemCacheServers - Resolves: #2196576 - CVE-2022-25147 apr-util: out-of-bounds writes in the apr_base64 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild to pick up OpenSSL 3.0 Beta ABI (#1984097) - Resolves: RHEL-236631 - apr-util: Apache Portable Runtime Utility: Information disclosure via timing attack in password validation (CVE-2025-49506) - Resolves: RHEL-236266 - apr-util: Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client (CVE-2026-34502) - Resolves: RHEL-236478 - apr-util: Apache Portable Runtime Utility: Heap buffer overflow in redis client (CVE-2026-34501) - Resolves: RHEL-235670 - apr-util: APR-util: Denial of Service via XML stack recursion attack (CVE-2026-32327) - Related: #2168760 - mod_auth_openidc fails with IPv6 OIDCMemCacheServers - Resolves: #2168760 - mod_auth_openidc fails with IPv6 OIDCMemCacheServers - Resolves: #2196576 - CVE-2022-25147 apr-util: out-of-bounds writes in the apr_base64 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild to pick up OpenSSL 3.0 Beta ABI (#1984097) - Resolves: RHEL-236631 - apr-util: Apache Portable Runtime Utility: Information disclosure via timing attack in password validation (CVE-2025-49506) - Resolves: RHEL-236266 - apr-util: Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client (CVE-2026-34502) - Resolves: RHEL-236478 - apr-util: Apache Portable Runtime Utility: Heap buffer overflow in redis client (CVE-2026-34501) - Resolves: RHEL-235670 - apr-util: APR-util: Denial of Service via XML stack recursion attack (CVE-2026-32327) - Related: #2168760 - mod_auth_openidc fails with IPv6 OIDCMemCacheServers - Resolves: #2168760 - mod_auth_openidc fails with IPv6 OIDCMemCacheServers - Resolves: #2196576 - CVE-2022-25147 apr-util: out-of-bounds writes in the apr_base64 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild to pick up OpenSSL 3.0 Beta ABI (#1984097) - Resolves: RHEL-236631 - apr-util: Apache Portable Runtime Utility: Information disclosure via timing attack in password validation (CVE-2025-49506) - Resolves: RHEL-236266 - apr-util: Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client (CVE-2026-34502) - Resolves: RHEL-236478 - apr-util: Apache Portable Runtime Utility: Heap buffer overflow in redis client (CVE-2026-34501) - Resolves: RHEL-235670 - apr-util: APR-util: Denial of Service via XML stack recursion attack (CVE-2026-32327) - Related: #2168760 - mod_auth_openidc fails with IPv6 OIDCMemCacheServers - Resolves: #2168760 - mod_auth_openidc fails with IPv6 OIDCMemCacheServers - Resolves: #2196576 - CVE-2022-25147 apr-util: out-of-bounds writes in the apr_base64 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild to pick up OpenSSL 3.0 Beta ABI (#1984097) - Resolves: RHEL-236631 - apr-util: Apache Portable Runtime Utility: Information disclosure via timing attack in password validation (CVE-2025-49506) - Resolves: RHEL-236266 - apr-util: Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client (CVE-2026-34502) - Resolves: RHEL-236478 - apr-util: Apache Portable Runtime Utility: Heap buffer overflow in redis client (CVE-2026-34501) - Resolves: RHEL-235670 - apr-util: APR-util: Denial of Service via XML stack recursion attack (CVE-2026-32327) - Related: #2168760 - mod_auth_openidc fails with IPv6 OIDCMemCacheServers - Resolves: #2168760 - mod_auth_openidc fails with IPv6 OIDCMemCacheServers - Resolves: #2196576 - CVE-2022-25147 apr-util: out-of-bounds writes in the apr_base64 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild to pick up OpenSSL 3.0 Beta ABI (#1984097) - Resolves: RHEL-236631 - apr-util: Apache Portable Runtime Utility: Information disclosure via timing attack in password validation (CVE-2025-49506) - Resolves: RHEL-236266 - apr-util: Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client (CVE-2026-34502) - Resolves: RHEL-236478 - apr-util: Apache Portable Runtime Utility: Heap buffer overflow in redis client (CVE-2026-34501) - Resolves: RHEL-235670 - apr-util: APR-util: Denial of Service via XML stack recursion attack (CVE-2026-32327) - Related: #2168760 - mod_auth_openidc fails with IPv6 OIDCMemCacheServers - Resolves: #2168760 - mod_auth_openidc fails with IPv6 OIDCMemCacheServers - Resolves: #2196576 - CVE-2022-25147 apr-util: out-of-bounds writes in the apr_base64 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild to pick up OpenSSL 3.0 Beta ABI (#1984097) - Resolves: RHEL-236631 - apr-util: Apache Portable Runtime Utility: Information disclosure via timing attack in password validation (CVE-2025-49506) - Resolves: RHEL-236266 - apr-util: Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client (CVE-2026-34502) - Resolves: RHEL-236478 - apr-util: Apache Portable Runtime Utility: Heap buffer overflow in redis client (CVE-2026-34501) - Resolves: RHEL-235670 - apr-util: APR-util: Denial of Service via XML stack recursion attack (CVE-2026-32327) - Related: #2168760 - mod_auth_openidc fails with IPv6 OIDCMemCacheServers - Resolves: #2168760 - mod_auth_openidc fails with IPv6 OIDCMemCacheServers - Resolves: #2196576 - CVE-2022-25147 apr-util: out-of-bounds writes in the apr_base64 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild to pick up OpenSSL 3.0 Beta ABI (#1984097) - Resolves: RHEL-236631 - apr-util: Apache Portable Runtime Utility: Information disclosure via timing attack in password validation (CVE-2025-49506) - Resolves: RHEL-236266 - apr-util: Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client (CVE-2026-34502) - Resolves: RHEL-236478 - apr-util: Apache Portable Runtime Utility: Heap buffer overflow in redis client (CVE-2026-34501) - Resolves: RHEL-235670 - apr-util: APR-util: Denial of Service via XML stack recursion attack (CVE-2026-32327) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - update source url - new upstream release 9.1.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - remove asciidoc-music sub-package (lilypond requirement) - remove ImageMagic requirement - Add patch to fix problem with not respecting newline configuration. - Remove unused patches. - Detection of latest Python releases (#1889725) - Update to latest upstream release 9.0.4 - Remove patches - Remove Vim support - Update to latest upstream release 9.0.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235481 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.112 and Runtime 10.0.12 - Resolves: RHEL-252319 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235481 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.113 and Runtime 10.0.13 - Resolves: RHEL-277808 - Update to .NET SDK 10.0.112 and Runtime 10.0.12 - Resolves: RHEL-252319 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235481 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Disable bootstrap - Resolves: RHEL-114572 - Update to RC 1 - Resolves: RHEL-114572 - Drop netstandard-targeting-pack-2.1 - Resolves: RHEL-111815 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Disable bootstrap - Resolves: RHEL-114572 - Update to RC 1 - Resolves: RHEL-114572 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Disable bootstrap - Resolves: RHEL-114572 - Update to .NET SDK 6.0.136 and Runtime 6.0.36 - Resolves: RHEL-65365 - Update to .NET SDK 6.0.135 and Runtime 6.0.35 - Resolves: RHEL-60799 - Update to .NET SDK 6.0.133 and Runtime 6.0.33 - Resolves: RHEL-52385 - Update to .NET SDK 6.0.132 and Runtime 6.0.32 - Resolves: RHEL-45320 - Update to .NET SDK 6.0.130 and Runtime 6.0.30 - Resolves: RHEL-35308 - Update to .NET SDK 6.0.129 and Runtime 6.0.29 - Resolves: RHEL-31198 - Update to .NET SDK 6.0.128 and Runtime 6.0.28 - Resolves: RHEL-27541 - Update to .NET SDK 6.0.127 and Runtime 6.0.27 - Resolves: RHEL-23785 - Update to .NET SDK 6.0.126 and Runtime 6.0.26 - Resolves: RHEL-19801 - Update to .NET SDK 6.0.125 and Runtime 6.0.25 - Resolves: RHEL-15349 - Update to .NET SDK 7.0.119 and Runtime 7.0.19 - Resolves: RHEL-35314 - Update to .NET SDK 7.0.118 and Runtime 7.0.18 - Resolves: RHEL-31203 - Update to .NET SDK 7.0.117 and Runtime 7.0.17 - Resolves: RHEL-27545 - Update to .NET SDK 7.0.116 and Runtime 7.0.16 - Resolves: RHEL-23790 - Update to .NET SDK 7.0.115 and Runtime 7.0.15 - Resolves: RHEL-19802 - Update to .NET SDK 7.0.114 and Runtime 7.0.14 - Resolves: RHEL-15351 - Update to .NET SDK 7.0.113 and Runtime 7.0.13 - Resolves: RHEL-14467 - Update to .NET SDK 7.0.112 and Runtime 7.0.12 - Resolves: RHEL-11698 - Update to .NET SDK 7.0.111 and Runtime 7.0.11 - Resolves: RHEL-2000 - Update to .NET SDK 7.0.110 and Runtime 7.0.10 - Resolves: RHBZ#2228571 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100592 - Update to .NET SDK 8.0.117 and Runtime 8.0.17 - Resolves: RHEL-94417 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100592 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235471 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.131 and Runtime 8.0.31 - Resolves: RHEL-252247 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235471 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.132 and Runtime 8.0.32 - Resolves: RHEL-277793 - Update to .NET SDK 8.0.131 and Runtime 8.0.31 - Resolves: RHEL-252247 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235471 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100599 - Update to .NET SDK 9.0.107 and Runtime 9.0.6 - Resolves: RHEL-94421 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100599 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235476 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252278 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235476 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.122 and Runtime 9.0.21 - Resolves: RHEL-277800 - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252278 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235476 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235481 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.112 and Runtime 10.0.12 - Resolves: RHEL-252319 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235481 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.113 and Runtime 10.0.13 - Resolves: RHEL-277808 - Update to .NET SDK 10.0.112 and Runtime 10.0.12 - Resolves: RHEL-252319 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235481 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Disable bootstrap - Resolves: RHEL-114572 - Update to RC 1 - Resolves: RHEL-114572 - Drop netstandard-targeting-pack-2.1 - Resolves: RHEL-111815 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Disable bootstrap - Resolves: RHEL-114572 - Update to RC 1 - Resolves: RHEL-114572 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Disable bootstrap - Resolves: RHEL-114572 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100592 - Update to .NET SDK 8.0.117 and Runtime 8.0.17 - Resolves: RHEL-94417 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100592 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235471 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.131 and Runtime 8.0.31 - Resolves: RHEL-252247 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235471 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.132 and Runtime 8.0.32 - Resolves: RHEL-277793 - Update to .NET SDK 8.0.131 and Runtime 8.0.31 - Resolves: RHEL-252247 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235471 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100599 - Update to .NET SDK 9.0.107 and Runtime 9.0.6 - Resolves: RHEL-94421 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100599 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235476 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252278 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235476 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.122 and Runtime 9.0.21 - Resolves: RHEL-277800 - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252278 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235476 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235481 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.112 and Runtime 10.0.12 - Resolves: RHEL-252319 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235481 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.113 and Runtime 10.0.13 - Resolves: RHEL-277808 - Update to .NET SDK 10.0.112 and Runtime 10.0.12 - Resolves: RHEL-252319 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235481 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Disable bootstrap - Resolves: RHEL-114572 - Update to RC 1 - Resolves: RHEL-114572 - Drop netstandard-targeting-pack-2.1 - Resolves: RHEL-111815 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Disable bootstrap - Resolves: RHEL-114572 - Update to RC 1 - Resolves: RHEL-114572 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Disable bootstrap - Resolves: RHEL-114572 - Update to .NET SDK 6.0.136 and Runtime 6.0.36 - Resolves: RHEL-65365 - Update to .NET SDK 6.0.135 and Runtime 6.0.35 - Resolves: RHEL-60799 - Update to .NET SDK 6.0.133 and Runtime 6.0.33 - Resolves: RHEL-52385 - Update to .NET SDK 6.0.132 and Runtime 6.0.32 - Resolves: RHEL-45320 - Update to .NET SDK 6.0.130 and Runtime 6.0.30 - Resolves: RHEL-35308 - Update to .NET SDK 6.0.129 and Runtime 6.0.29 - Resolves: RHEL-31198 - Update to .NET SDK 6.0.128 and Runtime 6.0.28 - Resolves: RHEL-27541 - Update to .NET SDK 6.0.127 and Runtime 6.0.27 - Resolves: RHEL-23785 - Update to .NET SDK 6.0.126 and Runtime 6.0.26 - Resolves: RHEL-19801 - Update to .NET SDK 6.0.125 and Runtime 6.0.25 - Resolves: RHEL-15349 - Update to .NET SDK 7.0.119 and Runtime 7.0.19 - Resolves: RHEL-35314 - Update to .NET SDK 7.0.118 and Runtime 7.0.18 - Resolves: RHEL-31203 - Update to .NET SDK 7.0.117 and Runtime 7.0.17 - Resolves: RHEL-27545 - Update to .NET SDK 7.0.116 and Runtime 7.0.16 - Resolves: RHEL-23790 - Update to .NET SDK 7.0.115 and Runtime 7.0.15 - Resolves: RHEL-19802 - Update to .NET SDK 7.0.114 and Runtime 7.0.14 - Resolves: RHEL-15351 - Update to .NET SDK 7.0.113 and Runtime 7.0.13 - Resolves: RHEL-14467 - Update to .NET SDK 7.0.112 and Runtime 7.0.12 - Resolves: RHEL-11698 - Update to .NET SDK 7.0.111 and Runtime 7.0.11 - Resolves: RHEL-2000 - Update to .NET SDK 7.0.110 and Runtime 7.0.10 - Resolves: RHBZ#2228571 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100592 - Update to .NET SDK 8.0.117 and Runtime 8.0.17 - Resolves: RHEL-94417 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100592 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235471 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.131 and Runtime 8.0.31 - Resolves: RHEL-252247 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235471 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.132 and Runtime 8.0.32 - Resolves: RHEL-277793 - Update to .NET SDK 8.0.131 and Runtime 8.0.31 - Resolves: RHEL-252247 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235471 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100599 - Update to .NET SDK 9.0.107 and Runtime 9.0.6 - Resolves: RHEL-94421 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100599 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235476 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252278 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235476 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.122 and Runtime 9.0.21 - Resolves: RHEL-277800 - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252278 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235476 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Do not install CONTRIBUTING.md in javadoc package - Add noarch to ExclusiveArch - Disable building on i686 - Rebuild with regenerated Requires on Java - Fix CVE-2026-24400: prevent XXE attacks in XmlStringPrettyFormatter - Resolves: RHEL-183484 - Do not install CONTRIBUTING.md in javadoc package - Add noarch to ExclusiveArch - Disable building on i686 - Rebuild with regenerated Requires on Java - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 2.38.0 - Update to 2.37.90 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 2.34.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 2.34.1 - Update to 2.34.0 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 2.38.0 - Update to 2.37.90 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 2.34.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 2.34.1 - Update to 2.34.0 - Update to 2.40.3 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 2.40.1 - Install a scriptlet to fix AT_SPI_BUS for Xwayland apps run as root (#1821345) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 2.40.0 - Update to 2.39.91 - Update to 2.39.90.1 - Update to 2.39.90 - Drop unused ldconfig_scriptlets macro call - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 2.40.3 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 2.40.1 - Install a scriptlet to fix AT_SPI_BUS for Xwayland apps run as root (#1821345) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 2.40.0 - Update to 2.39.91 - Update to 2.39.90.1 - Update to 2.39.90 - Drop unused ldconfig_scriptlets macro call - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add noarch to ExclusiveArch - Disable building on i686 - Rebuild with regenerated Requires on Java - Rebuild to regenerate auto-requires - Sync with Fedora - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for Aug 2024 java mass rebuild - Bump release for June 2024 mass rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild to regenerate auto-Requires on java - Convert License tag to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Rebuild to regenerate auto-requires - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Rebuilt for java-17-openjdk as system jdk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 2.36.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 2.35.1 - Update to 2.34.1 - Update to 2.34.0 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 2.36.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 2.35.1 - Update to 2.34.1 - Update to 2.34.0 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 2.28.2 Resolves: #1965879 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 2.28.1 - Switch to meson build system - Update source URLs - Tighten -devel subpackage deps - Tighten soname globs - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Remove unused scriptlets - Fix the messed scriptlets Resolves: #1929845 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Sync with rhel 8.3 + cleanup - Add new subpackages - z{14,15} - Unlike in rhel8, the base subpackage still needs to be build for z12. - Covscan related bugfixes - Spec and git cleanup (remove unused patches/sources) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Drop IBM z10 and z196 subpackages - s390 is now optimized for z12 Related: #1780286 - Fix compatibility with gcc 10 - Sync compiler/linker flags with RHEL - Fix POSTIN scriplet to not fail during upgrade Resolves: RHEL-138696 - ausearch-checkpoint race condition fix Resolves: RHEL-86897 - Update end of event detection mechanism Resolves: RHEL-78323 - ausearch: correct search for DAEMON related events - allow hex digits when interpreting tty data Resolves: RHEL-82279 - Fix TTY hostname in log messages Resolves: RHEL-78323 - auditctl: correct buffer in filter_supported_syscalls to avoid overflow Resolves: RHEL-59585 - Don't do "live" operations during rpm-ostree composes Resolves: RHEL-69033 - Disable ProtectKernelModules=true in service file Resolves: RHEL-59570 - af_unix plugin: restore original behavior in binary mode Resolves: RHEL-59585 - Support image mode Resolves: RHEL-69033 - Resolve ordering cycle when using remote logging Resolves: RHEL-11252 - Filter syscalls to ensure architecture-specific availability Resolves: RHEL-70455 - New upstream maintenance release, 3.1.4 - Prevent scriplets from failing - When upgrading, restart the daemon if it's running - If uninstalling, stop the daemon - auditctl: use pidfd_send_signal for signaling auditd Resolves: RHEL-45865 - Minor doc update Resolves: RHEL-5186 - augenrules: do not exit with failure if in immutable mode Resolves: RHEL-40110 - auditd.service: Disable ProtectControlGroups Resolves: RHEL-5197 - auditctl: correct output when displaying rules with exe/path/dir Resolves: RHEL-40243 - Fix parsing of multipath.conf resolves: RHEL-93649 - Rebase to Fedora Rawhide - Remove patches which are upstream - resolves: RHEL-56802 - Fix parsing of multipath.conf resolves: RHEL-93649 - Rebase to Fedora Rawhide - Remove patches which are upstream - resolves: RHEL-56802 - Support group merging in nsswitch.conf (RHEL-15779) - Fix Japanese translations (RHBZ #2153364) - Update translations (RHBZ #2189498) - Do not prompt for password twice when changing password of local user (RHBZ #2228098) - rebuilt - Fix test suite under Perl 5.26 (RHEL-47138) - Fix issues with Fortran detection and oneAPI HPC Toolkit (RHEL-40739) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Renamed main package as autoconf-latest - Adapt dependencies to c9s - Modify spec file to support autoconf-latest package - Migrate to SPDX licences (#2222088) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Cherry-pick: Fix typo in variable name (#2132715) - Backport: Fix testsuite failures with bash 5.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild - Renamed main package as autoconf-latest - Adapt dependencies to c9s - Modify spec file to support autoconf-latest package - Migrate to SPDX licences (#2222088) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Cherry-pick: Fix typo in variable name (#2132715) - Backport: Fix testsuite failures with bash 5.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild - Debrand for AlmaLinux - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2024-3044 add notify for script use - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2182392 CVE-2022-38745 - Debrand for AlmaLinux - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Resolves: RHEL-269334 CVE-2026-63274 heap buffer overflow in PDF import stream handling - Resolves: RHEL-269195 CVE-2026-63275 stack buffer overflow in CFF font hint handling - Resolves: RHEL-269182 CVE-2026-63276 stack buffer overflow in CFF to Type 1 font conversion - Resolves: RHEL-276436 CVE-2026-63277 Arbitrary code execution via remote Java database driver - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2024-3044 add notify for script use - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2182392 CVE-2022-38745 - Debrand for AlmaLinux - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Resolves: RHEL-269334 CVE-2026-63274 heap buffer overflow in PDF import stream handling - Resolves: RHEL-269195 CVE-2026-63275 stack buffer overflow in CFF font hint handling - Resolves: RHEL-269182 CVE-2026-63276 stack buffer overflow in CFF to Type 1 font conversion - Resolves: RHEL-276436 CVE-2026-63277 Arbitrary code execution via remote Java database driver - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2024-3044 add notify for script use - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2182392 CVE-2022-38745 - Debrand for AlmaLinux - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Resolves: RHEL-269334 CVE-2026-63274 heap buffer overflow in PDF import stream handling - Resolves: RHEL-269195 CVE-2026-63275 stack buffer overflow in CFF font hint handling - Resolves: RHEL-269182 CVE-2026-63276 stack buffer overflow in CFF to Type 1 font conversion - Resolves: RHEL-276436 CVE-2026-63277 Arbitrary code execution via remote Java database driver - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2024-3044 add notify for script use - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2182392 CVE-2022-38745 - Debrand for AlmaLinux - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Resolves: RHEL-269334 CVE-2026-63274 heap buffer overflow in PDF import stream handling - Resolves: RHEL-269195 CVE-2026-63275 stack buffer overflow in CFF font hint handling - Resolves: RHEL-269182 CVE-2026-63276 stack buffer overflow in CFF to Type 1 font conversion - Resolves: RHEL-276436 CVE-2026-63277 Arbitrary code execution via remote Java database driver - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2024-3044 add notify for script use - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2182392 CVE-2022-38745 - Debrand for AlmaLinux - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Resolves: RHEL-269334 CVE-2026-63274 heap buffer overflow in PDF import stream handling - Resolves: RHEL-269195 CVE-2026-63275 stack buffer overflow in CFF font hint handling - Resolves: RHEL-269182 CVE-2026-63276 stack buffer overflow in CFF to Type 1 font conversion - Resolves: RHEL-276436 CVE-2026-63277 Arbitrary code execution via remote Java database driver - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2024-3044 add notify for script use - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2182392 CVE-2022-38745 - Debrand for AlmaLinux - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Resolves: RHEL-269334 CVE-2026-63274 heap buffer overflow in PDF import stream handling - Resolves: RHEL-269195 CVE-2026-63275 stack buffer overflow in CFF font hint handling - Resolves: RHEL-269182 CVE-2026-63276 stack buffer overflow in CFF to Type 1 font conversion - Resolves: RHEL-276436 CVE-2026-63277 Arbitrary code execution via remote Java database driver - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2024-3044 add notify for script use - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2182392 CVE-2022-38745 - Debrand for AlmaLinux - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Resolves: RHEL-269334 CVE-2026-63274 heap buffer overflow in PDF import stream handling - Resolves: RHEL-269195 CVE-2026-63275 stack buffer overflow in CFF font hint handling - Resolves: RHEL-269182 CVE-2026-63276 stack buffer overflow in CFF to Type 1 font conversion - Resolves: RHEL-276436 CVE-2026-63277 Arbitrary code execution via remote Java database driver - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2024-3044 add notify for script use - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2182392 CVE-2022-38745 - Debrand for AlmaLinux - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Resolves: RHEL-269334 CVE-2026-63274 heap buffer overflow in PDF import stream handling - Resolves: RHEL-269195 CVE-2026-63275 stack buffer overflow in CFF font hint handling - Resolves: RHEL-269182 CVE-2026-63276 stack buffer overflow in CFF to Type 1 font conversion - Resolves: RHEL-276436 CVE-2026-63277 Arbitrary code execution via remote Java database driver - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2024-3044 add notify for script use - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2182392 CVE-2022-38745 - Debrand for AlmaLinux - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Resolves: RHEL-269334 CVE-2026-63274 heap buffer overflow in PDF import stream handling - Resolves: RHEL-269195 CVE-2026-63275 stack buffer overflow in CFF font hint handling - Resolves: RHEL-269182 CVE-2026-63276 stack buffer overflow in CFF to Type 1 font conversion - Resolves: RHEL-276436 CVE-2026-63277 Arbitrary code execution via remote Java database driver - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2024-3044 add notify for script use - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2182392 CVE-2022-38745 - Debrand for AlmaLinux - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Resolves: RHEL-269334 CVE-2026-63274 heap buffer overflow in PDF import stream handling - Resolves: RHEL-269195 CVE-2026-63275 stack buffer overflow in CFF font hint handling - Resolves: RHEL-269182 CVE-2026-63276 stack buffer overflow in CFF to Type 1 font conversion - Resolves: RHEL-276436 CVE-2026-63277 Arbitrary code execution via remote Java database driver - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2024-3044 add notify for script use - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2182392 CVE-2022-38745 - Debrand for AlmaLinux - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Resolves: RHEL-269334 CVE-2026-63274 heap buffer overflow in PDF import stream handling - Resolves: RHEL-269195 CVE-2026-63275 stack buffer overflow in CFF font hint handling - Resolves: RHEL-269182 CVE-2026-63276 stack buffer overflow in CFF to Type 1 font conversion - Resolves: RHEL-276436 CVE-2026-63277 Arbitrary code execution via remote Java database driver - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2024-3044 add notify for script use - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2182392 CVE-2022-38745 - Debrand for AlmaLinux - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Resolves: RHEL-269334 CVE-2026-63274 heap buffer overflow in PDF import stream handling - Resolves: RHEL-269195 CVE-2026-63275 stack buffer overflow in CFF font hint handling - Resolves: RHEL-269182 CVE-2026-63276 stack buffer overflow in CFF to Type 1 font conversion - Resolves: RHEL-276436 CVE-2026-63277 Arbitrary code execution via remote Java database driver - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2024-3044 add notify for script use - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2182392 CVE-2022-38745 - Debrand for AlmaLinux - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Resolves: RHEL-269334 CVE-2026-63274 heap buffer overflow in PDF import stream handling - Resolves: RHEL-269195 CVE-2026-63275 stack buffer overflow in CFF font hint handling - Resolves: RHEL-269182 CVE-2026-63276 stack buffer overflow in CFF to Type 1 font conversion - Resolves: RHEL-276436 CVE-2026-63277 Arbitrary code execution via remote Java database driver - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2024-3044 add notify for script use - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2182392 CVE-2022-38745 - Debrand for AlmaLinux - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Resolves: RHEL-269334 CVE-2026-63274 heap buffer overflow in PDF import stream handling - Resolves: RHEL-269195 CVE-2026-63275 stack buffer overflow in CFF font hint handling - Resolves: RHEL-269182 CVE-2026-63276 stack buffer overflow in CFF to Type 1 font conversion - Resolves: RHEL-276436 CVE-2026-63277 Arbitrary code execution via remote Java database driver - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2024-3044 add notify for script use - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2182392 CVE-2022-38745 - Debrand for AlmaLinux - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Resolves: RHEL-269334 CVE-2026-63274 heap buffer overflow in PDF import stream handling - Resolves: RHEL-269195 CVE-2026-63275 stack buffer overflow in CFF font hint handling - Resolves: RHEL-269182 CVE-2026-63276 stack buffer overflow in CFF to Type 1 font conversion - Resolves: RHEL-276436 CVE-2026-63277 Arbitrary code execution via remote Java database driver - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2024-3044 add notify for script use - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2182392 CVE-2022-38745 - Debrand for AlmaLinux - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Resolves: RHEL-269334 CVE-2026-63274 heap buffer overflow in PDF import stream handling - Resolves: RHEL-269195 CVE-2026-63275 stack buffer overflow in CFF font hint handling - Resolves: RHEL-269182 CVE-2026-63276 stack buffer overflow in CFF to Type 1 font conversion - Resolves: RHEL-276436 CVE-2026-63277 Arbitrary code execution via remote Java database driver - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2024-3044 add notify for script use - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2182392 CVE-2022-38745 - Debrand for AlmaLinux - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Resolves: RHEL-269334 CVE-2026-63274 heap buffer overflow in PDF import stream handling - Resolves: RHEL-269195 CVE-2026-63275 stack buffer overflow in CFF font hint handling - Resolves: RHEL-269182 CVE-2026-63276 stack buffer overflow in CFF to Type 1 font conversion - Resolves: RHEL-276436 CVE-2026-63277 Arbitrary code execution via remote Java database driver - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2024-3044 add notify for script use - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2182392 CVE-2022-38745 - Debrand for AlmaLinux - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Resolves: RHEL-269334 CVE-2026-63274 heap buffer overflow in PDF import stream handling - Resolves: RHEL-269195 CVE-2026-63275 stack buffer overflow in CFF font hint handling - Resolves: RHEL-269182 CVE-2026-63276 stack buffer overflow in CFF to Type 1 font conversion - Resolves: RHEL-276436 CVE-2026-63277 Arbitrary code execution via remote Java database driver - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2024-3044 add notify for script use - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2182392 CVE-2022-38745 - Debrand for AlmaLinux - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Resolves: RHEL-269334 CVE-2026-63274 heap buffer overflow in PDF import stream handling - Resolves: RHEL-269195 CVE-2026-63275 stack buffer overflow in CFF font hint handling - Resolves: RHEL-269182 CVE-2026-63276 stack buffer overflow in CFF to Type 1 font conversion - Resolves: RHEL-276436 CVE-2026-63277 Arbitrary code execution via remote Java database driver - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2024-3044 add notify for script use - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2182392 CVE-2022-38745 - Debrand for AlmaLinux - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Resolves: RHEL-269334 CVE-2026-63274 heap buffer overflow in PDF import stream handling - Resolves: RHEL-269195 CVE-2026-63275 stack buffer overflow in CFF font hint handling - Resolves: RHEL-269182 CVE-2026-63276 stack buffer overflow in CFF to Type 1 font conversion - Resolves: RHEL-276436 CVE-2026-63277 Arbitrary code execution via remote Java database driver - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2024-3044 add notify for script use - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2182392 CVE-2022-38745 - Debrand for AlmaLinux - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Resolves: RHEL-269334 CVE-2026-63274 heap buffer overflow in PDF import stream handling - Resolves: RHEL-269195 CVE-2026-63275 stack buffer overflow in CFF font hint handling - Resolves: RHEL-269182 CVE-2026-63276 stack buffer overflow in CFF to Type 1 font conversion - Resolves: RHEL-276436 CVE-2026-63277 Arbitrary code execution via remote Java database driver - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2024-3044 add notify for script use - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2182392 CVE-2022-38745 - Debrand for AlmaLinux - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Resolves: RHEL-269334 CVE-2026-63274 heap buffer overflow in PDF import stream handling - Resolves: RHEL-269195 CVE-2026-63275 stack buffer overflow in CFF font hint handling - Resolves: RHEL-269182 CVE-2026-63276 stack buffer overflow in CFF to Type 1 font conversion - Resolves: RHEL-276436 CVE-2026-63277 Arbitrary code execution via remote Java database driver - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2024-3044 add notify for script use - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2182392 CVE-2022-38745 - Debrand for AlmaLinux - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Resolves: RHEL-269334 CVE-2026-63274 heap buffer overflow in PDF import stream handling - Resolves: RHEL-269195 CVE-2026-63275 stack buffer overflow in CFF font hint handling - Resolves: RHEL-269182 CVE-2026-63276 stack buffer overflow in CFF to Type 1 font conversion - Resolves: RHEL-276436 CVE-2026-63277 Arbitrary code execution via remote Java database driver - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2024-3044 add notify for script use - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2182392 CVE-2022-38745 - Debrand for AlmaLinux - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Resolves: RHEL-269334 CVE-2026-63274 heap buffer overflow in PDF import stream handling - Resolves: RHEL-269195 CVE-2026-63275 stack buffer overflow in CFF font hint handling - Resolves: RHEL-269182 CVE-2026-63276 stack buffer overflow in CFF to Type 1 font conversion - Resolves: RHEL-276436 CVE-2026-63277 Arbitrary code execution via remote Java database driver - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2024-3044 add notify for script use - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2182392 CVE-2022-38745 - Debrand for AlmaLinux - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Resolves: RHEL-269334 CVE-2026-63274 heap buffer overflow in PDF import stream handling - Resolves: RHEL-269195 CVE-2026-63275 stack buffer overflow in CFF font hint handling - Resolves: RHEL-269182 CVE-2026-63276 stack buffer overflow in CFF to Type 1 font conversion - Resolves: RHEL-276436 CVE-2026-63277 Arbitrary code execution via remote Java database driver - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2024-3044 add notify for script use - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2182392 CVE-2022-38745 - Debrand for AlmaLinux - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Resolves: RHEL-269334 CVE-2026-63274 heap buffer overflow in PDF import stream handling - Resolves: RHEL-269195 CVE-2026-63275 stack buffer overflow in CFF font hint handling - Resolves: RHEL-269182 CVE-2026-63276 stack buffer overflow in CFF to Type 1 font conversion - Resolves: RHEL-276436 CVE-2026-63277 Arbitrary code execution via remote Java database driver - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2024-3044 add notify for script use - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2182392 CVE-2022-38745 - Debrand for AlmaLinux - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Resolves: RHEL-269334 CVE-2026-63274 heap buffer overflow in PDF import stream handling - Resolves: RHEL-269195 CVE-2026-63275 stack buffer overflow in CFF font hint handling - Resolves: RHEL-269182 CVE-2026-63276 stack buffer overflow in CFF to Type 1 font conversion - Resolves: RHEL-276436 CVE-2026-63277 Arbitrary code execution via remote Java database driver - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2024-3044 add notify for script use - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2182392 CVE-2022-38745 - Debrand for AlmaLinux - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Resolves: RHEL-269334 CVE-2026-63274 heap buffer overflow in PDF import stream handling - Resolves: RHEL-269195 CVE-2026-63275 stack buffer overflow in CFF font hint handling - Resolves: RHEL-269182 CVE-2026-63276 stack buffer overflow in CFF to Type 1 font conversion - Resolves: RHEL-276436 CVE-2026-63277 Arbitrary code execution via remote Java database driver - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2024-3044 add notify for script use - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2182392 CVE-2022-38745 - Debrand for AlmaLinux - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Resolves: RHEL-269334 CVE-2026-63274 heap buffer overflow in PDF import stream handling - Resolves: RHEL-269195 CVE-2026-63275 stack buffer overflow in CFF font hint handling - Resolves: RHEL-269182 CVE-2026-63276 stack buffer overflow in CFF to Type 1 font conversion - Resolves: RHEL-276436 CVE-2026-63277 Arbitrary code execution via remote Java database driver - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2024-3044 add notify for script use - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2182392 CVE-2022-38745 - Debrand for AlmaLinux - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Resolves: RHEL-269334 CVE-2026-63274 heap buffer overflow in PDF import stream handling - Resolves: RHEL-269195 CVE-2026-63275 stack buffer overflow in CFF font hint handling - Resolves: RHEL-269182 CVE-2026-63276 stack buffer overflow in CFF to Type 1 font conversion - Resolves: RHEL-276436 CVE-2026-63277 Arbitrary code execution via remote Java database driver - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2024-3044 add notify for script use - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2182392 CVE-2022-38745 - Debrand for AlmaLinux - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Resolves: RHEL-269334 CVE-2026-63274 heap buffer overflow in PDF import stream handling - Resolves: RHEL-269195 CVE-2026-63275 stack buffer overflow in CFF font hint handling - Resolves: RHEL-269182 CVE-2026-63276 stack buffer overflow in CFF to Type 1 font conversion - Resolves: RHEL-276436 CVE-2026-63277 Arbitrary code execution via remote Java database driver - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2024-3044 add notify for script use - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2182392 CVE-2022-38745 - Debrand for AlmaLinux - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Resolves: RHEL-269334 CVE-2026-63274 heap buffer overflow in PDF import stream handling - Resolves: RHEL-269195 CVE-2026-63275 stack buffer overflow in CFF font hint handling - Resolves: RHEL-269182 CVE-2026-63276 stack buffer overflow in CFF to Type 1 font conversion - Resolves: RHEL-276436 CVE-2026-63277 Arbitrary code execution via remote Java database driver - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2024-3044 add notify for script use - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2182392 CVE-2022-38745 - Debrand for AlmaLinux - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Resolves: RHEL-269334 CVE-2026-63274 heap buffer overflow in PDF import stream handling - Resolves: RHEL-269195 CVE-2026-63275 stack buffer overflow in CFF font hint handling - Resolves: RHEL-269182 CVE-2026-63276 stack buffer overflow in CFF to Type 1 font conversion - Resolves: RHEL-276436 CVE-2026-63277 Arbitrary code execution via remote Java database driver - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2024-3044 add notify for script use - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2182392 CVE-2022-38745 - Debrand for AlmaLinux - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Resolves: RHEL-269334 CVE-2026-63274 heap buffer overflow in PDF import stream handling - Resolves: RHEL-269195 CVE-2026-63275 stack buffer overflow in CFF font hint handling - Resolves: RHEL-269182 CVE-2026-63276 stack buffer overflow in CFF to Type 1 font conversion - Resolves: RHEL-276436 CVE-2026-63277 Arbitrary code execution via remote Java database driver - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2024-3044 add notify for script use - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2182392 CVE-2022-38745 - Debrand for AlmaLinux - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Resolves: RHEL-269334 CVE-2026-63274 heap buffer overflow in PDF import stream handling - Resolves: RHEL-269195 CVE-2026-63275 stack buffer overflow in CFF font hint handling - Resolves: RHEL-269182 CVE-2026-63276 stack buffer overflow in CFF to Type 1 font conversion - Resolves: RHEL-276436 CVE-2026-63277 Arbitrary code execution via remote Java database driver - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2024-3044 add notify for script use - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2182392 CVE-2022-38745 - Debrand for AlmaLinux - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Resolves: RHEL-269334 CVE-2026-63274 heap buffer overflow in PDF import stream handling - Resolves: RHEL-269195 CVE-2026-63275 stack buffer overflow in CFF font hint handling - Resolves: RHEL-269182 CVE-2026-63276 stack buffer overflow in CFF to Type 1 font conversion - Resolves: RHEL-276436 CVE-2026-63277 Arbitrary code execution via remote Java database driver - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2024-3044 add notify for script use - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2182392 CVE-2022-38745 - Debrand for AlmaLinux - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Resolves: RHEL-269334 CVE-2026-63274 heap buffer overflow in PDF import stream handling - Resolves: RHEL-269195 CVE-2026-63275 stack buffer overflow in CFF font hint handling - Resolves: RHEL-269182 CVE-2026-63276 stack buffer overflow in CFF to Type 1 font conversion - Resolves: RHEL-276436 CVE-2026-63277 Arbitrary code execution via remote Java database driver - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Backport python: add 3.10 - 3.15 to the version search list - Fixes: RHBZ#2210304 - Backport: tests: use testsuite/ directory in DejaGnu tests - Fixes: RHBZ#2215991 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix CVE-2024-52615 (RHEL-94846) - Fix CVE-2024-52616 (RHEL-67722) - fix file attributes on /run/avahi-daemon (RHEL-5633) - avahi-client: fix resource leak (RHEL-27722) - fix resource leak in avahi_time_event_queue_new (RHEL-27717) - Fix CVE-2024-52615 (RHEL-94846) - Fix CVE-2024-52616 (RHEL-67722) - fix file attributes on /run/avahi-daemon (RHEL-5633) - avahi-client: fix resource leak (RHEL-27722) - fix resource leak in avahi_time_event_queue_new (RHEL-27717) - Fix CVE-2024-52615 (RHEL-94846) - Fix CVE-2024-52616 (RHEL-67722) - fix file attributes on /run/avahi-daemon (RHEL-5633) - avahi-client: fix resource leak (RHEL-27722) - fix resource leak in avahi_time_event_queue_new (RHEL-27717) - Update to v2.33.0 Resolves RHEL-157870 - Add less to install requirements for paging output. Resolves RHEL-14523. - Remove colorama patches - Bring in the latest updates from Fedora - Rebase to 0.7.0 [RHEL-99446] - Resolves: RHEL-99446 ([Azure][rhel-9] azure-vm-utils rebase) - Initial commit on c19s - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 2.9.1. - Fixes CVE-2021-20095 Resolves: rhbz#1955615 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Drop build dependency on python-freezegun - Resolves: rhbz#1947517 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Disable Python 2 build entirely - Disable Python 2 build on RHEL 9+ - update to 2.9.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for Python 3.9 - rebase to the latest upstream (RHEL-88142) - rebase to the latest upstream (RHEL-88142) - fix bacula compatibility with Image Mode (RHEL-6862) - fix bacula compatibility with Image Mode (RHEL-6862) - fix bacula compatibility with Image Mode (RHEL-6862) - fix bacula compatibility with Image Mode (RHEL-6862) - fix bacula compatibility with Image Mode (RHEL-6862) - fix bacula compatibility with Image Mode (RHEL-6862) - fix bacula compatibility with Image Mode (RHEL-6862) - fix bacula compatibility with Image Mode (RHEL-6862) - Disable column reordering of FolderDisplay (RHEL-84271) - Rebuild with LLVM 21 (RHEL-108343) - Rebase to version 0.35.0 (RHEL-79001) - Fix bpf-ksnoop (RHEL-96166) - Fix bpf-javagc (RHEL-78173) - Fix bpf-klockstat on aarch64 and ppc64le debug (RHEL-78619) - Remove macro in comment. - Rebase to version 0.34.0 (RHEL-78920) - Rebuild with LLVM 20 (RHEL-81773) - Fix biosnoop pattern option (RHEL-90848) - Fix bpf-klockstat on aarch64 and ppc64le (RHEL-78619) - Remove unsupported bpf-bcachefs* and bpf-zfs* tools (RHEL-78166) - Remove unsupported slaratetop tool (RHEL-78162) - Rebuild with libbpf 1.5.0 - Rebase to the latest version (RHEL-63883) - Fix gating tests of libbpf gating. - Explicitely disable blazesym support (RHEL-49640) - Fic bio* tools (RHEL-61615) - Rebuild with LLVM 18 (RHEL-28684) - Rebuild with LLVM 21 (RHEL-108343) - Rebase to version 0.35.0 (RHEL-79001) - Fix bpf-ksnoop (RHEL-96166) - Fix bpf-javagc (RHEL-78173) - Fix bpf-klockstat on aarch64 and ppc64le debug (RHEL-78619) - Remove macro in comment. - Rebase to version 0.34.0 (RHEL-78920) - Rebuild with LLVM 20 (RHEL-81773) - Fix biosnoop pattern option (RHEL-90848) - Fix bpf-klockstat on aarch64 and ppc64le (RHEL-78619) - Remove unsupported bpf-bcachefs* and bpf-zfs* tools (RHEL-78166) - Remove unsupported slaratetop tool (RHEL-78162) - Rebuild with libbpf 1.5.0 - Rebase to the latest version (RHEL-63883) - Fix gating tests of libbpf gating. - Explicitely disable blazesym support (RHEL-49640) - Fic bio* tools (RHEL-61615) - Rebuild with LLVM 18 (RHEL-28684) - Add noarch to ExclusiveArch - Disable building on i686 - Fix patch usage - Rebuild with regenerated Requires on Java - Fix arbitrary bytecode produced via out-of-bounds writing - Resolves: CVE-2022-42920 - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629) - Backport fix for nameserver line processing. (RHEL-79714) - Add sysusers named user creation (RHEL-132053) - Create /var/named directories for bind-chroot (RHEL-132053) - Copy named.* files from /var/named into /usr/share/named - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Replace downstream fixes with upstream changes - Address various spoofing attacks (CVE-2025-40778) - Fix failures in idna system test (RHEL-66172) - logrotate: skip if empty and remove old variants (RHEL-113942) - Decode IDN names on input in all situations in utilities (RHEL-66172) - Prevent assertion failure in dns64 mode with break-dnssec yes (CVE-2026-19666) - Prevent crash on wildcard responses containing both NSEC and NSEC3 proofs (CVE-2026-80274) - Reject oversized negative cached records early (CVE-2026-19667) - Add new root key 38696 into package files (RHEL-255763) - Update built-in anchors in delv and named - Fix NSEC3 signer validation (CVE-2026-10723) - Fix CVE-2026-13321: reject out-of-zone NSEC next owner names - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) - Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3 (CVE-2026-13204) - Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721) - Prevent cache memory exhaustion under sustained attack (CVE-2026-11622, RHEL-213397) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Fix CVE-2026-19662: NOQNAME proof use-after-free could crash recursive resolver. - Backport 'Do not use header_prev in expire_lru_headers' from upstream. (RHEL-276913) - Prevent assertion failure in dns64 mode with break-dnssec yes (CVE-2026-19666) - Prevent crash on wildcard responses containing both NSEC and NSEC3 proofs (CVE-2026-80274) - Reject oversized negative cached records early (CVE-2026-19667) - Add new root key 38696 into package files (RHEL-255763) - Update built-in anchors in delv and named - Fix NSEC3 signer validation (CVE-2026-10723) - Fix CVE-2026-13321: reject out-of-zone NSEC next owner names - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) - Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3 (CVE-2026-13204) - Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721) - Prevent cache memory exhaustion under sustained attack (CVE-2026-11622, RHEL-213397) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629) - Backport fix for nameserver line processing. (RHEL-79714) - Add sysusers named user creation (RHEL-132053) - Create /var/named directories for bind-chroot (RHEL-132053) - Copy named.* files from /var/named into /usr/share/named - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Replace downstream fixes with upstream changes - Address various spoofing attacks (CVE-2025-40778) - Fix failures in idna system test (RHEL-66172) - logrotate: skip if empty and remove old variants (RHEL-113942) - Fix NSEC3 signer validation (CVE-2026-10723) - Fix CVE-2026-13321: reject out-of-zone NSEC next owner names - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) - Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3 (CVE-2026-13204) - Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721) - Prevent cache memory exhaustion under sustained attack (CVE-2026-11622, RHEL-213397) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629) - Backport fix for nameserver line processing. (RHEL-79714) - Add new root key 38696 into package files (RHEL-255763) - Update built-in anchors in delv and named - Fix NSEC3 signer validation (CVE-2026-10723) - Fix CVE-2026-13321: reject out-of-zone NSEC next owner names - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) - Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3 (CVE-2026-13204) - Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721) - Prevent cache memory exhaustion under sustained attack (CVE-2026-11622, RHEL-213397) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629) - Backport fix for nameserver line processing. (RHEL-79714) - Add sysusers named user creation (RHEL-132053) - Create /var/named directories for bind-chroot (RHEL-132053) - Copy named.* files from /var/named into /usr/share/named - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Replace downstream fixes with upstream changes - Address various spoofing attacks (CVE-2025-40778) - Fix failures in idna system test (RHEL-66172) - logrotate: skip if empty and remove old variants (RHEL-113942) - Decode IDN names on input in all situations in utilities (RHEL-66172) - Prevent assertion failure in dns64 mode with break-dnssec yes (CVE-2026-19666) - Prevent crash on wildcard responses containing both NSEC and NSEC3 proofs (CVE-2026-80274) - Reject oversized negative cached records early (CVE-2026-19667) - Add new root key 38696 into package files (RHEL-255763) - Update built-in anchors in delv and named - Fix NSEC3 signer validation (CVE-2026-10723) - Fix CVE-2026-13321: reject out-of-zone NSEC next owner names - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) - Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3 (CVE-2026-13204) - Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721) - Prevent cache memory exhaustion under sustained attack (CVE-2026-11622, RHEL-213397) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Fix CVE-2026-19662: NOQNAME proof use-after-free could crash recursive resolver. - Backport 'Do not use header_prev in expire_lru_headers' from upstream. (RHEL-276913) - Prevent assertion failure in dns64 mode with break-dnssec yes (CVE-2026-19666) - Prevent crash on wildcard responses containing both NSEC and NSEC3 proofs (CVE-2026-80274) - Reject oversized negative cached records early (CVE-2026-19667) - Add new root key 38696 into package files (RHEL-255763) - Update built-in anchors in delv and named - Fix NSEC3 signer validation (CVE-2026-10723) - Fix CVE-2026-13321: reject out-of-zone NSEC next owner names - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) - Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3 (CVE-2026-13204) - Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721) - Prevent cache memory exhaustion under sustained attack (CVE-2026-11622, RHEL-213397) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629) - Backport fix for nameserver line processing. (RHEL-79714) - Add sysusers named user creation (RHEL-132053) - Create /var/named directories for bind-chroot (RHEL-132053) - Copy named.* files from /var/named into /usr/share/named - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Replace downstream fixes with upstream changes - Address various spoofing attacks (CVE-2025-40778) - Fix failures in idna system test (RHEL-66172) - logrotate: skip if empty and remove old variants (RHEL-113942) - Fix NSEC3 signer validation (CVE-2026-10723) - Fix CVE-2026-13321: reject out-of-zone NSEC next owner names - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) - Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3 (CVE-2026-13204) - Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721) - Prevent cache memory exhaustion under sustained attack (CVE-2026-11622, RHEL-213397) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629) - Backport fix for nameserver line processing. (RHEL-79714) - Add new root key 38696 into package files (RHEL-255763) - Update built-in anchors in delv and named - Fix NSEC3 signer validation (CVE-2026-10723) - Fix CVE-2026-13321: reject out-of-zone NSEC next owner names - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) - Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3 (CVE-2026-13204) - Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721) - Prevent cache memory exhaustion under sustained attack (CVE-2026-11622, RHEL-213397) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629) - Backport fix for nameserver line processing. (RHEL-79714) - Add sysusers named user creation (RHEL-132053) - Create /var/named directories for bind-chroot (RHEL-132053) - Copy named.* files from /var/named into /usr/share/named - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Replace downstream fixes with upstream changes - Address various spoofing attacks (CVE-2025-40778) - Fix failures in idna system test (RHEL-66172) - logrotate: skip if empty and remove old variants (RHEL-113942) - Decode IDN names on input in all situations in utilities (RHEL-66172) - Prevent assertion failure in dns64 mode with break-dnssec yes (CVE-2026-19666) - Prevent crash on wildcard responses containing both NSEC and NSEC3 proofs (CVE-2026-80274) - Reject oversized negative cached records early (CVE-2026-19667) - Add new root key 38696 into package files (RHEL-255763) - Update built-in anchors in delv and named - Fix NSEC3 signer validation (CVE-2026-10723) - Fix CVE-2026-13321: reject out-of-zone NSEC next owner names - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) - Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3 (CVE-2026-13204) - Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721) - Prevent cache memory exhaustion under sustained attack (CVE-2026-11622, RHEL-213397) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Fix CVE-2026-19662: NOQNAME proof use-after-free could crash recursive resolver. - Backport 'Do not use header_prev in expire_lru_headers' from upstream. (RHEL-276913) - Prevent assertion failure in dns64 mode with break-dnssec yes (CVE-2026-19666) - Prevent crash on wildcard responses containing both NSEC and NSEC3 proofs (CVE-2026-80274) - Reject oversized negative cached records early (CVE-2026-19667) - Add new root key 38696 into package files (RHEL-255763) - Update built-in anchors in delv and named - Fix NSEC3 signer validation (CVE-2026-10723) - Fix CVE-2026-13321: reject out-of-zone NSEC next owner names - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) - Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3 (CVE-2026-13204) - Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721) - Prevent cache memory exhaustion under sustained attack (CVE-2026-11622, RHEL-213397) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629) - Backport fix for nameserver line processing. (RHEL-79714) - Add sysusers named user creation (RHEL-132053) - Create /var/named directories for bind-chroot (RHEL-132053) - Copy named.* files from /var/named into /usr/share/named - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Replace downstream fixes with upstream changes - Address various spoofing attacks (CVE-2025-40778) - Fix failures in idna system test (RHEL-66172) - logrotate: skip if empty and remove old variants (RHEL-113942) - Fix NSEC3 signer validation (CVE-2026-10723) - Fix CVE-2026-13321: reject out-of-zone NSEC next owner names - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) - Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3 (CVE-2026-13204) - Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721) - Prevent cache memory exhaustion under sustained attack (CVE-2026-11622, RHEL-213397) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629) - Backport fix for nameserver line processing. (RHEL-79714) - Add new root key 38696 into package files (RHEL-255763) - Update built-in anchors in delv and named - Fix NSEC3 signer validation (CVE-2026-10723) - Fix CVE-2026-13321: reject out-of-zone NSEC next owner names - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) - Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3 (CVE-2026-13204) - Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721) - Prevent cache memory exhaustion under sustained attack (CVE-2026-11622, RHEL-213397) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629) - Backport fix for nameserver line processing. (RHEL-79714) - Add sysusers named user creation (RHEL-132053) - Create /var/named directories for bind-chroot (RHEL-132053) - Copy named.* files from /var/named into /usr/share/named - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Replace downstream fixes with upstream changes - Address various spoofing attacks (CVE-2025-40778) - Fix failures in idna system test (RHEL-66172) - logrotate: skip if empty and remove old variants (RHEL-113942) - Decode IDN names on input in all situations in utilities (RHEL-66172) - Prevent assertion failure in dns64 mode with break-dnssec yes (CVE-2026-19666) - Prevent crash on wildcard responses containing both NSEC and NSEC3 proofs (CVE-2026-80274) - Reject oversized negative cached records early (CVE-2026-19667) - Add new root key 38696 into package files (RHEL-255763) - Update built-in anchors in delv and named - Fix NSEC3 signer validation (CVE-2026-10723) - Fix CVE-2026-13321: reject out-of-zone NSEC next owner names - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) - Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3 (CVE-2026-13204) - Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721) - Prevent cache memory exhaustion under sustained attack (CVE-2026-11622, RHEL-213397) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Fix CVE-2026-19662: NOQNAME proof use-after-free could crash recursive resolver. - Backport 'Do not use header_prev in expire_lru_headers' from upstream. (RHEL-276913) - Prevent assertion failure in dns64 mode with break-dnssec yes (CVE-2026-19666) - Prevent crash on wildcard responses containing both NSEC and NSEC3 proofs (CVE-2026-80274) - Reject oversized negative cached records early (CVE-2026-19667) - Add new root key 38696 into package files (RHEL-255763) - Update built-in anchors in delv and named - Fix NSEC3 signer validation (CVE-2026-10723) - Fix CVE-2026-13321: reject out-of-zone NSEC next owner names - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) - Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3 (CVE-2026-13204) - Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721) - Prevent cache memory exhaustion under sustained attack (CVE-2026-11622, RHEL-213397) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629) - Backport fix for nameserver line processing. (RHEL-79714) - Add sysusers named user creation (RHEL-132053) - Create /var/named directories for bind-chroot (RHEL-132053) - Copy named.* files from /var/named into /usr/share/named - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Replace downstream fixes with upstream changes - Address various spoofing attacks (CVE-2025-40778) - Fix failures in idna system test (RHEL-66172) - logrotate: skip if empty and remove old variants (RHEL-113942) - Fix NSEC3 signer validation (CVE-2026-10723) - Fix CVE-2026-13321: reject out-of-zone NSEC next owner names - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) - Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3 (CVE-2026-13204) - Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721) - Prevent cache memory exhaustion under sustained attack (CVE-2026-11622, RHEL-213397) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629) - Backport fix for nameserver line processing. (RHEL-79714) - Add new root key 38696 into package files (RHEL-255763) - Update built-in anchors in delv and named - Fix NSEC3 signer validation (CVE-2026-10723) - Fix CVE-2026-13321: reject out-of-zone NSEC next owner names - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) - Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3 (CVE-2026-13204) - Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721) - Prevent cache memory exhaustion under sustained attack (CVE-2026-11622, RHEL-213397) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629) - Drop obsoletes for bind, switch back to bind 32:9.16.23-19 requirement Resolves: RHEL-80345 - Release bump, fixed date for previous changelog entry Resolves: RHEL-78927 - Release 11.11, Support BIND 9.18 Resolves: RHEL-78927 - Bump version above RHEL 9.5 - Rebuilt for BIND CVE-2024-1737 fixes (CVE-2024-1737) - Rebuild required for BIND changes for KeyTrap change (CVE-2023-50387) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629) - Backport fix for nameserver line processing. (RHEL-79714) - Add sysusers named user creation (RHEL-132053) - Create /var/named directories for bind-chroot (RHEL-132053) - Copy named.* files from /var/named into /usr/share/named - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Replace downstream fixes with upstream changes - Address various spoofing attacks (CVE-2025-40778) - Fix failures in idna system test (RHEL-66172) - logrotate: skip if empty and remove old variants (RHEL-113942) - Decode IDN names on input in all situations in utilities (RHEL-66172) - Prevent assertion failure in dns64 mode with break-dnssec yes (CVE-2026-19666) - Prevent crash on wildcard responses containing both NSEC and NSEC3 proofs (CVE-2026-80274) - Reject oversized negative cached records early (CVE-2026-19667) - Add new root key 38696 into package files (RHEL-255763) - Update built-in anchors in delv and named - Fix NSEC3 signer validation (CVE-2026-10723) - Fix CVE-2026-13321: reject out-of-zone NSEC next owner names - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) - Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3 (CVE-2026-13204) - Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721) - Prevent cache memory exhaustion under sustained attack (CVE-2026-11622, RHEL-213397) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Fix CVE-2026-19662: NOQNAME proof use-after-free could crash recursive resolver. - Backport 'Do not use header_prev in expire_lru_headers' from upstream. (RHEL-276913) - Prevent assertion failure in dns64 mode with break-dnssec yes (CVE-2026-19666) - Prevent crash on wildcard responses containing both NSEC and NSEC3 proofs (CVE-2026-80274) - Reject oversized negative cached records early (CVE-2026-19667) - Add new root key 38696 into package files (RHEL-255763) - Update built-in anchors in delv and named - Fix NSEC3 signer validation (CVE-2026-10723) - Fix CVE-2026-13321: reject out-of-zone NSEC next owner names - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) - Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3 (CVE-2026-13204) - Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721) - Prevent cache memory exhaustion under sustained attack (CVE-2026-11622, RHEL-213397) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629) - Backport fix for nameserver line processing. (RHEL-79714) - Add sysusers named user creation (RHEL-132053) - Create /var/named directories for bind-chroot (RHEL-132053) - Copy named.* files from /var/named into /usr/share/named - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Replace downstream fixes with upstream changes - Address various spoofing attacks (CVE-2025-40778) - Fix failures in idna system test (RHEL-66172) - logrotate: skip if empty and remove old variants (RHEL-113942) - Fix NSEC3 signer validation (CVE-2026-10723) - Fix CVE-2026-13321: reject out-of-zone NSEC next owner names - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) - Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3 (CVE-2026-13204) - Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721) - Prevent cache memory exhaustion under sustained attack (CVE-2026-11622, RHEL-213397) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629) - Backport fix for nameserver line processing. (RHEL-79714) - Add new root key 38696 into package files (RHEL-255763) - Update built-in anchors in delv and named - Fix NSEC3 signer validation (CVE-2026-10723) - Fix CVE-2026-13321: reject out-of-zone NSEC next owner names - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) - Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3 (CVE-2026-13204) - Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721) - Prevent cache memory exhaustion under sustained attack (CVE-2026-11622, RHEL-213397) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629) - Backport fix for nameserver line processing. (RHEL-79714) - Add sysusers named user creation (RHEL-132053) - Create /var/named directories for bind-chroot (RHEL-132053) - Copy named.* files from /var/named into /usr/share/named - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Replace downstream fixes with upstream changes - Address various spoofing attacks (CVE-2025-40778) - Fix failures in idna system test (RHEL-66172) - logrotate: skip if empty and remove old variants (RHEL-113942) - Decode IDN names on input in all situations in utilities (RHEL-66172) - Prevent assertion failure in dns64 mode with break-dnssec yes (CVE-2026-19666) - Prevent crash on wildcard responses containing both NSEC and NSEC3 proofs (CVE-2026-80274) - Reject oversized negative cached records early (CVE-2026-19667) - Add new root key 38696 into package files (RHEL-255763) - Update built-in anchors in delv and named - Fix NSEC3 signer validation (CVE-2026-10723) - Fix CVE-2026-13321: reject out-of-zone NSEC next owner names - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) - Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3 (CVE-2026-13204) - Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721) - Prevent cache memory exhaustion under sustained attack (CVE-2026-11622, RHEL-213397) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Fix CVE-2026-19662: NOQNAME proof use-after-free could crash recursive resolver. - Backport 'Do not use header_prev in expire_lru_headers' from upstream. (RHEL-276913) - Prevent assertion failure in dns64 mode with break-dnssec yes (CVE-2026-19666) - Prevent crash on wildcard responses containing both NSEC and NSEC3 proofs (CVE-2026-80274) - Reject oversized negative cached records early (CVE-2026-19667) - Add new root key 38696 into package files (RHEL-255763) - Update built-in anchors in delv and named - Fix NSEC3 signer validation (CVE-2026-10723) - Fix CVE-2026-13321: reject out-of-zone NSEC next owner names - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) - Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3 (CVE-2026-13204) - Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721) - Prevent cache memory exhaustion under sustained attack (CVE-2026-11622, RHEL-213397) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629) - Backport fix for nameserver line processing. (RHEL-79714) - Add sysusers named user creation (RHEL-132053) - Create /var/named directories for bind-chroot (RHEL-132053) - Copy named.* files from /var/named into /usr/share/named - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Replace downstream fixes with upstream changes - Address various spoofing attacks (CVE-2025-40778) - Fix failures in idna system test (RHEL-66172) - logrotate: skip if empty and remove old variants (RHEL-113942) - Fix NSEC3 signer validation (CVE-2026-10723) - Fix CVE-2026-13321: reject out-of-zone NSEC next owner names - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) - Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3 (CVE-2026-13204) - Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721) - Prevent cache memory exhaustion under sustained attack (CVE-2026-11622, RHEL-213397) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629) - Backport fix for nameserver line processing. (RHEL-79714) - Add new root key 38696 into package files (RHEL-255763) - Update built-in anchors in delv and named - Fix NSEC3 signer validation (CVE-2026-10723) - Fix CVE-2026-13321: reject out-of-zone NSEC next owner names - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) - Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3 (CVE-2026-13204) - Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721) - Prevent cache memory exhaustion under sustained attack (CVE-2026-11622, RHEL-213397) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629) - Backport fix for nameserver line processing. (RHEL-79714) - Add sysusers named user creation (RHEL-132053) - Create /var/named directories for bind-chroot (RHEL-132053) - Copy named.* files from /var/named into /usr/share/named - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Replace downstream fixes with upstream changes - Address various spoofing attacks (CVE-2025-40778) - Fix failures in idna system test (RHEL-66172) - logrotate: skip if empty and remove old variants (RHEL-113942) - Decode IDN names on input in all situations in utilities (RHEL-66172) - Prevent assertion failure in dns64 mode with break-dnssec yes (CVE-2026-19666) - Prevent crash on wildcard responses containing both NSEC and NSEC3 proofs (CVE-2026-80274) - Reject oversized negative cached records early (CVE-2026-19667) - Add new root key 38696 into package files (RHEL-255763) - Update built-in anchors in delv and named - Fix NSEC3 signer validation (CVE-2026-10723) - Fix CVE-2026-13321: reject out-of-zone NSEC next owner names - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) - Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3 (CVE-2026-13204) - Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721) - Prevent cache memory exhaustion under sustained attack (CVE-2026-11622, RHEL-213397) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Fix CVE-2026-19662: NOQNAME proof use-after-free could crash recursive resolver. - Backport 'Do not use header_prev in expire_lru_headers' from upstream. (RHEL-276913) - Prevent assertion failure in dns64 mode with break-dnssec yes (CVE-2026-19666) - Prevent crash on wildcard responses containing both NSEC and NSEC3 proofs (CVE-2026-80274) - Reject oversized negative cached records early (CVE-2026-19667) - Add new root key 38696 into package files (RHEL-255763) - Update built-in anchors in delv and named - Fix NSEC3 signer validation (CVE-2026-10723) - Fix CVE-2026-13321: reject out-of-zone NSEC next owner names - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) - Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3 (CVE-2026-13204) - Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721) - Prevent cache memory exhaustion under sustained attack (CVE-2026-11622, RHEL-213397) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629) - Backport fix for nameserver line processing. (RHEL-79714) - Add sysusers named user creation (RHEL-132053) - Create /var/named directories for bind-chroot (RHEL-132053) - Copy named.* files from /var/named into /usr/share/named - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Replace downstream fixes with upstream changes - Address various spoofing attacks (CVE-2025-40778) - Fix failures in idna system test (RHEL-66172) - logrotate: skip if empty and remove old variants (RHEL-113942) - Fix NSEC3 signer validation (CVE-2026-10723) - Fix CVE-2026-13321: reject out-of-zone NSEC next owner names - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) - Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3 (CVE-2026-13204) - Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721) - Prevent cache memory exhaustion under sustained attack (CVE-2026-11622, RHEL-213397) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629) - Backport fix for nameserver line processing. (RHEL-79714) - Add new root key 38696 into package files (RHEL-255763) - Update built-in anchors in delv and named - Fix NSEC3 signer validation (CVE-2026-10723) - Fix CVE-2026-13321: reject out-of-zone NSEC next owner names - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) - Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3 (CVE-2026-13204) - Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721) - Prevent cache memory exhaustion under sustained attack (CVE-2026-11622, RHEL-213397) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629) - Correct changelog version of previous change - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053) - Add sysusers named user creation (RHEL-132053) - Add missing bind-chroot subdirectories - Create /var/named directories for bind-chroot (RHEL-132053) - Copy named.* files from /usr/share/named into var/named - Fix upstream reported regression in recent CVE fix (CVE-2025-8677) - Add upstream created test to this regression - Refuse malformed DNSKEY records (CVE-2025-8677) - Address various spoofing attacks (CVE-2025-40778) - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - logrotate: skip if empty and remove old variants (RHEL-113942) - Prevent name.c:670 attributes assertion failed (RHEL-30407) - Add extra checks for relative names - Correct backport issue in the patch (CVE-2026-1519) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Correct changelog version of previous change - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053) - Add sysusers named user creation (RHEL-132053) - Add missing bind-chroot subdirectories - Create /var/named directories for bind-chroot (RHEL-132053) - Copy named.* files from /usr/share/named into var/named - Fix upstream reported regression in recent CVE fix (CVE-2025-8677) - Add upstream created test to this regression - Refuse malformed DNSKEY records (CVE-2025-8677) - Address various spoofing attacks (CVE-2025-40778) - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Prevent assertion failure in dns64 mode with break-dnssec yes (CVE-2026-19666) - Prevent memory leak on following HTTPS/SVCB RR (CVE-2026-81563) - Prevent crash on wildcard responses containing both NSEC and NSEC3 proofs (CVE-2026-80274) - Reject oversized negative cached records early (CVE-2026-19667) - Set limit to following HTTPS/SVCB aliases (CVE-2026-81736) - Add new root key 38696 into package files (RHEL-255223) - Update built-in anchors in delv and named - Fix NSEC3 signer validation (CVE-2026-10723, RHEL-215704) - Reject out-of-zone NSEC next owner names (CVE-2026-13321, RHEL-213314) - Fix cache exhaustion via dns_slabheaders (CVE-2026-11622, RHEL-213389) - Reject invalid signed wildcard records (CVE-2026-11721, RHEL-213417) - Fix RPZ wildcard expansion self-referential CNAME (CVE-2026-11331, RHEL-213495) - Fix assertion crash via unsigned NSEC/NSEC3 (CVE-2026-13204, RHEL-213495) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Correct backport issue in the patch (CVE-2026-1519) - Fix CVE-2026-19662: NOQNAME proof use-after-free could crash recursive resolver. - Prevent assertion failure in dns64 mode with break-dnssec yes (CVE-2026-19666) - Prevent memory leak on following HTTPS/SVCB RR (CVE-2026-81563) - Prevent crash on wildcard responses containing both NSEC and NSEC3 proofs (CVE-2026-80274) - Reject oversized negative cached records early (CVE-2026-19667) - Set limit to following HTTPS/SVCB aliases (CVE-2026-81736) - Add new root key 38696 into package files (RHEL-255223) - Update built-in anchors in delv and named - Fix NSEC3 signer validation (CVE-2026-10723, RHEL-215704) - Reject out-of-zone NSEC next owner names (CVE-2026-13321, RHEL-213314) - Fix cache exhaustion via dns_slabheaders (CVE-2026-11622, RHEL-213389) - Reject invalid signed wildcard records (CVE-2026-11721, RHEL-213417) - Fix RPZ wildcard expansion self-referential CNAME (CVE-2026-11331, RHEL-213495) - Fix assertion crash via unsigned NSEC/NSEC3 (CVE-2026-13204, RHEL-213495) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Correct backport issue in the patch (CVE-2026-1519) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Correct changelog version of previous change - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053) - Add sysusers named user creation (RHEL-132053) - Add missing bind-chroot subdirectories - Create /var/named directories for bind-chroot (RHEL-132053) - Copy named.* files from /usr/share/named into var/named - Fix upstream reported regression in recent CVE fix (CVE-2025-8677) - Add upstream created test to this regression - Fix NSEC3 signer validation (CVE-2026-10723, RHEL-215704) - Reject out-of-zone NSEC next owner names (CVE-2026-13321, RHEL-213314) - Fix cache exhaustion via dns_slabheaders (CVE-2026-11622, RHEL-213389) - Reject invalid signed wildcard records (CVE-2026-11721, RHEL-213417) - Fix RPZ wildcard expansion self-referential CNAME (CVE-2026-11331, RHEL-213495) - Fix assertion crash via unsigned NSEC/NSEC3 (CVE-2026-13204, RHEL-213495) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Correct backport issue in the patch (CVE-2026-1519) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Correct changelog version of previous change - Correct changelog version of previous change - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053) - Add sysusers named user creation (RHEL-132053) - Add missing bind-chroot subdirectories - Create /var/named directories for bind-chroot (RHEL-132053) - Copy named.* files from /usr/share/named into var/named - Fix upstream reported regression in recent CVE fix (CVE-2025-8677) - Add upstream created test to this regression - Refuse malformed DNSKEY records (CVE-2025-8677) - Address various spoofing attacks (CVE-2025-40778) - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - logrotate: skip if empty and remove old variants (RHEL-113942) - Prevent name.c:670 attributes assertion failed (RHEL-30407) - Add extra checks for relative names - Correct backport issue in the patch (CVE-2026-1519) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Correct changelog version of previous change - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053) - Add sysusers named user creation (RHEL-132053) - Add missing bind-chroot subdirectories - Create /var/named directories for bind-chroot (RHEL-132053) - Copy named.* files from /usr/share/named into var/named - Fix upstream reported regression in recent CVE fix (CVE-2025-8677) - Add upstream created test to this regression - Refuse malformed DNSKEY records (CVE-2025-8677) - Address various spoofing attacks (CVE-2025-40778) - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Prevent assertion failure in dns64 mode with break-dnssec yes (CVE-2026-19666) - Prevent memory leak on following HTTPS/SVCB RR (CVE-2026-81563) - Prevent crash on wildcard responses containing both NSEC and NSEC3 proofs (CVE-2026-80274) - Reject oversized negative cached records early (CVE-2026-19667) - Set limit to following HTTPS/SVCB aliases (CVE-2026-81736) - Add new root key 38696 into package files (RHEL-255223) - Update built-in anchors in delv and named - Fix NSEC3 signer validation (CVE-2026-10723, RHEL-215704) - Reject out-of-zone NSEC next owner names (CVE-2026-13321, RHEL-213314) - Fix cache exhaustion via dns_slabheaders (CVE-2026-11622, RHEL-213389) - Reject invalid signed wildcard records (CVE-2026-11721, RHEL-213417) - Fix RPZ wildcard expansion self-referential CNAME (CVE-2026-11331, RHEL-213495) - Fix assertion crash via unsigned NSEC/NSEC3 (CVE-2026-13204, RHEL-213495) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Correct backport issue in the patch (CVE-2026-1519) - Fix CVE-2026-19662: NOQNAME proof use-after-free could crash recursive resolver. - Prevent assertion failure in dns64 mode with break-dnssec yes (CVE-2026-19666) - Prevent memory leak on following HTTPS/SVCB RR (CVE-2026-81563) - Prevent crash on wildcard responses containing both NSEC and NSEC3 proofs (CVE-2026-80274) - Reject oversized negative cached records early (CVE-2026-19667) - Set limit to following HTTPS/SVCB aliases (CVE-2026-81736) - Add new root key 38696 into package files (RHEL-255223) - Update built-in anchors in delv and named - Fix NSEC3 signer validation (CVE-2026-10723, RHEL-215704) - Reject out-of-zone NSEC next owner names (CVE-2026-13321, RHEL-213314) - Fix cache exhaustion via dns_slabheaders (CVE-2026-11622, RHEL-213389) - Reject invalid signed wildcard records (CVE-2026-11721, RHEL-213417) - Fix RPZ wildcard expansion self-referential CNAME (CVE-2026-11331, RHEL-213495) - Fix assertion crash via unsigned NSEC/NSEC3 (CVE-2026-13204, RHEL-213495) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Correct backport issue in the patch (CVE-2026-1519) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Correct changelog version of previous change - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053) - Add sysusers named user creation (RHEL-132053) - Add missing bind-chroot subdirectories - Create /var/named directories for bind-chroot (RHEL-132053) - Copy named.* files from /usr/share/named into var/named - Fix upstream reported regression in recent CVE fix (CVE-2025-8677) - Add upstream created test to this regression - Fix NSEC3 signer validation (CVE-2026-10723, RHEL-215704) - Reject out-of-zone NSEC next owner names (CVE-2026-13321, RHEL-213314) - Fix cache exhaustion via dns_slabheaders (CVE-2026-11622, RHEL-213389) - Reject invalid signed wildcard records (CVE-2026-11721, RHEL-213417) - Fix RPZ wildcard expansion self-referential CNAME (CVE-2026-11331, RHEL-213495) - Fix assertion crash via unsigned NSEC/NSEC3 (CVE-2026-13204, RHEL-213495) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Correct backport issue in the patch (CVE-2026-1519) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Correct changelog version of previous change - Correct changelog version of previous change - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053) - Add sysusers named user creation (RHEL-132053) - Add missing bind-chroot subdirectories - Create /var/named directories for bind-chroot (RHEL-132053) - Copy named.* files from /usr/share/named into var/named - Fix upstream reported regression in recent CVE fix (CVE-2025-8677) - Add upstream created test to this regression - Refuse malformed DNSKEY records (CVE-2025-8677) - Address various spoofing attacks (CVE-2025-40778) - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - logrotate: skip if empty and remove old variants (RHEL-113942) - Prevent name.c:670 attributes assertion failed (RHEL-30407) - Add extra checks for relative names - Correct backport issue in the patch (CVE-2026-1519) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Correct changelog version of previous change - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053) - Add sysusers named user creation (RHEL-132053) - Add missing bind-chroot subdirectories - Create /var/named directories for bind-chroot (RHEL-132053) - Copy named.* files from /usr/share/named into var/named - Fix upstream reported regression in recent CVE fix (CVE-2025-8677) - Add upstream created test to this regression - Refuse malformed DNSKEY records (CVE-2025-8677) - Address various spoofing attacks (CVE-2025-40778) - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Prevent assertion failure in dns64 mode with break-dnssec yes (CVE-2026-19666) - Prevent memory leak on following HTTPS/SVCB RR (CVE-2026-81563) - Prevent crash on wildcard responses containing both NSEC and NSEC3 proofs (CVE-2026-80274) - Reject oversized negative cached records early (CVE-2026-19667) - Set limit to following HTTPS/SVCB aliases (CVE-2026-81736) - Add new root key 38696 into package files (RHEL-255223) - Update built-in anchors in delv and named - Fix NSEC3 signer validation (CVE-2026-10723, RHEL-215704) - Reject out-of-zone NSEC next owner names (CVE-2026-13321, RHEL-213314) - Fix cache exhaustion via dns_slabheaders (CVE-2026-11622, RHEL-213389) - Reject invalid signed wildcard records (CVE-2026-11721, RHEL-213417) - Fix RPZ wildcard expansion self-referential CNAME (CVE-2026-11331, RHEL-213495) - Fix assertion crash via unsigned NSEC/NSEC3 (CVE-2026-13204, RHEL-213495) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Correct backport issue in the patch (CVE-2026-1519) - Fix CVE-2026-19662: NOQNAME proof use-after-free could crash recursive resolver. - Prevent assertion failure in dns64 mode with break-dnssec yes (CVE-2026-19666) - Prevent memory leak on following HTTPS/SVCB RR (CVE-2026-81563) - Prevent crash on wildcard responses containing both NSEC and NSEC3 proofs (CVE-2026-80274) - Reject oversized negative cached records early (CVE-2026-19667) - Set limit to following HTTPS/SVCB aliases (CVE-2026-81736) - Add new root key 38696 into package files (RHEL-255223) - Update built-in anchors in delv and named - Fix NSEC3 signer validation (CVE-2026-10723, RHEL-215704) - Reject out-of-zone NSEC next owner names (CVE-2026-13321, RHEL-213314) - Fix cache exhaustion via dns_slabheaders (CVE-2026-11622, RHEL-213389) - Reject invalid signed wildcard records (CVE-2026-11721, RHEL-213417) - Fix RPZ wildcard expansion self-referential CNAME (CVE-2026-11331, RHEL-213495) - Fix assertion crash via unsigned NSEC/NSEC3 (CVE-2026-13204, RHEL-213495) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Correct backport issue in the patch (CVE-2026-1519) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Correct changelog version of previous change - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053) - Add sysusers named user creation (RHEL-132053) - Add missing bind-chroot subdirectories - Create /var/named directories for bind-chroot (RHEL-132053) - Copy named.* files from /usr/share/named into var/named - Fix upstream reported regression in recent CVE fix (CVE-2025-8677) - Add upstream created test to this regression - Fix NSEC3 signer validation (CVE-2026-10723, RHEL-215704) - Reject out-of-zone NSEC next owner names (CVE-2026-13321, RHEL-213314) - Fix cache exhaustion via dns_slabheaders (CVE-2026-11622, RHEL-213389) - Reject invalid signed wildcard records (CVE-2026-11721, RHEL-213417) - Fix RPZ wildcard expansion self-referential CNAME (CVE-2026-11331, RHEL-213495) - Fix assertion crash via unsigned NSEC/NSEC3 (CVE-2026-13204, RHEL-213495) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Correct backport issue in the patch (CVE-2026-1519) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Correct changelog version of previous change - Initial commit on c9s Resolves: RHEL-83144 - Correct changelog version of previous change - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053) - Add sysusers named user creation (RHEL-132053) - Add missing bind-chroot subdirectories - Create /var/named directories for bind-chroot (RHEL-132053) - Copy named.* files from /usr/share/named into var/named - Fix upstream reported regression in recent CVE fix (CVE-2025-8677) - Add upstream created test to this regression - Refuse malformed DNSKEY records (CVE-2025-8677) - Address various spoofing attacks (CVE-2025-40778) - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - logrotate: skip if empty and remove old variants (RHEL-113942) - Prevent name.c:670 attributes assertion failed (RHEL-30407) - Add extra checks for relative names - Correct backport issue in the patch (CVE-2026-1519) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Correct changelog version of previous change - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053) - Add sysusers named user creation (RHEL-132053) - Add missing bind-chroot subdirectories - Create /var/named directories for bind-chroot (RHEL-132053) - Copy named.* files from /usr/share/named into var/named - Fix upstream reported regression in recent CVE fix (CVE-2025-8677) - Add upstream created test to this regression - Refuse malformed DNSKEY records (CVE-2025-8677) - Address various spoofing attacks (CVE-2025-40778) - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Prevent assertion failure in dns64 mode with break-dnssec yes (CVE-2026-19666) - Prevent memory leak on following HTTPS/SVCB RR (CVE-2026-81563) - Prevent crash on wildcard responses containing both NSEC and NSEC3 proofs (CVE-2026-80274) - Reject oversized negative cached records early (CVE-2026-19667) - Set limit to following HTTPS/SVCB aliases (CVE-2026-81736) - Add new root key 38696 into package files (RHEL-255223) - Update built-in anchors in delv and named - Fix NSEC3 signer validation (CVE-2026-10723, RHEL-215704) - Reject out-of-zone NSEC next owner names (CVE-2026-13321, RHEL-213314) - Fix cache exhaustion via dns_slabheaders (CVE-2026-11622, RHEL-213389) - Reject invalid signed wildcard records (CVE-2026-11721, RHEL-213417) - Fix RPZ wildcard expansion self-referential CNAME (CVE-2026-11331, RHEL-213495) - Fix assertion crash via unsigned NSEC/NSEC3 (CVE-2026-13204, RHEL-213495) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Correct backport issue in the patch (CVE-2026-1519) - Fix CVE-2026-19662: NOQNAME proof use-after-free could crash recursive resolver. - Prevent assertion failure in dns64 mode with break-dnssec yes (CVE-2026-19666) - Prevent memory leak on following HTTPS/SVCB RR (CVE-2026-81563) - Prevent crash on wildcard responses containing both NSEC and NSEC3 proofs (CVE-2026-80274) - Reject oversized negative cached records early (CVE-2026-19667) - Set limit to following HTTPS/SVCB aliases (CVE-2026-81736) - Add new root key 38696 into package files (RHEL-255223) - Update built-in anchors in delv and named - Fix NSEC3 signer validation (CVE-2026-10723, RHEL-215704) - Reject out-of-zone NSEC next owner names (CVE-2026-13321, RHEL-213314) - Fix cache exhaustion via dns_slabheaders (CVE-2026-11622, RHEL-213389) - Reject invalid signed wildcard records (CVE-2026-11721, RHEL-213417) - Fix RPZ wildcard expansion self-referential CNAME (CVE-2026-11331, RHEL-213495) - Fix assertion crash via unsigned NSEC/NSEC3 (CVE-2026-13204, RHEL-213495) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Correct backport issue in the patch (CVE-2026-1519) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Correct changelog version of previous change - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053) - Add sysusers named user creation (RHEL-132053) - Add missing bind-chroot subdirectories - Create /var/named directories for bind-chroot (RHEL-132053) - Copy named.* files from /usr/share/named into var/named - Fix upstream reported regression in recent CVE fix (CVE-2025-8677) - Add upstream created test to this regression - Fix NSEC3 signer validation (CVE-2026-10723, RHEL-215704) - Reject out-of-zone NSEC next owner names (CVE-2026-13321, RHEL-213314) - Fix cache exhaustion via dns_slabheaders (CVE-2026-11622, RHEL-213389) - Reject invalid signed wildcard records (CVE-2026-11721, RHEL-213417) - Fix RPZ wildcard expansion self-referential CNAME (CVE-2026-11331, RHEL-213495) - Fix assertion crash via unsigned NSEC/NSEC3 (CVE-2026-13204, RHEL-213495) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Correct backport issue in the patch (CVE-2026-1519) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Correct changelog version of previous change - Correct changelog version of previous change - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053) - Add sysusers named user creation (RHEL-132053) - Add missing bind-chroot subdirectories - Create /var/named directories for bind-chroot (RHEL-132053) - Copy named.* files from /usr/share/named into var/named - Fix upstream reported regression in recent CVE fix (CVE-2025-8677) - Add upstream created test to this regression - Refuse malformed DNSKEY records (CVE-2025-8677) - Address various spoofing attacks (CVE-2025-40778) - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - logrotate: skip if empty and remove old variants (RHEL-113942) - Prevent name.c:670 attributes assertion failed (RHEL-30407) - Add extra checks for relative names - Correct backport issue in the patch (CVE-2026-1519) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Correct changelog version of previous change - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053) - Add sysusers named user creation (RHEL-132053) - Add missing bind-chroot subdirectories - Create /var/named directories for bind-chroot (RHEL-132053) - Copy named.* files from /usr/share/named into var/named - Fix upstream reported regression in recent CVE fix (CVE-2025-8677) - Add upstream created test to this regression - Refuse malformed DNSKEY records (CVE-2025-8677) - Address various spoofing attacks (CVE-2025-40778) - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Prevent assertion failure in dns64 mode with break-dnssec yes (CVE-2026-19666) - Prevent memory leak on following HTTPS/SVCB RR (CVE-2026-81563) - Prevent crash on wildcard responses containing both NSEC and NSEC3 proofs (CVE-2026-80274) - Reject oversized negative cached records early (CVE-2026-19667) - Set limit to following HTTPS/SVCB aliases (CVE-2026-81736) - Add new root key 38696 into package files (RHEL-255223) - Update built-in anchors in delv and named - Fix NSEC3 signer validation (CVE-2026-10723, RHEL-215704) - Reject out-of-zone NSEC next owner names (CVE-2026-13321, RHEL-213314) - Fix cache exhaustion via dns_slabheaders (CVE-2026-11622, RHEL-213389) - Reject invalid signed wildcard records (CVE-2026-11721, RHEL-213417) - Fix RPZ wildcard expansion self-referential CNAME (CVE-2026-11331, RHEL-213495) - Fix assertion crash via unsigned NSEC/NSEC3 (CVE-2026-13204, RHEL-213495) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Correct backport issue in the patch (CVE-2026-1519) - Fix CVE-2026-19662: NOQNAME proof use-after-free could crash recursive resolver. - Prevent assertion failure in dns64 mode with break-dnssec yes (CVE-2026-19666) - Prevent memory leak on following HTTPS/SVCB RR (CVE-2026-81563) - Prevent crash on wildcard responses containing both NSEC and NSEC3 proofs (CVE-2026-80274) - Reject oversized negative cached records early (CVE-2026-19667) - Set limit to following HTTPS/SVCB aliases (CVE-2026-81736) - Add new root key 38696 into package files (RHEL-255223) - Update built-in anchors in delv and named - Fix NSEC3 signer validation (CVE-2026-10723, RHEL-215704) - Reject out-of-zone NSEC next owner names (CVE-2026-13321, RHEL-213314) - Fix cache exhaustion via dns_slabheaders (CVE-2026-11622, RHEL-213389) - Reject invalid signed wildcard records (CVE-2026-11721, RHEL-213417) - Fix RPZ wildcard expansion self-referential CNAME (CVE-2026-11331, RHEL-213495) - Fix assertion crash via unsigned NSEC/NSEC3 (CVE-2026-13204, RHEL-213495) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Correct backport issue in the patch (CVE-2026-1519) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Correct changelog version of previous change - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053) - Add sysusers named user creation (RHEL-132053) - Add missing bind-chroot subdirectories - Create /var/named directories for bind-chroot (RHEL-132053) - Copy named.* files from /usr/share/named into var/named - Fix upstream reported regression in recent CVE fix (CVE-2025-8677) - Add upstream created test to this regression - Fix NSEC3 signer validation (CVE-2026-10723, RHEL-215704) - Reject out-of-zone NSEC next owner names (CVE-2026-13321, RHEL-213314) - Fix cache exhaustion via dns_slabheaders (CVE-2026-11622, RHEL-213389) - Reject invalid signed wildcard records (CVE-2026-11721, RHEL-213417) - Fix RPZ wildcard expansion self-referential CNAME (CVE-2026-11331, RHEL-213495) - Fix assertion crash via unsigned NSEC/NSEC3 (CVE-2026-13204, RHEL-213495) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Correct backport issue in the patch (CVE-2026-1519) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Correct changelog version of previous change - Fix a potential illegal memory access when copying a corrupt input file. (RHEL-142281) - Fix a potential illegal memory access when copying a corrupt input file. (RHEL-132287) - Fix a potential illegal memory access when linking a corrupt input file. (RHEL-126883) - Add missing space to ppc476-shared2 linker test. (RHEL-113842) - Adds tests for the linker's --error-execstack and --error-rwx-segments command line options. (RHEL-109970) - Add missing tests of AArch64 instructions to the assembler testsuite. (RHEL-104630) - NVR bump to allow rebuilding for RHEL-9.7 (RHEL-87216) - Adds z17 as a cpu name for the s390x architecture. (RHEL-87216) - Fix seg-fault in AArch64 linker when building u-boot. (RHEL-78350) - Retire: binutils-rhivos-segment-gap.patch. (RHEL-60807) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild with updated binutils (#1960667) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to bison 3.7.4 (#1897780) - Update to bison 3.7.3 (#1887766) - Update to bison 3.7.2 (#1876120) - Update to bison 3.7.1 (#1859887) - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild with updated binutils (#1960667) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to bison 3.7.4 (#1897780) - Update to bison 3.7.3 (#1887766) - Update to bison 3.7.2 (#1876120) - Update to bison 3.7.1 (#1859887) - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Resolves: rhbz#1933563 - Don't BuildRequires xorg-x11-font-utils - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt with fonttosfnt 1.2.1 - Use BDF fonts for OpenType conversion - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Provide OpenType Bitmap fonts - Use bitmapfonts2otb.py to combine bitmap fonts - Add bitmap-*-opentype-fonts sub packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Add explicit requires to the devel subpackages - Note: the the cblas64 seems to be linked against the libblas (not the 64 version) - this is not a regression, however in the Fedora it uses libblas64 instead. - Resolves: RHEL-5768 - Spec file cleanup - Remove unused patches Related: RHEL-5770 - Fix soname of the 64-bit version libraries Resolves: RHEL-24851 - Add explicit requires to the devel subpackages Related: rhbz#2229142 - Rename manpages: some names conflict with the man-pages package Resolves: rhbz#2222868 - iSCSI: don't crash when LUN ID >= 256 Resolves: RHEL-122858 - Add a pre-wipe fixup function for LVM logical volumes Resolves: RHEL-68368 - Wipe end partition before creating it as well as the start Resolves: RHEL-76917 - Make ActionDestroyFormat optional when the device is also scheduled to be removed Resolves: RHEL-8008 Resolves: RHEL-8012 - Get the actual PV format size for LVMPV format Resolves: RHEL-74078 - Include additional information in PartitioningError Resolves: RHEL-8005 - Do not remove PVs from devices file if disabled or doesn't exist Resolves: RHEL-84662 - Set persistent allow-discards flag for newly created LUKS devices Resolves: RHEL-82430 - Fix running tests in FIPS mode Resolves: RHEL-8029 - Modified passphrase in stratis test Resolves: RHEL-8029 - Align sizes up for growable LVs Resolves: RHEL-8036 Resolves: RHEL-19725 - fix hang when BLKTRACESETUP fails and "-o -" is used - Related RHEL-54661 - Update to 5.85 Resolves: RHEL-142552 - Fix problem with menu handling Resolves: RHEL-103966 - Update to 5.83 Resolves: RHEL-94819 Resolves: RHEL-56073 Resolves: RHEL-1924 - Fix plugin_init() startup warnings Related: RHEL-68934 - Fix ConfigurationDirectory startup warning Related: RHEL-71798 - Bump release to rebuild for RHEL-9.5 - Update to 5.72 - Update to 5.87 post-release snapshot Resolves: RHEL-193095 - Update to 5.87 pre-release snapshot Resolves: RHEL-169988 - Fix startup warning Resolves: RHEL-161518 - Update to 5.86 - Re-add btmgmt as it does not require bluetoothd to be running, unlike bluetoothctl mgmt - Fix audio output not working in some circumstances Resolves: RHEL-147734 - Update to 5.85 Resolves: RHEL-142552 - Fix problem with menu handling Resolves: RHEL-103966 - Update to 5.83 Resolves: RHEL-94819 Resolves: RHEL-56073 Resolves: RHEL-1924 - Fix plugin_init() startup warnings Related: RHEL-68934 - Fix ConfigurationDirectory startup warning Related: RHEL-71798 - Update to 5.85 Resolves: RHEL-142552 - Fix problem with menu handling Resolves: RHEL-103966 - Update to 5.83 Resolves: RHEL-94819 Resolves: RHEL-56073 Resolves: RHEL-1924 - Fix plugin_init() startup warnings Related: RHEL-68934 - Fix ConfigurationDirectory startup warning Related: RHEL-71798 - Bump release to rebuild for RHEL-9.5 - Update to 5.72 - Update to 5.87 post-release snapshot Resolves: RHEL-193095 - Update to 5.87 pre-release snapshot Resolves: RHEL-169988 - Fix startup warning Resolves: RHEL-161518 - Update to 5.86 - Re-add btmgmt as it does not require bluetoothd to be running, unlike bluetoothctl mgmt - Fix audio output not working in some circumstances Resolves: RHEL-147734 - Update to 5.85 Resolves: RHEL-142552 - Fix problem with menu handling Resolves: RHEL-103966 - Update to 5.83 Resolves: RHEL-94819 Resolves: RHEL-56073 Resolves: RHEL-1924 - Fix plugin_init() startup warnings Related: RHEL-68934 - Fix ConfigurationDirectory startup warning Related: RHEL-71798 - Backport upstream PR 120 to fix segfault on invalid unit types Resolves: rhbz#2224578 - Add vendor ID for NVIDIA BMCs Resolves: rhbz#2218358 - Update /var/run to /run in ipmievd.service that systemd warns about Resolves: rhbz#2100475 - Add upstream ipmievd patch to check received msg id against expectation Fixes problem where SEL response is not recognized correctly when SEL request times out Resolves: rhbz#2224569 - Apply changes from RHEL 8 (#1811941, #1831158, #1951480) Resolves: rhbz#2051621 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #1950909 (Change what files are installed) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Updated to 1.2.5 - No longer necessary to re-package sources: All problematic files have been re-licensed - All 19 patches are part of the 1.2.5 release and have been removed - Rebuilt for GSL 2.6. - Update to release 1.6.8 - Resolves: RHEL-111711 - Update to release 1.6.5. - Resolves: RHEL-59512 - Add issues resolved by release 1.6.1 - Resolves: RHEL-36001 - Resolves: RHEL-36664 - Resolves: RHEL-36667 - Resolves: RHEL-36691 - Update to release 1.6.1. - Add dependency on systemd version - Update to release 1.6.0. - Update to release 1.6.8 - Resolves: RHEL-111711 - Update to release 1.6.5. - Resolves: RHEL-59512 - Add issues resolved by release 1.6.1 - Resolves: RHEL-36001 - Resolves: RHEL-36664 - Resolves: RHEL-36667 - Resolves: RHEL-36691 - Update to release 1.6.1. - Add dependency on systemd version - Update to release 1.6.0. - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Re-add the CMake config files provided by Boost - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Re-add the CMake config files provided by Boost - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Re-add the CMake config files provided by Boost - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Re-add the CMake config files provided by Boost - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Re-add the CMake config files provided by Boost - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Re-add the CMake config files provided by Boost - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Re-add the CMake config files provided by Boost - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Re-add the CMake config files provided by Boost - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Re-add the CMake config files provided by Boost - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Re-add the CMake config files provided by Boost - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Re-add the CMake config files provided by Boost - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Re-add the CMake config files provided by Boost - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Re-add the CMake config files provided by Boost - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Re-add the CMake config files provided by Boost - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Re-add the CMake config files provided by Boost - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Re-add the CMake config files provided by Boost - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Re-add the CMake config files provided by Boost - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Re-add the CMake config files provided by Boost - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Re-add the CMake config files provided by Boost - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Re-add the CMake config files provided by Boost - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Re-add the CMake config files provided by Boost - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Re-add the CMake config files provided by Boost - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Re-add the CMake config files provided by Boost - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Re-add the CMake config files provided by Boost - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Re-add the CMake config files provided by Boost - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Re-add the CMake config files provided by Boost - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Re-add the CMake config files provided by Boost - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Re-add the CMake config files provided by Boost - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Re-add the CMake config files provided by Boost - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Re-add the CMake config files provided by Boost - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Re-add the CMake config files provided by Boost - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Update to 1.13.0 - https://github.com/bootc-dev/bootc/releases/tag/v1.13.0 - Resolves: RHEL-151443 - Update to 1.12.1 - Fix mount point check regression breaking bootc-image-builder - Resolves: RHEL-142112 - Update to 1.12.0 - Resolves: RHEL-140335 - Update to 1.10.0 - Resolves: #RHEL-125340 - Update to 1.8.0 - Update to 1.7.1 - Resolves: #RHEL-111339 - Update to 1.7.0 - Resolves: #RHEL-109555 - Update to 1.5.1 - Resolves: #RHEL-104335 - Update to 1.4.0 - Resolves: #RHEL-103125 - Update to 1.3.0 - Resolves: #RHEL-94597 - Update to 1.16.4 - Resolves: #RHEL-213807 - Update to 1.13.0 - https://github.com/bootc-dev/bootc/releases/tag/v1.13.0 - Resolves: RHEL-151443 - Update to 1.12.1 - Fix mount point check regression breaking bootc-image-builder - Resolves: RHEL-142112 - Update to 1.12.0 - Resolves: RHEL-140335 - Update to 1.10.0 - Resolves: #RHEL-125340 - Update to 1.8.0 - Update to 1.7.1 - Resolves: #RHEL-111339 - Update to 1.7.0 - Resolves: #RHEL-109555 - Update to 1.5.1 - Resolves: #RHEL-104335 - Update to 1.4.0 - Resolves: #RHEL-103125 - Make loader-entries unavailable when ostree lacks bootconfig-extra - Resolves: RHEL-267536 - Update to 1.16.4 - Resolves: #RHEL-213807 - Update to 1.13.0 - https://github.com/bootc-dev/bootc/releases/tag/v1.13.0 - Resolves: RHEL-151443 - Update to 1.12.1 - Fix mount point check regression breaking bootc-image-builder - Resolves: RHEL-142112 - Update to 1.12.0 - Resolves: RHEL-140335 - Update to 1.10.0 - Resolves: #RHEL-125340 - Update to 1.8.0 - Update to 1.7.1 - Resolves: #RHEL-111339 - Update to 1.7.0 - Resolves: #RHEL-109555 - Update to 1.5.1 - Resolves: #RHEL-104335 Resolves: #RHEL-110494 - spec: remove ExcludeArch ix86 as this is c9s Resolves: #RHEL-77736, #RHEL-79091 - Add git to the build requires Resolves: #RHEL-77736, #RHEL-79091 - https://github.com/coreos/bootupd/releases/tag/v0.2.27 Resolves: #RHEL-77736 - new version - https://github.com/coreos/bootupd/releases/tag/v0.2.19 Resolves: RHEL-35887 - https://github.com/coreos/bootupd/releases/tag/v0.2.18 backport patch to support GRUB console.cfg Resolves: RHEL-26439 - https://github.com/coreos/bootupd/releases/tag/v0.2.17 Resolves: RHEL-14388 - Sync spec with upstream Related: https://issues.redhat.com/browse/RHEL-14388 - Build on all architectures Related: https://issues.redhat.com/browse/RHEL-14388 - Update to v0.2.35 Resolves: #RHEL-186008 - Update to v0.2.34 Resolves: #RHEL-173357 - Backport https://github.com/coreos/bootupd/pull/1068 - Backport https://github.com/coreos/bootupd/pull/1074 Resolves: #RHEL-168652 Resolves: #RHEL-110494 - spec: remove ExcludeArch ix86 as this is c9s Resolves: #RHEL-77736, #RHEL-79091 - Add git to the build requires Resolves: #RHEL-77736, #RHEL-79091 - https://github.com/coreos/bootupd/releases/tag/v0.2.27 Resolves: #RHEL-77736 - new version - https://github.com/coreos/bootupd/releases/tag/v0.2.19 Resolves: RHEL-35887 - Update to BPF 6.17 stable backport - Update to BPF 6.14 stable backport - Make kernel tarball dist independent of %{dist} - Update to BPF 6.12 rebase - Fix LLVM feature detection - Initial gating test for bpftool - Initial commit on c9s - Rebase on bpftrace 0.24.2 (RHEL-140903) - Rebuild with LLVM 21 (RHEL-108345) - Rebase on bpftrace 0.24.1 (RHEL-78998) - Rebase on bpftrace 0.23.5 (RHEL-78918) - Add LLVM 20 support (RHEL-81775) - Rebase on bpftrace 0.22.1 (RHEL-63881) - Add LLVM 19 support (RHEL-66061) - Rebase on bpftrace 0.21.1 - Add LLVM 18 support (RHEL-28685) - Fix latest build (not built in side tag) - Rebuild for bcc 0.30.0-4 - Rebase on bpftrace 0.20.4 - Fix CVE allowing unprivileged users loading of compromised linux headers (RHEL-28765, CVE-2024-2313) - Rebase on bpftrace 0.20.3 (RHEL-30779) - Fix CVE allowing unprivileged users loading of compromised linux headers (RHEL-28765, CVE-2024-2313) - Fix bpftrace creating BPF programs with truncated names (RHEL-8502) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixed brlapi multilib Resolves: rhbz#1915335 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - New version Resolves: rhbz#1910328 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Fixed brlapi.key to pass the RPM verification - OCaml 4.11.1 rebuild - OCaml 4.11.0 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Dropped explicit brlapi dependency (brltty) and relaxed brltty dependency (brlapi) Related: rhbz#1765611 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixed brlapi multilib Resolves: rhbz#1915335 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - New version Resolves: rhbz#1910328 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Fixed brlapi.key to pass the RPM verification - OCaml 4.11.1 rebuild - OCaml 4.11.0 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Dropped explicit brlapi dependency (brltty) and relaxed brltty dependency (brlapi) Related: rhbz#1765611 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixed brlapi multilib Resolves: rhbz#1915335 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - New version Resolves: rhbz#1910328 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Fixed brlapi.key to pass the RPM verification - OCaml 4.11.1 rebuild - OCaml 4.11.0 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Dropped explicit brlapi dependency (brltty) and relaxed brltty dependency (brlapi) Related: rhbz#1765611 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixed brlapi multilib Resolves: rhbz#1915335 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - New version Resolves: rhbz#1910328 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Fixed brlapi.key to pass the RPM verification - OCaml 4.11.1 rebuild - OCaml 4.11.0 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Dropped explicit brlapi dependency (brltty) and relaxed brltty dependency (brlapi) Related: rhbz#1765611 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixed brlapi multilib Resolves: rhbz#1915335 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - New version Resolves: rhbz#1910328 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Fixed brlapi.key to pass the RPM verification - OCaml 4.11.1 rebuild - OCaml 4.11.0 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Dropped explicit brlapi dependency (brltty) and relaxed brltty dependency (brlapi) Related: rhbz#1765611 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixed brlapi multilib Resolves: rhbz#1915335 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - New version Resolves: rhbz#1910328 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Fixed brlapi.key to pass the RPM verification - OCaml 4.11.1 rebuild - OCaml 4.11.0 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Dropped explicit brlapi dependency (brltty) and relaxed brltty dependency (brlapi) Related: rhbz#1765611 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixed brlapi multilib Resolves: rhbz#1915335 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - New version Resolves: rhbz#1910328 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Fixed brlapi.key to pass the RPM verification - OCaml 4.11.1 rebuild - OCaml 4.11.0 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Dropped explicit brlapi dependency (brltty) and relaxed brltty dependency (brlapi) Related: rhbz#1765611 - CVE-2026-111497 brotli: Out-of-Bounds Write in Google Brotli Decoder - Resolves: RHEL-290294 - Accept output_buffer_limit as an alias for max_output_length in Decompressor.process() for forward compatibility with upstream 1.2.0 - Resolves: RHEL-221150 - Resolves: RHEL-133995 Rebuild for CVE-2025-6176 Brotli decompression bomb DoS in scrapy - Resolves: RHEL-133995 CVE-2025-6176 Brotli decompression bomb DoS in scrapy - Accept output_buffer_limit as an alias for max_output_length in Decompressor.process() for forward compatibility with upstream 1.2.0 - Resolves: RHEL-221150 - Resolves: RHEL-133995 Rebuild for CVE-2025-6176 Brotli decompression bomb DoS in scrapy - Resolves: RHEL-133995 CVE-2025-6176 Brotli decompression bomb DoS in scrapy - Check BitMask(n) n value for kBrotliBitMask[n] bounds - Resolves: RHEL-133995 Rebuild for CVE-2025-6176 Brotli decompression bomb DoS in scrapy - Resolves: RHEL-133995 CVE-2025-6176 Brotli decompression bomb DoS in scrapy - Check BitMask(n) n value for kBrotliBitMask[n] bounds - CVE-2026-111497 brotli: Out-of-Bounds Write in Google Brotli Decoder - Resolves: RHEL-290294 - Accept output_buffer_limit as an alias for max_output_length in Decompressor.process() for forward compatibility with upstream 1.2.0 - Resolves: RHEL-221150 - Resolves: RHEL-133995 Rebuild for CVE-2025-6176 Brotli decompression bomb DoS in scrapy - Resolves: RHEL-133995 CVE-2025-6176 Brotli decompression bomb DoS in scrapy - Accept output_buffer_limit as an alias for max_output_length in Decompressor.process() for forward compatibility with upstream 1.2.0 - Resolves: RHEL-221150 - Resolves: RHEL-133995 Rebuild for CVE-2025-6176 Brotli decompression bomb DoS in scrapy - Resolves: RHEL-133995 CVE-2025-6176 Brotli decompression bomb DoS in scrapy - Check BitMask(n) n value for kBrotliBitMask[n] bounds - Resolves: RHEL-133995 Rebuild for CVE-2025-6176 Brotli decompression bomb DoS in scrapy - Resolves: RHEL-133995 CVE-2025-6176 Brotli decompression bomb DoS in scrapy - Check BitMask(n) n value for kBrotliBitMask[n] bounds - Related: CVE-2026-14164 - Resolves: CVE-2026-14164 - Resolves: CVE-2026-4424 - Resolves: CVE-2026-5121 - Release bump - Resolves: CVE-2026-4111 - Resolves: CVE-2025-5914 - Resolves: CVE-2025-25724 - Resolves: CVE-2026-4424 - Resolves: CVE-2026-5121 - Release bump - Resolves: CVE-2026-4111 - Resolves: CVE-2025-5914 - Resolves: CVE-2025-25724 - Explicitly specify JVM target version - Add noarch to ExclusiveArch - Disable building on i686 - Fix patch usage - Rebuild with regenerated Requires on Java - update to https://github.com/containers/buildah/releases/tag/v1.43.1 - fixes CVE-2026-34986 - Resolves: RHEL-165035 - update to the latest content of https://github.com/containers/buildah/tree/release-1.43 (https://github.com/containers/buildah/commit/bbc4bd1) - Resolves: RHEL-95964 - Rebuild for new golang to address CVE-2025-61726 - Resolves: RHEL-146099 - update to https://github.com/containers/buildah/releases/tag/v1.43.0 - Related: RHEL-111919 - update to https://github.com/containers/buildah/releases/tag/v1.41.8 - Related: RHEL-111919 - update to https://github.com/containers/buildah/releases/tag/v1.41.4 - Related: RHEL-111919 - update to https://github.com/containers/buildah/releases/tag/v1.41.3 - Related: RHEL-80816 - update to https://github.com/containers/buildah/releases/tag/v1.41.1 - Related: RHEL-80816 - update to https://github.com/containers/buildah/releases/tag/v1.41.0 - Related: RHEL-80816 - update to https://github.com/containers/buildah/releases/tag/v1.40.1 - Related: RHEL-80816 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158759 - update to https://github.com/containers/buildah/releases/tag/v1.43.1 - fixes CVE-2026-34986 - Resolves: RHEL-165035 - update to the latest content of https://github.com/containers/buildah/tree/release-1.43 (https://github.com/containers/buildah/commit/bbc4bd1) - Resolves: RHEL-95964 - Rebuild for new golang to address CVE-2025-61726 - Resolves: RHEL-146099 - update to https://github.com/containers/buildah/releases/tag/v1.43.0 - Related: RHEL-111919 - update to https://github.com/containers/buildah/releases/tag/v1.41.8 - Related: RHEL-111919 - update to https://github.com/containers/buildah/releases/tag/v1.41.4 - Related: RHEL-111919 - update to https://github.com/containers/buildah/releases/tag/v1.41.3 - Related: RHEL-80816 - update to https://github.com/containers/buildah/releases/tag/v1.41.1 - Related: RHEL-80816 - update to https://github.com/containers/buildah/releases/tag/v1.41.0 - Related: RHEL-80816 - bump golang.org/x/crypto to v0.53.0 to fix CVE-2026-39832 and CVE-2026-39835 - Resolves: RHEL-188733 RHEL-190066 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158759 - update to https://github.com/containers/buildah/releases/tag/v1.43.1 - fixes CVE-2026-34986 - Resolves: RHEL-165035 - update to the latest content of https://github.com/containers/buildah/tree/release-1.43 (https://github.com/containers/buildah/commit/bbc4bd1) - Resolves: RHEL-95964 - Rebuild for new golang to address CVE-2025-61726 - Resolves: RHEL-146099 - update to https://github.com/containers/buildah/releases/tag/v1.43.0 - Related: RHEL-111919 - update to https://github.com/containers/buildah/releases/tag/v1.41.8 - Related: RHEL-111919 - update to https://github.com/containers/buildah/releases/tag/v1.41.4 - Related: RHEL-111919 - update to https://github.com/containers/buildah/releases/tag/v1.41.3 - Related: RHEL-80816 - update to https://github.com/containers/buildah/releases/tag/v1.41.1 - Related: RHEL-80816 - rebuild for CVE-2026-39822 - Resolves: RHEL-193645 - bump golang.org/x/crypto to v0.53.0 to fix CVE-2026-39832 and CVE-2026-39835 - Resolves: RHEL-188733 RHEL-190066 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158759 - update to https://github.com/containers/buildah/releases/tag/v1.43.1 - fixes CVE-2026-34986 - Resolves: RHEL-165035 - update to the latest content of https://github.com/containers/buildah/tree/release-1.43 (https://github.com/containers/buildah/commit/bbc4bd1) - Resolves: RHEL-95964 - Rebuild for new golang to address CVE-2025-61726 - Resolves: RHEL-146099 - update to https://github.com/containers/buildah/releases/tag/v1.43.0 - Related: RHEL-111919 - update to https://github.com/containers/buildah/releases/tag/v1.41.8 - Related: RHEL-111919 - update to https://github.com/containers/buildah/releases/tag/v1.41.4 - Related: RHEL-111919 - update to https://github.com/containers/buildah/releases/tag/v1.41.3 - Related: RHEL-80816 - rebuild for CVE-2026-56853 CVE-2026-56858 CVE-2026-33818 CVE-2026-56860 CVE-2026-56862 - Resolves: RHEL-241114 RHEL-241310 RHEL-241620 RHEL-241779 RHEL-242275 - Update to buildah 1.43.3 (488c1c92) - Resolves: RHEL-219426 - Update to release-1.43 branch HEAD (609eb9466) - Ensures golang.org/x/crypto v0.53.0 for CVE-2026-46597 fix - Resolves: RHEL-219426 - rebuild for CVE-2026-39822 - Resolves: RHEL-193645 - bump golang.org/x/crypto to v0.53.0 to fix CVE-2026-39832 and CVE-2026-39835 - Resolves: RHEL-188733 RHEL-190066 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158759 - update to https://github.com/containers/buildah/releases/tag/v1.43.1 - fixes CVE-2026-34986 - Resolves: RHEL-165035 - update to the latest content of https://github.com/containers/buildah/tree/release-1.43 (https://github.com/containers/buildah/commit/bbc4bd1) - Resolves: RHEL-95964 - Rebuild for new golang to address CVE-2025-61726 - Resolves: RHEL-146099 - update to https://github.com/containers/buildah/releases/tag/v1.43.0 - Related: RHEL-111919 - Rebuild for CVE-2026-78667 and CVE-2026-111943 - Resolves: RHEL-279009 - Resolves: RHEL-287507 - Update to buildah 1.43.4 (c7061d00) - fix CVE-2026-56855 (golang.org/x/crypto/ssh DoS) and CVE-2025-11395 (arbitrary file write in copier) - Resolves: RHEL-256886 RHEL-121272 - rebuild for CVE-2026-56853 CVE-2026-56858 CVE-2026-33818 CVE-2026-56860 CVE-2026-56862 - Resolves: RHEL-241114 RHEL-241310 RHEL-241620 RHEL-241779 RHEL-242275 - Update to buildah 1.43.3 (488c1c92) - Resolves: RHEL-219426 - Update to release-1.43 branch HEAD (609eb9466) - Ensures golang.org/x/crypto v0.53.0 for CVE-2026-46597 fix - Resolves: RHEL-219426 - rebuild for CVE-2026-39822 - Resolves: RHEL-193645 - bump golang.org/x/crypto to v0.53.0 to fix CVE-2026-39832 and CVE-2026-39835 - Resolves: RHEL-188733 RHEL-190066 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158759 - update to https://github.com/containers/buildah/releases/tag/v1.43.1 - fixes CVE-2026-34986 - Resolves: RHEL-165035 - update to the latest content of https://github.com/containers/buildah/tree/release-1.43 (https://github.com/containers/buildah/commit/bbc4bd1) - Resolves: RHEL-95964 - update to https://github.com/containers/buildah/releases/tag/v1.43.1 - fixes CVE-2026-34986 - Resolves: RHEL-165035 - update to the latest content of https://github.com/containers/buildah/tree/release-1.43 (https://github.com/containers/buildah/commit/bbc4bd1) - Resolves: RHEL-95964 - Rebuild for new golang to address CVE-2025-61726 - Resolves: RHEL-146099 - update to https://github.com/containers/buildah/releases/tag/v1.43.0 - Related: RHEL-111919 - update to https://github.com/containers/buildah/releases/tag/v1.41.8 - Related: RHEL-111919 - update to https://github.com/containers/buildah/releases/tag/v1.41.4 - Related: RHEL-111919 - update to https://github.com/containers/buildah/releases/tag/v1.41.3 - Related: RHEL-80816 - update to https://github.com/containers/buildah/releases/tag/v1.41.1 - Related: RHEL-80816 - update to https://github.com/containers/buildah/releases/tag/v1.41.0 - Related: RHEL-80816 - update to https://github.com/containers/buildah/releases/tag/v1.40.1 - Related: RHEL-80816 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158759 - update to https://github.com/containers/buildah/releases/tag/v1.43.1 - fixes CVE-2026-34986 - Resolves: RHEL-165035 - update to the latest content of https://github.com/containers/buildah/tree/release-1.43 (https://github.com/containers/buildah/commit/bbc4bd1) - Resolves: RHEL-95964 - Rebuild for new golang to address CVE-2025-61726 - Resolves: RHEL-146099 - update to https://github.com/containers/buildah/releases/tag/v1.43.0 - Related: RHEL-111919 - update to https://github.com/containers/buildah/releases/tag/v1.41.8 - Related: RHEL-111919 - update to https://github.com/containers/buildah/releases/tag/v1.41.4 - Related: RHEL-111919 - update to https://github.com/containers/buildah/releases/tag/v1.41.3 - Related: RHEL-80816 - update to https://github.com/containers/buildah/releases/tag/v1.41.1 - Related: RHEL-80816 - update to https://github.com/containers/buildah/releases/tag/v1.41.0 - Related: RHEL-80816 - bump golang.org/x/crypto to v0.53.0 to fix CVE-2026-39832 and CVE-2026-39835 - Resolves: RHEL-188733 RHEL-190066 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158759 - update to https://github.com/containers/buildah/releases/tag/v1.43.1 - fixes CVE-2026-34986 - Resolves: RHEL-165035 - update to the latest content of https://github.com/containers/buildah/tree/release-1.43 (https://github.com/containers/buildah/commit/bbc4bd1) - Resolves: RHEL-95964 - Rebuild for new golang to address CVE-2025-61726 - Resolves: RHEL-146099 - update to https://github.com/containers/buildah/releases/tag/v1.43.0 - Related: RHEL-111919 - update to https://github.com/containers/buildah/releases/tag/v1.41.8 - Related: RHEL-111919 - update to https://github.com/containers/buildah/releases/tag/v1.41.4 - Related: RHEL-111919 - update to https://github.com/containers/buildah/releases/tag/v1.41.3 - Related: RHEL-80816 - update to https://github.com/containers/buildah/releases/tag/v1.41.1 - Related: RHEL-80816 - rebuild for CVE-2026-39822 - Resolves: RHEL-193645 - bump golang.org/x/crypto to v0.53.0 to fix CVE-2026-39832 and CVE-2026-39835 - Resolves: RHEL-188733 RHEL-190066 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158759 - update to https://github.com/containers/buildah/releases/tag/v1.43.1 - fixes CVE-2026-34986 - Resolves: RHEL-165035 - update to the latest content of https://github.com/containers/buildah/tree/release-1.43 (https://github.com/containers/buildah/commit/bbc4bd1) - Resolves: RHEL-95964 - Rebuild for new golang to address CVE-2025-61726 - Resolves: RHEL-146099 - update to https://github.com/containers/buildah/releases/tag/v1.43.0 - Related: RHEL-111919 - update to https://github.com/containers/buildah/releases/tag/v1.41.8 - Related: RHEL-111919 - update to https://github.com/containers/buildah/releases/tag/v1.41.4 - Related: RHEL-111919 - update to https://github.com/containers/buildah/releases/tag/v1.41.3 - Related: RHEL-80816 - rebuild for CVE-2026-56853 CVE-2026-56858 CVE-2026-33818 CVE-2026-56860 CVE-2026-56862 - Resolves: RHEL-241114 RHEL-241310 RHEL-241620 RHEL-241779 RHEL-242275 - Update to buildah 1.43.3 (488c1c92) - Resolves: RHEL-219426 - Update to release-1.43 branch HEAD (609eb9466) - Ensures golang.org/x/crypto v0.53.0 for CVE-2026-46597 fix - Resolves: RHEL-219426 - rebuild for CVE-2026-39822 - Resolves: RHEL-193645 - bump golang.org/x/crypto to v0.53.0 to fix CVE-2026-39832 and CVE-2026-39835 - Resolves: RHEL-188733 RHEL-190066 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158759 - update to https://github.com/containers/buildah/releases/tag/v1.43.1 - fixes CVE-2026-34986 - Resolves: RHEL-165035 - update to the latest content of https://github.com/containers/buildah/tree/release-1.43 (https://github.com/containers/buildah/commit/bbc4bd1) - Resolves: RHEL-95964 - Rebuild for new golang to address CVE-2025-61726 - Resolves: RHEL-146099 - update to https://github.com/containers/buildah/releases/tag/v1.43.0 - Related: RHEL-111919 - Rebuild for CVE-2026-78667 and CVE-2026-111943 - Resolves: RHEL-279009 - Resolves: RHEL-287507 - Update to buildah 1.43.4 (c7061d00) - fix CVE-2026-56855 (golang.org/x/crypto/ssh DoS) and CVE-2025-11395 (arbitrary file write in copier) - Resolves: RHEL-256886 RHEL-121272 - rebuild for CVE-2026-56853 CVE-2026-56858 CVE-2026-33818 CVE-2026-56860 CVE-2026-56862 - Resolves: RHEL-241114 RHEL-241310 RHEL-241620 RHEL-241779 RHEL-242275 - Update to buildah 1.43.3 (488c1c92) - Resolves: RHEL-219426 - Update to release-1.43 branch HEAD (609eb9466) - Ensures golang.org/x/crypto v0.53.0 for CVE-2026-46597 fix - Resolves: RHEL-219426 - rebuild for CVE-2026-39822 - Resolves: RHEL-193645 - bump golang.org/x/crypto to v0.53.0 to fix CVE-2026-39832 and CVE-2026-39835 - Resolves: RHEL-188733 RHEL-190066 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158759 - update to https://github.com/containers/buildah/releases/tag/v1.43.1 - fixes CVE-2026-34986 - Resolves: RHEL-165035 - update to the latest content of https://github.com/containers/buildah/tree/release-1.43 (https://github.com/containers/buildah/commit/bbc4bd1) - Resolves: RHEL-95964 - new version - new version - new version - new version - new version - new version - new version - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebase to byacc-2.0-20210109 (#1914591) - Rebase to byacc-2.0-20200910 (#1877980) - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebase to 20200330 (#1819022) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebase to 20191125 (#1768314) - Add noarch to ExclusiveArch - Disable building on i686 - Fix patch usage - Rebuild with regenerated Requires on Java - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to latest upstream 4.0.16 release for JDK 17 support. - Drop not-needed jboss-modules BR. - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Upgrated to latest upstream version 4.0.11 - Added a patch to fix rpm build issue caused due to misconfiguration in upstream - Added required additional plugins required for build - Drop not needed BR jarjar. Fixes FTBFS. - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to latest upstream 4.0.16 release for JDK 17 support. - Drop not-needed jboss-modules BR. - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Upgrated to latest upstream version 4.0.11 - Added a patch to fix rpm build issue caused due to misconfiguration in upstream - Added required additional plugins required for build - Drop not needed BR jarjar. Fixes FTBFS. - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to latest upstream 4.0.16 release for JDK 17 support. - Drop not-needed jboss-modules BR. - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Upgrated to latest upstream version 4.0.11 - Added a patch to fix rpm build issue caused due to misconfiguration in upstream - Added required additional plugins required for build - Drop not needed BR jarjar. Fixes FTBFS. - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Add the explicit Rquires to the base package Resolves: RHEL-138675 - Revert the previous commit (introduced a regression) Resolves: CVE-2019-12900 - Fix out of bounds access in BZ2_decompress Resolves: RHEL-65198 - Resolves: RHEL-26529 - Out of bounds read in ares__read_line() [rhel-9] - Resolves: rhbz#2209564 - CVE-2023-31124 c-ares: AutoTools does not set CARES_RANDOM_FILE during cross compilation [rhel-9] - Resolves: rhbz#2209556 - CVE-2023-31130 c-ares: Buffer Underwrite in ares_inet_net_pton() [rhel-9] - Resolves: rhbz#2209550 - CVE-2023-31147 c-ares: Insufficient randomness in generation of DNS query IDs [rhel-9] - Resolves: rhbz#2209520 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-9.3.0] - Resolves: rhbz#2210370 - Rebase c-ares for RHEL 9.3 - Resolves: rhbz#2170868 - c-ares: buffer overflow in config_sortlist() due to missing string length check [rhel-9] - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - make is no more in buildroot by default - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - FTBFS with GCC 10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Add git as BR (#1911486) - Fix CVE-2020-35492 (#1911486) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Backport an upstream patch to fix generating PDF font names (#1939399) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.17.4 - Tighten soname globs - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Allow empty array of operands for certain operators in CFF fonts - Resolves: #1817958 - Add git as BR (#1911486) - Fix CVE-2020-35492 (#1911486) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Backport an upstream patch to fix generating PDF font names (#1939399) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.17.4 - Tighten soname globs - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Allow empty array of operands for certain operators in CFF fonts - Resolves: #1817958 - Add git as BR (#1911486) - Fix CVE-2020-35492 (#1911486) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Backport an upstream patch to fix generating PDF font names (#1939399) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.17.4 - Tighten soname globs - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Allow empty array of operands for certain operators in CFF fonts - Resolves: #1817958 - Add git as BR (#1911486) - Fix CVE-2020-35492 (#1911486) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Backport an upstream patch to fix generating PDF font names (#1939399) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.17.4 - Tighten soname globs - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Allow empty array of operands for certain operators in CFF fonts - Resolves: #1817958 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Verify source with new strong signatures from upstream - Working (but weak, dependent on SHA1) source signature verification - Added API/ABI version to descriptions - Fix typo %{_?isa} for %{?_isa} in virtual Provides - Tidy up BR’s, including dropping make - Update comments based on the new plan for the version 1.16 API/ABI - Prepare for future upgrade to API/ABI version 1.16 by introducing virtual Provides for a name for API/ABI version 1.0: cairomm1.0. This will be the name of a future package that continues to provide API/ABI version 1.0 after the upgrade. - Switch from autotools to meson; enable the tests, since the meson build system permits us to use a shared boost library - Install examples in the -doc subpackage - Restore removal of pre-built documentation with its minified JS bundle - Update to 1.14.2; this adds new APIs, but is ABI-backwards-compatible - Rebuild for rhel-9.8 Resolves: RHEL-137760 - Fix CVE-2025-68114 (memory corruption) and CVE-2025-67873 (heap buffer overflow) Resolves: RHEL-137760 - Rebuild for rhel-9.8.z - Rebuild for rhel-9.8 Resolves: RHEL-137760 - Fix CVE-2025-68114 (memory corruption) and CVE-2025-67873 (heap buffer overflow) Resolves: RHEL-137760 - Update to Rust 1.92.0 - Update to Rust 1.91.0 - Update to Rust 1.90 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.89.0 - Sync rust-toolset's rpm macros with RHEL 10 - Update to Rust 1.88.0 - Update to 1.87.0 - Temporarily skip PGO on RHEL ppc64le - Update to 1.86.0 - Apply libgit2 fix for CVE-2026-53587 - Update to Rust 1.92.0 - Update to Rust 1.91.0 - Update to Rust 1.90 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.89.0 - Sync rust-toolset's rpm macros with RHEL 10 - Update to Rust 1.88.0 - Update to 1.87.0 - Temporarily skip PGO on RHEL ppc64le - Rebuild to regenerate auto-requires - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Rebuilt for java-17-openjdk as system jdk - Add noarch to ExclusiveArch - Disable building on i686 - Rebuild with regenerated Requires on Java - Rebuild to regenerate auto-requires - Fix upgrades from non-alternativized versions/packages - Update to version 0.3.17 - related: RHEL-121734 - Update to version 0.3.16 - related: RHEL-121734 - Update to version 0.3.13 - resolves: RHEL-133513 - Update to version 0.3.12 - resolves: RHEL-121734 - Added channel binding support - resolves: RHEL-103417 - resolves: RHEL-24924 - Fix requirement on cepces-selinux - related: RHEL-13739 - Update to version 0.3.8 - resolves: RHEL-22301 - Fix spnego authentication - Fix SELinux sysctl denial - follow up - related: RHEL-215379 - Fix cepces-certmonger postinstall script - resolves: RHEL-215379 - Fix SELinux sysctl denial - Update to version 0.3.17 - related: RHEL-121734 - Update to version 0.3.16 - related: RHEL-121734 - Update to version 0.3.13 - resolves: RHEL-133513 - Update to version 0.3.12 - resolves: RHEL-121734 - Added channel binding support - resolves: RHEL-103417 - Update to version 0.3.17 - related: RHEL-121734 - Update to version 0.3.16 - related: RHEL-121734 - Update to version 0.3.13 - resolves: RHEL-133513 - Update to version 0.3.12 - resolves: RHEL-121734 - Added channel binding support - resolves: RHEL-103417 - resolves: RHEL-24924 - Fix requirement on cepces-selinux - related: RHEL-13739 - Update to version 0.3.8 - resolves: RHEL-22301 - Fix spnego authentication - Fix SELinux sysctl denial - follow up - related: RHEL-215379 - Fix cepces-certmonger postinstall script - resolves: RHEL-215379 - Fix SELinux sysctl denial - Update to version 0.3.17 - related: RHEL-121734 - Update to version 0.3.16 - related: RHEL-121734 - Update to version 0.3.13 - resolves: RHEL-133513 - Update to version 0.3.12 - resolves: RHEL-121734 - Added channel binding support - resolves: RHEL-103417 - Update to version 0.3.17 - related: RHEL-121734 - Update to version 0.3.16 - related: RHEL-121734 - Update to version 0.3.13 - resolves: RHEL-133513 - Update to version 0.3.12 - resolves: RHEL-121734 - Added channel binding support - resolves: RHEL-103417 - resolves: RHEL-24924 - Fix requirement on cepces-selinux - related: RHEL-13739 - Update to version 0.3.8 - resolves: RHEL-22301 - Fix spnego authentication - Fix SELinux sysctl denial - follow up - related: RHEL-215379 - Fix cepces-certmonger postinstall script - resolves: RHEL-215379 - Fix SELinux sysctl denial - Update to version 0.3.17 - related: RHEL-121734 - Update to version 0.3.16 - related: RHEL-121734 - Update to version 0.3.13 - resolves: RHEL-133513 - Update to version 0.3.12 - resolves: RHEL-121734 - Added channel binding support - resolves: RHEL-103417 - Update to upstream 0.79.21 - Update to upstream 0.79.20 - getcert should return unique error on duplicates (RHEL-22302) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Initial package version - Fix the pkgconfig file for lib64 (#2016941) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Don't build with subinit support in RHEL - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Version 0.15.2 - Drop upstreamed -fail-macros patch - Add -fail-macros patch - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Version 0.15.1 - Drop upstreamed -format-spec patch - Drop -attribute-format patch, causes other issues (bz 1850198) - Fix the pkgconfig file for lib64 (#2016941) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Don't build with subinit support in RHEL - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Version 0.15.2 - Drop upstreamed -fail-macros patch - Add -fail-macros patch - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Version 0.15.1 - Drop upstreamed -format-spec patch - Drop -attribute-format patch, causes other issues (bz 1850198) - SELinux userspace 3.6 release - SELinux userspace 3.6-rc1 release - SELinux userspace 3.5 release - SELinux userspace 3.5-rc3 release - SELinux userspace 3.5-rc2 release - SELinux userspace 3.5-rc1 release - SELinux userspace 3.4 release - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add isa to gstreamer plugin Requires (#1988932) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild + cheese-3.38.0-2 - Fix infinite loop on exit - Update to 3.38.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for libgnome-desktop soname bump - Update to 3.34.0 - Update to gnome-browser-connector-42.1 Resolves: #2204484 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Publishing cjose devel package Resolves: RHEL-18066 - CVE-2023-37464 cjose: AES GCM decryption uses the Tag length from the actual Authentication Tag provided in the JWE Resolves: rhbz#2223308 - Rebuilt for gating Related: rhbz#2180445 - Rebuilt for gating Related: rhbz#2180445 - Random memory override Resolves: rhbz#2180445 - Remove compat libs for LLVM 20 - Update LLVM Toolset to 21.1.8 [rhel-9] - Update to 21.1.7 - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683) - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037) - Backport fix for build of highway package on ppc64le (rhbz#2383182) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to LLVM 20.1.8 - Add riscv64 enablement bits; thanks: Songsong Zhang (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com) - Update to LLVM 20.1.7 - Fix llvm-config alternatives handling (rhbz#2361779) - Use libdir suffix in versioned prefix - Remove compat libs for LLVM 20 - Update LLVM Toolset to 21.1.8 [rhel-9] - Update to 21.1.7 - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683) - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037) - Backport fix for build of highway package on ppc64le (rhbz#2383182) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to LLVM 20.1.8 - Add riscv64 enablement bits; thanks: Songsong Zhang (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com) - Update to LLVM 20.1.7 - Fix llvm-config alternatives handling (rhbz#2361779) - Use libdir suffix in versioned prefix - Remove compat libs for LLVM 20 - Update LLVM Toolset to 21.1.8 [rhel-9] - Update to 21.1.7 - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683) - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037) - Backport fix for build of highway package on ppc64le (rhbz#2383182) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to LLVM 20.1.8 - Add riscv64 enablement bits; thanks: Songsong Zhang (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com) - Update to LLVM 20.1.7 - Fix llvm-config alternatives handling (rhbz#2361779) - Use libdir suffix in versioned prefix - Remove compat libs for LLVM 20 - Update LLVM Toolset to 21.1.8 [rhel-9] - Update to 21.1.7 - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683) - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037) - Backport fix for build of highway package on ppc64le (rhbz#2383182) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to LLVM 20.1.8 - Add riscv64 enablement bits; thanks: Songsong Zhang (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com) - Update to LLVM 20.1.7 - Fix llvm-config alternatives handling (rhbz#2361779) - Use libdir suffix in versioned prefix - Remove clang 17 compat lib - Link with ld on 32-bit architectures - Update to 18.1.8 - Rebuild - Default to DWARF4 - Update to 18.1.6 - Remove compat libs - Add back compat libs until all necessary packages have been rebuilt. - Remove compat libs - Update to 17.0.6 - Remove compat libs for LLVM 20 - Update LLVM Toolset to 21.1.8 [rhel-9] - Update to 21.1.7 - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683) - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037) - Backport fix for build of highway package on ppc64le (rhbz#2383182) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to LLVM 20.1.8 - Add riscv64 enablement bits; thanks: Songsong Zhang (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com) - Update to LLVM 20.1.7 - Fix llvm-config alternatives handling (rhbz#2361779) - Use libdir suffix in versioned prefix - Remove compat libs for LLVM 20 - Update LLVM Toolset to 21.1.8 [rhel-9] - Update to 21.1.7 - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683) - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037) - Backport fix for build of highway package on ppc64le (rhbz#2383182) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to LLVM 20.1.8 - Add riscv64 enablement bits; thanks: Songsong Zhang (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com) - Update to LLVM 20.1.7 - Fix llvm-config alternatives handling (rhbz#2361779) - Use libdir suffix in versioned prefix - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Bump to release-39. Related: rhbz#1963078 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Bump to release-39-beta - Bump to release-39-alpha4 - Bump to release-39-alpha1 - Bump release-39-alpha0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Bump to release-38-1 - Bump release-38 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Bump to release-39. Related: rhbz#1963078 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Bump to release-39-beta - Bump to release-39-alpha4 - Bump to release-39-alpha1 - Bump release-39-alpha0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Bump to release-38-1 - Bump release-38 - Add clevis user to tss group via sysusers Resolves: RHEL-132187 - Include socat, openssl as PKCS#11 pin requirements Resolves: #RHEL-72982 - Include tpm2_getcap as dracut required binary Resolves: #RHEL-68638 - TPM2: use first PCR algorithm bank supported by TPM as default Resolves: #RHEL-65468 - Groom clevis.spec Resolves: #RHEL-65458 - Split PKCS#11 files into clevis-pin-pkcs11 package Resolves: #RHEL-61941 - Fix to start pcscd appropriately Resolves: #RHEL-61612 - Fix dracut startup issue Resolves: #RHEL-61184 - Rebase to clevis-21 Resolves: #RHEL-60257 - Rebase to clevis-20 Resolves: #RHEL-29282 - Add clevis user to tss group via sysusers Resolves: RHEL-132187 - Include socat, openssl as PKCS#11 pin requirements Resolves: #RHEL-72982 - Include tpm2_getcap as dracut required binary Resolves: #RHEL-68638 - TPM2: use first PCR algorithm bank supported by TPM as default Resolves: #RHEL-65468 - Groom clevis.spec Resolves: #RHEL-65458 - Split PKCS#11 files into clevis-pin-pkcs11 package Resolves: #RHEL-61941 - Fix to start pcscd appropriately Resolves: #RHEL-61612 - Fix dracut startup issue Resolves: #RHEL-61184 - Rebase to clevis-21 Resolves: #RHEL-60257 - Rebase to clevis-20 Resolves: #RHEL-29282 - Add clevis user to tss group via sysusers Resolves: RHEL-132187 - Include socat, openssl as PKCS#11 pin requirements Resolves: #RHEL-72982 - Include tpm2_getcap as dracut required binary Resolves: #RHEL-68638 - TPM2: use first PCR algorithm bank supported by TPM as default Resolves: #RHEL-65468 - Groom clevis.spec Resolves: #RHEL-65458 - Split PKCS#11 files into clevis-pin-pkcs11 package Resolves: #RHEL-61941 - Fix to start pcscd appropriately Resolves: #RHEL-61612 - Fix dracut startup issue Resolves: #RHEL-61184 - Rebase to clevis-21 Resolves: #RHEL-60257 - Rebase to clevis-20 Resolves: #RHEL-29282 - Add clevis user to tss group via sysusers Resolves: RHEL-132187 - Include socat, openssl as PKCS#11 pin requirements Resolves: #RHEL-72982 - Include tpm2_getcap as dracut required binary Resolves: #RHEL-68638 - TPM2: use first PCR algorithm bank supported by TPM as default Resolves: #RHEL-65468 - Groom clevis.spec Resolves: #RHEL-65458 - Split PKCS#11 files into clevis-pin-pkcs11 package Resolves: #RHEL-61941 - Fix to start pcscd appropriately Resolves: #RHEL-61612 - Fix dracut startup issue Resolves: #RHEL-61184 - Rebase to clevis-21 Resolves: #RHEL-60257 - Rebase to clevis-20 Resolves: #RHEL-29282 - Add JSON schema validation to reject unknown fields Resolves: RHEL-68417 - Align to 0.1.0 upstream version - Initial beta package for RHEL9 - Add clevis user to tss group via sysusers Resolves: RHEL-132187 - Include socat, openssl as PKCS#11 pin requirements Resolves: #RHEL-72982 - Include tpm2_getcap as dracut required binary Resolves: #RHEL-68638 - TPM2: use first PCR algorithm bank supported by TPM as default Resolves: #RHEL-65468 - Groom clevis.spec Resolves: #RHEL-65458 - Split PKCS#11 files into clevis-pin-pkcs11 package Resolves: #RHEL-61941 - Fix to start pcscd appropriately Resolves: #RHEL-61612 - Fix dracut startup issue Resolves: #RHEL-61184 - Rebase to clevis-21 Resolves: #RHEL-60257 - Rebase to clevis-20 Resolves: #RHEL-29282 - Add clevis user to tss group via sysusers Resolves: RHEL-132187 - Include socat, openssl as PKCS#11 pin requirements Resolves: #RHEL-72982 - Include tpm2_getcap as dracut required binary Resolves: #RHEL-68638 - TPM2: use first PCR algorithm bank supported by TPM as default Resolves: #RHEL-65468 - Groom clevis.spec Resolves: #RHEL-65458 - Split PKCS#11 files into clevis-pin-pkcs11 package Resolves: #RHEL-61941 - Fix to start pcscd appropriately Resolves: #RHEL-61612 - Fix dracut startup issue Resolves: #RHEL-61184 - Rebase to clevis-21 Resolves: #RHEL-60257 - Rebase to clevis-20 Resolves: #RHEL-29282 - Update to Rust 1.92.0 - Update to Rust 1.91.0 - Update to Rust 1.90 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.89.0 - Sync rust-toolset's rpm macros with RHEL 10 - Update to Rust 1.88.0 - Update to 1.87.0 - Temporarily skip PGO on RHEL ppc64le - Update to 1.86.0 - Apply libgit2 fix for CVE-2026-53587 - Update to Rust 1.92.0 - Update to Rust 1.91.0 - Update to Rust 1.90 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.89.0 - Sync rust-toolset's rpm macros with RHEL 10 - Update to Rust 1.88.0 - Update to 1.87.0 - Temporarily skip PGO on RHEL ppc64le - Add-AlmaLinux-OS-and-CloudLinux-OS-support-to.patch - ci-downstream-Do-not-override-changes-in-disable-sshd-k.patch [RHEL-128876] - Resolves: RHEL-128876 ([rhel-9] cloud-init upgrade is overwriting modifications in disable-sshd-keygen-if-cloud-init-active.conf) - ci-fix-Don-t-attempt-to-identify-non-x86-OpenStack-inst.patch [RHEL-100615] - ci-fix-strict-disable-in-ds-identify-on-no-datasources-.patch [RHEL-100615] - Fix missing patch [RHEL-101692] - Resolves: RHEL-100615 (CVE-2024-6174 cloud-init: From CVEorg collector [rhel-9.7]) - Resolves: RHEL-101692 (c9s dist-git missing patch "downstream: Retain exit code in cloud-init status for recoverable errors") - ci-feat-aliyun-datasource-support-crawl-metadata-at-onc.patch [RHEL-88658] - Resolves: RHEL-88658 (Cloud-Init Backport Optimization Features on Alibaba Cloud) - ci-fix-NM-reload-and-bring-up-individual-network-conns-.patch [RHEL-81703] - Resolves: RHEL-81703 (DataSourceNoCloudNet network configuration is ineffective - c9s) - ci-net-sysconfig-do-not-remove-all-existing-settings-of.patch [RHEL-76361] - Resolves: RHEL-76361 ([c9s] cloud-init remove 'NOZEROCONF=yes' from /etc/sysconfig/network) - ci-Use-log_with_downgradable_level-for-user-password-wa.patch [RHEL-71122] - ci-downstream-set-deprecation-boundary-version.patch [RHEL-71122] - Resolves: RHEL-71122 (Suggest to change some log messages from warning to info after rebase cloud-init-24.4 [RHEL-9.6] ) - ci-downstream-Revert-feat-Use-NetworkManager-renderer-b.patch [RHEL-74334] - Resolves: RHEL-74334 ([rhel-9.6] Suggest to continue using sysconfig as the default network renderer in rhel-9.6) - Rebase to 24.4 [RHEL-66251] - Resolves: RHEL-66251 ([RHEL-9] Rebase cloud-init to 24.4 version) - ci-Prevent-NM-from-handling-DNS-when-network-interfaces.patch [RHEL-65768] - Resolves: RHEL-65768 ([RHEL-9] Prevent NM from handling DNS when network interfaces have DNS config) - Add-AlmaLinux-OS-and-CloudLinux-OS-support-to.patch - ci-fix-Pass-interface-string-to-get_newest_lease-6648.patch [RHEL-159095] - ci-fix-cloudstack-Improve-domain-name-DHCP-lease-lookup.patch [RHEL-159095] - ci-downstream-fix-test_cloudstack.py-since-pytest-fixtu.patch [RHEL-159095] - Resolves: RHEL-159095 (CLONE - [GSS][Secure Support] [RHEL-9] cloud-init requests lease before DHCP can provide one [rhel-9.8.z]) - ci-downstream-Do-not-override-changes-in-disable-sshd-k.patch [RHEL-128876] - Resolves: RHEL-128876 ([rhel-9] cloud-init upgrade is overwriting modifications in disable-sshd-keygen-if-cloud-init-active.conf) - ci-fix-Don-t-attempt-to-identify-non-x86-OpenStack-inst.patch [RHEL-100615] - ci-fix-strict-disable-in-ds-identify-on-no-datasources-.patch [RHEL-100615] - Fix missing patch [RHEL-101692] - Resolves: RHEL-100615 (CVE-2024-6174 cloud-init: From CVEorg collector [rhel-9.7]) - Resolves: RHEL-101692 (c9s dist-git missing patch "downstream: Retain exit code in cloud-init status for recoverable errors") - ci-feat-aliyun-datasource-support-crawl-metadata-at-onc.patch [RHEL-88658] - Resolves: RHEL-88658 (Cloud-Init Backport Optimization Features on Alibaba Cloud) - ci-fix-NM-reload-and-bring-up-individual-network-conns-.patch [RHEL-81703] - Resolves: RHEL-81703 (DataSourceNoCloudNet network configuration is ineffective - c9s) - ci-net-sysconfig-do-not-remove-all-existing-settings-of.patch [RHEL-76361] - Resolves: RHEL-76361 ([c9s] cloud-init remove 'NOZEROCONF=yes' from /etc/sysconfig/network) - ci-Use-log_with_downgradable_level-for-user-password-wa.patch [RHEL-71122] - ci-downstream-set-deprecation-boundary-version.patch [RHEL-71122] - Resolves: RHEL-71122 (Suggest to change some log messages from warning to info after rebase cloud-init-24.4 [RHEL-9.6] ) - ci-downstream-Revert-feat-Use-NetworkManager-renderer-b.patch [RHEL-74334] - Resolves: RHEL-74334 ([rhel-9.6] Suggest to continue using sysconfig as the default network renderer in rhel-9.6) - Rebase to 24.4 [RHEL-66251] - Resolves: RHEL-66251 ([RHEL-9] Rebase cloud-init to 24.4 version) - Rebase to 0.33 Resolves: bz#2133248 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - pull in some upstream fixes (PR, previous commit) - use latest %cmake macros - s/define/global/ - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - pull in some upstream fixes (PR, previous commit) - use latest %cmake macros - s/define/global/ - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Enable LTO Resolves: rhbz#1986479 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Enable LTO Resolves: rhbz#1986492 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild Disable LTO - Make clang-rpm-macros requires conditional on rpm-build - macros: Fix missing asterisk in ctest macro - cmake-3.31.8 - Make clang-rpm-macros requires conditional on rpm-build - macros: Fix missing asterisk in ctest macro - cmake-3.31.8 - Make clang-rpm-macros requires conditional on rpm-build - macros: Fix missing asterisk in ctest macro - cmake-3.31.8 - Make clang-rpm-macros requires conditional on rpm-build - macros: Fix missing asterisk in ctest macro - cmake-3.31.8 - Make clang-rpm-macros requires conditional on rpm-build - macros: Fix missing asterisk in ctest macro - cmake-3.31.8 - Make clang-rpm-macros requires conditional on rpm-build - macros: Fix missing asterisk in ctest macro - cmake-3.31.8 - New upstream release - New upstream release - New upstream release Integrates with packit, tmt, and testing farm. - remove empty customizations from blueprint when creating one - New upstream release - New upstream release - Convert license headers to SPDX format - Packaging fixes and translation updates - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Bug fixes and translation updates - Bug fixes and translation updates - Performance and stability improvements - don't initialise a git repo in gating tests (fixes fedora gating) - Translations and dependency updates - Bug fixes and translation updates - CVE-2026-91202 - Don't de-reference a symlink when creating a directory (RHEL-263134) - CVE-2026-91205 - Don't de-reference a symlink when creating a directory (RHEL-263141) - Convert license headers to SPDX format - Packaging fixes and translation updates - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Bug fixes and translation updates - Bug fixes and translation updates - Performance and stability improvements - don't initialise a git repo in gating tests (fixes fedora gating) - Translations and dependency updates - Convert license headers to SPDX format - Bug fixes and translation updates - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Performance improvements - Translation updates - New virtual machines don't get SPICE graphics anymore - Support for network port forwarding - Bug fixes and translation updates - Port forwarding for user session VMs - "Shutdown and restart" action - Faster startup - Memory usage now shows numbers reported by the guest (RHEL-116731) - Bug fixes and translation updates - Improved UX for Disks and Network interface tables - Bug fixes and translation updates - CVE-2026-92768 (RHEL-263127) - CVE-2026-92747 (RHEL-263114) - CVE-2026-92745 (RHEL-263111) - Convert license headers to SPDX format - Bug fixes and translation updates - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Performance improvements - Translation updates - New virtual machines don't get SPICE graphics anymore - Support for network port forwarding - Bug fixes and translation updates - Port forwarding for user session VMs - "Shutdown and restart" action - Faster startup - Memory usage now shows numbers reported by the guest (RHEL-116731) - Bug fixes and translation updates - Convert license headers to SPDX format - Packaging fixes and translation updates - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Dependency updates - Translation and dependency updates - Performance and stability improvements - Translations and dependency updates - Bug fixes and translation updates - Site-specific branding support - Bug fixes and translation updates - systemd: Allow editing timers created by Cockpit - Convert license headers to SPDX format - ws: Remove obsolete pam_cockpit_cert module - shell: add StartTransientUnit as a sudo alternative - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Convert documentation to AsciiDoc - Work around Firefox 146/147 bug (rhbz#2422331) - Bug fixes - Release workflow fixes - Firewall ports can be deleted individually - networking: fix renaming of bridges and other groups (RHEL-117883) - bridge: fix OpenSSH_10.2p1 host key detection - Package manifests: Add `any` test - Bug fixes and translation updates - Bug fixes and translation updates - ws: Prevent remote code execution with SSH argument injection (RHEL-158310) - node: update lodash dependency (RHEL-164196) - systemd: Allow editing timers created by Cockpit - Convert license headers to SPDX format - ws: Remove obsolete pam_cockpit_cert module - shell: add StartTransientUnit as a sudo alternative - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Convert documentation to AsciiDoc - Work around Firefox 146/147 bug (rhbz#2422331) - Bug fixes - Release workflow fixes - Firewall ports can be deleted individually - networking: fix renaming of bridges and other groups (RHEL-117883) - bridge: fix OpenSSH_10.2p1 host key detection - Package manifests: Add `any` test - Bug fixes and translation updates - ws: Prevent remote code execution with SSH argument injection (RHEL-158310) - node: update lodash dependency (RHEL-164196) - systemd: Allow editing timers created by Cockpit - Convert license headers to SPDX format - ws: Remove obsolete pam_cockpit_cert module - shell: add StartTransientUnit as a sudo alternative - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Convert documentation to AsciiDoc - Work around Firefox 146/147 bug (rhbz#2422331) - Bug fixes - Release workflow fixes - Firewall ports can be deleted individually - networking: fix renaming of bridges and other groups (RHEL-117883) - bridge: fix OpenSSH_10.2p1 host key detection - Package manifests: Add `any` test - Bug fixes and translation updates - sosreport: Provide encryption pass via an env variable (RHEL-220573) - ws: Prevent remote code execution with SSH argument injection (RHEL-158310) - node: update lodash dependency (RHEL-164196) - systemd: Allow editing timers created by Cockpit - Convert license headers to SPDX format - ws: Remove obsolete pam_cockpit_cert module - shell: add StartTransientUnit as a sudo alternative - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Convert documentation to AsciiDoc - Work around Firefox 146/147 bug (rhbz#2422331) - Bug fixes - Release workflow fixes - Firewall ports can be deleted individually - networking: fix renaming of bridges and other groups (RHEL-117883) - bridge: fix OpenSSH_10.2p1 host key detection - Convert license headers to SPDX format - Packaging fixes and translation updates - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Release automation bugfix - Bug fixes and translation updates - Performance and stability improvements - Support stopping/starting/restart quadlets - List stopped quadlets - Translations and dependency updates - Bug fixes and translation updates - Rebase to upstream release 20 - Rebase to upstream release 17 - Config: Use authselect enable-feature when possible - Test: Move from CDP to BiDi - Replace jQuery extend() with standard JS spread - Convert to TypeScript - Convert Application to a functional component - package.json: Drop date-fns - Various test fixes and build related fixes - Rebase to upstream release 16 - Config: Add sssd-proxy requirement - Commits from release 15 - Config: Update to authselect with-tlog feature - stylelint: handle stylelint-scss deprecation - Add ruff configuration - package.json: drop flowtype plugin - package.json: drop po2json - package.json: document the required nodejs version - fmf: Plumb through $TEST_* variables for unexpected messages - tests: Use mc for testPlayBinary - package.json: drop deprecated eslint-plugin-standard - Revert "build: add support for /pybridge scenario" - Player: Stop making the Terminal object state - build.js: support flags - packaging: Update spec License: to SPDX format - build.js: Fix LINT env variable check - Tests: Allow charset journal messages - Update to the new root creation function - package.json: Bump stylelint to 15 - test: add check for sssd config id_provider proxy - Tests: Allow invalid non-UTF8 journal messages - Add xterm-canvas-addon dependency for rendering - Minor Eslint fixes - Tests: Update data list to PF5 for testAppMenu - Update org.cockpit-project.session-recording.metainfo.xml - Makefile: bump our test/common dependency - patternfly-5-overrides should be auto-imported by the page.scss file - Drop obsolete pf-m-redhat-font class - Commits from release 14 - Upgrade to PatternFly 5 Alpha - Makefile: Update Cockpit lib to da5abbb4245b0455cc8b610efe01e684 - package.json: Pin down versions of @patternfly/react-{styles,icons} - Makefile: Update Cockpit lib to 947f1753867e3924b9617aaace936225 - Makefile: Fix watch dependencies - Update release.yml - Automate the release process - systemd: Allow editing timers created by Cockpit - Convert license headers to SPDX format - ws: Remove obsolete pam_cockpit_cert module - shell: add StartTransientUnit as a sudo alternative - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Convert documentation to AsciiDoc - Work around Firefox 146/147 bug (rhbz#2422331) - Bug fixes - Release workflow fixes - Firewall ports can be deleted individually - networking: fix renaming of bridges and other groups (RHEL-117883) - bridge: fix OpenSSH_10.2p1 host key detection - Package manifests: Add `any` test - Bug fixes and translation updates - Bug fixes and translation updates - ws: Prevent remote code execution with SSH argument injection (RHEL-158310) - node: update lodash dependency (RHEL-164196) - systemd: Allow editing timers created by Cockpit - Convert license headers to SPDX format - ws: Remove obsolete pam_cockpit_cert module - shell: add StartTransientUnit as a sudo alternative - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Convert documentation to AsciiDoc - Work around Firefox 146/147 bug (rhbz#2422331) - Bug fixes - Release workflow fixes - Firewall ports can be deleted individually - networking: fix renaming of bridges and other groups (RHEL-117883) - bridge: fix OpenSSH_10.2p1 host key detection - Package manifests: Add `any` test - Bug fixes and translation updates - ws: Prevent remote code execution with SSH argument injection (RHEL-158310) - node: update lodash dependency (RHEL-164196) - systemd: Allow editing timers created by Cockpit - Convert license headers to SPDX format - ws: Remove obsolete pam_cockpit_cert module - shell: add StartTransientUnit as a sudo alternative - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Convert documentation to AsciiDoc - Work around Firefox 146/147 bug (rhbz#2422331) - Bug fixes - Release workflow fixes - Firewall ports can be deleted individually - networking: fix renaming of bridges and other groups (RHEL-117883) - bridge: fix OpenSSH_10.2p1 host key detection - Package manifests: Add `any` test - Bug fixes and translation updates - sosreport: Provide encryption pass via an env variable (RHEL-220573) - ws: Prevent remote code execution with SSH argument injection (RHEL-158310) - node: update lodash dependency (RHEL-164196) - systemd: Allow editing timers created by Cockpit - Convert license headers to SPDX format - ws: Remove obsolete pam_cockpit_cert module - shell: add StartTransientUnit as a sudo alternative - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Convert documentation to AsciiDoc - Work around Firefox 146/147 bug (rhbz#2422331) - Bug fixes - Release workflow fixes - Firewall ports can be deleted individually - networking: fix renaming of bridges and other groups (RHEL-117883) - bridge: fix OpenSSH_10.2p1 host key detection - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.22.8 - Update to 1.22.6 - Fix building against libglvnd-provided EGL headers - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Bump release to match upstream - Provide a sysusers.d file - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Bump release to match upstream - Provide a sysusers.d file - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Import from RHEL 8 and old Fedora; port to libidn2 - Resolves: #1944157 - build with -Wl,-z,relro,-z,now (#2044834) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - bump for rebuild - invoke make with MAKEINFO=missing (#1951315) - use power7 cpu/tuning and filter out -march=z14 -mtune=z15 (#1951315) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - new compat library - Fixes CVE-2025-69419 OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing Resolves: RHEL-142723 - Fixes cve-2023-0286 X.400 address type confusion in X.509 GeneralName Resolves: RHEL-88969 - Fixes CVE-2026-28390: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing Resolves: RHEL-165863 - Fixes CVE-2025-69419 OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing Resolves: RHEL-142723 - Fixes cve-2023-0286 X.400 address type confusion in X.509 GeneralName Resolves: RHEL-88969 - Fixes CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() - Fixes CVE-2026-28390: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing Resolves: RHEL-165863 - Fixes CVE-2025-69419 OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing Resolves: RHEL-142723 - Fixes cve-2023-0286 X.400 address type confusion in X.509 GeneralName Resolves: RHEL-88969 - Fixes CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset Resolves: RHEL-265517 - Fixes CVE-2026-63072: Heap buffer overflow in CMS key unwrapping Resolves: RHEL-246280 - Fixes CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() - Fixes CVE-2026-28390: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing Resolves: RHEL-165863 - Fixes CVE-2025-69419 OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing Resolves: RHEL-142723 - Fixes cve-2023-0286 X.400 address type confusion in X.509 GeneralName Resolves: RHEL-88969 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves:rhbz#1962000 - Add missing gating tests - Resolves:rhbz#1962000 - Add gating tests from rhel-8 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 20141121-18 - Fix this spec file to build for F33+ - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 20141121-16 🐞 Workaround Fedora problems created by rpm commit 93604e2 - 20141121-15 💥 Actually rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are valid - 20141121-14 👻 Rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are valid - Remove compat libs for LLVM 20 - Update LLVM Toolset to 21.1.8 [rhel-9] - Update to 21.1.7 - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683) - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037) - Backport fix for build of highway package on ppc64le (rhbz#2383182) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to LLVM 20.1.8 - Add riscv64 enablement bits; thanks: Songsong Zhang (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com) - Update to LLVM 20.1.7 - Fix llvm-config alternatives handling (rhbz#2361779) - Use libdir suffix in versioned prefix - update to https://github.com/containers/composefs/releases/tag/v1.0.7 - Related: RHEL-60277 - update to https://github.com/containers/composefs/releases/tag/v1.0.7 - Related: RHEL-60277 - update to https://github.com/containers/conmon/releases/tag/v2.2.1 - enable RELRO - Related: RHEL-111919 - update to https://github.com/containers/conmon/releases/tag/v2.2.0 - Resolves: RHEL-147114 - update to https://github.com/containers/conmon/releases/tag/v2.1.13 - Resolves: RHEL-80820 - update to https://github.com/containers/conmon/releases/tag/v2.1.12 - Related: RHEL-27608 - update to https://github.com/containers/conmon/releases/tag/v2.1.11 - Related: RHEL-27608 - bump epoch to preserve upgrade path from rhel 8.10 - Related: RHEL-31950 - reset create_pid after waitpid to prevent signaling unrelated processes - Resolves: RHEL-178025 - update to https://github.com/containers/conmon/releases/tag/v2.2.1 - enable RELRO - Related: RHEL-111919 - update to https://github.com/containers/conmon/releases/tag/v2.2.0 - Resolves: RHEL-147114 - update to https://github.com/containers/conmon/releases/tag/v2.1.13 - Resolves: RHEL-80820 - Bump release for RHEL9.5 - conntrack: Fix potential array out of bounds access - Explicitly depend on libnetfilter_conntrack-1.0.9 - config: Fix -Wimplicit-function-declaration - network: Fix -Wstrict-prototypes - build: don't suppress various warnings - build: conntrack-tools requires libnetfilter_conntrack >= 1.0.9 - New version 1.4.7 - conntrackd: set default hashtable buckets and max entries if not specified - Update to 0.21.3 - Remove requirement for `fedora-release` and require `/etc/issue.d` - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Update to 0.21.2 - Rebuilt for updated systemd-rpm-macros See https://pagure.io/fesco/issue/2583. - Make scripts subpackage-specific, addresses #1929844 - Update to 0.21.1 - Update to 0.21 - Require util-linux >= 2.36-1 - Remove files related to the issuegen and motdgen executables - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 0.20.3 - Update to 0.21.3 - Remove requirement for `fedora-release` and require `/etc/issue.d` - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Update to 0.21.2 - Rebuilt for updated systemd-rpm-macros See https://pagure.io/fesco/issue/2583. - Make scripts subpackage-specific, addresses #1929844 - Update to 0.21.1 - Update to 0.21 - Require util-linux >= 2.36-1 - Remove files related to the issuegen and motdgen executables - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 0.20.3 - Update to 0.21.3 - Remove requirement for `fedora-release` and require `/etc/issue.d` - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Update to 0.21.2 - Rebuilt for updated systemd-rpm-macros See https://pagure.io/fesco/issue/2583. - Make scripts subpackage-specific, addresses #1929844 - Update to 0.21.1 - Update to 0.21 - Require util-linux >= 2.36-1 - Remove files related to the issuegen and motdgen executables - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 0.20.3 - Update to 0.21.3 - Remove requirement for `fedora-release` and require `/etc/issue.d` - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Update to 0.21.2 - Rebuilt for updated systemd-rpm-macros See https://pagure.io/fesco/issue/2583. - Make scripts subpackage-specific, addresses #1929844 - Update to 0.21.1 - Update to 0.21 - Require util-linux >= 2.36-1 - Remove files related to the issuegen and motdgen executables - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 0.20.3 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to latest upstream version Resolves: #1911871 - Update to latest upstream version Resolves: #1902975 - Update to latest upstream version Resolves: #1893002 - Update to latest upstream version Resolves: #1881276 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to latest upstream version Resolves: #1856118 - Update to latest upstream version Resolves: #1817552 - update to https://github.com/containers/container-selinux/releases/tag/v2.245.0 - Related: RHEL-111919 - update to https://github.com/containers/container-selinux/releases/tag/v2.244.0 - Resolves: RHEL-112187 - update to https://github.com/containers/container-selinux/releases/tag/v2.242.0 - Related: RHEL-111919 - update to https://github.com/containers/container-selinux/releases/tag/v2.241.0 - Resolves: RHEL-112187 - update to https://github.com/containers/container-selinux/releases/tag/v2.240.0 - Related: RHEL-80816 - update to https://github.com/containers/container-selinux/releases/tag/v2.239.0 - Related: RHEL-80816 - update to https://github.com/containers/container-selinux/releases/tag/v2.238.0 - Related: RHEL-80816 - update to https://github.com/containers/container-selinux/releases/tag/v2.237.0 - Related: RHEL-80816 - update to https://github.com/containers/container-selinux/releases/tag/v2.236.0 - Resolves: RHEL-80473 - sync TMT tests and plan from upstream - Resolves: RHEL-80816 - update to https://github.com/containers/container-selinux/releases/tag/v2.247.0 - Resolves: RHEL-170604 - update to https://github.com/containers/container-selinux/releases/tag/v2.245.0 - Related: RHEL-111919 - update to https://github.com/containers/container-selinux/releases/tag/v2.244.0 - Resolves: RHEL-112187 - update to https://github.com/containers/container-selinux/releases/tag/v2.242.0 - Related: RHEL-111919 - update to https://github.com/containers/container-selinux/releases/tag/v2.241.0 - Resolves: RHEL-112187 - update to https://github.com/containers/container-selinux/releases/tag/v2.240.0 - Related: RHEL-80816 - update to https://github.com/containers/container-selinux/releases/tag/v2.239.0 - Related: RHEL-80816 - update to https://github.com/containers/container-selinux/releases/tag/v2.238.0 - Related: RHEL-80816 - update to https://github.com/containers/container-selinux/releases/tag/v2.237.0 - Related: RHEL-80816 - update to https://github.com/containers/container-selinux/releases/tag/v2.236.0 - Resolves: RHEL-80473 - Fix typo in package Summary - Resolves: RHEL-124398 - rebuild with updated dependencies: [python-]podman 4.8.0, buildah 1.33.2, skopeo 1.14.0, aardvark-dns and netavark 1.9.0 - Related: Jira:RHEL-2112 - Rebuild for new golang to address CVE-2025-61726 - Resolves: RHEL-146101 - update to https://github.com/containernetworking/plugins/releases/tag/v1.9.0 - Related: RHEL-111919 - update to https://github.com/containernetworking/plugins/releases/tag/v1.8.0 - Related: RHEL-111919 - rebuild for CVE-2025-22871 - Resolves: RHEL-90030 - update to https://github.com/containernetworking/plugins/releases/tag/v1.7.1 - Resolves: RHEL-89428 - update to https://github.com/containernetworking/plugins/releases/tag/v1.6.2 - Related: RHEL-60277 - update to https://github.com/containernetworking/plugins/releases/tag/v1.6.1 - Related: RHEL-60277 - update to https://github.com/containernetworking/plugins/releases/tag/v1.6.0 - Related: RHEL-60277 - rebuild for CVE-2024-24791 - Resolves: RHEL-47166 - update to https://github.com/containernetworking/plugins/releases/tag/v1.5.1 - Related: RHEL-27608 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158763 - Rebuild for new golang to address CVE-2025-61726 - Resolves: RHEL-146101 - update to https://github.com/containernetworking/plugins/releases/tag/v1.9.0 - Related: RHEL-111919 - update to https://github.com/containernetworking/plugins/releases/tag/v1.8.0 - Related: RHEL-111919 - rebuild for CVE-2025-22871 - Resolves: RHEL-90030 - update to https://github.com/containernetworking/plugins/releases/tag/v1.7.1 - Resolves: RHEL-89428 - update to https://github.com/containernetworking/plugins/releases/tag/v1.6.2 - Related: RHEL-60277 - update to https://github.com/containernetworking/plugins/releases/tag/v1.6.1 - Related: RHEL-60277 - update to https://github.com/containernetworking/plugins/releases/tag/v1.6.0 - Related: RHEL-60277 - rebuild for CVE-2024-24791 - Resolves: RHEL-47166 - rebuild for CVE-2026-56853 CVE-2026-56858 CVE-2026-56862 CVE-2026-56860 CVE-2026-33818 - Resolves: RHEL-241203 - Resolves: RHEL-241309 - Resolves: RHEL-241445 - Resolves: RHEL-241826 - Resolves: RHEL-242374 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158763 - Rebuild for new golang to address CVE-2025-61726 - Resolves: RHEL-146101 - update to https://github.com/containernetworking/plugins/releases/tag/v1.9.0 - Related: RHEL-111919 - update to https://github.com/containernetworking/plugins/releases/tag/v1.8.0 - Related: RHEL-111919 - rebuild for CVE-2025-22871 - Resolves: RHEL-90030 - update to https://github.com/containernetworking/plugins/releases/tag/v1.7.1 - Resolves: RHEL-89428 - update to https://github.com/containernetworking/plugins/releases/tag/v1.6.2 - Related: RHEL-60277 - update to https://github.com/containernetworking/plugins/releases/tag/v1.6.1 - Related: RHEL-60277 - update to https://github.com/containernetworking/plugins/releases/tag/v1.6.0 - Related: RHEL-60277 - convert to container_libs - Related: RHEL-111919 - do not allow the shortname to contain registry - Related: RHEL-111919 - update shortnames and vendored components for RHEL-9.8 - Resolves: RHEL-146878 - Update rhel-shortnames-overrides to include complete list of UBI/RHEL images - Related: RHEL-111919 - update vendored components for RHEL9.7 - Related: RHEL-80816 - update shortnames and vendored components - Related: RHEL-80816 - update vendored components - Related: RHEL-80816 - fetch TMT podman revdep tests from podman dist-git - needs at least podman 5.4.0-8.el9 - Related: RHEL-80816 - rebuild to preserve upgrade path - Related: RHEL-80816 - add files section for extra subpackage - Resolves: RHEL-80525 - convert to container_libs - Related: RHEL-111919 - do not allow the shortname to contain registry - Related: RHEL-111919 - update shortnames and vendored components for RHEL-9.8 - Resolves: RHEL-146878 - Update rhel-shortnames-overrides to include complete list of UBI/RHEL images - Related: RHEL-111919 - update vendored components for RHEL9.7 - Related: RHEL-80816 - update shortnames and vendored components - Related: RHEL-80816 - update vendored components - Related: RHEL-80816 - fetch TMT podman revdep tests from podman dist-git - needs at least podman 5.4.0-8.el9 - Related: RHEL-80816 - rebuild to preserve upgrade path - Related: RHEL-80816 - add files section for extra subpackage - Resolves: RHEL-80525 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves:rhbz#1961994 - Add gating tests from rhel-8 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Specify all perl dependencies - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - added requires and orderWithRequires of findutils to provide find and xargs (rh1965305) - bumped to 4.0 to resolve remvoed rpm 4.17 removing arg from global table - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for lua 5.4.0. - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - new version - Backport https://github.com/coreos/coreos-installer/pull/1699 - new version - Use the full path for the 'root=' kernel arg when rootfs on mpath Backport https://github.com/coreos/coreos-installer/pull/1677 - Restore single-decimal precision to stream output Backport https://github.com/coreos/coreos-installer/pull/1654 - Update to latest upstream - new version - New upstream release - new version - Backport https://github.com/coreos/coreos-installer/pull/1699 - new version - Use the full path for the 'root=' kernel arg when rootfs on mpath Backport https://github.com/coreos/coreos-installer/pull/1677 - Restore single-decimal precision to stream output Backport https://github.com/coreos/coreos-installer/pull/1654 - Update to latest upstream - new version - New upstream release - new version - Backport https://github.com/coreos/coreos-installer/pull/1699 - new version - Use the full path for the 'root=' kernel arg when rootfs on mpath Backport https://github.com/coreos/coreos-installer/pull/1677 - Restore single-decimal precision to stream output Backport https://github.com/coreos/coreos-installer/pull/1654 - Update to latest upstream - new version - New upstream release - Resolves: RHEL-122942 - New upstream release (RHEL-122942) - Resolves: RHEL-84616 - totemsrp: Check size of orf_token msg (fixes CVE-2025-30472) - Resolves: RHEL-65699 - New upstream release (RHEL-65699) - Resolves: RHEL-24163 - Report crypto errors back to cfg reload (RHEL-24163) - Resolves: RHEL-163816 - Resolves: RHEL-163837 - totemsrp: Return error if sanity check fails (fixes CVE-2026-35091) - totemsrp: Fix integer overflow in memb_join_sanity (fixes CVE-2026-35092) - Resolves: RHEL-122942 - New upstream release (RHEL-122942) - Resolves: RHEL-84616 - totemsrp: Check size of orf_token msg (fixes CVE-2025-30472) - Resolves: RHEL-65699 - New upstream release (RHEL-65699) - Resolves: RHEL-24163 - Report crypto errors back to cfg reload (RHEL-24163) - Resolves: RHEL-251542 - totempg: Replace assert with check in deliver_fn (fixes CVE-2026-81665) - Resolves: RHEL-163816 - Resolves: RHEL-163837 - totemsrp: Return error if sanity check fails (fixes CVE-2026-35091) - totemsrp: Fix integer overflow in memb_join_sanity (fixes CVE-2026-35092) - Resolves: RHEL-122942 - New upstream release (RHEL-122942) - Resolves: RHEL-84616 - totemsrp: Check size of orf_token msg (fixes CVE-2025-30472) - Resolves: RHEL-65699 - New upstream release (RHEL-65699) - Debrand for AlmaLinux - Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding branches and calls to gcov output, but not conditions (RHEL-105416). - Fix testsuite failures when run with -fstack-protector* (PR testsuite/70230, RHEL-116477) - Add cross compilers for ppc64le and s390x for non-production uses (RHEL-94764) - Adjust glibc32 build dependency (RHEL-105072) - Exception handling performance improvements (RHEL-105072) - libgcc: Use _dl_find_object to find DWARF data in unwinder - libgcc: Use lock-free data structures for run-time unwinder registration - Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-100148). - Sync libstdc++ pretty printers to latest GTS (RHEL-81975) - Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90239) - rs6000: Rework ELFv2 support for -fpatchable-function-entry (PR target/99888, RHEL-75806) - Debrand for AlmaLinux - Rebase to upstream crash 9.0.1 - Add blk_mq shared tags support for dev -d/-D - x86_64: filter unwanted warning message for "bt -T" cmd - doc: Update requirements for building on Fedora - gdb: Fix a regression for eppic extension on gdb-16.2 - Fix crash initialization failure on LoongArch with recent GDB versions - gdb: Disable DT_DEBUG lookup by GDB inside the vmcore - vmware_guestdump: Version 7 support - Fix incorrect task state during exit - Add multi-threads support in crash target - Call cmd_bt silently after "set pid" - x86_64: Add gdb multi-stack unwind support - arm64: Add gdb multi-stack unwind support - ppc64: Add gdb multi-stack unwind support - Fix the issue of "page excluded" messages flooding - Fix "kmem -p" option on Linux 6.16-rc1 and later kernels - Rebase to upstream crash 9.0.0 - Rebase to upstream crash 8.0.6 - Rebase to upstream crash 8.0.5 - Rebase to latest upstream e03ff7341a9a - Rebase to upstream 1.6.4 - Support module memory layout change on Linux 6.4 - Rebuild for the compatibility issue - Fix the hardening issue "FAIL: bind-now test because not linked with -Wl,-z,now" - Add git build require, needed for binary patches (RHEL-67689) - Add zstd compression support (RHEL-67689) - Change test to compare contents instead of checksum, cleanup (RhBug:2130179) - Add git build require, needed for binary patches (RHEL-67689) - Add zstd compression support (RHEL-67689) - Change test to compare contents instead of checksum, cleanup (RhBug:2130179) - Added patch to correctly handle SELinux labels in Kubernetes - Added latest upstream rseq patch - Update to 3.19 - Drop upstreamed patches - Handle rseq in generic compel code (checkpoint-restore/criu#3097) - Added patch to correctly handle SELinux labels in Kubernetes - Added latest upstream rseq patch - Added patch to correctly handle SELinux labels in Kubernetes - Added latest upstream rseq patch - Update to 3.19 - Drop upstreamed patches - Handle rseq in generic compel code (checkpoint-restore/criu#3097) - Added patch to correctly handle SELinux labels in Kubernetes - Added latest upstream rseq patch - Added patch to correctly handle SELinux labels in Kubernetes - Added latest upstream rseq patch - Update to 3.19 - Drop upstreamed patches - Handle rseq in generic compel code (checkpoint-restore/criu#3097) - Added patch to correctly handle SELinux labels in Kubernetes - Added latest upstream rseq patch - update to https://github.com/containers/crun/releases/tag/1.27 - fixes CVE-2026-30892 crun: crun: Privilege escalation due to incorrect parsing of the `--user` option [rhel-9.8] - Resolves: RHEL-161441 - update to https://github.com/containers/crun/releases/tag/1.26 - Resolves: RHEL-143228 - update to https://github.com/containers/crun/releases/tag/1.24 - Related: RHEL-111919 - update to https://github.com/containers/crun/releases/tag/1.23.1 - Related: RHEL-80816 - update to https://github.com/containers/crun/releases/tag/1.23 - Related: RHEL-80816 - update to https://github.com/containers/crun/releases/tag/1.22 - Related: RHEL-80816 - update to https://github.com/containers/crun/releases/tag/1.21 - Related: RHEL-80816 - fix gating.yaml - Related: RHEL-80816 - update to https://github.com/containers/crun/releases/tag/1.20 - Related: RHEL-60277 - update to https://github.com/containers/crun/releases/tag/1.19.1 - Related: RHEL-60277 - Update cscope to 15.9-26 from Fedora (RHEL-65465) - Fix signal handling at exit - Minor edits in the rpm scripts and the changelog - Make xemacs a bcond - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - RHEL-147214 - endless poll loop in http_write when POLLHUP is returned - RHEL-129747 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack - RHEL-129740 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues - RHEL-122629 [image-mode] Missing /var/log/cups - RHEL-102665 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file - RHEL-112435 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling - RHEL-113078 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS - Add NoSystem SSLOptions value - RHEL-68414 Inability to disable weak ciphers in CUPS configuration - RHEL-60343 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file - RHEL-6526 cups source rpm doesn't actually build lspp support - fix memory leaks from LSPP - Revert the cups-libs license identifier to the "legacy" format - RHEL-177957 CVE-2026-34980 cups: control character injection in option values - RHEL-147214 - endless poll loop in http_write when POLLHUP is returned - RHEL-129747 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack - RHEL-129740 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues - RHEL-122629 [image-mode] Missing /var/log/cups - RHEL-102665 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file - RHEL-112435 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling - RHEL-113078 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS - Add NoSystem SSLOptions value - RHEL-68414 Inability to disable weak ciphers in CUPS configuration - RHEL-60343 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file - RHEL-6526 cups source rpm doesn't actually build lspp support - fix memory leaks from LSPP - RHEL-147214 - endless poll loop in http_write when POLLHUP is returned - RHEL-129747 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack - RHEL-129740 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues - RHEL-122629 [image-mode] Missing /var/log/cups - RHEL-102665 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file - RHEL-112435 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling - RHEL-113078 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS - Add NoSystem SSLOptions value - RHEL-68414 Inability to disable weak ciphers in CUPS configuration - RHEL-60343 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file - RHEL-6526 cups source rpm doesn't actually build lspp support - fix memory leaks from LSPP - Revert the cups-libs license identifier to the "legacy" format - RHEL-177957 CVE-2026-34980 cups: control character injection in option values - RHEL-147214 - endless poll loop in http_write when POLLHUP is returned - RHEL-129747 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack - RHEL-129740 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues - RHEL-122629 [image-mode] Missing /var/log/cups - RHEL-102665 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file - RHEL-112435 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling - RHEL-113078 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS - Add NoSystem SSLOptions value - RHEL-68414 Inability to disable weak ciphers in CUPS configuration - RHEL-60343 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file - RHEL-6526 cups source rpm doesn't actually build lspp support - fix memory leaks from LSPP - RHEL-147214 - endless poll loop in http_write when POLLHUP is returned - RHEL-129747 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack - RHEL-129740 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues - RHEL-122629 [image-mode] Missing /var/log/cups - RHEL-102665 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file - RHEL-112435 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling - RHEL-113078 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS - Add NoSystem SSLOptions value - RHEL-68414 Inability to disable weak ciphers in CUPS configuration - RHEL-60343 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file - RHEL-6526 cups source rpm doesn't actually build lspp support - fix memory leaks from LSPP - Revert the cups-libs license identifier to the "legacy" format - RHEL-177957 CVE-2026-34980 cups: control character injection in option values - RHEL-147214 - endless poll loop in http_write when POLLHUP is returned - RHEL-129747 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack - RHEL-129740 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues - RHEL-122629 [image-mode] Missing /var/log/cups - RHEL-102665 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file - RHEL-112435 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling - RHEL-113078 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS - Add NoSystem SSLOptions value - RHEL-68414 Inability to disable weak ciphers in CUPS configuration - RHEL-60343 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file - RHEL-6526 cups source rpm doesn't actually build lspp support - fix memory leaks from LSPP - RHEL-147214 - endless poll loop in http_write when POLLHUP is returned - RHEL-129747 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack - RHEL-129740 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues - RHEL-122629 [image-mode] Missing /var/log/cups - RHEL-102665 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file - RHEL-112435 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling - RHEL-113078 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS - Add NoSystem SSLOptions value - RHEL-68414 Inability to disable weak ciphers in CUPS configuration - RHEL-60343 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file - RHEL-6526 cups source rpm doesn't actually build lspp support - fix memory leaks from LSPP - Revert the cups-libs license identifier to the "legacy" format - RHEL-177957 CVE-2026-34980 cups: control character injection in option values - RHEL-147214 - endless poll loop in http_write when POLLHUP is returned - RHEL-129747 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack - RHEL-129740 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues - RHEL-122629 [image-mode] Missing /var/log/cups - RHEL-102665 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file - RHEL-112435 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling - RHEL-113078 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS - Add NoSystem SSLOptions value - RHEL-68414 Inability to disable weak ciphers in CUPS configuration - RHEL-60343 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file - RHEL-6526 cups source rpm doesn't actually build lspp support - fix memory leaks from LSPP - RHEL-117507 cups-filter: output of landscape print have the top and left portions cut off - fix return value when libppd is not used - fix posttrans script - RHEL-93931 RFE: Add Allow list for FoomaticRIPCommandLine PPD values - RHEL-65587 texttopdf omits Chinese characters when creating PDF documents - RHEL-6519 RFE: Synchronize server defaults with clients - RHEL-70015 Double-sided printing issues on Thunderbird or Firefox // HP printers - RHEL-17124 [cups-browsed] Prints to remote RAW queues are converted to PDF documents - CVE-2024-47175 cups-filters: remote command injection via attacker controlled data in PPD file - CVE-2024-47076 cups-filters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes - CVE-2024-47176 cups-filters: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source - RHEL-46785 - fix errors during installability tests about modified cups-browsed.conf - CVE-2026-64612 cups-filters: handle libpng errors via longjmp()/setjmp() to prevent process abort on malformed PNG files - RHEL-117507 cups-filter: output of landscape print have the top and left portions cut off - fix return value when libppd is not used - fix posttrans script - RHEL-93931 RFE: Add Allow list for FoomaticRIPCommandLine PPD values - RHEL-65587 texttopdf omits Chinese characters when creating PDF documents - RHEL-6519 RFE: Synchronize server defaults with clients - RHEL-70015 Double-sided printing issues on Thunderbird or Firefox // HP printers - RHEL-17124 [cups-browsed] Prints to remote RAW queues are converted to PDF documents - CVE-2024-47175 cups-filters: remote command injection via attacker controlled data in PPD file - CVE-2024-47076 cups-filters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes - CVE-2024-47176 cups-filters: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source - RHEL-117507 cups-filter: output of landscape print have the top and left portions cut off - fix return value when libppd is not used - fix posttrans script - RHEL-93931 RFE: Add Allow list for FoomaticRIPCommandLine PPD values - RHEL-65587 texttopdf omits Chinese characters when creating PDF documents - RHEL-6519 RFE: Synchronize server defaults with clients - RHEL-70015 Double-sided printing issues on Thunderbird or Firefox // HP printers - RHEL-17124 [cups-browsed] Prints to remote RAW queues are converted to PDF documents - CVE-2024-47175 cups-filters: remote command injection via attacker controlled data in PPD file - CVE-2024-47076 cups-filters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes - CVE-2024-47176 cups-filters: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source - RHEL-46785 - fix errors during installability tests about modified cups-browsed.conf - CVE-2026-64612 cups-filters: handle libpng errors via longjmp()/setjmp() to prevent process abort on malformed PNG files - RHEL-117507 cups-filter: output of landscape print have the top and left portions cut off - fix return value when libppd is not used - fix posttrans script - RHEL-93931 RFE: Add Allow list for FoomaticRIPCommandLine PPD values - RHEL-65587 texttopdf omits Chinese characters when creating PDF documents - RHEL-6519 RFE: Synchronize server defaults with clients - RHEL-70015 Double-sided printing issues on Thunderbird or Firefox // HP printers - RHEL-17124 [cups-browsed] Prints to remote RAW queues are converted to PDF documents - CVE-2024-47175 cups-filters: remote command injection via attacker controlled data in PPD file - CVE-2024-47076 cups-filters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes - CVE-2024-47176 cups-filters: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source - RHEL-147214 - endless poll loop in http_write when POLLHUP is returned - RHEL-129747 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack - RHEL-129740 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues - RHEL-122629 [image-mode] Missing /var/log/cups - RHEL-102665 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file - RHEL-112435 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling - RHEL-113078 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS - Add NoSystem SSLOptions value - RHEL-68414 Inability to disable weak ciphers in CUPS configuration - RHEL-60343 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file - RHEL-6526 cups source rpm doesn't actually build lspp support - fix memory leaks from LSPP - Revert the cups-libs license identifier to the "legacy" format - RHEL-177957 CVE-2026-34980 cups: control character injection in option values - RHEL-147214 - endless poll loop in http_write when POLLHUP is returned - RHEL-129747 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack - RHEL-129740 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues - RHEL-122629 [image-mode] Missing /var/log/cups - RHEL-102665 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file - RHEL-112435 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling - RHEL-113078 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS - Add NoSystem SSLOptions value - RHEL-68414 Inability to disable weak ciphers in CUPS configuration - RHEL-60343 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file - RHEL-6526 cups source rpm doesn't actually build lspp support - fix memory leaks from LSPP - RHEL-147214 - endless poll loop in http_write when POLLHUP is returned - RHEL-129747 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack - RHEL-129740 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues - RHEL-122629 [image-mode] Missing /var/log/cups - RHEL-102665 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file - RHEL-112435 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling - RHEL-113078 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS - Add NoSystem SSLOptions value - RHEL-68414 Inability to disable weak ciphers in CUPS configuration - RHEL-60343 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file - RHEL-6526 cups source rpm doesn't actually build lspp support - fix memory leaks from LSPP - Revert the cups-libs license identifier to the "legacy" format - RHEL-177957 CVE-2026-34980 cups: control character injection in option values - RHEL-147214 - endless poll loop in http_write when POLLHUP is returned - RHEL-129747 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack - RHEL-129740 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues - RHEL-122629 [image-mode] Missing /var/log/cups - RHEL-102665 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file - RHEL-112435 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling - RHEL-113078 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS - Add NoSystem SSLOptions value - RHEL-68414 Inability to disable weak ciphers in CUPS configuration - RHEL-60343 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file - RHEL-6526 cups source rpm doesn't actually build lspp support - fix memory leaks from LSPP - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Remove redundant dependency on polkit-gnome - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - RHEL-147214 - endless poll loop in http_write when POLLHUP is returned - RHEL-129747 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack - RHEL-129740 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues - RHEL-122629 [image-mode] Missing /var/log/cups - RHEL-102665 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file - RHEL-112435 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling - RHEL-113078 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS - Add NoSystem SSLOptions value - RHEL-68414 Inability to disable weak ciphers in CUPS configuration - RHEL-60343 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file - RHEL-6526 cups source rpm doesn't actually build lspp support - fix memory leaks from LSPP - Revert the cups-libs license identifier to the "legacy" format - RHEL-177957 CVE-2026-34980 cups: control character injection in option values - RHEL-147214 - endless poll loop in http_write when POLLHUP is returned - RHEL-129747 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack - RHEL-129740 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues - RHEL-122629 [image-mode] Missing /var/log/cups - RHEL-102665 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file - RHEL-112435 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling - RHEL-113078 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS - Add NoSystem SSLOptions value - RHEL-68414 Inability to disable weak ciphers in CUPS configuration - RHEL-60343 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file - RHEL-6526 cups source rpm doesn't actually build lspp support - fix memory leaks from LSPP - Rebase to v82 - Resolve: RHEL-97669 - Add explicit package version requirements. (Jeff Moyer) - Related: RHEL-29151 - Rebase to v78 - Add support for legacy monitor.conf file location - Fix a test failure. - Resolves: RHEL-10382 - Resolves: RHEL-8204 - Resolves: RHEL-29151 - Create directory structure under /var using tmpfiles.d Resolves: RHEL-129881 - Remove sscg option --package from cyrus-imapd-init.service Resolves: RHEL-132242 - tls: enable automatic DH parameter selection Resolves: RHEL-70762 - Update to 3.4.8, fixing CVE-2024-34055 - Resolves: RHEL-20925 - Seen/Unseen Flag not working correctly for shared mailboxes - cyrus-imapd.spec: rename patches to correspond with others - Create directory structure under /var using tmpfiles.d Resolves: RHEL-129881 - Remove sscg option --package from cyrus-imapd-init.service Resolves: RHEL-132242 - tls: enable automatic DH parameter selection Resolves: RHEL-70762 - Update to 3.4.8, fixing CVE-2024-34055 - Resolves: RHEL-20925 - Seen/Unseen Flag not working correctly for shared mailboxes - cyrus-imapd.spec: rename patches to correspond with others - Create directory structure under /var using tmpfiles.d Resolves: RHEL-129881 - Remove sscg option --package from cyrus-imapd-init.service Resolves: RHEL-132242 - tls: enable automatic DH parameter selection Resolves: RHEL-70762 - Update to 3.4.8, fixing CVE-2024-34055 - Resolves: RHEL-20925 - Seen/Unseen Flag not working correctly for shared mailboxes - cyrus-imapd.spec: rename patches to correspond with others - Remove debug log spam in digestmd5 plugin (RHEL-82172) - Remove debug log spam in digestmd5 plugin (RHEL-82172) - Remove debug log spam in digestmd5 plugin (RHEL-82172) - Remove debug log spam in digestmd5 plugin (RHEL-82172) - Remove debug log spam in digestmd5 plugin (RHEL-82172) - Remove debug log spam in digestmd5 plugin (RHEL-82172) - Rebase to v82 - Resolve: RHEL-97669 - Add explicit package version requirements. (Jeff Moyer) - Related: RHEL-29151 - Rebase to v78 - Add support for legacy monitor.conf file location - Fix a test failure. - Resolves: RHEL-10382 - Resolves: RHEL-8204 - Resolves: RHEL-29151 - Fix CVE-2023-34969 (#2213402) - Fix CVE-2022-42010 (#2133647) - Fix CVE-2022-42011 (#2133641) - Fix CVE-2022-42012 (#2133635) - Override upstream sysusers.d confguration (#2118226) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix CVE-2023-34969 (#2213402) - Fix CVE-2022-42010 (#2133647) - Fix CVE-2022-42011 (#2133641) - Fix CVE-2022-42012 (#2133635) - Override upstream sysusers.d confguration (#2118226) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fix CVE-2023-34969 (#2213402) - Fix CVE-2022-42010 (#2133647) - Fix CVE-2022-42011 (#2133641) - Fix CVE-2022-42012 (#2133635) - Override upstream sysusers.d confguration (#2118226) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Backport patch for permissions restore - Indicate bundle of GVDB - Resolves: #1974362 - Use full path for dconf in posttrans script (#1950829) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Avoid hardcoding man page compression - Update to 0.40.0 - Update to 0.39.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 0.38.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 3.38.3 - Remove old conflicts with dconf package - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 3.38.2 - Update to 3.38.0 - Update to 3.37.91 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 3.36.4 - Update to 3.36.2 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fix CVE-2018-19655 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use __cc macro instead of hard-coding gcc - Update to the latest version (RHEL-77191). - Add 0001-Add-basic-find-debuginfo-script-tests.patch - Add debugedit-5.0-find-debuginfo-tests-fixups.patch - Add 0006-pr32157-handle-dwarf5-DW_UT_type-unit-type-2.patch - Add 0001-find-debuginfo-Fix-skip_mini-.gnu_debugdata-handling.patch - Add 0001-debug_str_offsets-header-version-and-padding-are-2-b.patch - Add 0001-debugedit-Handle-unused-.debug_str_offsets-entries.patch - Add 0005-writable.patch - Add 0003-elf_strptr.patch - Add 0004-compress.patch - Add 0001-debugedit-Add-support-for-.debug_str_offsets-DW_FORM.patch - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 2.37-15 - Fix this spec file to build for F33+ - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 2.37-13 🐞 Workaround Fedora problems created by rpm commit 93604e2 - 2.37-12 👻 Rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are valid - 2.37-7 ✅ Remove F32 compatibility packages - 2.37-6 ✅ Lint, lint, lint and lint again - 2.37-5 ✅ Rebuild with fonts-rpm-macros 2.0.2 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 2.37-15 - Fix this spec file to build for F33+ - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 2.37-13 🐞 Workaround Fedora problems created by rpm commit 93604e2 - 2.37-12 👻 Rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are valid - 2.37-7 ✅ Remove F32 compatibility packages - 2.37-6 ✅ Lint, lint, lint and lint again - 2.37-5 ✅ Rebuild with fonts-rpm-macros 2.0.2 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 2.37-15 - Fix this spec file to build for F33+ - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 2.37-13 🐞 Workaround Fedora problems created by rpm commit 93604e2 - 2.37-12 👻 Rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are valid - 2.37-7 ✅ Remove F32 compatibility packages - 2.37-6 ✅ Lint, lint, lint and lint again - 2.37-5 ✅ Rebuild with fonts-rpm-macros 2.0.2 - Update to Delve 1.26.1 - Resolves: RHEL-163685 - Update to Delve 1.25.2 - Resolves: RHEL-111801 - Fix 3 test failures - Resolves: RHEL-83939 - Resolves: RHEL-83958 - Resolves: RHEL-7373 - Rebase to Delve 1.24.1 - Resolves: RHEL-64445 - Rebase to Delve 1.22.1 - Resolves: RHEL-50840 - Support files conforming to 1.5 of the specification (#2107278) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 40.1 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: rhbz#1971430 Update license to GPLv3+ - Update to 40.0 - Drop amtk dependency Related: #1948445 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 40.alpha - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 3.38.1 - Update to 3.38.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 40.1 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: rhbz#1971430 Update license to GPLv3+ - Update to 40.0 - Drop amtk dependency Related: #1948445 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 40.alpha - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 3.38.1 - Update to 3.38.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - update to 1.3-20210117 - update to 1.3-20201126 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - update to 1.3-20200327 - update to 1.3-20200228 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - update to 1.3-20191210 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.64. - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 1.63 (bug #1778338) - Build with OpenJDK 8 - Update disruptor to 3.4.4 (#1953941) - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Remove unneeded buildrequires on jmock and hamcrest - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Rebase to disruptor upstream release v3.4.2 - Trigger build Related: RHEL-143037 - Rebuild for posix lock issue fix Related: RHEL-143037 - new upstream version - Added patch for almalinux bugtracker - bootc: unlock only if /usr is read-only (RHEL-138512) - autoremove: when a dangling protected dependency is found produce a wanrning and skip it (RHEL-76112) - automatic: Expand email_to in command_email emitter to individual arguments (RHEL-94321) - Introduce $releasever_major, $releasever_minor variables, shell-style variable substitution (RHEL-65817) - Mark transient transactions in DNF history (RHEL-84512) - Warn/disallow changes outside /usr, /etc with --transient (RHEL-84499) - man page: don't mark mandatory option parameters as optional (RHEL-63958) - Add dnf4 provides and symlink /usr/bin/dnf4 -> /usr/bin/dnf-3 (RHEL-82310) - usage help: don't mark mandatory option parameters as optional (RHEL-63958) - package: remote_location() takes basedir into account (RHEL-71125) - Rebase to 1.7.5 - Resolves: RHEL-139901 - Rebase to 1.7.3 - Resolves: RHEL-94999 - Resolves: RHEL-94998 - Resolves: RHEL-94997 - Rebase to 1.7.2 - Resolves: RHEL-80309 - Rebuild because of bad test configuration - Resolves: RHEL-62197 - Initial commit on c9s - Resolves: RHEL-62197 - Rebase to 1.7.5 - Resolves: RHEL-139901 - Rebase to 1.7.3 - Resolves: RHEL-94999 - Resolves: RHEL-94998 - Resolves: RHEL-94997 - Rebase to 1.7.2 - Resolves: RHEL-80309 - Rebuild because of bad test configuration - Resolves: RHEL-62197 - Initial commit on c9s - Resolves: RHEL-62197 - Rebase to 1.7.5 - Resolves: RHEL-139901 - Rebase to 1.7.3 - Resolves: RHEL-94999 - Resolves: RHEL-94998 - Resolves: RHEL-94997 - Rebase to 1.7.2 - Resolves: RHEL-80309 - Rebuild because of bad test configuration - Resolves: RHEL-62197 - Initial commit on c9s - Resolves: RHEL-62197 - Rebase to 1.7.5 - Resolves: RHEL-139901 - Rebase to 1.7.3 - Resolves: RHEL-94999 - Resolves: RHEL-94998 - Resolves: RHEL-94997 - Rebase to 1.7.2 - Resolves: RHEL-80309 - Rebuild because of bad test configuration - Resolves: RHEL-62197 - Initial commit on c9s - Resolves: RHEL-62197 - Rebase to 1.7.5 - Resolves: RHEL-139901 - Rebase to 1.7.3 - Resolves: RHEL-94999 - Resolves: RHEL-94998 - Resolves: RHEL-94997 - Rebase to 1.7.2 - Resolves: RHEL-80309 - Rebuild because of bad test configuration - Resolves: RHEL-62197 - Initial commit on c9s - Resolves: RHEL-62197 - Prevent overflow in extract_name function (CVE-2026-2291) - Prevent DoS in DNSSEC validation (CVE-2026-4890) - Prevent out-of-bounds read in DNSSEC validation (CVE-2026-4891) - Prevent out-of-bounds write in DHCPv6 server (CVE-2026-4892) - Prevent source check avoidance by RFC 7871 client-subnet (CVE-2026-4893) - Added installation of tmpfiles config. - Resolves: RHEL-135305 - Backport filter-A and filter-AAAA options (RHEL-105367) - Update DNSSEC trust anchors with 2024 key (38696) (RHEL-249265) - Prevent overflow in extract_name function (CVE-2026-2291) - Prevent DoS in DNSSEC validation (CVE-2026-4890) - Prevent out-of-bounds read in DNSSEC validation (CVE-2026-4891) - Prevent out-of-bounds write in DHCPv6 server (CVE-2026-4892) - Prevent source check avoidance by RFC 7871 client-subnet (CVE-2026-4893) - Added installation of tmpfiles config. - Resolves: RHEL-135305 - Backport filter-A and filter-AAAA options (RHEL-105367) - Prevent overflow in extract_name function (CVE-2026-2291) - Prevent DoS in DNSSEC validation (CVE-2026-4890) - Prevent out-of-bounds read in DNSSEC validation (CVE-2026-4891) - Prevent out-of-bounds write in DHCPv6 server (CVE-2026-4892) - Prevent source check avoidance by RFC 7871 client-subnet (CVE-2026-4893) - Added installation of tmpfiles config. - Resolves: RHEL-135305 - Backport filter-A and filter-AAAA options (RHEL-105367) - Update DNSSEC trust anchors with 2024 key (38696) (RHEL-249265) - Prevent overflow in extract_name function (CVE-2026-2291) - Prevent DoS in DNSSEC validation (CVE-2026-4890) - Prevent out-of-bounds read in DNSSEC validation (CVE-2026-4891) - Prevent out-of-bounds write in DHCPv6 server (CVE-2026-4892) - Prevent source check avoidance by RFC 7871 client-subnet (CVE-2026-4893) - Added installation of tmpfiles config. - Resolves: RHEL-135305 - Backport filter-A and filter-AAAA options (RHEL-105367) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - do not print an error when uninstalling and no other catalogs are present (#1357273) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Fix gtk-doc multilib failures - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fix URL - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235481 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.112 and Runtime 10.0.12 - Resolves: RHEL-252319 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235481 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.113 and Runtime 10.0.13 - Resolves: RHEL-277808 - Update to .NET SDK 10.0.112 and Runtime 10.0.12 - Resolves: RHEL-252319 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235481 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Disable bootstrap - Resolves: RHEL-114572 - Update to RC 1 - Resolves: RHEL-114572 - Drop netstandard-targeting-pack-2.1 - Resolves: RHEL-111815 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Disable bootstrap - Resolves: RHEL-114572 - Update to RC 1 - Resolves: RHEL-114572 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Disable bootstrap - Resolves: RHEL-114572 - Update to .NET SDK 6.0.136 and Runtime 6.0.36 - Resolves: RHEL-65365 - Update to .NET SDK 6.0.135 and Runtime 6.0.35 - Resolves: RHEL-60799 - Update to .NET SDK 6.0.133 and Runtime 6.0.33 - Resolves: RHEL-52385 - Update to .NET SDK 6.0.132 and Runtime 6.0.32 - Resolves: RHEL-45320 - Update to .NET SDK 6.0.130 and Runtime 6.0.30 - Resolves: RHEL-35308 - Update to .NET SDK 6.0.129 and Runtime 6.0.29 - Resolves: RHEL-31198 - Update to .NET SDK 6.0.128 and Runtime 6.0.28 - Resolves: RHEL-27541 - Update to .NET SDK 6.0.127 and Runtime 6.0.27 - Resolves: RHEL-23785 - Update to .NET SDK 6.0.126 and Runtime 6.0.26 - Resolves: RHEL-19801 - Update to .NET SDK 6.0.125 and Runtime 6.0.25 - Resolves: RHEL-15349 - Update to .NET SDK 7.0.119 and Runtime 7.0.19 - Resolves: RHEL-35314 - Update to .NET SDK 7.0.118 and Runtime 7.0.18 - Resolves: RHEL-31203 - Update to .NET SDK 7.0.117 and Runtime 7.0.17 - Resolves: RHEL-27545 - Update to .NET SDK 7.0.116 and Runtime 7.0.16 - Resolves: RHEL-23790 - Update to .NET SDK 7.0.115 and Runtime 7.0.15 - Resolves: RHEL-19802 - Update to .NET SDK 7.0.114 and Runtime 7.0.14 - Resolves: RHEL-15351 - Update to .NET SDK 7.0.113 and Runtime 7.0.13 - Resolves: RHEL-14467 - Update to .NET SDK 7.0.112 and Runtime 7.0.12 - Resolves: RHEL-11698 - Update to .NET SDK 7.0.111 and Runtime 7.0.11 - Resolves: RHEL-2000 - Update to .NET SDK 7.0.110 and Runtime 7.0.10 - Resolves: RHBZ#2228571 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100592 - Update to .NET SDK 8.0.117 and Runtime 8.0.17 - Resolves: RHEL-94417 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100592 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235471 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.131 and Runtime 8.0.31 - Resolves: RHEL-252247 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235471 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.132 and Runtime 8.0.32 - Resolves: RHEL-277793 - Update to .NET SDK 8.0.131 and Runtime 8.0.31 - Resolves: RHEL-252247 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235471 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100599 - Update to .NET SDK 9.0.107 and Runtime 9.0.6 - Resolves: RHEL-94421 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100599 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235476 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252278 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235476 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.122 and Runtime 9.0.21 - Resolves: RHEL-277800 - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252278 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235476 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235481 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.112 and Runtime 10.0.12 - Resolves: RHEL-252319 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235481 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.113 and Runtime 10.0.13 - Resolves: RHEL-277808 - Update to .NET SDK 10.0.112 and Runtime 10.0.12 - Resolves: RHEL-252319 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235481 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Disable bootstrap - Resolves: RHEL-114572 - Update to RC 1 - Resolves: RHEL-114572 - Drop netstandard-targeting-pack-2.1 - Resolves: RHEL-111815 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Disable bootstrap - Resolves: RHEL-114572 - Update to RC 1 - Resolves: RHEL-114572 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Disable bootstrap - Resolves: RHEL-114572 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235481 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.112 and Runtime 10.0.12 - Resolves: RHEL-252319 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235481 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.113 and Runtime 10.0.13 - Resolves: RHEL-277808 - Update to .NET SDK 10.0.112 and Runtime 10.0.12 - Resolves: RHEL-252319 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235481 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Disable bootstrap - Resolves: RHEL-114572 - Update to RC 1 - Resolves: RHEL-114572 - Drop netstandard-targeting-pack-2.1 - Resolves: RHEL-111815 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Disable bootstrap - Resolves: RHEL-114572 - Update to RC 1 - Resolves: RHEL-114572 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Disable bootstrap - Resolves: RHEL-114572 - Update to .NET SDK 6.0.136 and Runtime 6.0.36 - Resolves: RHEL-65365 - Update to .NET SDK 6.0.135 and Runtime 6.0.35 - Resolves: RHEL-60799 - Update to .NET SDK 6.0.133 and Runtime 6.0.33 - Resolves: RHEL-52385 - Update to .NET SDK 6.0.132 and Runtime 6.0.32 - Resolves: RHEL-45320 - Update to .NET SDK 6.0.130 and Runtime 6.0.30 - Resolves: RHEL-35308 - Update to .NET SDK 6.0.129 and Runtime 6.0.29 - Resolves: RHEL-31198 - Update to .NET SDK 6.0.128 and Runtime 6.0.28 - Resolves: RHEL-27541 - Update to .NET SDK 6.0.127 and Runtime 6.0.27 - Resolves: RHEL-23785 - Update to .NET SDK 6.0.126 and Runtime 6.0.26 - Resolves: RHEL-19801 - Update to .NET SDK 6.0.125 and Runtime 6.0.25 - Resolves: RHEL-15349 - Update to .NET SDK 7.0.119 and Runtime 7.0.19 - Resolves: RHEL-35314 - Update to .NET SDK 7.0.118 and Runtime 7.0.18 - Resolves: RHEL-31203 - Update to .NET SDK 7.0.117 and Runtime 7.0.17 - Resolves: RHEL-27545 - Update to .NET SDK 7.0.116 and Runtime 7.0.16 - Resolves: RHEL-23790 - Update to .NET SDK 7.0.115 and Runtime 7.0.15 - Resolves: RHEL-19802 - Update to .NET SDK 7.0.114 and Runtime 7.0.14 - Resolves: RHEL-15351 - Update to .NET SDK 7.0.113 and Runtime 7.0.13 - Resolves: RHEL-14467 - Update to .NET SDK 7.0.112 and Runtime 7.0.12 - Resolves: RHEL-11698 - Update to .NET SDK 7.0.111 and Runtime 7.0.11 - Resolves: RHEL-2000 - Update to .NET SDK 7.0.110 and Runtime 7.0.10 - Resolves: RHBZ#2228571 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100592 - Update to .NET SDK 8.0.117 and Runtime 8.0.17 - Resolves: RHEL-94417 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100592 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235471 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.131 and Runtime 8.0.31 - Resolves: RHEL-252247 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235471 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.132 and Runtime 8.0.32 - Resolves: RHEL-277793 - Update to .NET SDK 8.0.131 and Runtime 8.0.31 - Resolves: RHEL-252247 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235471 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100599 - Update to .NET SDK 9.0.107 and Runtime 9.0.6 - Resolves: RHEL-94421 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100599 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235476 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252278 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235476 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.122 and Runtime 9.0.21 - Resolves: RHEL-277800 - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252278 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235476 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235481 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.112 and Runtime 10.0.12 - Resolves: RHEL-252319 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235481 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.113 and Runtime 10.0.13 - Resolves: RHEL-277808 - Update to .NET SDK 10.0.112 and Runtime 10.0.12 - Resolves: RHEL-252319 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235481 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Disable bootstrap - Resolves: RHEL-114572 - Update to RC 1 - Resolves: RHEL-114572 - Drop netstandard-targeting-pack-2.1 - Resolves: RHEL-111815 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Disable bootstrap - Resolves: RHEL-114572 - Update to RC 1 - Resolves: RHEL-114572 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Disable bootstrap - Resolves: RHEL-114572 - Update to .NET SDK 6.0.136 and Runtime 6.0.36 - Resolves: RHEL-65365 - Update to .NET SDK 6.0.135 and Runtime 6.0.35 - Resolves: RHEL-60799 - Update to .NET SDK 6.0.133 and Runtime 6.0.33 - Resolves: RHEL-52385 - Update to .NET SDK 6.0.132 and Runtime 6.0.32 - Resolves: RHEL-45320 - Update to .NET SDK 6.0.130 and Runtime 6.0.30 - Resolves: RHEL-35308 - Update to .NET SDK 6.0.129 and Runtime 6.0.29 - Resolves: RHEL-31198 - Update to .NET SDK 6.0.128 and Runtime 6.0.28 - Resolves: RHEL-27541 - Update to .NET SDK 6.0.127 and Runtime 6.0.27 - Resolves: RHEL-23785 - Update to .NET SDK 6.0.126 and Runtime 6.0.26 - Resolves: RHEL-19801 - Update to .NET SDK 6.0.125 and Runtime 6.0.25 - Resolves: RHEL-15349 - Update to .NET SDK 7.0.119 and Runtime 7.0.19 - Resolves: RHEL-35314 - Update to .NET SDK 7.0.118 and Runtime 7.0.18 - Resolves: RHEL-31203 - Update to .NET SDK 7.0.117 and Runtime 7.0.17 - Resolves: RHEL-27545 - Update to .NET SDK 7.0.116 and Runtime 7.0.16 - Resolves: RHEL-23790 - Update to .NET SDK 7.0.115 and Runtime 7.0.15 - Resolves: RHEL-19802 - Update to .NET SDK 7.0.114 and Runtime 7.0.14 - Resolves: RHEL-15351 - Update to .NET SDK 7.0.113 and Runtime 7.0.13 - Resolves: RHEL-14467 - Update to .NET SDK 7.0.112 and Runtime 7.0.12 - Resolves: RHEL-11698 - Update to .NET SDK 7.0.111 and Runtime 7.0.11 - Resolves: RHEL-2000 - Update to .NET SDK 7.0.110 and Runtime 7.0.10 - Resolves: RHBZ#2228571 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100592 - Update to .NET SDK 8.0.117 and Runtime 8.0.17 - Resolves: RHEL-94417 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100592 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235471 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.131 and Runtime 8.0.31 - Resolves: RHEL-252247 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235471 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.132 and Runtime 8.0.32 - Resolves: RHEL-277793 - Update to .NET SDK 8.0.131 and Runtime 8.0.31 - Resolves: RHEL-252247 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235471 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100599 - Update to .NET SDK 9.0.107 and Runtime 9.0.6 - Resolves: RHEL-94421 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100599 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235476 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252278 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235476 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.122 and Runtime 9.0.21 - Resolves: RHEL-277800 - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252278 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235476 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235481 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.112 and Runtime 10.0.12 - Resolves: RHEL-252319 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235481 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.113 and Runtime 10.0.13 - Resolves: RHEL-277808 - Update to .NET SDK 10.0.112 and Runtime 10.0.12 - Resolves: RHEL-252319 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235481 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Disable bootstrap - Resolves: RHEL-114572 - Update to RC 1 - Resolves: RHEL-114572 - Drop netstandard-targeting-pack-2.1 - Resolves: RHEL-111815 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Disable bootstrap - Resolves: RHEL-114572 - Update to RC 1 - Resolves: RHEL-114572 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Disable bootstrap - Resolves: RHEL-114572 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100592 - Update to .NET SDK 8.0.117 and Runtime 8.0.17 - Resolves: RHEL-94417 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100592 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235471 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.131 and Runtime 8.0.31 - Resolves: RHEL-252247 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235471 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.132 and Runtime 8.0.32 - Resolves: RHEL-277793 - Update to .NET SDK 8.0.131 and Runtime 8.0.31 - Resolves: RHEL-252247 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235471 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100599 - Update to .NET SDK 9.0.107 and Runtime 9.0.6 - Resolves: RHEL-94421 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100599 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235476 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252278 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235476 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.122 and Runtime 9.0.21 - Resolves: RHEL-277800 - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252278 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235476 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Disable bootstrap - Resolves: RHEL-114572 - Update to RC 1 - Resolves: RHEL-114572 - Drop netstandard-targeting-pack-2.1 - Resolves: RHEL-111815 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Disable bootstrap - Resolves: RHEL-114572 - Update to RC 1 - Resolves: RHEL-114572 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Disable bootstrap - Resolves: RHEL-114572 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235481 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.112 and Runtime 10.0.12 - Resolves: RHEL-252319 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235481 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.113 and Runtime 10.0.13 - Resolves: RHEL-277808 - Update to .NET SDK 10.0.112 and Runtime 10.0.12 - Resolves: RHEL-252319 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235481 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 6.0.136 and Runtime 6.0.36 - Resolves: RHEL-65365 - Update to .NET SDK 6.0.135 and Runtime 6.0.35 - Resolves: RHEL-60799 - Update to .NET SDK 6.0.133 and Runtime 6.0.33 - Resolves: RHEL-52385 - Update to .NET SDK 6.0.132 and Runtime 6.0.32 - Resolves: RHEL-45320 - Update to .NET SDK 6.0.130 and Runtime 6.0.30 - Resolves: RHEL-35308 - Update to .NET SDK 6.0.129 and Runtime 6.0.29 - Resolves: RHEL-31198 - Update to .NET SDK 6.0.128 and Runtime 6.0.28 - Resolves: RHEL-27541 - Update to .NET SDK 6.0.127 and Runtime 6.0.27 - Resolves: RHEL-23785 - Update to .NET SDK 6.0.126 and Runtime 6.0.26 - Resolves: RHEL-19801 - Update to .NET SDK 6.0.125 and Runtime 6.0.25 - Resolves: RHEL-15349 - Update to .NET SDK 7.0.119 and Runtime 7.0.19 - Resolves: RHEL-35314 - Update to .NET SDK 7.0.118 and Runtime 7.0.18 - Resolves: RHEL-31203 - Update to .NET SDK 7.0.117 and Runtime 7.0.17 - Resolves: RHEL-27545 - Update to .NET SDK 7.0.116 and Runtime 7.0.16 - Resolves: RHEL-23790 - Update to .NET SDK 7.0.115 and Runtime 7.0.15 - Resolves: RHEL-19802 - Update to .NET SDK 7.0.114 and Runtime 7.0.14 - Resolves: RHEL-15351 - Update to .NET SDK 7.0.113 and Runtime 7.0.13 - Resolves: RHEL-14467 - Update to .NET SDK 7.0.112 and Runtime 7.0.12 - Resolves: RHEL-11698 - Update to .NET SDK 7.0.111 and Runtime 7.0.11 - Resolves: RHEL-2000 - Update to .NET SDK 7.0.110 and Runtime 7.0.10 - Resolves: RHBZ#2228571 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100592 - Update to .NET SDK 8.0.117 and Runtime 8.0.17 - Resolves: RHEL-94417 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100592 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235471 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.131 and Runtime 8.0.31 - Resolves: RHEL-252247 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235471 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.132 and Runtime 8.0.32 - Resolves: RHEL-277793 - Update to .NET SDK 8.0.131 and Runtime 8.0.31 - Resolves: RHEL-252247 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235471 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100599 - Update to .NET SDK 9.0.107 and Runtime 9.0.6 - Resolves: RHEL-94421 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100599 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235476 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252278 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235476 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.122 and Runtime 9.0.21 - Resolves: RHEL-277800 - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252278 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235476 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Disable bootstrap - Resolves: RHEL-114572 - Update to RC 1 - Resolves: RHEL-114572 - Drop netstandard-targeting-pack-2.1 - Resolves: RHEL-111815 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Disable bootstrap - Resolves: RHEL-114572 - Update to RC 1 - Resolves: RHEL-114572 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Disable bootstrap - Resolves: RHEL-114572 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235481 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.112 and Runtime 10.0.12 - Resolves: RHEL-252319 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235481 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.113 and Runtime 10.0.13 - Resolves: RHEL-277808 - Update to .NET SDK 10.0.112 and Runtime 10.0.12 - Resolves: RHEL-252319 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235481 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100599 - Update to .NET SDK 9.0.107 and Runtime 9.0.6 - Resolves: RHEL-94421 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100599 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235476 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252278 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235476 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.122 and Runtime 9.0.21 - Resolves: RHEL-277800 - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252278 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235476 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Disable bootstrap - Resolves: RHEL-114572 - Update to RC 1 - Resolves: RHEL-114572 - Drop netstandard-targeting-pack-2.1 - Resolves: RHEL-111815 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Disable bootstrap - Resolves: RHEL-114572 - Update to RC 1 - Resolves: RHEL-114572 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Disable bootstrap - Resolves: RHEL-114572 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235481 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.112 and Runtime 10.0.12 - Resolves: RHEL-252319 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235481 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.113 and Runtime 10.0.13 - Resolves: RHEL-277808 - Update to .NET SDK 10.0.112 and Runtime 10.0.12 - Resolves: RHEL-252319 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235481 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100592 - Update to .NET SDK 8.0.117 and Runtime 8.0.17 - Resolves: RHEL-94417 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100592 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235471 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.131 and Runtime 8.0.31 - Resolves: RHEL-252247 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235471 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.132 and Runtime 8.0.32 - Resolves: RHEL-277793 - Update to .NET SDK 8.0.131 and Runtime 8.0.31 - Resolves: RHEL-252247 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235471 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100599 - Update to .NET SDK 9.0.107 and Runtime 9.0.6 - Resolves: RHEL-94421 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100599 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235476 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252278 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235476 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.122 and Runtime 9.0.21 - Resolves: RHEL-277800 - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252278 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235476 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235481 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.112 and Runtime 10.0.12 - Resolves: RHEL-252319 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235481 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.113 and Runtime 10.0.13 - Resolves: RHEL-277808 - Update to .NET SDK 10.0.112 and Runtime 10.0.12 - Resolves: RHEL-252319 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235481 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Disable bootstrap - Resolves: RHEL-114572 - Update to RC 1 - Resolves: RHEL-114572 - Drop netstandard-targeting-pack-2.1 - Resolves: RHEL-111815 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Disable bootstrap - Resolves: RHEL-114572 - Update to RC 1 - Resolves: RHEL-114572 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Disable bootstrap - Resolves: RHEL-114572 - Update to .NET SDK 6.0.136 and Runtime 6.0.36 - Resolves: RHEL-65365 - Update to .NET SDK 6.0.135 and Runtime 6.0.35 - Resolves: RHEL-60799 - Update to .NET SDK 6.0.133 and Runtime 6.0.33 - Resolves: RHEL-52385 - Update to .NET SDK 6.0.132 and Runtime 6.0.32 - Resolves: RHEL-45320 - Update to .NET SDK 6.0.130 and Runtime 6.0.30 - Resolves: RHEL-35308 - Update to .NET SDK 6.0.129 and Runtime 6.0.29 - Resolves: RHEL-31198 - Update to .NET SDK 6.0.128 and Runtime 6.0.28 - Resolves: RHEL-27541 - Update to .NET SDK 6.0.127 and Runtime 6.0.27 - Resolves: RHEL-23785 - Update to .NET SDK 6.0.126 and Runtime 6.0.26 - Resolves: RHEL-19801 - Update to .NET SDK 6.0.125 and Runtime 6.0.25 - Resolves: RHEL-15349 - Update to .NET SDK 7.0.119 and Runtime 7.0.19 - Resolves: RHEL-35314 - Update to .NET SDK 7.0.118 and Runtime 7.0.18 - Resolves: RHEL-31203 - Update to .NET SDK 7.0.117 and Runtime 7.0.17 - Resolves: RHEL-27545 - Update to .NET SDK 7.0.116 and Runtime 7.0.16 - Resolves: RHEL-23790 - Update to .NET SDK 7.0.115 and Runtime 7.0.15 - Resolves: RHEL-19802 - Update to .NET SDK 7.0.114 and Runtime 7.0.14 - Resolves: RHEL-15351 - Update to .NET SDK 7.0.113 and Runtime 7.0.13 - Resolves: RHEL-14467 - Update to .NET SDK 7.0.112 and Runtime 7.0.12 - Resolves: RHEL-11698 - Update to .NET SDK 7.0.111 and Runtime 7.0.11 - Resolves: RHEL-2000 - Update to .NET SDK 7.0.110 and Runtime 7.0.10 - Resolves: RHBZ#2228571 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100592 - Update to .NET SDK 8.0.117 and Runtime 8.0.17 - Resolves: RHEL-94417 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100592 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235471 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.131 and Runtime 8.0.31 - Resolves: RHEL-252247 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235471 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.132 and Runtime 8.0.32 - Resolves: RHEL-277793 - Update to .NET SDK 8.0.131 and Runtime 8.0.31 - Resolves: RHEL-252247 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235471 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100599 - Update to .NET SDK 9.0.107 and Runtime 9.0.6 - Resolves: RHEL-94421 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100599 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235476 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252278 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235476 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.122 and Runtime 9.0.21 - Resolves: RHEL-277800 - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252278 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235476 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Disable bootstrap - Resolves: RHEL-114572 - Update to RC 1 - Resolves: RHEL-114572 - Drop netstandard-targeting-pack-2.1 - Resolves: RHEL-111815 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Disable bootstrap - Resolves: RHEL-114572 - Update to RC 1 - Resolves: RHEL-114572 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Disable bootstrap - Resolves: RHEL-114572 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235481 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.112 and Runtime 10.0.12 - Resolves: RHEL-252319 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235481 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.113 and Runtime 10.0.13 - Resolves: RHEL-277808 - Update to .NET SDK 10.0.112 and Runtime 10.0.12 - Resolves: RHEL-252319 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235481 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 6.0.136 and Runtime 6.0.36 - Resolves: RHEL-65365 - Update to .NET SDK 6.0.135 and Runtime 6.0.35 - Resolves: RHEL-60799 - Update to .NET SDK 6.0.133 and Runtime 6.0.33 - Resolves: RHEL-52385 - Update to .NET SDK 6.0.132 and Runtime 6.0.32 - Resolves: RHEL-45320 - Update to .NET SDK 6.0.130 and Runtime 6.0.30 - Resolves: RHEL-35308 - Update to .NET SDK 6.0.129 and Runtime 6.0.29 - Resolves: RHEL-31198 - Update to .NET SDK 6.0.128 and Runtime 6.0.28 - Resolves: RHEL-27541 - Update to .NET SDK 6.0.127 and Runtime 6.0.27 - Resolves: RHEL-23785 - Update to .NET SDK 6.0.126 and Runtime 6.0.26 - Resolves: RHEL-19801 - Update to .NET SDK 6.0.125 and Runtime 6.0.25 - Resolves: RHEL-15349 - Update to .NET SDK 7.0.119 and Runtime 7.0.19 - Resolves: RHEL-35314 - Update to .NET SDK 7.0.118 and Runtime 7.0.18 - Resolves: RHEL-31203 - Update to .NET SDK 7.0.117 and Runtime 7.0.17 - Resolves: RHEL-27545 - Update to .NET SDK 7.0.116 and Runtime 7.0.16 - Resolves: RHEL-23790 - Update to .NET SDK 7.0.115 and Runtime 7.0.15 - Resolves: RHEL-19802 - Update to .NET SDK 7.0.114 and Runtime 7.0.14 - Resolves: RHEL-15351 - Update to .NET SDK 7.0.113 and Runtime 7.0.13 - Resolves: RHEL-14467 - Update to .NET SDK 7.0.112 and Runtime 7.0.12 - Resolves: RHEL-11698 - Update to .NET SDK 7.0.111 and Runtime 7.0.11 - Resolves: RHEL-2000 - Update to .NET SDK 7.0.110 and Runtime 7.0.10 - Resolves: RHBZ#2228571 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100592 - Update to .NET SDK 8.0.117 and Runtime 8.0.17 - Resolves: RHEL-94417 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100592 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235471 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.131 and Runtime 8.0.31 - Resolves: RHEL-252247 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235471 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.132 and Runtime 8.0.32 - Resolves: RHEL-277793 - Update to .NET SDK 8.0.131 and Runtime 8.0.31 - Resolves: RHEL-252247 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235471 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100599 - Update to .NET SDK 9.0.107 and Runtime 9.0.6 - Resolves: RHEL-94421 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100599 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235476 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252278 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235476 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.122 and Runtime 9.0.21 - Resolves: RHEL-277800 - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252278 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235476 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 3.1.5 - fix CVE-2026-42006: IMAP parser list_count_limit bypass via open parentheses (RHEL-188468) - rebuild - fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161640) - fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162288) - fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161679) - add /var/lib/dovecot to tmpfiles for image mode (RHEL-139098) - fix building with latest openssl (RHEL-140619) - fix sysusers config file name (RHEL-77322) - fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55212) - fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55224) - rebuild with updated tests - fix crash when user has sieve script that includes two missing scripts (RHEL-37160) - fix CVE-2026-33605: ManageSieve protocol denial of service via lone CR character (RHEL-251989) - fix CVE-2026-42007: use-after-free in pigeonhole editheader (RHEL-251952) - fix CVE-2026-40018: incorrect escaping of multi-byte strings in SQL commands (RHEL-252068) - fix CVE-2026-42391: excessive memory growth with pre-login IMAP ID command (RHEL-251936) - fix CVE-2026-73208: OAuth2 scope check requires all configured scopes, add oauth2_audience setting (RHEL-251911) - fix CVE-2026-27852: limit parsed message data to prevent memory exhaustion (RHEL-251575) - fix CVE-2026-33263: epoll_ctl panic at mail_max_userip_connections limit (RHEL-251929) - fix CVE-2026-42006: IMAP parser list_count_limit bypass via open parentheses (RHEL-188468) - rebuild - fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161640) - fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162288) - fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161679) - rebuild - fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161640) - fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162288) - fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161679) - add /var/lib/dovecot to tmpfiles for image mode (RHEL-139098) - fix building with latest openssl (RHEL-140619) - fix sysusers config file name (RHEL-77322) - fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55212) - fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55224) - rebuild with updated tests - fix crash when user has sieve script that includes two missing scripts (RHEL-37160) - fix CVE-2026-42006: IMAP parser list_count_limit bypass via open parentheses (RHEL-188468) - rebuild - fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161640) - fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162288) - fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161679) - add /var/lib/dovecot to tmpfiles for image mode (RHEL-139098) - fix building with latest openssl (RHEL-140619) - fix sysusers config file name (RHEL-77322) - fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55212) - fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55224) - rebuild with updated tests - fix crash when user has sieve script that includes two missing scripts (RHEL-37160) - fix CVE-2026-33605: ManageSieve protocol denial of service via lone CR character (RHEL-251989) - fix CVE-2026-42007: use-after-free in pigeonhole editheader (RHEL-251952) - fix CVE-2026-40018: incorrect escaping of multi-byte strings in SQL commands (RHEL-252068) - fix CVE-2026-42391: excessive memory growth with pre-login IMAP ID command (RHEL-251936) - fix CVE-2026-73208: OAuth2 scope check requires all configured scopes, add oauth2_audience setting (RHEL-251911) - fix CVE-2026-27852: limit parsed message data to prevent memory exhaustion (RHEL-251575) - fix CVE-2026-33263: epoll_ctl panic at mail_max_userip_connections limit (RHEL-251929) - fix CVE-2026-42006: IMAP parser list_count_limit bypass via open parentheses (RHEL-188468) - rebuild - fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161640) - fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162288) - fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161679) - rebuild - fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161640) - fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162288) - fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161679) - add /var/lib/dovecot to tmpfiles for image mode (RHEL-139098) - fix building with latest openssl (RHEL-140619) - fix sysusers config file name (RHEL-77322) - fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55212) - fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55224) - rebuild with updated tests - fix crash when user has sieve script that includes two missing scripts (RHEL-37160) - fix CVE-2026-42006: IMAP parser list_count_limit bypass via open parentheses (RHEL-188468) - rebuild - fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161640) - fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162288) - fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161679) - add /var/lib/dovecot to tmpfiles for image mode (RHEL-139098) - fix building with latest openssl (RHEL-140619) - fix sysusers config file name (RHEL-77322) - fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55212) - fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55224) - rebuild with updated tests - fix crash when user has sieve script that includes two missing scripts (RHEL-37160) - fix CVE-2026-33605: ManageSieve protocol denial of service via lone CR character (RHEL-251989) - fix CVE-2026-42007: use-after-free in pigeonhole editheader (RHEL-251952) - fix CVE-2026-40018: incorrect escaping of multi-byte strings in SQL commands (RHEL-252068) - fix CVE-2026-42391: excessive memory growth with pre-login IMAP ID command (RHEL-251936) - fix CVE-2026-73208: OAuth2 scope check requires all configured scopes, add oauth2_audience setting (RHEL-251911) - fix CVE-2026-27852: limit parsed message data to prevent memory exhaustion (RHEL-251575) - fix CVE-2026-33263: epoll_ctl panic at mail_max_userip_connections limit (RHEL-251929) - fix CVE-2026-42006: IMAP parser list_count_limit bypass via open parentheses (RHEL-188468) - rebuild - fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161640) - fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162288) - fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161679) - rebuild - fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161640) - fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162288) - fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161679) - add /var/lib/dovecot to tmpfiles for image mode (RHEL-139098) - fix building with latest openssl (RHEL-140619) - fix sysusers config file name (RHEL-77322) - fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55212) - fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55224) - rebuild with updated tests - fix crash when user has sieve script that includes two missing scripts (RHEL-37160) - fix CVE-2026-42006: IMAP parser list_count_limit bypass via open parentheses (RHEL-188468) - rebuild - fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161640) - fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162288) - fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161679) - add /var/lib/dovecot to tmpfiles for image mode (RHEL-139098) - fix building with latest openssl (RHEL-140619) - fix sysusers config file name (RHEL-77322) - fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55212) - fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55224) - rebuild with updated tests - fix crash when user has sieve script that includes two missing scripts (RHEL-37160) - fix CVE-2026-33605: ManageSieve protocol denial of service via lone CR character (RHEL-251989) - fix CVE-2026-42007: use-after-free in pigeonhole editheader (RHEL-251952) - fix CVE-2026-40018: incorrect escaping of multi-byte strings in SQL commands (RHEL-252068) - fix CVE-2026-42391: excessive memory growth with pre-login IMAP ID command (RHEL-251936) - fix CVE-2026-73208: OAuth2 scope check requires all configured scopes, add oauth2_audience setting (RHEL-251911) - fix CVE-2026-27852: limit parsed message data to prevent memory exhaustion (RHEL-251575) - fix CVE-2026-33263: epoll_ctl panic at mail_max_userip_connections limit (RHEL-251929) - fix CVE-2026-42006: IMAP parser list_count_limit bypass via open parentheses (RHEL-188468) - rebuild - fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161640) - fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162288) - fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161679) - rebuild - fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161640) - fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162288) - fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161679) - add /var/lib/dovecot to tmpfiles for image mode (RHEL-139098) - fix building with latest openssl (RHEL-140619) - fix sysusers config file name (RHEL-77322) - fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55212) - fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55224) - rebuild with updated tests - fix crash when user has sieve script that includes two missing scripts (RHEL-37160) - Rebase to 25.11 (RHEL-132461) - Rebase to 24.11.3 (RHEL-121229) - Enable net/mlx5 driver for ARM (RHEL-109612) - Avoid requiring NET_ADMIN with mlx5 (RHEL-93856) - Rebase to 24.11.2 (RHEL-96848) - Enable net/ena and net/mana drivers (RHEL-23843) - Rebase to 24.11.1 (RHEL-71133) - Backport fixes for CVE-2024-11614 (RHEL-68605) - Rebase to 25.11 (RHEL-132461) - Rebase to 24.11.3 (RHEL-121229) - Enable net/mlx5 driver for ARM (RHEL-109612) - Avoid requiring NET_ADMIN with mlx5 (RHEL-93856) - Rebase to 24.11.2 (RHEL-96848) - Enable net/ena and net/mana drivers (RHEL-23843) - Rebase to 24.11.1 (RHEL-71133) - Backport fixes for CVE-2024-11614 (RHEL-68605) - Rebase to 25.11 (RHEL-132461) - Rebase to 24.11.3 (RHEL-121229) - Enable net/mlx5 driver for ARM (RHEL-109612) - Avoid requiring NET_ADMIN with mlx5 (RHEL-93856) - Rebase to 24.11.2 (RHEL-96848) - Enable net/ena and net/mana drivers (RHEL-23843) - Rebase to 24.11.1 (RHEL-71133) - Backport fixes for CVE-2024-11614 (RHEL-68605) - Rebase to 25.11 (RHEL-132461) - Rebase to 24.11.3 (RHEL-121229) - Enable net/mlx5 driver for ARM (RHEL-109612) - Avoid requiring NET_ADMIN with mlx5 (RHEL-93856) - Rebase to 24.11.2 (RHEL-96848) - Enable net/ena and net/mana drivers (RHEL-23843) - Rebase to 24.11.1 (RHEL-71133) - Backport fixes for CVE-2024-11614 (RHEL-68605) - fix(systemd-repart): allow partition format - feat(install.d):according to the changes of - feat(i18n): pull 'drm' or 'simpledrm' module unless excluded - fix(pcsc): add opensc load module file - fix(pcsc): add --disable-polkit to pcscd.service - fix(pkcs11): delete trailing dot on - fix(multipath): disable user_friendly_names with mpathconf Resolves: RHEL-103385,RHEL-103974,RHEL-109631,RHEL-145135,RHEL-91322 - fix(systemd): partial backport of - fix(systemd): add missing modprobe@.service - fix: let check_vol_slaves_all return 1 when checks on all - improvement(74nvmf): lookup required NIC kernel modules for - fix(74nvmf): set root=nvmf - chore(multipath): remove `rd_NO_MULTIPATH` kernel command - refactor(multipath): remove custom multipathd.service - fix(systemd): systemd.volatile needs overlayfs kernel module - refactor(dracut): introduce clamp_mtimes helper function - fix(dracut): ensure hardlink deduplication is reproducible - fix(dracut.sh): don't pass empty string as dir - fix(rescue): create hmac file for rescue kernel - fix(35network-manager): remove duplicate installkernel - feat(fips): include fips module unconditionally - fix(dracut.sh): make omit-drivers option do exact match for - feat: add openssl module - fix(35network-manager): install nftables kernel modules - fix(35network-manager): install nft binary during module - fix(dracut-install): copy xattr when use clone ioctl - feat(dracut.sh): add --add-confdir option - fix: typo in variable name - feat(fips): add support for UKIs - fix(kernel-modules): use modalias info in get_dev_module() - fix(dracut-functions.sh): convert mmcblk to the real kernel - fix(systemd): set right permissions for the machine-id file - feat(lsinitrd.sh): look for initrd in /usr/lib/modules/ - feat(dracut-init.sh): give --force-add precedence over --omit - feat(systemd): install systemd-executor - test: use -device instead of -watchdog to remove qemu - fix(fips): remove /dev/{random,urandom} pre-creation - fix(systemd): always include sg module - fix(fips): do not blindly remove /boot - fix(github): update format of labeler - fix(network-manager): add "After" dependency on dbus.service - fix(url-lib.sh): nfs_already_mounted() with trailing slash in - feat(systemd-pcrphase): introducing the systemd-pcrphase - fix(systemd-pcrphase): only include - fix(nfs): include also entries from /usr/lib/{passwd,group} - build: rebuild without an obsoleted patch - fix(network): warn on suspicious shell metacharacters in - fix(base): escape arguments in initqueue hook script Related: RHEL-170857 - fix(network-legacy): replace `echo` writes with `printf` to - fix(iscsi): replace `echo` writes with `printf` to prevent - fix(base): replace eval with safe variable indirection in Resolves: RHEL-170857 - fix(systemd-repart): allow partition format - feat(install.d):according to the changes of - feat(i18n): pull 'drm' or 'simpledrm' module unless excluded - fix(pcsc): add opensc load module file - fix(pcsc): add --disable-polkit to pcscd.service - fix(pkcs11): delete trailing dot on - fix(multipath): disable user_friendly_names with mpathconf Resolves: RHEL-103385,RHEL-103974,RHEL-109631,RHEL-145135,RHEL-91322 - fix(systemd): partial backport of - fix(systemd): add missing modprobe@.service - fix: let check_vol_slaves_all return 1 when checks on all - improvement(74nvmf): lookup required NIC kernel modules for - fix(74nvmf): set root=nvmf - chore(multipath): remove `rd_NO_MULTIPATH` kernel command - refactor(multipath): remove custom multipathd.service - fix(systemd): systemd.volatile needs overlayfs kernel module - refactor(dracut): introduce clamp_mtimes helper function - fix(dracut): ensure hardlink deduplication is reproducible - fix(dracut.sh): don't pass empty string as dir - fix(rescue): create hmac file for rescue kernel - fix(35network-manager): remove duplicate installkernel - feat(fips): include fips module unconditionally - fix(dracut.sh): make omit-drivers option do exact match for - feat: add openssl module - fix(35network-manager): install nftables kernel modules - fix(35network-manager): install nft binary during module - fix(dracut-install): copy xattr when use clone ioctl - feat(dracut.sh): add --add-confdir option - fix: typo in variable name - feat(fips): add support for UKIs - fix(kernel-modules): use modalias info in get_dev_module() - fix(dracut-functions.sh): convert mmcblk to the real kernel - revert: "feat(i18n): pull 'drm' or 'simpledrm' module unless - build: rebuild without an obsoleted patch - fix(network): warn on suspicious shell metacharacters in - fix(base): escape arguments in initqueue hook script Related: RHEL-170857 - fix(network-legacy): replace `echo` writes with `printf` to - fix(iscsi): replace `echo` writes with `printf` to prevent - fix(base): replace eval with safe variable indirection in Resolves: RHEL-170857 - fix(systemd-repart): allow partition format - feat(install.d):according to the changes of - feat(i18n): pull 'drm' or 'simpledrm' module unless excluded - fix(pcsc): add opensc load module file - fix(pcsc): add --disable-polkit to pcscd.service - fix(pkcs11): delete trailing dot on - fix(multipath): disable user_friendly_names with mpathconf Resolves: RHEL-103385,RHEL-103974,RHEL-109631,RHEL-145135,RHEL-91322 - fix(systemd): partial backport of - fix(systemd): add missing modprobe@.service - fix: let check_vol_slaves_all return 1 when checks on all - improvement(74nvmf): lookup required NIC kernel modules for - fix(74nvmf): set root=nvmf - chore(multipath): remove `rd_NO_MULTIPATH` kernel command - refactor(multipath): remove custom multipathd.service - fix(systemd): systemd.volatile needs overlayfs kernel module - refactor(dracut): introduce clamp_mtimes helper function - fix(dracut): ensure hardlink deduplication is reproducible - fix(dracut.sh): don't pass empty string as dir - fix(rescue): create hmac file for rescue kernel - fix(35network-manager): remove duplicate installkernel - feat(fips): include fips module unconditionally - fix(dracut.sh): make omit-drivers option do exact match for - feat: add openssl module - fix(base): escape die() message in emergency hook script - fix(base): replace eval with safe variable indirection in - revert: "feat(i18n): pull 'drm' or 'simpledrm' module unless - build: rebuild without an obsoleted patch - fix(network): warn on suspicious shell metacharacters in - fix(base): escape arguments in initqueue hook script Related: RHEL-170857 - fix(network-legacy): replace `echo` writes with `printf` to - fix(iscsi): replace `echo` writes with `printf` to prevent - fix(base): replace eval with safe variable indirection in Resolves: RHEL-170857 - fix(systemd-repart): allow partition format - feat(install.d):according to the changes of - feat(i18n): pull 'drm' or 'simpledrm' module unless excluded - fix(pcsc): add opensc load module file - fix(pcsc): add --disable-polkit to pcscd.service - fix(pkcs11): delete trailing dot on - fix(multipath): disable user_friendly_names with mpathconf Resolves: RHEL-103385,RHEL-103974,RHEL-109631,RHEL-145135,RHEL-91322 - fix(systemd): partial backport of - fix(systemd): add missing modprobe@.service - fix: let check_vol_slaves_all return 1 when checks on all - improvement(74nvmf): lookup required NIC kernel modules for - fix(74nvmf): set root=nvmf - chore(multipath): remove `rd_NO_MULTIPATH` kernel command - refactor(multipath): remove custom multipathd.service - fix(systemd): systemd.volatile needs overlayfs kernel module - refactor(dracut): introduce clamp_mtimes helper function - fix(dracut): ensure hardlink deduplication is reproducible - fix(dracut.sh): don't pass empty string as dir - fix(rescue): create hmac file for rescue kernel - fix(systemd-repart): allow partition format - feat(install.d):according to the changes of - feat(i18n): pull 'drm' or 'simpledrm' module unless excluded - fix(pcsc): add opensc load module file - fix(pcsc): add --disable-polkit to pcscd.service - fix(pkcs11): delete trailing dot on - fix(multipath): disable user_friendly_names with mpathconf Resolves: RHEL-103385,RHEL-103974,RHEL-109631,RHEL-145135,RHEL-91322 - fix(systemd): partial backport of - fix(systemd): add missing modprobe@.service - fix: let check_vol_slaves_all return 1 when checks on all - improvement(74nvmf): lookup required NIC kernel modules for - fix(74nvmf): set root=nvmf - chore(multipath): remove `rd_NO_MULTIPATH` kernel command - refactor(multipath): remove custom multipathd.service - fix(systemd): systemd.volatile needs overlayfs kernel module - refactor(dracut): introduce clamp_mtimes helper function - fix(dracut): ensure hardlink deduplication is reproducible - fix(dracut.sh): don't pass empty string as dir - fix(rescue): create hmac file for rescue kernel - fix(35network-manager): remove duplicate installkernel - feat(fips): include fips module unconditionally - fix(dracut.sh): make omit-drivers option do exact match for - feat: add openssl module - fix(35network-manager): install nftables kernel modules - fix(35network-manager): install nft binary during module - fix(dracut-install): copy xattr when use clone ioctl - feat(dracut.sh): add --add-confdir option - fix: typo in variable name - feat(fips): add support for UKIs - fix(kernel-modules): use modalias info in get_dev_module() - fix(dracut-functions.sh): convert mmcblk to the real kernel - fix(systemd): set right permissions for the machine-id file - feat(lsinitrd.sh): look for initrd in /usr/lib/modules/ - feat(dracut-init.sh): give --force-add precedence over --omit - feat(systemd): install systemd-executor - test: use -device instead of -watchdog to remove qemu - fix(fips): remove /dev/{random,urandom} pre-creation - fix(systemd): always include sg module - fix(fips): do not blindly remove /boot - fix(github): update format of labeler - fix(network-manager): add "After" dependency on dbus.service - fix(url-lib.sh): nfs_already_mounted() with trailing slash in - feat(systemd-pcrphase): introducing the systemd-pcrphase - fix(systemd-pcrphase): only include - fix(nfs): include also entries from /usr/lib/{passwd,group} - build: rebuild without an obsoleted patch - fix(network): warn on suspicious shell metacharacters in - fix(base): escape arguments in initqueue hook script Related: RHEL-170857 - fix(network-legacy): replace `echo` writes with `printf` to - fix(iscsi): replace `echo` writes with `printf` to prevent - fix(base): replace eval with safe variable indirection in Resolves: RHEL-170857 - fix(systemd-repart): allow partition format - feat(install.d):according to the changes of - feat(i18n): pull 'drm' or 'simpledrm' module unless excluded - fix(pcsc): add opensc load module file - fix(pcsc): add --disable-polkit to pcscd.service - fix(pkcs11): delete trailing dot on - fix(multipath): disable user_friendly_names with mpathconf Resolves: RHEL-103385,RHEL-103974,RHEL-109631,RHEL-145135,RHEL-91322 - fix(systemd): partial backport of - fix(systemd): add missing modprobe@.service - fix: let check_vol_slaves_all return 1 when checks on all - improvement(74nvmf): lookup required NIC kernel modules for - fix(74nvmf): set root=nvmf - chore(multipath): remove `rd_NO_MULTIPATH` kernel command - refactor(multipath): remove custom multipathd.service - fix(systemd): systemd.volatile needs overlayfs kernel module - refactor(dracut): introduce clamp_mtimes helper function - fix(dracut): ensure hardlink deduplication is reproducible - fix(dracut.sh): don't pass empty string as dir - fix(rescue): create hmac file for rescue kernel - fix(35network-manager): remove duplicate installkernel - feat(fips): include fips module unconditionally - fix(dracut.sh): make omit-drivers option do exact match for - feat: add openssl module - fix(35network-manager): install nftables kernel modules - fix(35network-manager): install nft binary during module - fix(dracut-install): copy xattr when use clone ioctl - feat(dracut.sh): add --add-confdir option - fix: typo in variable name - feat(fips): add support for UKIs - fix(kernel-modules): use modalias info in get_dev_module() - fix(dracut-functions.sh): convert mmcblk to the real kernel - revert: "feat(i18n): pull 'drm' or 'simpledrm' module unless - build: rebuild without an obsoleted patch - fix(network): warn on suspicious shell metacharacters in - fix(base): escape arguments in initqueue hook script Related: RHEL-170857 - fix(network-legacy): replace `echo` writes with `printf` to - fix(iscsi): replace `echo` writes with `printf` to prevent - fix(base): replace eval with safe variable indirection in Resolves: RHEL-170857 - fix(systemd-repart): allow partition format - feat(install.d):according to the changes of - feat(i18n): pull 'drm' or 'simpledrm' module unless excluded - fix(pcsc): add opensc load module file - fix(pcsc): add --disable-polkit to pcscd.service - fix(pkcs11): delete trailing dot on - fix(multipath): disable user_friendly_names with mpathconf Resolves: RHEL-103385,RHEL-103974,RHEL-109631,RHEL-145135,RHEL-91322 - fix(systemd): partial backport of - fix(systemd): add missing modprobe@.service - fix: let check_vol_slaves_all return 1 when checks on all - improvement(74nvmf): lookup required NIC kernel modules for - fix(74nvmf): set root=nvmf - chore(multipath): remove `rd_NO_MULTIPATH` kernel command - refactor(multipath): remove custom multipathd.service - fix(systemd): systemd.volatile needs overlayfs kernel module - refactor(dracut): introduce clamp_mtimes helper function - fix(dracut): ensure hardlink deduplication is reproducible - fix(dracut.sh): don't pass empty string as dir - fix(rescue): create hmac file for rescue kernel - fix(35network-manager): remove duplicate installkernel - feat(fips): include fips module unconditionally - fix(dracut.sh): make omit-drivers option do exact match for - feat: add openssl module - fix(base): escape die() message in emergency hook script - fix(base): replace eval with safe variable indirection in - revert: "feat(i18n): pull 'drm' or 'simpledrm' module unless - build: rebuild without an obsoleted patch - fix(network): warn on suspicious shell metacharacters in - fix(base): escape arguments in initqueue hook script Related: RHEL-170857 - fix(network-legacy): replace `echo` writes with `printf` to - fix(iscsi): replace `echo` writes with `printf` to prevent - fix(base): replace eval with safe variable indirection in Resolves: RHEL-170857 - fix(systemd-repart): allow partition format - feat(install.d):according to the changes of - feat(i18n): pull 'drm' or 'simpledrm' module unless excluded - fix(pcsc): add opensc load module file - fix(pcsc): add --disable-polkit to pcscd.service - fix(pkcs11): delete trailing dot on - fix(multipath): disable user_friendly_names with mpathconf Resolves: RHEL-103385,RHEL-103974,RHEL-109631,RHEL-145135,RHEL-91322 - fix(systemd): partial backport of - fix(systemd): add missing modprobe@.service - fix: let check_vol_slaves_all return 1 when checks on all - improvement(74nvmf): lookup required NIC kernel modules for - fix(74nvmf): set root=nvmf - chore(multipath): remove `rd_NO_MULTIPATH` kernel command - refactor(multipath): remove custom multipathd.service - fix(systemd): systemd.volatile needs overlayfs kernel module - refactor(dracut): introduce clamp_mtimes helper function - fix(dracut): ensure hardlink deduplication is reproducible - fix(dracut.sh): don't pass empty string as dir - fix(rescue): create hmac file for rescue kernel - Work around ORC backports in RHEL 9.6 Resolves: RHEL-136527 - Rebase to upstream v0.0.33 Resolves: RHEL-114118 - Fix regression in selftest introduced in 0.0.31-3 - Add man page for drgn Resolves: RHEL-100318 - Rebuild for libkdumpfile 0.5.5 Resolves: RHEL-86262 - Rebase to upstream v0.0.31 Resolves: RHEL-86264 - Rebase to upstream v0.0.29 Resolves: RHEL-61658 - Enable brew-build.tier0.functional test - Remove brew-build.tier0.functional test - Updated to 0.115 (RHEL-11393) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Gating rebuild [bz#1974188] - Resolves: bz#1974188 (Define tests, including gating tests, for dtc) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for Python 3.9 - Update to 1.6.0 - Upstream patch to fix gcc-10 build - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use __cc macro instead of hard-coding gcc - Rework the selection of functions to represent in BTF, for instance: - Skip functions that passes values thru the stack when those structs don't have expected alignment due to some attribute usage that then causes problems with BTF trampolines due to lack of expressiveness in BTF to signal such special cases. - Skip objects (compile units) without DWARF: don't stop a multi object encoding session just because one doesn't have any DWARF in it. - Fix BTF dedup by updating libbpf. - Fix the inference of the explicit alignment attribute of zero length arrays, like struct skb_ext->data[] in the Linux kernel. Important as BTF has no no explicit alignment attribute encoding. - Fix the inference of alignments after bitfields, such as in struct nft_rule_dp->data[] after ->handle:42, also in the Linux kernel. - Fix segfault with --show_reorg_steps option, e.g. pahole -R -S -C task_struct. - Add comparision of functions encoded in BTF between baseline 'master' branch and current branch, i.e. 'next'. - New release: 1.30 - Better detection of abort during DWARF loader thread processing - pahole now detects presence of libbpf APIs and BTF features using weak function declarations when built using a shared library libbpf - Type tags are emitted for BPF arena pointers with new BTF "attributes" feature - New release: 1.29 - Multithreading is now in the DWARF loader using a jobs queue and a pool of worker threads. - The BTF encoding now is always reproducible, and as fast/faster than before. - The memory consumption is reduced. - Support for multiple BTF_DECL_TAGs pointing to same tag. - Verify that pfunct prints btf_decl_tags read from BTF. - Don't print functions twice when using 'pfunct -f function_name'. - New release: 1.28 - Various improvements to reduce the memory footprint of pahole, notably when doing BTF encoding. - Show flexible arrays statistics - Add '--padding N' and '--padding_ge N' to show structs with paddings - Introduce --running_kernel_vmlinux to find a vmlinux that matches the build-id of the running kernel. - Don't stop pfunct output at the first function that matches a filter, show all of them - Allow encoding data about all global variables, not just per CPU ones - Handle .BTF_ids section endianness, fully supporting cross builds - Generate decl tags for bpf_fastcall for eligible kfuncs - Add "distilled_base" BTF feature to split BTF generation. - Use the ELF_C_READ_MMAP mode with libelf, reducing peak memory utilization - Allow overriding /sys/kernel/btf/vmlinux via the PAHOLE_VMLINUX_BTF_FILENAME env var - Allow setting the list of compile units via PAHOLE_LANG_EXCLUDE env var - Serialize access to elfutils dwarf_getlocation(). - Honour --lang_exclude when merging LTO built CUs. - Add the debuginfod client cache directory to the vmlinux search path. - Print the CU's language when a tag isn't supported. - Initial support for GNU_formal_parameter_pack, GNU_template_parameter_pack, template_value_param and template_type_param DWARF tags. - Improve the parameter parsing by checking DW_OP_[GNU_]entry_value - Introduce a tests/ directory with regression tests - Backport upstream bugfixes for clang builds Resolves: RHEL-54022 - Resolves: RHEL-30780 - New release: v1.26 - When expanding types using 'pahole -E' do it for union and struct typedefs and for enums too. - Print number of holes, bit holes and bit paddings in class member types. - Introduce --contains_enumerator=ENUMERATOR_NAME: - Fix pretty printing using DWARF, waiting for a CU with both class (-C) and a specified "type_enum". - Add support for DW_TAG_constant in the DWARF loader, first seen in Go DWARF. - Fix loading DW_TAG_subroutine_type generated by the Go compiler. - Fix loading of 32-bit signed enums from BTF. - Add 'pahole --btf_features' to allow consumers to specify an opt-in set of features they want to use in BTF encoding. - Parallelize loading BTF and DWARF, speeding up a bit btfdiff. - Do type expansion to cover "private" types and enumerations in btfdiff. - New release: v1.27 - Reproducible parallel builds: multiple runs with different number of loading/encoding threads produce the same result. - Inject kfunc decl tags into BTF from the BTF IDs ELF section in the Linux kernel vmlinux file. - Sanitize unsupported DWARF int type with greater-than-16 byte, as BTF doesn't support it. - Initial support for BTF_KIND_DECL_TAG in the BTF loader, adding support in pfunct output. - Fix hole discovery with inheritance in C++. - Update to dwz 0.16 - Require xxhash-devel to build - Rebased to dyninst 13.0.0 + buildability patches - Dropping testsuite - ext2fs: make sure we have at least EXT2_FIRST_INO + 1 inodes - Fix: e2fsprogs: online resize fails - Related: RHEL-76095 - Bump release to perform build verification for gating changes - Related: RHEL-71250 - rebuild to incorporate libss-devel package - Related: RHEL-19059 - Change the xattr entry hash to use an unsighed char by default - Related: RHEL-10467 - Resolves: RHEL-18432 OpenJDK 21 support for RHEL ecj - Resolves: RHEL-14880 ecj requires specific java version - Bump release so that the NVR on RHEL-9 is higher than RHEL-8 - Drop unnecessary javax16.api.jar - Add dependency on javapackages-tools since the ecj binary requires it to run - Add tmt gating plan - Add gating.yaml - Update to 4.20 - edk2-openssl-flatten-contents-of-openssl-tarball.patch [RHEL-115922] - edk2-Bumped-openssl-submodule-to-version-3.0.7-29.1.patch [RHEL-115922] - Resolves: RHEL-115922 (CVE-2025-9230 edk2: Out-of-bounds read & write in RFC 3211 KEK Unwrap [rhel-9.8]) - edk2-make-dbxupdate.sh-get-version-tag-add-to-commit-mess.patch [RHEL-126100] - edk2-update-dbx-to-20251016-v1.6.1.patch [RHEL-126100] - Resolves: RHEL-126100 ([edk2,rhel-9] dbx update to 20251016 / v1.6.1) - edk2-OvmfPkg-MemEncryptSevLib-Evict-cache-lines-during-SN.patch [RHEL-121983] - edk2-MdePkg-Add-the-COHERENCY_SFW_NO-CPUID-bit-field.patch [RHEL-121983] - edk2-OvmfPkg-ResetVector-Make-ReceivedVc-a-flag-in-SEV-ES.patch [RHEL-121983] - edk2-OvmfPkg-MemEncryptSevLib-Check-if-SEV-SNP-coherency-.patch [RHEL-121983] - Resolves: RHEL-121983 ([edk2] VM panic on booting SNP guest with large memory on Genoa) - edk2-MdePkg-Acpi66.h-Add-ACPI-6.6-header.patch [RHEL-109010] - edk2-OvmfPkg-WorkArea.h-Add-MAILBOX_GDT.patch [RHEL-109010] - edk2-OvmfPkg-Add-the-Test-command-in-TDX-MailBox.patch [RHEL-109010] - edk2-OvmfPkg-Add-the-ResetVector-in-TDX-MailBox.patch [RHEL-109010] - edk2-OvmfPkg-TdxDxe-Support-5-level-paging-for-ResetVecto.patch [RHEL-109010] - edk2-OvmfPkg-IoMmuDxe-Fix-1M-and-2M-buffer-handling.patch [RHEL-69780] - Resolves: RHEL-109010 (TD guest dmesg reports ACPI BIOS Warning (bug): Incorrect checksum in table [APIC] - 0x29) - Resolves: RHEL-69780 (Fail to create AMD SEV SLES 15 SP4 guest via virt-install --cdrom [rhel-9.8]) - edk2-update-dbx-to-20250610.patch [RHEL-96869] - Resolves: RHEL-96869 ([edk2,rhel-9] dbx update 20250610) - edk2-OvmfPkg-Use-the-OvmfPkg-version-of-CcProbeLib.patch [RHEL-70865] - edk2-Update-dbx-revocation-list-to-2025-02-24-version.patch [RHEL-83019] - Resolves: RHEL-70865 (SNP guest failed to boot with SVSM using OVMF.amdsev.fd [rhel-9.7]) - Resolves: RHEL-83019 (The newer revocation file and Server 2025 required to update it [rhel-9]) - edk2-Fix-amd-sev-firmware-file-for-amd-snp.patch [RHEL-72447] - Resolves: RHEL-72447 ( QEMU should creating new json file that will correctly describe firmware for amd-sev-snp [rhel-9]) - Update to edk2-stable202411 - Resolves: RHEL-58063 ([edk2,rhel-9] rebase to edk2-stable202411) - edk2-OvmfPkg-Rerun-dispatcher-after-initializing-virtio-r.patch [RHEL-58631] - Resolves: RHEL-58631 ([Regression] HTTP Boot fails to work with edk2-ovmf-20231122-6.el9_4.2 and greater) - edk2-OvmfPkg-ArmVirtPkg-Add-a-Fallback-RNG-RH-only.patch [RHEL-66230] - Resolves: RHEL-66230 ([Regression] [aarch64] HTTP Boot not working on old vCPU without virtio-rng device present [rhel-9.6]) - Bump release - Related: #RHELMISC-9574 - Bump release - Related: #RHEL-50842 - Picked 9b9b4c7dde2e and 32cfff131279 from rhel 9.0 to update nvr - Resolves: #RHEL-50842 - Fix inheritance of buildflags - Resolves: #2144520 - Bump to re-run tests; no code changes - Resolves: #2024374 - New upstream release (38) - Resolves: #2024374 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Enable Intel Control-flow Enforcement Technology (CET) Resolves: rhbz#1808811 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Sync with upstream to drop the glew dependency - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for new freeglut. - Bump release - Update to 1.1.13.1 Resolves: https://issues.redhat.com/browse/RHEL-68048 - Rebuilt for RHEL-26187 - Don't install 15_nvidia_gbm.json - Bump release - Update to 1.1.13.1 Resolves: https://issues.redhat.com/browse/RHEL-68048 - Disable debuginfod-urls - Upgrade to upstream elfutils 0.194 - Add elfutils-0.194-alloc-jobs.patch - Upgrade to upstream elfutils 0.193 - Drop upstreamed patches elfutils-0.192-fix-free.patch elfutils-0.192-libelf-static.patch elfutils-0.192-stacktrace-lto.patch - Add elfutils-0.192-fix-free.patch - Disable debuginfod-urls - Upgrade to upstream elfutils 0.194 - Add elfutils-0.194-alloc-jobs.patch - Upgrade to upstream elfutils 0.193 - Drop upstreamed patches elfutils-0.192-fix-free.patch elfutils-0.192-libelf-static.patch elfutils-0.192-stacktrace-lto.patch - Add elfutils-0.192-fix-free.patch - Disable debuginfod-urls - Upgrade to upstream elfutils 0.194 - Add elfutils-0.194-alloc-jobs.patch - Upgrade to upstream elfutils 0.193 - Drop upstreamed patches elfutils-0.192-fix-free.patch elfutils-0.192-libelf-static.patch elfutils-0.192-stacktrace-lto.patch - Add elfutils-0.192-fix-free.patch - Disable debuginfod-urls - Upgrade to upstream elfutils 0.194 - Add elfutils-0.194-alloc-jobs.patch - Upgrade to upstream elfutils 0.193 - Drop upstreamed patches elfutils-0.192-fix-free.patch elfutils-0.192-libelf-static.patch elfutils-0.192-stacktrace-lto.patch - Add elfutils-0.192-fix-free.patch - Fix nsm-should-check for "google.com" failure (RHEL-94297) - Fix package tests for tetris no longer existing as a package (RHEL-94297) - Introduce untrusted-content variable (RHEL-94297) - Pong and Tetris are excluded (RHEL-94297) - Fix flymake tests with GCC 14 (RHEL-94297) - Restore definition of variable "enable-dir-local-variables" (RHEL-92550) - Fix arbitrary code execution via Lisp macro expansion (RHEL-90181) - Fix arbitrary code execution via Lisp macro expansion (RHEL-69399) - Bump release - Eliminate use of obsolete patch syntax (RHEL-80443) - Fix man.el shell injection vulnerability (RHEL-79025) - Disable xwidgets (RHEL-14551) - org-file-contents: Consider all remote files unsafe (CVE-2024-30205) - Make Gnus treats inline MIME contents as untrusted (CVE-2024-30203) - Add protection for LaTeX preview (CVE-2024-30204) - org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code (CVE-2024-39331) - Fix integer overflow in pbm_load image validation (RHEL-248067) - Restrict Tramp user name to fix CVE-2026-79992 (RHEL-248552) - Fix nsm-should-check for "google.com" failure (RHEL-94297) - Fix package tests for tetris no longer existing as a package (RHEL-94297) - Introduce untrusted-content variable (RHEL-94297) - Pong and Tetris are excluded (RHEL-94297) - Fix flymake tests with GCC 14 (RHEL-94297) - Restore definition of variable "enable-dir-local-variables" (RHEL-92550) - Fix arbitrary code execution via Lisp macro expansion (RHEL-90181) - Fix arbitrary code execution via Lisp macro expansion (RHEL-69399) - Bump release - Eliminate use of obsolete patch syntax (RHEL-80443) - Fix man.el shell injection vulnerability (RHEL-79025) - Generalize trusted-content-p check to all Flymake backends (CVE-2026-96442) - Resolves: RHEL-265110 - Fix integer overflow in pbm_load image validation (RHEL-248067) - Restrict Tramp user name to fix CVE-2026-79992 (RHEL-248552) - Fix nsm-should-check for "google.com" failure (RHEL-94297) - Fix package tests for tetris no longer existing as a package (RHEL-94297) - Introduce untrusted-content variable (RHEL-94297) - Pong and Tetris are excluded (RHEL-94297) - Fix flymake tests with GCC 14 (RHEL-94297) - Restore definition of variable "enable-dir-local-variables" (RHEL-92550) - Fix arbitrary code execution via Lisp macro expansion (RHEL-90181) - Fix arbitrary code execution via Lisp macro expansion (RHEL-69399) - Bump release - Eliminate use of obsolete patch syntax (RHEL-80443) - Fix build failure on CentOS Stream. Related: rhbz#1951306 - Revert patch for FSF addresses (it became obsolete with 12.2) - Remove Obsoletes and Provides tetex-preview - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fix nsm-should-check for "google.com" failure (RHEL-94297) - Fix package tests for tetris no longer existing as a package (RHEL-94297) - Introduce untrusted-content variable (RHEL-94297) - Pong and Tetris are excluded (RHEL-94297) - Fix flymake tests with GCC 14 (RHEL-94297) - Restore definition of variable "enable-dir-local-variables" (RHEL-92550) - Fix arbitrary code execution via Lisp macro expansion (RHEL-90181) - Fix arbitrary code execution via Lisp macro expansion (RHEL-69399) - Bump release - Eliminate use of obsolete patch syntax (RHEL-80443) - Fix man.el shell injection vulnerability (RHEL-79025) - Disable xwidgets (RHEL-14551) - org-file-contents: Consider all remote files unsafe (CVE-2024-30205) - Make Gnus treats inline MIME contents as untrusted (CVE-2024-30203) - Add protection for LaTeX preview (CVE-2024-30204) - org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code (CVE-2024-39331) - Fix integer overflow in pbm_load image validation (RHEL-248067) - Restrict Tramp user name to fix CVE-2026-79992 (RHEL-248552) - Fix nsm-should-check for "google.com" failure (RHEL-94297) - Fix package tests for tetris no longer existing as a package (RHEL-94297) - Introduce untrusted-content variable (RHEL-94297) - Pong and Tetris are excluded (RHEL-94297) - Fix flymake tests with GCC 14 (RHEL-94297) - Restore definition of variable "enable-dir-local-variables" (RHEL-92550) - Fix arbitrary code execution via Lisp macro expansion (RHEL-90181) - Fix arbitrary code execution via Lisp macro expansion (RHEL-69399) - Bump release - Eliminate use of obsolete patch syntax (RHEL-80443) - Fix man.el shell injection vulnerability (RHEL-79025) - Generalize trusted-content-p check to all Flymake backends (CVE-2026-96442) - Resolves: RHEL-265110 - Fix integer overflow in pbm_load image validation (RHEL-248067) - Restrict Tramp user name to fix CVE-2026-79992 (RHEL-248552) - Fix nsm-should-check for "google.com" failure (RHEL-94297) - Fix package tests for tetris no longer existing as a package (RHEL-94297) - Introduce untrusted-content variable (RHEL-94297) - Pong and Tetris are excluded (RHEL-94297) - Fix flymake tests with GCC 14 (RHEL-94297) - Restore definition of variable "enable-dir-local-variables" (RHEL-92550) - Fix arbitrary code execution via Lisp macro expansion (RHEL-90181) - Fix arbitrary code execution via Lisp macro expansion (RHEL-69399) - Bump release - Eliminate use of obsolete patch syntax (RHEL-80443) - Fix nsm-should-check for "google.com" failure (RHEL-94297) - Fix package tests for tetris no longer existing as a package (RHEL-94297) - Introduce untrusted-content variable (RHEL-94297) - Pong and Tetris are excluded (RHEL-94297) - Fix flymake tests with GCC 14 (RHEL-94297) - Restore definition of variable "enable-dir-local-variables" (RHEL-92550) - Fix arbitrary code execution via Lisp macro expansion (RHEL-90181) - Fix arbitrary code execution via Lisp macro expansion (RHEL-69399) - Bump release - Eliminate use of obsolete patch syntax (RHEL-80443) - Fix man.el shell injection vulnerability (RHEL-79025) - Disable xwidgets (RHEL-14551) - org-file-contents: Consider all remote files unsafe (CVE-2024-30205) - Make Gnus treats inline MIME contents as untrusted (CVE-2024-30203) - Add protection for LaTeX preview (CVE-2024-30204) - org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code (CVE-2024-39331) - Fix integer overflow in pbm_load image validation (RHEL-248067) - Restrict Tramp user name to fix CVE-2026-79992 (RHEL-248552) - Fix nsm-should-check for "google.com" failure (RHEL-94297) - Fix package tests for tetris no longer existing as a package (RHEL-94297) - Introduce untrusted-content variable (RHEL-94297) - Pong and Tetris are excluded (RHEL-94297) - Fix flymake tests with GCC 14 (RHEL-94297) - Restore definition of variable "enable-dir-local-variables" (RHEL-92550) - Fix arbitrary code execution via Lisp macro expansion (RHEL-90181) - Fix arbitrary code execution via Lisp macro expansion (RHEL-69399) - Bump release - Eliminate use of obsolete patch syntax (RHEL-80443) - Fix man.el shell injection vulnerability (RHEL-79025) - Generalize trusted-content-p check to all Flymake backends (CVE-2026-96442) - Resolves: RHEL-265110 - Fix integer overflow in pbm_load image validation (RHEL-248067) - Restrict Tramp user name to fix CVE-2026-79992 (RHEL-248552) - Fix nsm-should-check for "google.com" failure (RHEL-94297) - Fix package tests for tetris no longer existing as a package (RHEL-94297) - Introduce untrusted-content variable (RHEL-94297) - Pong and Tetris are excluded (RHEL-94297) - Fix flymake tests with GCC 14 (RHEL-94297) - Restore definition of variable "enable-dir-local-variables" (RHEL-92550) - Fix arbitrary code execution via Lisp macro expansion (RHEL-90181) - Fix arbitrary code execution via Lisp macro expansion (RHEL-69399) - Bump release - Eliminate use of obsolete patch syntax (RHEL-80443) - Fix nsm-should-check for "google.com" failure (RHEL-94297) - Fix package tests for tetris no longer existing as a package (RHEL-94297) - Introduce untrusted-content variable (RHEL-94297) - Pong and Tetris are excluded (RHEL-94297) - Fix flymake tests with GCC 14 (RHEL-94297) - Restore definition of variable "enable-dir-local-variables" (RHEL-92550) - Fix arbitrary code execution via Lisp macro expansion (RHEL-90181) - Fix arbitrary code execution via Lisp macro expansion (RHEL-69399) - Bump release - Eliminate use of obsolete patch syntax (RHEL-80443) - Fix man.el shell injection vulnerability (RHEL-79025) - Disable xwidgets (RHEL-14551) - org-file-contents: Consider all remote files unsafe (CVE-2024-30205) - Make Gnus treats inline MIME contents as untrusted (CVE-2024-30203) - Add protection for LaTeX preview (CVE-2024-30204) - org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code (CVE-2024-39331) - Fix integer overflow in pbm_load image validation (RHEL-248067) - Restrict Tramp user name to fix CVE-2026-79992 (RHEL-248552) - Fix nsm-should-check for "google.com" failure (RHEL-94297) - Fix package tests for tetris no longer existing as a package (RHEL-94297) - Introduce untrusted-content variable (RHEL-94297) - Pong and Tetris are excluded (RHEL-94297) - Fix flymake tests with GCC 14 (RHEL-94297) - Restore definition of variable "enable-dir-local-variables" (RHEL-92550) - Fix arbitrary code execution via Lisp macro expansion (RHEL-90181) - Fix arbitrary code execution via Lisp macro expansion (RHEL-69399) - Bump release - Eliminate use of obsolete patch syntax (RHEL-80443) - Fix man.el shell injection vulnerability (RHEL-79025) - Generalize trusted-content-p check to all Flymake backends (CVE-2026-96442) - Resolves: RHEL-265110 - Fix integer overflow in pbm_load image validation (RHEL-248067) - Restrict Tramp user name to fix CVE-2026-79992 (RHEL-248552) - Fix nsm-should-check for "google.com" failure (RHEL-94297) - Fix package tests for tetris no longer existing as a package (RHEL-94297) - Introduce untrusted-content variable (RHEL-94297) - Pong and Tetris are excluded (RHEL-94297) - Fix flymake tests with GCC 14 (RHEL-94297) - Restore definition of variable "enable-dir-local-variables" (RHEL-92550) - Fix arbitrary code execution via Lisp macro expansion (RHEL-90181) - Fix arbitrary code execution via Lisp macro expansion (RHEL-69399) - Bump release - Eliminate use of obsolete patch syntax (RHEL-80443) - Fix nsm-should-check for "google.com" failure (RHEL-94297) - Fix package tests for tetris no longer existing as a package (RHEL-94297) - Introduce untrusted-content variable (RHEL-94297) - Pong and Tetris are excluded (RHEL-94297) - Fix flymake tests with GCC 14 (RHEL-94297) - Restore definition of variable "enable-dir-local-variables" (RHEL-92550) - Fix arbitrary code execution via Lisp macro expansion (RHEL-90181) - Fix arbitrary code execution via Lisp macro expansion (RHEL-69399) - Bump release - Eliminate use of obsolete patch syntax (RHEL-80443) - Fix man.el shell injection vulnerability (RHEL-79025) - Disable xwidgets (RHEL-14551) - org-file-contents: Consider all remote files unsafe (CVE-2024-30205) - Make Gnus treats inline MIME contents as untrusted (CVE-2024-30203) - Add protection for LaTeX preview (CVE-2024-30204) - org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code (CVE-2024-39331) - Fix integer overflow in pbm_load image validation (RHEL-248067) - Restrict Tramp user name to fix CVE-2026-79992 (RHEL-248552) - Fix nsm-should-check for "google.com" failure (RHEL-94297) - Fix package tests for tetris no longer existing as a package (RHEL-94297) - Introduce untrusted-content variable (RHEL-94297) - Pong and Tetris are excluded (RHEL-94297) - Fix flymake tests with GCC 14 (RHEL-94297) - Restore definition of variable "enable-dir-local-variables" (RHEL-92550) - Fix arbitrary code execution via Lisp macro expansion (RHEL-90181) - Fix arbitrary code execution via Lisp macro expansion (RHEL-69399) - Bump release - Eliminate use of obsolete patch syntax (RHEL-80443) - Fix man.el shell injection vulnerability (RHEL-79025) - Generalize trusted-content-p check to all Flymake backends (CVE-2026-96442) - Resolves: RHEL-265110 - Fix integer overflow in pbm_load image validation (RHEL-248067) - Restrict Tramp user name to fix CVE-2026-79992 (RHEL-248552) - Fix nsm-should-check for "google.com" failure (RHEL-94297) - Fix package tests for tetris no longer existing as a package (RHEL-94297) - Introduce untrusted-content variable (RHEL-94297) - Pong and Tetris are excluded (RHEL-94297) - Fix flymake tests with GCC 14 (RHEL-94297) - Restore definition of variable "enable-dir-local-variables" (RHEL-92550) - Fix arbitrary code execution via Lisp macro expansion (RHEL-90181) - Fix arbitrary code execution via Lisp macro expansion (RHEL-69399) - Bump release - Eliminate use of obsolete patch syntax (RHEL-80443) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #1961175 (Missing man page for enchant-lsmod) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Disable nuspell support for RHEL (#1925839) - Include support for Nuspell. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 2.2.15 - Update to 2.2.14 - Update to 2.2.13 - Update to 2.2.12 - Update to 2.2.11 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - make is no longer in buildroot by default - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild Resolves: rhbs #2050849 - Bug 2050849 - Volkswagen Siemens CardOS M4.4 and 5.0 cards display incorrect status in ESC [RHEL 9.1] Resolves: rhbs #2007544,2000928,2000929 - Appease rpminspect Resolves: rhbs #2007544,2000928,2000929 - Bugzilla Bug 2007544 - The esc provides outdated configuration for opensc - Bugzilla Bug 2000928 - ESC does not detect smart cards and crashes upon launch [rhel-9.0.0] - Bugzilla Bug 2000929 - [RHEL-9][AppStream] esc present in comps but missing from repository [rhel-9.0.0] - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags - - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - - Don't enable GConf2 on RHEL 9 as it won't be available there. - - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - - Force C++14 as this code is not C++17 ready - Fix sprintf format issue - Fix ordered comparison of a pointer against zero issue - - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - - Fix gating.yaml - Related: rhbz#2190221 - Rebuild for rhbz#2190221 - Resolves: rhbz#2190221 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix a leak - Resolves: RHEL-84038 - Allow launch action to open PDFs - Resolves: RHEL-84038 - Sanitize arguments (CVE-2026-46529) - Resolves: RHEL-184047 - Fix a leak - Resolves: RHEL-84038 - Allow launch action to open PDFs - Resolves: RHEL-84038 - Fix a leak - Resolves: RHEL-84038 - Allow launch action to open PDFs - Resolves: RHEL-84038 - Sanitize arguments (CVE-2026-46529) - Resolves: RHEL-184047 - Fix a leak - Resolves: RHEL-84038 - Allow launch action to open PDFs - Resolves: RHEL-84038 - Fix a leak - Resolves: RHEL-84038 - Allow launch action to open PDFs - Resolves: RHEL-84038 - Sanitize arguments (CVE-2026-46529) - Resolves: RHEL-184047 - Fix a leak - Resolves: RHEL-84038 - Allow launch action to open PDFs - Resolves: RHEL-84038 - Fix a leak - Resolves: RHEL-84038 - Allow launch action to open PDFs - Resolves: RHEL-84038 - Sanitize arguments (CVE-2026-46529) - Resolves: RHEL-184047 - Fix a leak - Resolves: RHEL-84038 - Allow launch action to open PDFs - Resolves: RHEL-84038 - Fix a leak - Resolves: RHEL-84038 - Allow launch action to open PDFs - Resolves: RHEL-84038 - Sanitize arguments (CVE-2026-46529) - Resolves: RHEL-184047 - Fix a leak - Resolves: RHEL-84038 - Allow launch action to open PDFs - Resolves: RHEL-84038 - Resolves: RHEL-111953 (WebKitGTK 2.49.4: JavaScript evaluation result serialization changes) - Resolves: RHEL-62668 (WebKitGTK 2.46.1: Middle mouse button inserts primary clipboard twice) - Resolves: RHEL-111953 (WebKitGTK 2.49.4: JavaScript evaluation result serialization changes) - Resolves: RHEL-62668 (WebKitGTK 2.46.1: Middle mouse button inserts primary clipboard twice) - Resolves: RHEL-72799 (EBackend: Change when adding signal handler for "network-changed") - Resolves: RHEL-21361 (OAuth2: Enable HTML5 database and local storage features for web view) - Resolves: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage) - Add requirement on ui subpackage into ui-devel subpackage - Resolves: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage) - Resolves: RHEL-72799 (EBackend: Change when adding signal handler for "network-changed") - Resolves: RHEL-21361 (OAuth2: Enable HTML5 database and local storage features for web view) - Resolves: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage) - Add requirement on ui subpackage into ui-devel subpackage - Resolves: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage) - Resolves: RHEL-72799 (EBackend: Change when adding signal handler for "network-changed") - Resolves: RHEL-21361 (OAuth2: Enable HTML5 database and local storage features for web view) - Resolves: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage) - Add requirement on ui subpackage into ui-devel subpackage - Resolves: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage) - Resolves: RHEL-72799 (EBackend: Change when adding signal handler for "network-changed") - Resolves: RHEL-21361 (OAuth2: Enable HTML5 database and local storage features for web view) - Resolves: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage) - Add requirement on ui subpackage into ui-devel subpackage - Resolves: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage) - Resolves: RHEL-72799 (EBackend: Change when adding signal handler for "network-changed") - Resolves: RHEL-21361 (OAuth2: Enable HTML5 database and local storage features for web view) - Resolves: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage) - Add requirement on ui subpackage into ui-devel subpackage - Resolves: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage) - Resolves: RHEL-72799 (EBackend: Change when adding signal handler for "network-changed") - Resolves: RHEL-21361 (OAuth2: Enable HTML5 database and local storage features for web view) - Resolves: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage) - Add requirement on ui subpackage into ui-devel subpackage - Resolves: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage) - Resolves: RHEL-72799 (EBackend: Change when adding signal handler for "network-changed") - Resolves: RHEL-21361 (OAuth2: Enable HTML5 database and local storage features for web view) - Resolves: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage) - Add requirement on ui subpackage into ui-devel subpackage - Resolves: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage) - Resolves: RHEL-72799 (EBackend: Change when adding signal handler for "network-changed") - Resolves: RHEL-21361 (OAuth2: Enable HTML5 database and local storage features for web view) - Resolves: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage) - Add requirement on ui subpackage into ui-devel subpackage - Resolves: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage) - Resolves: RHEL-25069 (Release queue lock as soon as possible in ews_next_request()) - Resolves: RHEL-19371 (Backport upstream patch to workaround broken text/calendar mail attachments by the server) - Resolves: RHEL-25069 (Release queue lock as soon as possible in ews_next_request()) - Resolves: RHEL-19371 (Backport upstream patch to workaround broken text/calendar mail attachments by the server) - Resolves: RHEL-111953 (WebKitGTK 2.49.4: JavaScript evaluation result serialization changes) - Resolves: RHEL-62668 (WebKitGTK 2.46.1: Middle mouse button inserts primary clipboard twice) - Resolves: RHEL-111953 (WebKitGTK 2.49.4: JavaScript evaluation result serialization changes) - Resolves: RHEL-62668 (WebKitGTK 2.46.1: Middle mouse button inserts primary clipboard twice) - Related: RHEL-114548 (Rebuild against samba 4.23) - Related: RHEL-89873 (Rebuild against samba 4.22) - Related: RHEL-59788 (Rebuild against samba 4.21) - Related: RHEL-33645 (Rebuild against samba 4.20) - Related: RHEL-114548 (Rebuild against samba 4.23) - Related: RHEL-89873 (Rebuild against samba 4.22) - Related: RHEL-59788 (Rebuild against samba 4.21) - Related: RHEL-33645 (Rebuild against samba 4.20) - Resolves: RHEL-111953 (WebKitGTK 2.49.4: JavaScript evaluation result serialization changes) - Resolves: RHEL-62668 (WebKitGTK 2.46.1: Middle mouse button inserts primary clipboard twice) - Resolves: RHEL-111953 (WebKitGTK 2.49.4: JavaScript evaluation result serialization changes) - Resolves: RHEL-62668 (WebKitGTK 2.46.1: Middle mouse button inserts primary clipboard twice) - Backport upstream PR 120 to fix segfault on invalid unit types Resolves: rhbz#2224578 - Add vendor ID for NVIDIA BMCs Resolves: rhbz#2218358 - Update /var/run to /run in ipmievd.service that systemd warns about Resolves: rhbz#2100475 - Add upstream ipmievd patch to check received msg id against expectation Fixes problem where SEL response is not recognized correctly when SEL request times out Resolves: rhbz#2224569 - Apply changes from RHEL 8 (#1811941, #1831158, #1951480) Resolves: rhbz#2051621 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add modified upstream test suite as a gating test Related #1989405 - Update to (unreleased) version 2.6.0 to resolve licensing issues Resolves #1989405 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Force C++14 as this code is not C++17 ready - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Remove RPATH Resolves: bz#2018421 - Exiv2 0.27.5 Resolves: bz#2018421 Fix stack exhaustion issue in the printIFDStructure function leading to DoS Resolves: bz#2003670 - Properly install POC files Resolves: bz#1993247 Resolves: bz#1993284 - Include missing tests for CVEs Resolves: bz#1993247 Resolves: bz#1993284 - Fix test for CVE-2021-29470 Resolves: bz#1993284 - Fix out-of-bounds read in Exiv2::Jp2Image::printStructure Resolves: bz#1993247 - Fix out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header Resolves: bz#1993284 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Do not duplicate changelog file Resolves: bz#1989848 - 0.27.4 Resolves: bz#1989848 - Bump version for rebuild (binutils) Resolves: bz#1964183 Resolves: bz#1964189 - Remove RPATH Resolves: bz#2018421 - Exiv2 0.27.5 Resolves: bz#2018421 Fix stack exhaustion issue in the printIFDStructure function leading to DoS Resolves: bz#2003670 - Properly install POC files Resolves: bz#1993247 Resolves: bz#1993284 - Include missing tests for CVEs Resolves: bz#1993247 Resolves: bz#1993284 - Fix test for CVE-2021-29470 Resolves: bz#1993284 - Fix out-of-bounds read in Exiv2::Jp2Image::printStructure Resolves: bz#1993247 - Fix out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header Resolves: bz#1993284 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Do not duplicate changelog file Resolves: bz#1989848 - 0.27.4 Resolves: bz#1989848 - Bump version for rebuild (binutils) Resolves: bz#1964183 Resolves: bz#1964189 - Fix CVE-2025-59375 - Resolves: RHEL-114643 - Fix CVE-2024-8176 - Resolves: RHEL-57489 - Fix CVE-2024-50602 - Resolves: RHEL-65066 - Fix CVE-2024-45490, CVE-2024-45491, CVE-2024-45492 - Resolves: RHEL-56761 - Resolves: RHEL-57520 - Resolves: RHEL-57511 - Fix parsing of large tokens - Reject direct parameter entity recursion - Resolves: RHEL-29699 - Resolves: RHEL-29696 - Fix CVE-2026-45186 - Resolves: RHEL-177988 - Fix CVE-2025-59375 - Resolves: RHEL-114643 - Fix CVE-2024-8176 - Resolves: RHEL-57489 - Fix CVE-2024-50602 - Resolves: RHEL-65066 - Fix CVE-2024-45490, CVE-2024-45491, CVE-2024-45492 - Resolves: RHEL-56761 - Resolves: RHEL-57520 - Resolves: RHEL-57511 - Fix CVE-2026-56132: out-of-bound scaffolding index store in doProlog - Resolves: RHEL-221014 - Fix CVE-2026-50219 - Resolves: RHEL-220981 - Fix CVE-2026-45186 - Resolves: RHEL-177988 - Fix CVE-2025-59375 - Resolves: RHEL-114643 - Fix CVE-2024-8176 - Resolves: RHEL-57489 - Fix CVE-2024-50602 - Resolves: RHEL-65066 - Fix CVE-2024-45490, CVE-2024-45491, CVE-2024-45492 - Resolves: RHEL-56761 - Resolves: RHEL-57520 - Resolves: RHEL-57511 - Fix CVE-2026-66046: dtdCopy out-of-bounds access via isCdata hash lookup - Resolves: RHEL-260179 - CVE-2026-93990 expat: Expat: XML Injection via Malformed UTF-16 Input - Resolves: RHEL-269002 - Fix CVE-2026-56132: out-of-bound scaffolding index store in doProlog - Resolves: RHEL-221014 - Fix CVE-2026-50219 - Resolves: RHEL-220981 - Fix CVE-2026-45186 - Resolves: RHEL-177988 - Fix CVE-2025-59375 - Resolves: RHEL-114643 - Fix CVE-2024-8176 - Resolves: RHEL-57489 - Fix CVE-2024-50602 - Resolves: RHEL-65066 - Fix CVE-2024-45490, CVE-2024-45491, CVE-2024-45492 - Resolves: RHEL-56761 - Resolves: RHEL-57520 - Resolves: RHEL-57511 - CVE-2026-102633 expat: expat: Denial of Service via integer overflow in expat_realloc - Resolves: RHEL-272833 - CVE-2026-77214 expat: expat: Information disclosure via heap buffer over-read in XML_ParseBuffer over-read in XML_ParseBuffer - Resolves: RHEL-277510 - Fix CVE-2026-66046: dtdCopy out-of-bounds access via isCdata hash lookup - Resolves: RHEL-260179 - CVE-2026-93990 expat: Expat: XML Injection via Malformed UTF-16 Input - Resolves: RHEL-269002 - Fix CVE-2026-56132: out-of-bound scaffolding index store in doProlog - Resolves: RHEL-221014 - Fix CVE-2026-50219 - Resolves: RHEL-220981 - Fix CVE-2026-45186 - Resolves: RHEL-177988 - Fix CVE-2025-59375 - Resolves: RHEL-114643 - Fix CVE-2024-8176 - Resolves: RHEL-57489 - Fix CVE-2024-50602 - Resolves: RHEL-65066 - Rebuilt for -devel add to CRB Resolves: RHEL-18979 - Rebuilt after updating libfabric - Resolves: RHEL-134211 - bump release to rebuild in sidetag - Resolves: RHEL-134211 - Update to upstream release 2.3.1 - Resolves: RHEL-134211 - Update to upstream release 2.1.0 - Resolves: RHEL-104032 - Update to upstream release 1.22.0 - Resolves: RHEL-67059 - fapolicyd-1.4.5 https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4.5 - fapolicyd-1.4.4 https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4.4 - Fix 32-bit ELF dynamic section parsing - Fix binary path of rpm-loader - Map file with MAP_SHARED instead of MAP_PRIVATE - Fix segfault when interrupting fapolicyd startup - fapolicyd-1.4.3 https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4.3 https://github.com/linux-application-whitelisting/fapolicyd-selinux/releases/tag/v1.1 - fapolicyd-1.4.2 https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4.2 - Fix deadlock on reconfigure - On reconfigure, update the trust list and reload the rpm filter - fapolicyd-1.4 and fapolicyd-selinux-1.0 https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4 - fapolicyd-1.3.7 and fapolicyd-selinux-0.9 - Add /var/lib/fapolicyd to tmpfiles Resolves: RHEL-104873 - fapolicyd-1.4.5 https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4.5 - fapolicyd-1.4.4 https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4.4 - Fix 32-bit ELF dynamic section parsing - Fix binary path of rpm-loader - Map file with MAP_SHARED instead of MAP_PRIVATE - Fix segfault when interrupting fapolicyd startup - fapolicyd-1.4.3 https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4.3 https://github.com/linux-application-whitelisting/fapolicyd-selinux/releases/tag/v1.1 - fapolicyd-1.4.2 https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4.2 - Fix deadlock on reconfigure - On reconfigure, update the trust list and reload the rpm filter - fapolicyd-1.4 and fapolicyd-selinux-1.0 https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4 - fapolicyd-1.3.7 and fapolicyd-selinux-0.9 - Add /var/lib/fapolicyd to tmpfiles Resolves: RHEL-104873 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * chore: update patch for new release by @nullr0ute in https://github.com/fdo-rs/fido-device-onboard-rs/pull/625 * chore: fix require error with commitlint by @miabbott in https://github.com/fdo-rs/fido-device-onboard-rs/pull/636 * fix(license): replace space with - in Apache 2.0 by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/632 * fix(data-formats): use serde_tuple serializer for error messages by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/629 * fix: cargo test for non-root users by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/635 * fix(get_current_user_name): remove trailing whitespaces. by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/638 * chore: bump mio from 0.8.10 to 0.8.11 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/640 * fix: vendored tarfile creation by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/634 * fix: static-mut-refs warning by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/651 * Enable CentOS 9 builds and add Testing Farm e2e tests by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/650 * Add an OV re-registration window option when using DB storage by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/643 * chore: bump pem from 2.0.1 to 3.0.3 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/639 * chore: bump h2 from 0.3.25 to 0.3.26 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/659 * feat: verify trusted manufacturers by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/656 * database enhancements by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/666 * chore: bump openssl to 0.10.66 by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/664 * chore(store): make the store OVs agnostic by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/671 * feat(manufacturing-server): implement an export OVs endpoint by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/673 * fix(systemd-units): run before powering off the system by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/676 * fix(dracut): use isolate on error in the manufacturing-client service by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/678 * fix(systemd-generator): write configuration to '/run' by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/677 * fix(owner-tool): use the new API to export ovs by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/675 * chore: update diesel to 2.2.3 by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/669 * chore: bump reqwest from 0.11.27 to 0.12.7 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/683 * fix: use centos-stream-9 target instead of epel-9 by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/687 * enhance onboarding testing by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/681 * ci: add konflux test cases by @yih-redhat in https://github.com/fdo-rs/fido-device-onboard-rs/pull/688 * fix(make-vendored-tarfile.sh): exclude idna tests with unicode points by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/692 * chore: bump for 0.5.1 by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/693 * @miabbott made their first contribution in https://github.com/fdo-rs/fido-device-onboard-rs/pull/636 * @yih-redhat made their first contribution in https://github.com/fdo-rs/fido-device-onboard-rs/pull/688 **Full Changelog**: https://github.com/fdo-rs/fido-device-onboard-rs/compare/v0.5.0...v0.5.1 - Apply all the patches in the spec - Backport https://github.com/fdo-rs/fido-device-onboard-rs/pull/676 - Update license - New version 0.5.0, adds database support - Remove unused patches - Ensure client service fix is applied - Own var/lib/fdo, SELinux fixes - Add client/init deps to fdo-admin-cli - Update to 0.4.12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * chore: update patch for new release by @nullr0ute in https://github.com/fdo-rs/fido-device-onboard-rs/pull/625 * chore: fix require error with commitlint by @miabbott in https://github.com/fdo-rs/fido-device-onboard-rs/pull/636 * fix(license): replace space with - in Apache 2.0 by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/632 * fix(data-formats): use serde_tuple serializer for error messages by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/629 * fix: cargo test for non-root users by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/635 * fix(get_current_user_name): remove trailing whitespaces. by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/638 * chore: bump mio from 0.8.10 to 0.8.11 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/640 * fix: vendored tarfile creation by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/634 * fix: static-mut-refs warning by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/651 * Enable CentOS 9 builds and add Testing Farm e2e tests by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/650 * Add an OV re-registration window option when using DB storage by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/643 * chore: bump pem from 2.0.1 to 3.0.3 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/639 * chore: bump h2 from 0.3.25 to 0.3.26 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/659 * feat: verify trusted manufacturers by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/656 * database enhancements by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/666 * chore: bump openssl to 0.10.66 by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/664 * chore(store): make the store OVs agnostic by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/671 * feat(manufacturing-server): implement an export OVs endpoint by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/673 * fix(systemd-units): run before powering off the system by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/676 * fix(dracut): use isolate on error in the manufacturing-client service by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/678 * fix(systemd-generator): write configuration to '/run' by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/677 * fix(owner-tool): use the new API to export ovs by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/675 * chore: update diesel to 2.2.3 by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/669 * chore: bump reqwest from 0.11.27 to 0.12.7 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/683 * fix: use centos-stream-9 target instead of epel-9 by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/687 * enhance onboarding testing by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/681 * ci: add konflux test cases by @yih-redhat in https://github.com/fdo-rs/fido-device-onboard-rs/pull/688 * fix(make-vendored-tarfile.sh): exclude idna tests with unicode points by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/692 * chore: bump for 0.5.1 by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/693 * @miabbott made their first contribution in https://github.com/fdo-rs/fido-device-onboard-rs/pull/636 * @yih-redhat made their first contribution in https://github.com/fdo-rs/fido-device-onboard-rs/pull/688 **Full Changelog**: https://github.com/fdo-rs/fido-device-onboard-rs/compare/v0.5.0...v0.5.1 - Apply all the patches in the spec - Backport https://github.com/fdo-rs/fido-device-onboard-rs/pull/676 - Update license - New version 0.5.0, adds database support - Remove unused patches - Ensure client service fix is applied - Own var/lib/fdo, SELinux fixes - Add client/init deps to fdo-admin-cli - Update to 0.4.12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * chore: update patch for new release by @nullr0ute in https://github.com/fdo-rs/fido-device-onboard-rs/pull/625 * chore: fix require error with commitlint by @miabbott in https://github.com/fdo-rs/fido-device-onboard-rs/pull/636 * fix(license): replace space with - in Apache 2.0 by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/632 * fix(data-formats): use serde_tuple serializer for error messages by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/629 * fix: cargo test for non-root users by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/635 * fix(get_current_user_name): remove trailing whitespaces. by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/638 * chore: bump mio from 0.8.10 to 0.8.11 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/640 * fix: vendored tarfile creation by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/634 * fix: static-mut-refs warning by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/651 * Enable CentOS 9 builds and add Testing Farm e2e tests by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/650 * Add an OV re-registration window option when using DB storage by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/643 * chore: bump pem from 2.0.1 to 3.0.3 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/639 * chore: bump h2 from 0.3.25 to 0.3.26 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/659 * feat: verify trusted manufacturers by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/656 * database enhancements by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/666 * chore: bump openssl to 0.10.66 by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/664 * chore(store): make the store OVs agnostic by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/671 * feat(manufacturing-server): implement an export OVs endpoint by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/673 * fix(systemd-units): run before powering off the system by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/676 * fix(dracut): use isolate on error in the manufacturing-client service by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/678 * fix(systemd-generator): write configuration to '/run' by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/677 * fix(owner-tool): use the new API to export ovs by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/675 * chore: update diesel to 2.2.3 by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/669 * chore: bump reqwest from 0.11.27 to 0.12.7 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/683 * fix: use centos-stream-9 target instead of epel-9 by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/687 * enhance onboarding testing by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/681 * ci: add konflux test cases by @yih-redhat in https://github.com/fdo-rs/fido-device-onboard-rs/pull/688 * fix(make-vendored-tarfile.sh): exclude idna tests with unicode points by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/692 * chore: bump for 0.5.1 by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/693 * @miabbott made their first contribution in https://github.com/fdo-rs/fido-device-onboard-rs/pull/636 * @yih-redhat made their first contribution in https://github.com/fdo-rs/fido-device-onboard-rs/pull/688 **Full Changelog**: https://github.com/fdo-rs/fido-device-onboard-rs/compare/v0.5.0...v0.5.1 - Apply all the patches in the spec - Backport https://github.com/fdo-rs/fido-device-onboard-rs/pull/676 - Update license - New version 0.5.0, adds database support - Remove unused patches - Ensure client service fix is applied - Own var/lib/fdo, SELinux fixes - Add client/init deps to fdo-admin-cli - Update to 0.4.12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * chore: update patch for new release by @nullr0ute in https://github.com/fdo-rs/fido-device-onboard-rs/pull/625 * chore: fix require error with commitlint by @miabbott in https://github.com/fdo-rs/fido-device-onboard-rs/pull/636 * fix(license): replace space with - in Apache 2.0 by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/632 * fix(data-formats): use serde_tuple serializer for error messages by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/629 * fix: cargo test for non-root users by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/635 * fix(get_current_user_name): remove trailing whitespaces. by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/638 * chore: bump mio from 0.8.10 to 0.8.11 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/640 * fix: vendored tarfile creation by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/634 * fix: static-mut-refs warning by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/651 * Enable CentOS 9 builds and add Testing Farm e2e tests by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/650 * Add an OV re-registration window option when using DB storage by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/643 * chore: bump pem from 2.0.1 to 3.0.3 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/639 * chore: bump h2 from 0.3.25 to 0.3.26 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/659 * feat: verify trusted manufacturers by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/656 * database enhancements by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/666 * chore: bump openssl to 0.10.66 by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/664 * chore(store): make the store OVs agnostic by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/671 * feat(manufacturing-server): implement an export OVs endpoint by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/673 * fix(systemd-units): run before powering off the system by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/676 * fix(dracut): use isolate on error in the manufacturing-client service by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/678 * fix(systemd-generator): write configuration to '/run' by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/677 * fix(owner-tool): use the new API to export ovs by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/675 * chore: update diesel to 2.2.3 by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/669 * chore: bump reqwest from 0.11.27 to 0.12.7 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/683 * fix: use centos-stream-9 target instead of epel-9 by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/687 * enhance onboarding testing by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/681 * ci: add konflux test cases by @yih-redhat in https://github.com/fdo-rs/fido-device-onboard-rs/pull/688 * fix(make-vendored-tarfile.sh): exclude idna tests with unicode points by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/692 * chore: bump for 0.5.1 by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/693 * @miabbott made their first contribution in https://github.com/fdo-rs/fido-device-onboard-rs/pull/636 * @yih-redhat made their first contribution in https://github.com/fdo-rs/fido-device-onboard-rs/pull/688 **Full Changelog**: https://github.com/fdo-rs/fido-device-onboard-rs/compare/v0.5.0...v0.5.1 - Apply all the patches in the spec - Backport https://github.com/fdo-rs/fido-device-onboard-rs/pull/676 - Update license - New version 0.5.0, adds database support - Remove unused patches - Ensure client service fix is applied - Own var/lib/fdo, SELinux fixes - Add client/init deps to fdo-admin-cli - Update to 0.4.12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * chore: update patch for new release by @nullr0ute in https://github.com/fdo-rs/fido-device-onboard-rs/pull/625 * chore: fix require error with commitlint by @miabbott in https://github.com/fdo-rs/fido-device-onboard-rs/pull/636 * fix(license): replace space with - in Apache 2.0 by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/632 * fix(data-formats): use serde_tuple serializer for error messages by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/629 * fix: cargo test for non-root users by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/635 * fix(get_current_user_name): remove trailing whitespaces. by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/638 * chore: bump mio from 0.8.10 to 0.8.11 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/640 * fix: vendored tarfile creation by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/634 * fix: static-mut-refs warning by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/651 * Enable CentOS 9 builds and add Testing Farm e2e tests by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/650 * Add an OV re-registration window option when using DB storage by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/643 * chore: bump pem from 2.0.1 to 3.0.3 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/639 * chore: bump h2 from 0.3.25 to 0.3.26 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/659 * feat: verify trusted manufacturers by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/656 * database enhancements by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/666 * chore: bump openssl to 0.10.66 by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/664 * chore(store): make the store OVs agnostic by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/671 * feat(manufacturing-server): implement an export OVs endpoint by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/673 * fix(systemd-units): run before powering off the system by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/676 * fix(dracut): use isolate on error in the manufacturing-client service by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/678 * fix(systemd-generator): write configuration to '/run' by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/677 * fix(owner-tool): use the new API to export ovs by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/675 * chore: update diesel to 2.2.3 by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/669 * chore: bump reqwest from 0.11.27 to 0.12.7 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/683 * fix: use centos-stream-9 target instead of epel-9 by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/687 * enhance onboarding testing by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/681 * ci: add konflux test cases by @yih-redhat in https://github.com/fdo-rs/fido-device-onboard-rs/pull/688 * fix(make-vendored-tarfile.sh): exclude idna tests with unicode points by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/692 * chore: bump for 0.5.1 by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/693 * @miabbott made their first contribution in https://github.com/fdo-rs/fido-device-onboard-rs/pull/636 * @yih-redhat made their first contribution in https://github.com/fdo-rs/fido-device-onboard-rs/pull/688 **Full Changelog**: https://github.com/fdo-rs/fido-device-onboard-rs/compare/v0.5.0...v0.5.1 - Apply all the patches in the spec - Backport https://github.com/fdo-rs/fido-device-onboard-rs/pull/676 - Update license - New version 0.5.0, adds database support - Remove unused patches - Ensure client service fix is applied - Own var/lib/fdo, SELinux fixes - Add client/init deps to fdo-admin-cli - Update to 0.4.12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * chore: update patch for new release by @nullr0ute in https://github.com/fdo-rs/fido-device-onboard-rs/pull/625 * chore: fix require error with commitlint by @miabbott in https://github.com/fdo-rs/fido-device-onboard-rs/pull/636 * fix(license): replace space with - in Apache 2.0 by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/632 * fix(data-formats): use serde_tuple serializer for error messages by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/629 * fix: cargo test for non-root users by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/635 * fix(get_current_user_name): remove trailing whitespaces. by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/638 * chore: bump mio from 0.8.10 to 0.8.11 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/640 * fix: vendored tarfile creation by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/634 * fix: static-mut-refs warning by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/651 * Enable CentOS 9 builds and add Testing Farm e2e tests by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/650 * Add an OV re-registration window option when using DB storage by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/643 * chore: bump pem from 2.0.1 to 3.0.3 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/639 * chore: bump h2 from 0.3.25 to 0.3.26 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/659 * feat: verify trusted manufacturers by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/656 * database enhancements by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/666 * chore: bump openssl to 0.10.66 by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/664 * chore(store): make the store OVs agnostic by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/671 * feat(manufacturing-server): implement an export OVs endpoint by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/673 * fix(systemd-units): run before powering off the system by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/676 * fix(dracut): use isolate on error in the manufacturing-client service by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/678 * fix(systemd-generator): write configuration to '/run' by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/677 * fix(owner-tool): use the new API to export ovs by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/675 * chore: update diesel to 2.2.3 by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/669 * chore: bump reqwest from 0.11.27 to 0.12.7 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/683 * fix: use centos-stream-9 target instead of epel-9 by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/687 * enhance onboarding testing by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/681 * ci: add konflux test cases by @yih-redhat in https://github.com/fdo-rs/fido-device-onboard-rs/pull/688 * fix(make-vendored-tarfile.sh): exclude idna tests with unicode points by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/692 * chore: bump for 0.5.1 by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/693 * @miabbott made their first contribution in https://github.com/fdo-rs/fido-device-onboard-rs/pull/636 * @yih-redhat made their first contribution in https://github.com/fdo-rs/fido-device-onboard-rs/pull/688 **Full Changelog**: https://github.com/fdo-rs/fido-device-onboard-rs/compare/v0.5.0...v0.5.1 - Apply all the patches in the spec - Backport https://github.com/fdo-rs/fido-device-onboard-rs/pull/676 - Update license - New version 0.5.0, adds database support - Remove unused patches - Ensure client service fix is applied - Own var/lib/fdo, SELinux fixes - Add client/init deps to fdo-admin-cli - Update to 0.4.12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * chore: update patch for new release by @nullr0ute in https://github.com/fdo-rs/fido-device-onboard-rs/pull/625 * chore: fix require error with commitlint by @miabbott in https://github.com/fdo-rs/fido-device-onboard-rs/pull/636 * fix(license): replace space with - in Apache 2.0 by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/632 * fix(data-formats): use serde_tuple serializer for error messages by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/629 * fix: cargo test for non-root users by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/635 * fix(get_current_user_name): remove trailing whitespaces. by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/638 * chore: bump mio from 0.8.10 to 0.8.11 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/640 * fix: vendored tarfile creation by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/634 * fix: static-mut-refs warning by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/651 * Enable CentOS 9 builds and add Testing Farm e2e tests by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/650 * Add an OV re-registration window option when using DB storage by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/643 * chore: bump pem from 2.0.1 to 3.0.3 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/639 * chore: bump h2 from 0.3.25 to 0.3.26 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/659 * feat: verify trusted manufacturers by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/656 * database enhancements by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/666 * chore: bump openssl to 0.10.66 by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/664 * chore(store): make the store OVs agnostic by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/671 * feat(manufacturing-server): implement an export OVs endpoint by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/673 * fix(systemd-units): run before powering off the system by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/676 * fix(dracut): use isolate on error in the manufacturing-client service by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/678 * fix(systemd-generator): write configuration to '/run' by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/677 * fix(owner-tool): use the new API to export ovs by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/675 * chore: update diesel to 2.2.3 by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/669 * chore: bump reqwest from 0.11.27 to 0.12.7 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/683 * fix: use centos-stream-9 target instead of epel-9 by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/687 * enhance onboarding testing by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/681 * ci: add konflux test cases by @yih-redhat in https://github.com/fdo-rs/fido-device-onboard-rs/pull/688 * fix(make-vendored-tarfile.sh): exclude idna tests with unicode points by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/692 * chore: bump for 0.5.1 by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/693 * @miabbott made their first contribution in https://github.com/fdo-rs/fido-device-onboard-rs/pull/636 * @yih-redhat made their first contribution in https://github.com/fdo-rs/fido-device-onboard-rs/pull/688 **Full Changelog**: https://github.com/fdo-rs/fido-device-onboard-rs/compare/v0.5.0...v0.5.1 - Apply all the patches in the spec - Backport https://github.com/fdo-rs/fido-device-onboard-rs/pull/676 - Update license - New version 0.5.0, adds database support - Remove unused patches - Ensure client service fix is applied - Own var/lib/fdo, SELinux fixes - Add client/init deps to fdo-admin-cli - Update to 0.4.12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_vmware_soap: fix fence failure when FIPS is enabled Resolves: RHEL-235120 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_vmware_soap: fix fence failure when FIPS is enabled Resolves: RHEL-235120 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_vmware_soap: fix fence failure when FIPS is enabled Resolves: RHEL-235120 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_vmware_soap: fix fence failure when FIPS is enabled Resolves: RHEL-235120 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_vmware_soap: fix fence failure when FIPS is enabled Resolves: RHEL-235120 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_vmware_soap: fix fence failure when FIPS is enabled Resolves: RHEL-235120 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_vmware_soap: fix fence failure when FIPS is enabled Resolves: RHEL-235120 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_vmware_soap: fix fence failure when FIPS is enabled Resolves: RHEL-235120 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_vmware_soap: fix fence failure when FIPS is enabled Resolves: RHEL-235120 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_vmware_soap: fix fence failure when FIPS is enabled Resolves: RHEL-235120 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_vmware_soap: fix fence failure when FIPS is enabled Resolves: RHEL-235120 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_vmware_soap: fix fence failure when FIPS is enabled Resolves: RHEL-235120 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_vmware_soap: fix fence failure when FIPS is enabled Resolves: RHEL-235120 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_vmware_soap: fix fence failure when FIPS is enabled Resolves: RHEL-235120 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_vmware_soap: fix fence failure when FIPS is enabled Resolves: RHEL-235120 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_vmware_soap: fix fence failure when FIPS is enabled Resolves: RHEL-235120 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_vmware_soap: fix fence failure when FIPS is enabled Resolves: RHEL-235120 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_vmware_soap: fix fence failure when FIPS is enabled Resolves: RHEL-235120 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_vmware_soap: fix fence failure when FIPS is enabled Resolves: RHEL-235120 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_vmware_soap: fix fence failure when FIPS is enabled Resolves: RHEL-235120 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_vmware_soap: fix fence failure when FIPS is enabled Resolves: RHEL-235120 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_vmware_soap: fix fence failure when FIPS is enabled Resolves: RHEL-235120 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_vmware_soap: fix fence failure when FIPS is enabled Resolves: RHEL-235120 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_vmware_soap: fix fence failure when FIPS is enabled Resolves: RHEL-235120 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_vmware_soap: fix fence failure when FIPS is enabled Resolves: RHEL-235120 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_vmware_soap: fix fence failure when FIPS is enabled Resolves: RHEL-235120 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_vmware_soap: fix fence failure when FIPS is enabled Resolves: RHEL-235120 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_vmware_soap: fix fence failure when FIPS is enabled Resolves: RHEL-235120 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_vmware_soap: fix fence failure when FIPS is enabled Resolves: RHEL-235120 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_vmware_soap: fix fence failure when FIPS is enabled Resolves: RHEL-235120 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_vmware_soap: fix fence failure when FIPS is enabled Resolves: RHEL-235120 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_vmware_soap: fix fence failure when FIPS is enabled Resolves: RHEL-235120 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_vmware_soap: fix fence failure when FIPS is enabled Resolves: RHEL-235120 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_vmware_soap: fix fence failure when FIPS is enabled Resolves: RHEL-235120 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_vmware_soap: fix fence failure when FIPS is enabled Resolves: RHEL-235120 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_vmware_soap: fix fence failure when FIPS is enabled Resolves: RHEL-235120 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_vmware_soap: fix fence failure when FIPS is enabled Resolves: RHEL-235120 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_vmware_soap: fix fence failure when FIPS is enabled Resolves: RHEL-235120 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_vmware_soap: fix fence failure when FIPS is enabled Resolves: RHEL-235120 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_vmware_soap: fix fence failure when FIPS is enabled Resolves: RHEL-235120 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_vmware_soap: fix fence failure when FIPS is enabled Resolves: RHEL-235120 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - Use systemd sysusers config to create user and group Resolves: RHEL-78736 - Use systemd sysusers config to create user and group Resolves: RHEL-78736 - Use systemd sysusers config to create user and group Resolves: RHEL-78736 - Update to fetchmail-6.4.24 (fixes CVE-2021-36386 and CVE-2021-39272) Resolves: #2005307, #1999276 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to fetchmail-6.4.18 - Update to fetchmail-6.4.16 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to fetchmail-6.4.15 - Revert change that added sgid bit to fetchmail Resolves: #1906353 - Update to fetchmail-6.4.14 - Fix CVE-2026-94184: stack-based buffer overflow in NTLM authentication (fetchmail-SA-2026-01) Resolves: RHEL-265195 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - rebuilt - Upgrade to 1.13 Resolves: rhbz#2122193 - Rebase to new upstream release - Do NOT drop support for pmemblk https://github.com/axboe/fio/commit/04c1cdc - Add signature check - Related: rhbz#2188805 - Fix fio failure with --verify=crc32c on arm Related: rhbz#1974189 - Use LDFLAGS when linking dynamic engines Related: rhbz#2044858 - Add gating CI yaml file - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix crash on --enghelp option - Fix FTBFS with new kernel headers (bz#1984823) - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - New upstream version - Rebase to new upstream release - Do NOT drop support for pmemblk https://github.com/axboe/fio/commit/04c1cdc - Add signature check - Related: rhbz#2188805 - Fix fio failure with --verify=crc32c on arm Related: rhbz#1974189 - Use LDFLAGS when linking dynamic engines Related: rhbz#2044858 - Add gating CI yaml file - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix crash on --enghelp option - Fix FTBFS with new kernel headers (bz#1984823) - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - New upstream version - Rebase to new upstream release - Do NOT drop support for pmemblk https://github.com/axboe/fio/commit/04c1cdc - Add signature check - Related: rhbz#2188805 - Fix fio failure with --verify=crc32c on arm Related: rhbz#1974189 - Use LDFLAGS when linking dynamic engines Related: rhbz#2044858 - Add gating CI yaml file - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix crash on --enghelp option - Fix FTBFS with new kernel headers (bz#1984823) - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - New upstream version - Rebase to new upstream release - Do NOT drop support for pmemblk https://github.com/axboe/fio/commit/04c1cdc - Add signature check - Related: rhbz#2188805 - Fix fio failure with --verify=crc32c on arm Related: rhbz#1974189 - Use LDFLAGS when linking dynamic engines Related: rhbz#2044858 - Add gating CI yaml file - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix crash on --enghelp option - Fix FTBFS with new kernel headers (bz#1984823) - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - New upstream version - Rebase to new upstream release - Do NOT drop support for pmemblk https://github.com/axboe/fio/commit/04c1cdc - Add signature check - Related: rhbz#2188805 - Fix fio failure with --verify=crc32c on arm Related: rhbz#1974189 - Use LDFLAGS when linking dynamic engines Related: rhbz#2044858 - Add gating CI yaml file - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix crash on --enghelp option - Fix FTBFS with new kernel headers (bz#1984823) - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - New upstream version - Rebase to new upstream release - Do NOT drop support for pmemblk https://github.com/axboe/fio/commit/04c1cdc - Add signature check - Related: rhbz#2188805 - Fix fio failure with --verify=crc32c on arm Related: rhbz#1974189 - Use LDFLAGS when linking dynamic engines Related: rhbz#2044858 - Add gating CI yaml file - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix crash on --enghelp option - Fix FTBFS with new kernel headers (bz#1984823) - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - New upstream version - Rebase to new upstream release - Do NOT drop support for pmemblk https://github.com/axboe/fio/commit/04c1cdc - Add signature check - Related: rhbz#2188805 - Fix fio failure with --verify=crc32c on arm Related: rhbz#1974189 - Use LDFLAGS when linking dynamic engines Related: rhbz#2044858 - Add gating CI yaml file - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix crash on --enghelp option - Fix FTBFS with new kernel headers (bz#1984823) - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - New upstream version - Add gcc-toolset-14-gcc-c++ to BR - Update to 140.10.1 ESR - Update to 140.10.0 ESR - Update to 140.9.1 ESR - Update to 140.9.0 ESR - Update to 140.8.0 ESR - Update to 140.7.0 ESR - Update to 140.6.0 ESR - Update to 140.5.0 ESR - Update to 140.4.0 ESR - Update to 140.10.2 ESR - Update to 140.10.1 ESR - Update to 140.10.0 ESR - Update to 140.9.1 ESR - Update to 140.9.0 ESR - Update to 140.8.0 ESR - Update to 140.7.0 ESR - Update to 140.6.0 ESR - Update to 140.5.0 ESR - Update to 140.4.0 ESR - Add gcc-toolset-14-gcc-c++ to BR - Fix the check for minor version when disabling wasi-sdk - Update to 140.11.0 ESR - Update to 140.10.2 ESR - Update to 140.10.1 ESR - Update to 140.10.0 ESR - Update to 140.9.1 ESR - Update to 140.9.0 ESR - Update to 140.8.0 ESR - Update to 140.7.0 ESR - Update to 140.6.0 ESR - Add gcc-toolset-14-gcc-c++ to BR - Fix the check for minor version when disabling wasi-sdk - Update to 140.12.0 ESR - Update to 140.11.0 ESR - Update to 140.10.2 ESR - Update to 140.10.1 ESR - Update to 140.10.0 ESR - Update to 140.9.1 ESR - Update to 140.9.0 ESR - Update to 140.8.0 ESR - Update to 140.7.0 ESR - Add gcc-toolset-14-gcc-c++ to BR - Fix the check for minor version when disabling wasi-sdk - Update to 140.13.0 ESR - Update to 140.12.0 ESR - Update to 140.11.0 ESR - Update to 140.10.2 ESR - Update to 140.10.1 ESR - Update to 140.10.0 ESR - Update to 140.9.1 ESR - Update to 140.9.0 ESR - Update to 140.8.0 ESR - Add gcc-toolset-14-gcc-c++ to BR - Fix the check for minor version when disabling wasi-sdk - Update to 140.14.0 ESR - Update to 140.13.0 ESR - Update to 140.12.0 ESR - Update to 140.11.0 ESR - Update to 140.10.2 ESR - Update to 140.10.1 ESR - Update to 140.10.0 ESR - Update to 140.9.1 ESR - Update to 140.9.0 ESR - Add gcc-toolset-14-gcc-c++ to BR - Fix the check for minor version when disabling wasi-sdk - Update to 140.15.0 ESR - Update to 140.14.0 ESR - Update to 140.13.0 ESR - Update to 140.12.0 ESR - Update to 140.11.0 ESR - Update to 140.10.2 ESR - Update to 140.10.1 ESR - Update to 140.10.0 ESR - Update to 140.9.1 ESR - Add gcc-toolset-14-gcc-c++ to BR - Fix the check for minor version when disabling wasi-sdk - Update to 140.16.0 ESR - Update to 140.15.0 ESR - Update to 140.14.0 ESR - Update to 140.13.0 ESR - Update to 140.12.0 ESR - Update to 140.11.0 ESR - Update to 140.10.2 ESR - Update to 140.10.1 ESR - Update to 140.10.0 ESR - Add gcc-toolset-14-gcc-c++ to BR - Fix the check for minor version when disabling wasi-sdk - Update to 140.17.0 ESR - Update to 140.16.0 ESR - Update to 140.15.0 ESR - Update to 140.14.0 ESR - Update to 140.13.0 ESR - Update to 140.12.0 ESR - Update to 140.11.0 ESR - Update to 140.10.2 ESR - Update to 140.10.1 ESR - Update to 153.5.0 ESR - Update to 140.15.0 ESR - Update to 140.14.0 ESR - Update to 140.13.0 ESR - Update to 140.12.0 ESR - Update to 140.11.0 ESR - Update to 140.10.2 ESR - Update to 140.10.1 ESR - Update to 140.10.0 ESR - Update to 140.9.1 ESR - Add gcc-toolset-14-gcc-c++ to BR - Update to 140.10.1 ESR - Update to 140.10.0 ESR - Update to 140.9.1 ESR - Update to 140.9.0 ESR - Update to 140.8.0 ESR - Update to 140.7.0 ESR - Update to 140.6.0 ESR - Update to 140.5.0 ESR - Update to 140.4.0 ESR - Update to 140.10.2 ESR - Update to 140.10.1 ESR - Update to 140.10.0 ESR - Update to 140.9.1 ESR - Update to 140.9.0 ESR - Update to 140.8.0 ESR - Update to 140.7.0 ESR - Update to 140.6.0 ESR - Update to 140.5.0 ESR - Update to 140.4.0 ESR - Add gcc-toolset-14-gcc-c++ to BR - Fix the check for minor version when disabling wasi-sdk - Update to 140.11.0 ESR - Update to 140.10.2 ESR - Update to 140.10.1 ESR - Update to 140.10.0 ESR - Update to 140.9.1 ESR - Update to 140.9.0 ESR - Update to 140.8.0 ESR - Update to 140.7.0 ESR - Update to 140.6.0 ESR - Add gcc-toolset-14-gcc-c++ to BR - Fix the check for minor version when disabling wasi-sdk - Update to 140.12.0 ESR - Update to 140.11.0 ESR - Update to 140.10.2 ESR - Update to 140.10.1 ESR - Update to 140.10.0 ESR - Update to 140.9.1 ESR - Update to 140.9.0 ESR - Update to 140.8.0 ESR - Update to 140.7.0 ESR - Add gcc-toolset-14-gcc-c++ to BR - Fix the check for minor version when disabling wasi-sdk - Update to 140.13.0 ESR - Update to 140.12.0 ESR - Update to 140.11.0 ESR - Update to 140.10.2 ESR - Update to 140.10.1 ESR - Update to 140.10.0 ESR - Update to 140.9.1 ESR - Update to 140.9.0 ESR - Update to 140.8.0 ESR - Add gcc-toolset-14-gcc-c++ to BR - Fix the check for minor version when disabling wasi-sdk - Update to 140.14.0 ESR - Update to 140.13.0 ESR - Update to 140.12.0 ESR - Update to 140.11.0 ESR - Update to 140.10.2 ESR - Update to 140.10.1 ESR - Update to 140.10.0 ESR - Update to 140.9.1 ESR - Update to 140.9.0 ESR - Add gcc-toolset-14-gcc-c++ to BR - Fix the check for minor version when disabling wasi-sdk - Update to 140.15.0 ESR - Update to 140.14.0 ESR - Update to 140.13.0 ESR - Update to 140.12.0 ESR - Update to 140.11.0 ESR - Update to 140.10.2 ESR - Update to 140.10.1 ESR - Update to 140.10.0 ESR - Update to 140.9.1 ESR - Add gcc-toolset-14-gcc-c++ to BR - Fix the check for minor version when disabling wasi-sdk - Update to 140.16.0 ESR - Update to 140.15.0 ESR - Update to 140.14.0 ESR - Update to 140.13.0 ESR - Update to 140.12.0 ESR - Update to 140.11.0 ESR - Update to 140.10.2 ESR - Update to 140.10.1 ESR - Update to 140.10.0 ESR - Add gcc-toolset-14-gcc-c++ to BR - Fix the check for minor version when disabling wasi-sdk - Update to 140.17.0 ESR - Update to 140.16.0 ESR - Update to 140.15.0 ESR - Update to 140.14.0 ESR - Update to 140.13.0 ESR - Update to 140.12.0 ESR - Update to 140.11.0 ESR - Update to 140.10.2 ESR - Update to 140.10.1 ESR - Update to 153.5.0 ESR - Update to 140.15.0 ESR - Update to 140.14.0 ESR - Update to 140.13.0 ESR - Update to 140.12.0 ESR - Update to 140.11.0 ESR - Update to 140.10.2 ESR - Update to 140.10.1 ESR - Update to 140.10.0 ESR - Update to 140.9.1 ESR - fix(policy): allow-host-ipv6: allow MLD packets - fix(server): load firewall rules before claiming dbus - fix(nftables): ipset: add entries from GLib loop when idle - fix(systemd): Requires dbus - feat: add iperf{2,3} services - fix(policy): rich: verify ipset exists - fix(systemd): allow start code 251 (RUNNING_BUT_FAILED) - fix(fw): start: remove ipset probe - fix(systemd): verify firewalld is responsive to dbus - test: add scale keyword to scale tests - test(functions): fix iptables normalization for opt field - feat(service): (x)rootd file server - fix(zone): forward: support timeout - fix(policy): support timeouts - fix(policy): allow-host-ipv6: allow MLD packets - fix(server): load firewall rules before claiming dbus - fix(nftables): ipset: add entries from GLib loop when idle - fix(systemd): Requires dbus - feat: add iperf{2,3} services - fix(policy): rich: verify ipset exists - fix(systemd): allow start code 251 (RUNNING_BUT_FAILED) - fix(fw): start: remove ipset probe - fix(systemd): verify firewalld is responsive to dbus - test: add scale keyword to scale tests - test(functions): fix iptables normalization for opt field - fix(policy): use PK_ACTION_CONFIG for set{ZoneSettings2,PolicySettings} (CVE-2026-4948) - fix(zone): forward: support timeout - fix(policy): support timeouts - fix(policy): allow-host-ipv6: allow MLD packets - fix(server): load firewall rules before claiming dbus - fix(nftables): ipset: add entries from GLib loop when idle - fix(systemd): Requires dbus - feat: add iperf{2,3} services - fix(policy): rich: verify ipset exists - fix(systemd): allow start code 251 (RUNNING_BUT_FAILED) - fix(fw): start: remove ipset probe - fix(systemd): verify firewalld is responsive to dbus - test: add scale keyword to scale tests - fix(policy): allow-host-ipv6: allow MLD packets - fix(server): load firewall rules before claiming dbus - fix(nftables): ipset: add entries from GLib loop when idle - fix(systemd): Requires dbus - feat: add iperf{2,3} services - fix(policy): rich: verify ipset exists - fix(systemd): allow start code 251 (RUNNING_BUT_FAILED) - fix(fw): start: remove ipset probe - fix(systemd): verify firewalld is responsive to dbus - test: add scale keyword to scale tests - test(functions): fix iptables normalization for opt field - feat(service): (x)rootd file server - fix(zone): forward: support timeout - fix(policy): support timeouts - fix(policy): allow-host-ipv6: allow MLD packets - fix(server): load firewall rules before claiming dbus - fix(nftables): ipset: add entries from GLib loop when idle - fix(systemd): Requires dbus - feat: add iperf{2,3} services - fix(policy): rich: verify ipset exists - fix(systemd): allow start code 251 (RUNNING_BUT_FAILED) - fix(fw): start: remove ipset probe - fix(systemd): verify firewalld is responsive to dbus - test: add scale keyword to scale tests - test(functions): fix iptables normalization for opt field - fix(policy): use PK_ACTION_CONFIG for set{ZoneSettings2,PolicySettings} (CVE-2026-4948) - fix(zone): forward: support timeout - fix(policy): support timeouts - fix(policy): allow-host-ipv6: allow MLD packets - fix(server): load firewall rules before claiming dbus - fix(nftables): ipset: add entries from GLib loop when idle - fix(systemd): Requires dbus - feat: add iperf{2,3} services - fix(policy): rich: verify ipset exists - fix(systemd): allow start code 251 (RUNNING_BUT_FAILED) - fix(fw): start: remove ipset probe - fix(systemd): verify firewalld is responsive to dbus - test: add scale keyword to scale tests - don't free memory that is still used after realloc() error (CVE-2020-22219) - handle end-of-stream when encoding with verification (CVE-2021-0561) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Disable FTDI support to remove one extra dep we are not going to support - Resolves: rhbz#1961170 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Disable JLink support to remove one extra dep we are not going to support - Resolves: rhbz#1948597 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Added jlink support - Perform source file verification during %prep - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Build the package using meson to get the libflashrom shared library support required by fwupd. - Update to flashrom 1.2 (Release was intended to fix #1799344) - Fix arbitrary code execution via crafted symlinks in sandbox-expose options Resolves: RHEL-165643 - Fix arbitrary file deletion on host via improper cache file path validation Resolves: RHEL-170171 - Use sysusers_create_compat macro to create user & group Resolves: RHEL-82605 - Fix previous changelog entry - Backport upstream patches for CVE-2024-42472 - Require bubblewrap version that has new --bind-fd option backported for addressing CVE-2024-42472 - Use gsize for OCI delta sizes and harden delta parser (CVE-2026-96280) Resolves: RHEL-271518 - Avoid symlink path traversal in revokefs writer (CVE-2026-96808) Resolves: RHEL-267902 - Prevent arbitrary write as root via extra-data extraction (CVE-2026-96275) Resolves: RHEL-267434 - Harden data dir and var setup against symlink attacks Resolves: RHEL-258975 - Fix arbitrary code execution via crafted symlinks in sandbox-expose options Resolves: RHEL-165643 - Fix arbitrary file deletion on host via improper cache file path validation Resolves: RHEL-170171 - Use sysusers_create_compat macro to create user & group Resolves: RHEL-82605 - Use fd-relative operations for files/etc during runtime deploy (CVE-2026-97024) Resolves: RHEL-272190 - Avoid path traversal deletion via deploy export/bin (CVE-2026-97023) Resolves: RHEL-272030 - Use gsize for OCI delta sizes and harden delta parser (CVE-2026-96280) Resolves: RHEL-271518 - Avoid symlink path traversal in revokefs writer (CVE-2026-96808) Resolves: RHEL-267902 - Prevent arbitrary write as root via extra-data extraction (CVE-2026-96275) Resolves: RHEL-267434 - Harden data dir and var setup against symlink attacks Resolves: RHEL-258975 - Fix arbitrary code execution via crafted symlinks in sandbox-expose options Resolves: RHEL-165643 - Fix arbitrary file deletion on host via improper cache file path validation Resolves: RHEL-170171 - Use sysusers_create_compat macro to create user & group Resolves: RHEL-82605 - Update to 1.2.3 Resolves: RHEL-16036 - Rebase to 1.2.2 Resolves: #1999742 - Deprecate MD5 and SHA1 hashes Resolves: #1935509 - Disable git hooks when applying patches (CVE-2026-86320) Resolves: RHEL-262193 - Fix arbitrary code execution via crafted symlinks in sandbox-expose options Resolves: RHEL-165643 - Fix arbitrary file deletion on host via improper cache file path validation Resolves: RHEL-170171 - Use sysusers_create_compat macro to create user & group Resolves: RHEL-82605 - Fix previous changelog entry - Backport upstream patches for CVE-2024-42472 - Require bubblewrap version that has new --bind-fd option backported for addressing CVE-2024-42472 - Use gsize for OCI delta sizes and harden delta parser (CVE-2026-96280) Resolves: RHEL-271518 - Avoid symlink path traversal in revokefs writer (CVE-2026-96808) Resolves: RHEL-267902 - Prevent arbitrary write as root via extra-data extraction (CVE-2026-96275) Resolves: RHEL-267434 - Harden data dir and var setup against symlink attacks Resolves: RHEL-258975 - Fix arbitrary code execution via crafted symlinks in sandbox-expose options Resolves: RHEL-165643 - Fix arbitrary file deletion on host via improper cache file path validation Resolves: RHEL-170171 - Use sysusers_create_compat macro to create user & group Resolves: RHEL-82605 - Use fd-relative operations for files/etc during runtime deploy (CVE-2026-97024) Resolves: RHEL-272190 - Avoid path traversal deletion via deploy export/bin (CVE-2026-97023) Resolves: RHEL-272030 - Use gsize for OCI delta sizes and harden delta parser (CVE-2026-96280) Resolves: RHEL-271518 - Avoid symlink path traversal in revokefs writer (CVE-2026-96808) Resolves: RHEL-267902 - Prevent arbitrary write as root via extra-data extraction (CVE-2026-96275) Resolves: RHEL-267434 - Harden data dir and var setup against symlink attacks Resolves: RHEL-258975 - Fix arbitrary code execution via crafted symlinks in sandbox-expose options Resolves: RHEL-165643 - Fix arbitrary file deletion on host via improper cache file path validation Resolves: RHEL-170171 - Use sysusers_create_compat macro to create user & group Resolves: RHEL-82605 - Fix arbitrary code execution via crafted symlinks in sandbox-expose options Resolves: RHEL-165643 - Fix arbitrary file deletion on host via improper cache file path validation Resolves: RHEL-170171 - Use sysusers_create_compat macro to create user & group Resolves: RHEL-82605 - Fix previous changelog entry - Backport upstream patches for CVE-2024-42472 - Require bubblewrap version that has new --bind-fd option backported for addressing CVE-2024-42472 - Use gsize for OCI delta sizes and harden delta parser (CVE-2026-96280) Resolves: RHEL-271518 - Avoid symlink path traversal in revokefs writer (CVE-2026-96808) Resolves: RHEL-267902 - Prevent arbitrary write as root via extra-data extraction (CVE-2026-96275) Resolves: RHEL-267434 - Harden data dir and var setup against symlink attacks Resolves: RHEL-258975 - Fix arbitrary code execution via crafted symlinks in sandbox-expose options Resolves: RHEL-165643 - Fix arbitrary file deletion on host via improper cache file path validation Resolves: RHEL-170171 - Use sysusers_create_compat macro to create user & group Resolves: RHEL-82605 - Use fd-relative operations for files/etc during runtime deploy (CVE-2026-97024) Resolves: RHEL-272190 - Avoid path traversal deletion via deploy export/bin (CVE-2026-97023) Resolves: RHEL-272030 - Use gsize for OCI delta sizes and harden delta parser (CVE-2026-96280) Resolves: RHEL-271518 - Avoid symlink path traversal in revokefs writer (CVE-2026-96808) Resolves: RHEL-267902 - Prevent arbitrary write as root via extra-data extraction (CVE-2026-96275) Resolves: RHEL-267434 - Harden data dir and var setup against symlink attacks Resolves: RHEL-258975 - Fix arbitrary code execution via crafted symlinks in sandbox-expose options Resolves: RHEL-165643 - Fix arbitrary file deletion on host via improper cache file path validation Resolves: RHEL-170171 - Use sysusers_create_compat macro to create user & group Resolves: RHEL-82605 - Fix arbitrary code execution via crafted symlinks in sandbox-expose options Resolves: RHEL-165643 - Fix arbitrary file deletion on host via improper cache file path validation Resolves: RHEL-170171 - Use sysusers_create_compat macro to create user & group Resolves: RHEL-82605 - Fix previous changelog entry - Backport upstream patches for CVE-2024-42472 - Require bubblewrap version that has new --bind-fd option backported for addressing CVE-2024-42472 - Use gsize for OCI delta sizes and harden delta parser (CVE-2026-96280) Resolves: RHEL-271518 - Avoid symlink path traversal in revokefs writer (CVE-2026-96808) Resolves: RHEL-267902 - Prevent arbitrary write as root via extra-data extraction (CVE-2026-96275) Resolves: RHEL-267434 - Harden data dir and var setup against symlink attacks Resolves: RHEL-258975 - Fix arbitrary code execution via crafted symlinks in sandbox-expose options Resolves: RHEL-165643 - Fix arbitrary file deletion on host via improper cache file path validation Resolves: RHEL-170171 - Use sysusers_create_compat macro to create user & group Resolves: RHEL-82605 - Use fd-relative operations for files/etc during runtime deploy (CVE-2026-97024) Resolves: RHEL-272190 - Avoid path traversal deletion via deploy export/bin (CVE-2026-97023) Resolves: RHEL-272030 - Use gsize for OCI delta sizes and harden delta parser (CVE-2026-96280) Resolves: RHEL-271518 - Avoid symlink path traversal in revokefs writer (CVE-2026-96808) Resolves: RHEL-267902 - Prevent arbitrary write as root via extra-data extraction (CVE-2026-96275) Resolves: RHEL-267434 - Harden data dir and var setup against symlink attacks Resolves: RHEL-258975 - Fix arbitrary code execution via crafted symlinks in sandbox-expose options Resolves: RHEL-165643 - Fix arbitrary file deletion on host via improper cache file path validation Resolves: RHEL-170171 - Use sysusers_create_compat macro to create user & group Resolves: RHEL-82605 - Update to 1.0.5 - Enable installed tests Resolves: #2062206 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Add flatpak- prefix to executables to avoid conflicting with xdg-utils - Add explicit conflicts with xdg-utils - Update to 1.0.4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.0.5 - Enable installed tests Resolves: #2062206 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Add flatpak- prefix to executables to avoid conflicting with xdg-utils - Add explicit conflicts with xdg-utils - Update to 1.0.4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Re-work flex subpackages and provide shared libraries (#1327851): - Remove and obsolete the flex-devel subpackage containing static libraries - Provide shared libraries in a new subpackage named libfl2 - Provide development files in a new subpackage named libfl-devel - Provide static libraries in a new subpackage named libfl-static - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Re-work flex subpackages and provide shared libraries (#1327851): - Remove and obsolete the flex-devel subpackage containing static libraries - Provide shared libraries in a new subpackage named libfl2 - Provide development files in a new subpackage named libfl-devel - Provide static libraries in a new subpackage named libfl-static - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - backport the following fixes from Fedora: - fix header conflicts in multilib installs (RHEL-134741) - fix rpmlint warnings - backport the following fixes from Fedora: - fix header conflicts in multilib installs (RHEL-134741) - fix rpmlint warnings - backport the following fixes from Fedora: - fix header conflicts in multilib installs (RHEL-134741) - fix rpmlint warnings - backport the following fixes from Fedora: - fix header conflicts in multilib installs (RHEL-134741) - fix rpmlint warnings - backport the following fixes from Fedora: - fix header conflicts in multilib installs (RHEL-134741) - fix rpmlint warnings - backport the following fixes from Fedora: - fix header conflicts in multilib installs (RHEL-134741) - fix rpmlint warnings - backport the following fixes from Fedora: - fix header conflicts in multilib installs (RHEL-134741) - fix rpmlint warnings - Link with -Wl,-z,now. Related: rhbz#2044860 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - 1.3.8 Resolves: bz#2025415 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 1.3.6 Resolves: bz#1976712 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Remove BuildRequires xprop entirely. If present, the configure script will call it looking for a property on the root window that Fedora's X server does not set, and which would not work anyway since there is no X server running in the buildroot, so we can just remove the dependency. - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add epoch to inter-subpackages requirement - Rollback to FA4 - Provide the right font configuration - Drop ttf format since upstream affirms that otf is to be preferred - Update to 5.13.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fix the wrong behavior on remap-dir in config. Resolves: rhbz#2150227 - New upstream release. - Rebase to 2.14 and revert Noto Default change happened in f36. Resolves: rhbz#2075393 - New upstream release. - Fix missing a file in the archive. Resolves: rhbz#2050478 - New upstream release. - Update deps to font(notosans) https://fedoraproject.org/wiki/Changes/DefaultToNotoFonts - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Fix the score calculation on matching for multiple values. - Enable 11-lcdfilter-default.conf. Resolves: rhbz#1965684 - Rebase to the latest release. Resolves: rhbz#2023161 - New upstream release. - Fix postun scriptlet to remove the entry from xml catalog. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Fix the wrong behavior on remap-dir in config. Resolves: rhbz#2150227 - New upstream release. - Rebase to 2.14 and revert Noto Default change happened in f36. Resolves: rhbz#2075393 - New upstream release. - Fix missing a file in the archive. Resolves: rhbz#2050478 - New upstream release. - Update deps to font(notosans) https://fedoraproject.org/wiki/Changes/DefaultToNotoFonts - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Fix the score calculation on matching for multiple values. - Enable 11-lcdfilter-default.conf. Resolves: rhbz#1965684 - Rebase to the latest release. Resolves: rhbz#2023161 - New upstream release. - Fix postun scriptlet to remove the entry from xml catalog. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Insert Epoch in Requires/Provides/Obsoletes - Revert to 2.0.5 - 3.0.3-1 🐞 Fix bugs in the 3.0.2 refactoring - 3.0.2-1 🐞 Workaround Fedora problems created by rpm commit 93604e2 harder - 3.0.1-1 🐞 Workaround Fedora problems created by rpm commit 93604e2 - 2.0.5-1 ✅ do not add empty urls to appstream files - 2.0.4-2 ✅ validate fontconfig files by default - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - rebuilt with new foomatic-db - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - rebuilt with new foomatic-db, use make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 re-rebuild of bootstrapped packages - Perl 5.32 rebuild - recognize fractial numbers in PageSize (backport from upstream) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - updated to foomatic-db-4.0-20210209 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - updated to foomatic-db-4.0-20201104 - make is no longer in buildroot by default - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Updated to foomatic-db-4.0-20200526 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - updated to foomatic-db-4.0-20210209 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - updated to foomatic-db-4.0-20201104 - make is no longer in buildroot by default - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Updated to foomatic-db-4.0-20200526 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - updated to foomatic-db-4.0-20210209 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - updated to foomatic-db-4.0-20201104 - make is no longer in buildroot by default - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Updated to foomatic-db-4.0-20200526 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fix CVE-2024-24258 and CVE-2024-24259 Resolves: https://issues.redhat.com/browse/RHEL-25176 Resolves: https://issues.redhat.com/browse/RHEL-25178 - Fix CVE-2024-24258 and CVE-2024-24259 Resolves: https://issues.redhat.com/browse/RHEL-25176 Resolves: https://issues.redhat.com/browse/RHEL-25178 - Update to 1.6.17, fixes CVE-2026-33554 - Update to 1.6.18, fixes CVE-2026-50031 - Update to 1.6.17, fixes CVE-2026-33554 - Update to 1.6.20, fixes buffer overflows in ipmidetect and ipmi-oem fujitsu CVE number assignment pending. - Update to 1.6.19, fixes CVE-2026-85504, CVE-2026-85505, CVE-2026-85506, CVE-2026-85507, CVE-2026-85508, CVE-2026-85509 - Update to 1.6.18, fixes CVE-2026-50031 - Update to 1.6.17, fixes CVE-2026-33554 - Update to 1.6.17, fixes CVE-2026-33554 - Update to 1.6.18, fixes CVE-2026-50031 - Update to 1.6.17, fixes CVE-2026-33554 - Update to 1.6.20, fixes buffer overflows in ipmidetect and ipmi-oem fujitsu CVE number assignment pending. - Update to 1.6.19, fixes CVE-2026-85504, CVE-2026-85505, CVE-2026-85506, CVE-2026-85507, CVE-2026-85508, CVE-2026-85509 - Update to 1.6.18, fixes CVE-2026-50031 - Update to 1.6.17, fixes CVE-2026-33554 - Update to 1.6.17, fixes CVE-2026-33554 - Update to 1.6.18, fixes CVE-2026-50031 - Update to 1.6.17, fixes CVE-2026-33554 - Update to 1.6.20, fixes buffer overflows in ipmidetect and ipmi-oem fujitsu CVE number assignment pending. - Update to 1.6.19, fixes CVE-2026-85504, CVE-2026-85505, CVE-2026-85506, CVE-2026-85507, CVE-2026-85508, CVE-2026-85509 - Update to 1.6.18, fixes CVE-2026-50031 - Update to 1.6.17, fixes CVE-2026-33554 - Update to 1.6.17, fixes CVE-2026-33554 - Update to 1.6.18, fixes CVE-2026-50031 - Update to 1.6.17, fixes CVE-2026-33554 - Update to 1.6.20, fixes buffer overflows in ipmidetect and ipmi-oem fujitsu CVE number assignment pending. - Update to 1.6.19, fixes CVE-2026-85504, CVE-2026-85505, CVE-2026-85506, CVE-2026-85507, CVE-2026-85508, CVE-2026-85509 - Update to 1.6.18, fixes CVE-2026-50031 - Update to 1.6.17, fixes CVE-2026-33554 - Bump release number Resolves: RHEL-128083 - Reintroduce "Ignore home server ping packets" Resolves: RHEL-128083 - Rebase to upstream 3.0.27 Resolves: RHEL-102101 - Expose ca_path_reload_interval in configuration files Resolves: RHEL-93552 - Rebuild for OpenSSL rebase to 3.5 Resolves: RHEL-88052 - Ignore home server ping packets Resolves: RHEL-54312 - Backport fixes for BlastRADIUS CVE Resolves: RHEL-46567 - Rebuild for OpenSSL rebase to 3.2.1 Resolves: RHEL-33857 - Comment out unneeded options from mods-available/eap Resolves: RHEL-30830 - Bump release number Resolves: RHEL-128083 - Reintroduce "Ignore home server ping packets" Resolves: RHEL-128083 - Rebase to upstream 3.0.27 Resolves: RHEL-102101 - Expose ca_path_reload_interval in configuration files Resolves: RHEL-93552 - Rebuild for OpenSSL rebase to 3.5 Resolves: RHEL-88052 - Ignore home server ping packets Resolves: RHEL-54312 - Backport fixes for BlastRADIUS CVE Resolves: RHEL-46567 - Rebuild for OpenSSL rebase to 3.2.1 Resolves: RHEL-33857 - Comment out unneeded options from mods-available/eap Resolves: RHEL-30830 - Bump release number Resolves: RHEL-128083 - Reintroduce "Ignore home server ping packets" Resolves: RHEL-128083 - Rebase to upstream 3.0.27 Resolves: RHEL-102101 - Expose ca_path_reload_interval in configuration files Resolves: RHEL-93552 - Rebuild for OpenSSL rebase to 3.5 Resolves: RHEL-88052 - Ignore home server ping packets Resolves: RHEL-54312 - Backport fixes for BlastRADIUS CVE Resolves: RHEL-46567 - Rebuild for OpenSSL rebase to 3.2.1 Resolves: RHEL-33857 - Comment out unneeded options from mods-available/eap Resolves: RHEL-30830 - Bump release number Resolves: RHEL-128083 - Reintroduce "Ignore home server ping packets" Resolves: RHEL-128083 - Rebase to upstream 3.0.27 Resolves: RHEL-102101 - Expose ca_path_reload_interval in configuration files Resolves: RHEL-93552 - Rebuild for OpenSSL rebase to 3.5 Resolves: RHEL-88052 - Ignore home server ping packets Resolves: RHEL-54312 - Backport fixes for BlastRADIUS CVE Resolves: RHEL-46567 - Rebuild for OpenSSL rebase to 3.2.1 Resolves: RHEL-33857 - Comment out unneeded options from mods-available/eap Resolves: RHEL-30830 - Bump release number Resolves: RHEL-128083 - Reintroduce "Ignore home server ping packets" Resolves: RHEL-128083 - Rebase to upstream 3.0.27 Resolves: RHEL-102101 - Expose ca_path_reload_interval in configuration files Resolves: RHEL-93552 - Rebuild for OpenSSL rebase to 3.5 Resolves: RHEL-88052 - Ignore home server ping packets Resolves: RHEL-54312 - Backport fixes for BlastRADIUS CVE Resolves: RHEL-46567 - Rebuild for OpenSSL rebase to 3.2.1 Resolves: RHEL-33857 - Comment out unneeded options from mods-available/eap Resolves: RHEL-30830 - Bump release number Resolves: RHEL-128083 - Reintroduce "Ignore home server ping packets" Resolves: RHEL-128083 - Rebase to upstream 3.0.27 Resolves: RHEL-102101 - Expose ca_path_reload_interval in configuration files Resolves: RHEL-93552 - Rebuild for OpenSSL rebase to 3.5 Resolves: RHEL-88052 - Ignore home server ping packets Resolves: RHEL-54312 - Backport fixes for BlastRADIUS CVE Resolves: RHEL-46567 - Rebuild for OpenSSL rebase to 3.2.1 Resolves: RHEL-33857 - Comment out unneeded options from mods-available/eap Resolves: RHEL-30830 - Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952) Resolves: RHEL-159860 - Fix double free in xf_rail_window_common cleanup (CVE-2026-26986) - Fix growth of preallocated buffers (CVE-2026-27951) - Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775) - Add DSP format checks (CVE-2026-31884) - Fix DSP array bounds checks (CVE-2026-31883) - Fix DSP array bounds checks (CVE-2026-31885) - Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985) Resolves: RHEL-159816, RHEL-155478, RHEL-161047, RHEL-161482 Resolves: RHEL-161519, RHEL-161085, RHEL-168463 - Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984) - Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983) Resolves: RHEL-163097, RHEL-163113 - Fix use of nsc_process_message Resolves: RHEL-155994 - Backport several CVE fixes Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081 Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032 Resolves: RHEL-149043, RHEL-149066, RHEL-155994 - Backport several CVE fixes Resolves: RHEL-151989, RHEL-152216 - Backport several CVE fixes Resolves: RHEL-148849, RHEL-148891, RHEL-149030 - Backport several CVE fixes Resolves: RHEL-142427, RHEL-142411, RHEL-142395, RHEL-142379, RHEL-142363 Resolves: RHEL-142348, RHEL-142332 - Try next DNS entry on connect failure Resolves: RHEL-113722 - Update to 2.11.7 (CVE-2024-32039, CVE-2024-32040, CVE-2024-32041, CVE-2024-32458, CVE-2024-32459, CVE-2024-32460, CVE-2024-32658, CVE-2024-32659, CVE-2024-32660, CVE-2024-32661, CVE-2024-32662) - Fix incorrect bounds checks in planar codec (CVE-2026-45700) Resolves: RHEL-186991 - Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952) Resolves: RHEL-159860 - Fix double free in xf_rail_window_common cleanup (CVE-2026-26986) - Fix growth of preallocated buffers (CVE-2026-27951) - Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775) - Add DSP format checks (CVE-2026-31884) - Fix DSP array bounds checks (CVE-2026-31883) - Fix DSP array bounds checks (CVE-2026-31885) - Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985) Resolves: RHEL-159816, RHEL-155478, RHEL-161047, RHEL-161482 Resolves: RHEL-161519, RHEL-161085, RHEL-168463 - Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984) - Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983) Resolves: RHEL-163097, RHEL-163113 - Fix use of nsc_process_message Resolves: RHEL-155994 - Backport several CVE fixes Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081 Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032 Resolves: RHEL-149043, RHEL-149066, RHEL-155994 - Backport several CVE fixes Resolves: RHEL-151989, RHEL-152216 - Backport several CVE fixes Resolves: RHEL-148849, RHEL-148891, RHEL-149030 - Backport several CVE fixes Resolves: RHEL-142427, RHEL-142411, RHEL-142395, RHEL-142379, RHEL-142363 Resolves: RHEL-142348, RHEL-142332 - Try next DNS entry on connect failure Resolves: RHEL-113722 - Backport several CVE fixes (CVE-2026-64624, CVE-2026-67289, CVE-2026-67299, CVE-2026-68580) Resolves: RHEL-213169, RHEL-222785, RHEL-222966, RHEL-223605 - Fix incorrect bounds checks in planar codec (CVE-2026-45700) Resolves: RHEL-186991 - Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952) Resolves: RHEL-159860 - Fix double free in xf_rail_window_common cleanup (CVE-2026-26986) - Fix growth of preallocated buffers (CVE-2026-27951) - Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775) - Add DSP format checks (CVE-2026-31884) - Fix DSP array bounds checks (CVE-2026-31883) - Fix DSP array bounds checks (CVE-2026-31885) - Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985) Resolves: RHEL-159816, RHEL-155478, RHEL-161047, RHEL-161482 Resolves: RHEL-161519, RHEL-161085, RHEL-168463 - Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984) - Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983) Resolves: RHEL-163097, RHEL-163113 - Fix use of nsc_process_message Resolves: RHEL-155994 - Backport several CVE fixes Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081 Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032 Resolves: RHEL-149043, RHEL-149066, RHEL-155994 - Backport several CVE fixes Resolves: RHEL-151989, RHEL-152216 - Backport several CVE fixes Resolves: RHEL-148849, RHEL-148891, RHEL-149030 - Backport several CVE fixes Resolves: RHEL-142427, RHEL-142411, RHEL-142395, RHEL-142379, RHEL-142363 Resolves: RHEL-142348, RHEL-142332 - Backport several CVE fixes (CVE-2026-55194, CVE-2026-67288, CVE-2026-67291, CVE-2026-67301) Resolves: RHEL-225096, RHEL-227729, RHEL-236060, RHEL-246241 - Backport several CVE fixes (CVE-2026-64624, CVE-2026-67289, CVE-2026-67299, CVE-2026-68580) Resolves: RHEL-213169, RHEL-222785, RHEL-222966, RHEL-223605 - Fix incorrect bounds checks in planar codec (CVE-2026-45700) Resolves: RHEL-186991 - Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952) Resolves: RHEL-159860 - Fix double free in xf_rail_window_common cleanup (CVE-2026-26986) - Fix growth of preallocated buffers (CVE-2026-27951) - Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775) - Add DSP format checks (CVE-2026-31884) - Fix DSP array bounds checks (CVE-2026-31883) - Fix DSP array bounds checks (CVE-2026-31885) - Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985) Resolves: RHEL-159816, RHEL-155478, RHEL-161047, RHEL-161482 Resolves: RHEL-161519, RHEL-161085, RHEL-168463 - Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984) - Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983) Resolves: RHEL-163097, RHEL-163113 - Fix use of nsc_process_message Resolves: RHEL-155994 - Backport several CVE fixes Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081 Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032 Resolves: RHEL-149043, RHEL-149066, RHEL-155994 - Backport several CVE fixes Resolves: RHEL-151989, RHEL-152216 - Backport several CVE fixes Resolves: RHEL-148849, RHEL-148891, RHEL-149030 - Fix RPC gateway fragment size and capacity checks (CVE-2026-55193) Resolves: RHEL-247356 - Backport several CVE fixes (CVE-2026-55194, CVE-2026-67288, CVE-2026-67291, CVE-2026-67301) Resolves: RHEL-225096, RHEL-227729, RHEL-236060, RHEL-246241 - Backport several CVE fixes (CVE-2026-64624, CVE-2026-67289, CVE-2026-67299, CVE-2026-68580) Resolves: RHEL-213169, RHEL-222785, RHEL-222966, RHEL-223605 - Fix incorrect bounds checks in planar codec (CVE-2026-45700) Resolves: RHEL-186991 - Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952) Resolves: RHEL-159860 - Fix double free in xf_rail_window_common cleanup (CVE-2026-26986) - Fix growth of preallocated buffers (CVE-2026-27951) - Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775) - Add DSP format checks (CVE-2026-31884) - Fix DSP array bounds checks (CVE-2026-31883) - Fix DSP array bounds checks (CVE-2026-31885) - Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985) Resolves: RHEL-159816, RHEL-155478, RHEL-161047, RHEL-161482 Resolves: RHEL-161519, RHEL-161085, RHEL-168463 - Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984) - Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983) Resolves: RHEL-163097, RHEL-163113 - Fix use of nsc_process_message Resolves: RHEL-155994 - Backport several CVE fixes Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081 Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032 Resolves: RHEL-149043, RHEL-149066, RHEL-155994 - Backport several CVE fixes Resolves: RHEL-151989, RHEL-152216 - Backport several CVE fixes (CVE-2026-91953, CVE-2026-91954, CVE-2026-91956, CVE-2026-91959, CVE-2026-91963, CVE-2026-91964) Resolves: RHEL-260758, RHEL-260785, RHEL-260803, RHEL-260849, RHEL-260871 Resolves: RHEL-260902 - Fix RPC gateway fragment size and capacity checks (CVE-2026-55193) Resolves: RHEL-247356 - Backport several CVE fixes (CVE-2026-55194, CVE-2026-67288, CVE-2026-67291, CVE-2026-67301) Resolves: RHEL-225096, RHEL-227729, RHEL-236060, RHEL-246241 - Backport several CVE fixes (CVE-2026-64624, CVE-2026-67289, CVE-2026-67299, CVE-2026-68580) Resolves: RHEL-213169, RHEL-222785, RHEL-222966, RHEL-223605 - Fix incorrect bounds checks in planar codec (CVE-2026-45700) Resolves: RHEL-186991 - Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952) Resolves: RHEL-159860 - Fix double free in xf_rail_window_common cleanup (CVE-2026-26986) - Fix growth of preallocated buffers (CVE-2026-27951) - Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775) - Add DSP format checks (CVE-2026-31884) - Fix DSP array bounds checks (CVE-2026-31883) - Fix DSP array bounds checks (CVE-2026-31885) - Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985) Resolves: RHEL-159816, RHEL-155478, RHEL-161047, RHEL-161482 Resolves: RHEL-161519, RHEL-161085, RHEL-168463 - Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984) - Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983) Resolves: RHEL-163097, RHEL-163113 - Fix use of nsc_process_message Resolves: RHEL-155994 - Backport several CVE fixes Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081 Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032 Resolves: RHEL-149043, RHEL-149066, RHEL-155994 - Fix use of nsc_process_message Resolves: RHEL-155994 - Backport several CVE fixes Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081 Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032 Resolves: RHEL-149043, RHEL-149066, RHEL-155994 - Backport several CVE fixes Resolves: RHEL-151989, RHEL-152216 - Backport several CVE fixes Resolves: RHEL-148849, RHEL-148891, RHEL-149030 - Backport several CVE fixes Resolves: RHEL-142427, RHEL-142411, RHEL-142395, RHEL-142379, RHEL-142363 Resolves: RHEL-142348, RHEL-142332 - Try next DNS entry on connect failure Resolves: RHEL-113722 - Update to 2.11.7 (CVE-2024-32039, CVE-2024-32040, CVE-2024-32041, CVE-2024-32458, CVE-2024-32459, CVE-2024-32460, CVE-2024-32658, CVE-2024-32659, CVE-2024-32660, CVE-2024-32661, CVE-2024-32662) - Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952) Resolves: RHEL-159860 - Fix double free in xf_rail_window_common cleanup (CVE-2026-26986) - Fix growth of preallocated buffers (CVE-2026-27951) - Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775) - Add DSP format checks (CVE-2026-31884) - Fix DSP array bounds checks (CVE-2026-31883) - Fix DSP array bounds checks (CVE-2026-31885) - Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985) Resolves: RHEL-159816, RHEL-155478, RHEL-161047, RHEL-161482 Resolves: RHEL-161519, RHEL-161085, RHEL-168463 - Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984) - Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983) Resolves: RHEL-163097, RHEL-163113 - Fix use of nsc_process_message Resolves: RHEL-155994 - Backport several CVE fixes Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081 Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032 Resolves: RHEL-149043, RHEL-149066, RHEL-155994 - Backport several CVE fixes Resolves: RHEL-151989, RHEL-152216 - Backport several CVE fixes Resolves: RHEL-148849, RHEL-148891, RHEL-149030 - Backport several CVE fixes Resolves: RHEL-142427, RHEL-142411, RHEL-142395, RHEL-142379, RHEL-142363 Resolves: RHEL-142348, RHEL-142332 - Try next DNS entry on connect failure Resolves: RHEL-113722 - Update to 2.11.7 (CVE-2024-32039, CVE-2024-32040, CVE-2024-32041, CVE-2024-32458, CVE-2024-32459, CVE-2024-32460, CVE-2024-32658, CVE-2024-32659, CVE-2024-32660, CVE-2024-32661, CVE-2024-32662) - Fix incorrect bounds checks in planar codec (CVE-2026-45700) Resolves: RHEL-186991 - Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952) Resolves: RHEL-159860 - Fix double free in xf_rail_window_common cleanup (CVE-2026-26986) - Fix growth of preallocated buffers (CVE-2026-27951) - Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775) - Add DSP format checks (CVE-2026-31884) - Fix DSP array bounds checks (CVE-2026-31883) - Fix DSP array bounds checks (CVE-2026-31885) - Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985) Resolves: RHEL-159816, RHEL-155478, RHEL-161047, RHEL-161482 Resolves: RHEL-161519, RHEL-161085, RHEL-168463 - Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984) - Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983) Resolves: RHEL-163097, RHEL-163113 - Fix use of nsc_process_message Resolves: RHEL-155994 - Backport several CVE fixes Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081 Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032 Resolves: RHEL-149043, RHEL-149066, RHEL-155994 - Backport several CVE fixes Resolves: RHEL-151989, RHEL-152216 - Backport several CVE fixes Resolves: RHEL-148849, RHEL-148891, RHEL-149030 - Backport several CVE fixes Resolves: RHEL-142427, RHEL-142411, RHEL-142395, RHEL-142379, RHEL-142363 Resolves: RHEL-142348, RHEL-142332 - Try next DNS entry on connect failure Resolves: RHEL-113722 - Backport several CVE fixes (CVE-2026-64624, CVE-2026-67289, CVE-2026-67299, CVE-2026-68580) Resolves: RHEL-213169, RHEL-222785, RHEL-222966, RHEL-223605 - Fix incorrect bounds checks in planar codec (CVE-2026-45700) Resolves: RHEL-186991 - Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952) Resolves: RHEL-159860 - Fix double free in xf_rail_window_common cleanup (CVE-2026-26986) - Fix growth of preallocated buffers (CVE-2026-27951) - Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775) - Add DSP format checks (CVE-2026-31884) - Fix DSP array bounds checks (CVE-2026-31883) - Fix DSP array bounds checks (CVE-2026-31885) - Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985) Resolves: RHEL-159816, RHEL-155478, RHEL-161047, RHEL-161482 Resolves: RHEL-161519, RHEL-161085, RHEL-168463 - Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984) - Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983) Resolves: RHEL-163097, RHEL-163113 - Fix use of nsc_process_message Resolves: RHEL-155994 - Backport several CVE fixes Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081 Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032 Resolves: RHEL-149043, RHEL-149066, RHEL-155994 - Backport several CVE fixes Resolves: RHEL-151989, RHEL-152216 - Backport several CVE fixes Resolves: RHEL-148849, RHEL-148891, RHEL-149030 - Backport several CVE fixes Resolves: RHEL-142427, RHEL-142411, RHEL-142395, RHEL-142379, RHEL-142363 Resolves: RHEL-142348, RHEL-142332 - Backport several CVE fixes (CVE-2026-55194, CVE-2026-67288, CVE-2026-67291, CVE-2026-67301) Resolves: RHEL-225096, RHEL-227729, RHEL-236060, RHEL-246241 - Backport several CVE fixes (CVE-2026-64624, CVE-2026-67289, CVE-2026-67299, CVE-2026-68580) Resolves: RHEL-213169, RHEL-222785, RHEL-222966, RHEL-223605 - Fix incorrect bounds checks in planar codec (CVE-2026-45700) Resolves: RHEL-186991 - Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952) Resolves: RHEL-159860 - Fix double free in xf_rail_window_common cleanup (CVE-2026-26986) - Fix growth of preallocated buffers (CVE-2026-27951) - Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775) - Add DSP format checks (CVE-2026-31884) - Fix DSP array bounds checks (CVE-2026-31883) - Fix DSP array bounds checks (CVE-2026-31885) - Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985) Resolves: RHEL-159816, RHEL-155478, RHEL-161047, RHEL-161482 Resolves: RHEL-161519, RHEL-161085, RHEL-168463 - Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984) - Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983) Resolves: RHEL-163097, RHEL-163113 - Fix use of nsc_process_message Resolves: RHEL-155994 - Backport several CVE fixes Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081 Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032 Resolves: RHEL-149043, RHEL-149066, RHEL-155994 - Backport several CVE fixes Resolves: RHEL-151989, RHEL-152216 - Backport several CVE fixes Resolves: RHEL-148849, RHEL-148891, RHEL-149030 - Fix RPC gateway fragment size and capacity checks (CVE-2026-55193) Resolves: RHEL-247356 - Backport several CVE fixes (CVE-2026-55194, CVE-2026-67288, CVE-2026-67291, CVE-2026-67301) Resolves: RHEL-225096, RHEL-227729, RHEL-236060, RHEL-246241 - Backport several CVE fixes (CVE-2026-64624, CVE-2026-67289, CVE-2026-67299, CVE-2026-68580) Resolves: RHEL-213169, RHEL-222785, RHEL-222966, RHEL-223605 - Fix incorrect bounds checks in planar codec (CVE-2026-45700) Resolves: RHEL-186991 - Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952) Resolves: RHEL-159860 - Fix double free in xf_rail_window_common cleanup (CVE-2026-26986) - Fix growth of preallocated buffers (CVE-2026-27951) - Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775) - Add DSP format checks (CVE-2026-31884) - Fix DSP array bounds checks (CVE-2026-31883) - Fix DSP array bounds checks (CVE-2026-31885) - Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985) Resolves: RHEL-159816, RHEL-155478, RHEL-161047, RHEL-161482 Resolves: RHEL-161519, RHEL-161085, RHEL-168463 - Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984) - Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983) Resolves: RHEL-163097, RHEL-163113 - Fix use of nsc_process_message Resolves: RHEL-155994 - Backport several CVE fixes Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081 Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032 Resolves: RHEL-149043, RHEL-149066, RHEL-155994 - Backport several CVE fixes Resolves: RHEL-151989, RHEL-152216 - Backport several CVE fixes (CVE-2026-91953, CVE-2026-91954, CVE-2026-91956, CVE-2026-91959, CVE-2026-91963, CVE-2026-91964) Resolves: RHEL-260758, RHEL-260785, RHEL-260803, RHEL-260849, RHEL-260871 Resolves: RHEL-260902 - Fix RPC gateway fragment size and capacity checks (CVE-2026-55193) Resolves: RHEL-247356 - Backport several CVE fixes (CVE-2026-55194, CVE-2026-67288, CVE-2026-67291, CVE-2026-67301) Resolves: RHEL-225096, RHEL-227729, RHEL-236060, RHEL-246241 - Backport several CVE fixes (CVE-2026-64624, CVE-2026-67289, CVE-2026-67299, CVE-2026-68580) Resolves: RHEL-213169, RHEL-222785, RHEL-222966, RHEL-223605 - Fix incorrect bounds checks in planar codec (CVE-2026-45700) Resolves: RHEL-186991 - Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952) Resolves: RHEL-159860 - Fix double free in xf_rail_window_common cleanup (CVE-2026-26986) - Fix growth of preallocated buffers (CVE-2026-27951) - Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775) - Add DSP format checks (CVE-2026-31884) - Fix DSP array bounds checks (CVE-2026-31883) - Fix DSP array bounds checks (CVE-2026-31885) - Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985) Resolves: RHEL-159816, RHEL-155478, RHEL-161047, RHEL-161482 Resolves: RHEL-161519, RHEL-161085, RHEL-168463 - Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984) - Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983) Resolves: RHEL-163097, RHEL-163113 - Fix use of nsc_process_message Resolves: RHEL-155994 - Backport several CVE fixes Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081 Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032 Resolves: RHEL-149043, RHEL-149066, RHEL-155994 - Fix use of nsc_process_message Resolves: RHEL-155994 - Backport several CVE fixes Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081 Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032 Resolves: RHEL-149043, RHEL-149066, RHEL-155994 - Backport several CVE fixes Resolves: RHEL-151989, RHEL-152216 - Backport several CVE fixes Resolves: RHEL-148849, RHEL-148891, RHEL-149030 - Backport several CVE fixes Resolves: RHEL-142427, RHEL-142411, RHEL-142395, RHEL-142379, RHEL-142363 Resolves: RHEL-142348, RHEL-142332 - Try next DNS entry on connect failure Resolves: RHEL-113722 - Update to 2.11.7 (CVE-2024-32039, CVE-2024-32040, CVE-2024-32041, CVE-2024-32458, CVE-2024-32459, CVE-2024-32460, CVE-2024-32658, CVE-2024-32659, CVE-2024-32660, CVE-2024-32661, CVE-2024-32662) - Fix for CVE-2025-27363 out-of-bound write vulnerability - Patch initially by Marc Deslauriers of Canonical - https://www.openwall.com/lists/oss-security/2025/03/14/3 - Adjusted for EL9 by Jonathan Wright of AlmaLinux - and a member of the Meta security team - Resolves: RHEL-83105 - Security fixes for CVE-2022-25308, CVE-2022-25309, CVE-2022-25310 Resolves: rhbz#2050086, rhbz#2050069, rhbz#2050063 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update the patch to drop bundled gnulib. - New upstream release. Resolves: rhbz#1853939 - Security fixes for CVE-2022-25308, CVE-2022-25309, CVE-2022-25310 Resolves: rhbz#2050086, rhbz#2050069, rhbz#2050063 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update the patch to drop bundled gnulib. - New upstream release. Resolves: rhbz#1853939 - Resolves: RHEL-137180 - Files under /var are not properly created in image-mode - Resolves: RHEL-64427 - FRR ignores kernel routes from the system - Resolves: RHEL-13756 - Source address set in FRR route-map not working with IPv6 - Resolves: RHEL-87730 - frr-k8s CI started failing using latest rpm, failures around BFD sessions - Resolves: RHEL-87731 - FRR bgp session not recovered due to incorect error no AF activated for peer - Resolves: RHEL-85950 - FRR doesn't send logs to stdout when running as a daemon - Resolves: RHEL-68432 - FRR gives false warning when Graceful Restart enabled - Resolves: RHEL-78354 - BGP with BFD has a dropped Connection before peering established - Resolves: RHEL-78318 - BFD status down in FRR does not bring down BGP session between peers - Resolves: RHEL-14825 - crafted BGP UPDATE message leading to a crash - Resolves: RHEL-14822 - mishandled malformed data leading to a crash - Resolves: RHEL-174677 - denial of service via crafted FlowSpec component - Resolves: RHEL-137180 - Files under /var are not properly created in image-mode - Resolves: RHEL-64427 - FRR ignores kernel routes from the system - Resolves: RHEL-13756 - Source address set in FRR route-map not working with IPv6 - Resolves: RHEL-87730 - frr-k8s CI started failing using latest rpm, failures around BFD sessions - Resolves: RHEL-87731 - FRR bgp session not recovered due to incorect error no AF activated for peer - Resolves: RHEL-85950 - FRR doesn't send logs to stdout when running as a daemon - Resolves: RHEL-68432 - FRR gives false warning when Graceful Restart enabled - Resolves: RHEL-78354 - BGP with BFD has a dropped Connection before peering established - Resolves: RHEL-78318 - BFD status down in FRR does not bring down BGP session between peers - Resolves: RHEL-193234 - input validation fixes for EVPN NLRI and ENCAP/VNC packet parsing - Resolves: RHEL-176258 - AVC when reading user's site-packages - Resolves: RHEL-152300 - ignored route in the kernel after flapping interface - Resolves: RHEL-174677 - denial of service via crafted FlowSpec component - Resolves: RHEL-137180 - Files under /var are not properly created in image-mode - Resolves: RHEL-64427 - FRR ignores kernel routes from the system - Resolves: RHEL-13756 - Source address set in FRR route-map not working with IPv6 - Resolves: RHEL-87730 - frr-k8s CI started failing using latest rpm, failures around BFD sessions - Resolves: RHEL-87731 - FRR bgp session not recovered due to incorect error no AF activated for peer - Resolves: RHEL-85950 - FRR doesn't send logs to stdout when running as a daemon - Resolves: RHEL-68432 - FRR gives false warning when Graceful Restart enabled - Resolves: RHEL-137180 - Files under /var are not properly created in image-mode - Resolves: RHEL-64427 - FRR ignores kernel routes from the system - Resolves: RHEL-13756 - Source address set in FRR route-map not working with IPv6 - Resolves: RHEL-87730 - frr-k8s CI started failing using latest rpm, failures around BFD sessions - Resolves: RHEL-87731 - FRR bgp session not recovered due to incorect error no AF activated for peer - Resolves: RHEL-85950 - FRR doesn't send logs to stdout when running as a daemon - Resolves: RHEL-68432 - FRR gives false warning when Graceful Restart enabled - Resolves: RHEL-78354 - BGP with BFD has a dropped Connection before peering established - Resolves: RHEL-78318 - BFD status down in FRR does not bring down BGP session between peers - Resolves: RHEL-14825 - crafted BGP UPDATE message leading to a crash - Resolves: RHEL-14822 - mishandled malformed data leading to a crash - Resolves: RHEL-174677 - denial of service via crafted FlowSpec component - Resolves: RHEL-137180 - Files under /var are not properly created in image-mode - Resolves: RHEL-64427 - FRR ignores kernel routes from the system - Resolves: RHEL-13756 - Source address set in FRR route-map not working with IPv6 - Resolves: RHEL-87730 - frr-k8s CI started failing using latest rpm, failures around BFD sessions - Resolves: RHEL-87731 - FRR bgp session not recovered due to incorect error no AF activated for peer - Resolves: RHEL-85950 - FRR doesn't send logs to stdout when running as a daemon - Resolves: RHEL-68432 - FRR gives false warning when Graceful Restart enabled - Resolves: RHEL-78354 - BGP with BFD has a dropped Connection before peering established - Resolves: RHEL-78318 - BFD status down in FRR does not bring down BGP session between peers - Resolves: RHEL-193234 - input validation fixes for EVPN NLRI and ENCAP/VNC packet parsing - Resolves: RHEL-176258 - AVC when reading user's site-packages - Resolves: RHEL-152300 - ignored route in the kernel after flapping interface - Resolves: RHEL-174677 - denial of service via crafted FlowSpec component - Resolves: RHEL-137180 - Files under /var are not properly created in image-mode - Resolves: RHEL-64427 - FRR ignores kernel routes from the system - Resolves: RHEL-13756 - Source address set in FRR route-map not working with IPv6 - Resolves: RHEL-87730 - frr-k8s CI started failing using latest rpm, failures around BFD sessions - Resolves: RHEL-87731 - FRR bgp session not recovered due to incorect error no AF activated for peer - Resolves: RHEL-85950 - FRR doesn't send logs to stdout when running as a daemon - Resolves: RHEL-68432 - FRR gives false warning when Graceful Restart enabled - Resolves: RHEL-157859 - Bump FRR to 10.4.3 to fix EVPN problems - Resolves: RHEL-155911 - Files under /var are not properly created in image-mode - Resolves: RHEL-158428 - fix Requires for libyang to pull in rebased version - Resolves: RHEL-147189 - AVC failures when running frr10 - Enabling gating and testing, adding rpminspect.yaml - Initial commit on c9s - Resolves: RHEL-125957 - Adding FRR10 as a versioned package - Resolves: RHEL-222338 - AVC when reading user's site-packages - Fix CVE-2026-37460: improve packet parsing for EVPN and ENCAP/VNC - Resolves: RHEL-193232 - Resolves: RHEL-174696 - denial of service via crafted BGP UPDATE message - Resolves: RHEL-174678 - denial of service via crafted FlowSpec component - Resolves: RHEL-157859 - Bump FRR to 10.4.3 to fix EVPN problems - Resolves: RHEL-155911 - Files under /var are not properly created in image-mode - Resolves: RHEL-158428 - fix Requires for libyang to pull in rebased version - Resolves: RHEL-147189 - AVC failures when running frr10 - Enabling gating and testing, adding rpminspect.yaml - Initial commit on c9s - Resolves: RHEL-125957 - Adding FRR10 as a versioned package - Resolves: RHEL-193997 - Pre-existing kernel routes are not redistributed - Resolves: RHEL-222338 - AVC when reading user's site-packages - Fix CVE-2026-37460: improve packet parsing for EVPN and ENCAP/VNC - Resolves: RHEL-193232 - Resolves: RHEL-174696 - denial of service via crafted BGP UPDATE message - Resolves: RHEL-174678 - denial of service via crafted FlowSpec component - Resolves: RHEL-157859 - Bump FRR to 10.4.3 to fix EVPN problems - Resolves: RHEL-155911 - Files under /var are not properly created in image-mode - Resolves: RHEL-158428 - fix Requires for libyang to pull in rebased version - Resolves: RHEL-147189 - AVC failures when running frr10 - Enabling gating and testing, adding rpminspect.yaml - Resolves: RHEL-174696 - denial of service via crafted BGP UPDATE message - Resolves: RHEL-174678 - denial of service via crafted FlowSpec component - Resolves: RHEL-157859 - Bump FRR to 10.4.3 to fix EVPN problems - Resolves: RHEL-155911 - Files under /var are not properly created in image-mode - Resolves: RHEL-158428 - fix Requires for libyang to pull in rebased version - Resolves: RHEL-147189 - AVC failures when running frr10 - Enabling gating and testing, adding rpminspect.yaml - Initial commit on c9s - Resolves: RHEL-125957 - Adding FRR10 as a versioned package - Resolves: RHEL-157859 - Bump FRR to 10.4.3 to fix EVPN problems - Resolves: RHEL-155911 - Files under /var are not properly created in image-mode - Resolves: RHEL-158428 - fix Requires for libyang to pull in rebased version - Resolves: RHEL-147189 - AVC failures when running frr10 - Enabling gating and testing, adding rpminspect.yaml - Initial commit on c9s - Resolves: RHEL-125957 - Adding FRR10 as a versioned package - Resolves: RHEL-222338 - AVC when reading user's site-packages - Fix CVE-2026-37460: improve packet parsing for EVPN and ENCAP/VNC - Resolves: RHEL-193232 - Resolves: RHEL-174696 - denial of service via crafted BGP UPDATE message - Resolves: RHEL-174678 - denial of service via crafted FlowSpec component - Resolves: RHEL-157859 - Bump FRR to 10.4.3 to fix EVPN problems - Resolves: RHEL-155911 - Files under /var are not properly created in image-mode - Resolves: RHEL-158428 - fix Requires for libyang to pull in rebased version - Resolves: RHEL-147189 - AVC failures when running frr10 - Enabling gating and testing, adding rpminspect.yaml - Initial commit on c9s - Resolves: RHEL-125957 - Adding FRR10 as a versioned package - Resolves: RHEL-193997 - Pre-existing kernel routes are not redistributed - Resolves: RHEL-222338 - AVC when reading user's site-packages - Fix CVE-2026-37460: improve packet parsing for EVPN and ENCAP/VNC - Resolves: RHEL-193232 - Resolves: RHEL-174696 - denial of service via crafted BGP UPDATE message - Resolves: RHEL-174678 - denial of service via crafted FlowSpec component - Resolves: RHEL-157859 - Bump FRR to 10.4.3 to fix EVPN problems - Resolves: RHEL-155911 - Files under /var are not properly created in image-mode - Resolves: RHEL-158428 - fix Requires for libyang to pull in rebased version - Resolves: RHEL-147189 - AVC failures when running frr10 - Enabling gating and testing, adding rpminspect.yaml - Resolves: RHEL-174696 - denial of service via crafted BGP UPDATE message - Resolves: RHEL-174678 - denial of service via crafted FlowSpec component - Resolves: RHEL-157859 - Bump FRR to 10.4.3 to fix EVPN problems - Resolves: RHEL-155911 - Files under /var are not properly created in image-mode - Resolves: RHEL-158428 - fix Requires for libyang to pull in rebased version - Resolves: RHEL-147189 - AVC failures when running frr10 - Enabling gating and testing, adding rpminspect.yaml - Initial commit on c9s - Resolves: RHEL-125957 - Adding FRR10 as a versioned package - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Apply coverity fixes also to bundled libmy - Update to 0.6.1 (#1946415) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #1949120 - ftp put failed with 'ftp: Out of memory' when stacksize set to unlimited - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Use make_build macro and remove hard-coded gcc - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - update to https://github.com/containers/fuse-overlayfs/releases/tag/v1.16 - fixes "Update fuse-overlayfs to 1.16 [rhel-9.7.z]" - Resolves: RHEL-128520 - update to https://github.com/containers/fuse-overlayfs/releases/tag/v1.15 - Related: RHEL-80816 - update to https://github.com/containers/fuse-overlayfs/releases/tag/v1.14 - Related: RHEL-27608 - libfuse: null-terminate buffer in fuse_req_getgroups() - Advertise support of FUSE_PARALLEL_DIROPS to kernel - Related: RHEL-24721 - Synchronize expire-only API with upstream. - Related: RHEL-23414 - Fix feature_notify_inode_expire_only related(rhbz#2188182) - libfuse: null-terminate buffer in fuse_req_getgroups() - Advertise support of FUSE_PARALLEL_DIROPS to kernel - Related: RHEL-24721 - Synchronize expire-only API with upstream. - Related: RHEL-23414 - Fix feature_notify_inode_expire_only related(rhbz#2188182) - libfuse: null-terminate buffer in fuse_req_getgroups() - Advertise support of FUSE_PARALLEL_DIROPS to kernel - Related: RHEL-24721 - Synchronize expire-only API with upstream. - Related: RHEL-23414 - Fix feature_notify_inode_expire_only related(rhbz#2188182) - Use AlmaLinux cert - Rebase to get new hardware support - Resolves: #RHEL-125778 - Rebase to get new hardware support - Resolves: #RHEL-82423 - Rebase to get new hardware support - Resolves: #RHEL-82423 - Rebase to get hardware support for CERTPX-13842 - Resolves: #RHEL-16637 - Resolves: #RHEL-35373 - Resolves: #RHEL-61930 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - BR: make - Merge PR#2: Make annocheck pass, pass -pie to linker, use make_build macro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use __cc macro instead of hard-coding gcc - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebase to 26.4.20 - Rebase to 26.4.19 - Rebase to 26.4.18 - Rebase to 26.4.16 - Rebase to 26.4.14 - Rebase to 26.4.13 - Rebase to 26.4.22 - Rebase to 26.4.20 - Rebase to 26.4.19 - Rebase to 26.4.18 - Rebase to 26.4.16 - Rebased to 26.4.25 - Rebase to 26.4.24 - Rebase to 26.4.23 - Rebase to 26.4.22 - Add sysusers.d config file to allow rpm to create users/groups automatically - Rebase to 26.4.21 - Rebase to 26.4.19 - Rebase to 26.4.18 - Rebased to 26.4.27 - Rebased to 26.4.26 - Rebased to 26.4.25 - Rebase to 26.4.24 - Rebase to 26.4.23 - Rebase to 26.4.22 - Add sysusers.d config file to allow rpm to create users/groups automatically - Rebase to 26.4.21 - Rebase to 26.4.19 - Rebase to 26.4.18 - Rebased to 26.4.27 - Rebased to 26.4.26 - Rebased to 26.4.25 - Rebase to 26.4.24 - Rebase to 26.4.23 - Rebase to 26.4.22 - Add sysusers.d config file to allow rpm to create users/groups automatically - Rebase to 26.4.21 - Rebase to 26.4.20 - Rebase to 26.4.19 - Rebased to 26.4.27 - Rebased to 26.4.26 - Rebased to 26.4.25 - Rebase to 26.4.24 - Rebase to 26.4.23 - Rebase to 26.4.22 - Add sysusers.d config file to allow rpm to create users/groups automatically - Rebase to 26.4.21 - Rebase to 26.4.20 - Rebase to 26.4.19 - Rebased to 26.4.27 - Rebased to 26.4.26 - Rebased to 26.4.25 - Rebase to 26.4.24 - Rebase to 26.4.23 - Rebase to 26.4.22 - Add sysusers.d config file to allow rpm to create users/groups automatically - Rebase to 26.4.21 - Rebase to 26.4.19 - Rebase to 26.4.18 Fix the issue with incorect handling of return values of some processes Resolves: rhbz#2055107 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - New upstream release - Split the package into the main package and locales subpackage - Fix use after free in io.c - Fix buffer overflow in extensions/readdir.c - Fix integer overflow in buildin.c Resolves: CVE-2026-40467 Resolves: CVE-2026-40468 Resolves: CVE-2026-40553 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - drop libatomic_ops dep - 8.0.4 - %build: --with-libatomic-ops=yes - Debrand for AlmaLinux - Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding branches and calls to gcov output, but not conditions (RHEL-105416). - Fix testsuite failures when run with -fstack-protector* (PR testsuite/70230, RHEL-116477) - Add cross compilers for ppc64le and s390x for non-production uses (RHEL-94764) - Adjust glibc32 build dependency (RHEL-105072) - Exception handling performance improvements (RHEL-105072) - libgcc: Use _dl_find_object to find DWARF data in unwinder - libgcc: Use lock-free data structures for run-time unwinder registration - Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-100148). - Sync libstdc++ pretty printers to latest GTS (RHEL-81975) - Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90239) - rs6000: Rework ELFv2 support for -fpatchable-function-entry (PR target/99888, RHEL-75806) - Debrand for AlmaLinux - Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding branches and calls to gcov output, but not conditions (RHEL-105416). - Fix testsuite failures when run with -fstack-protector* (PR testsuite/70230, RHEL-116477) - Add cross compilers for ppc64le and s390x for non-production uses (RHEL-94764) - Adjust glibc32 build dependency (RHEL-105072) - Exception handling performance improvements (RHEL-105072) - libgcc: Use _dl_find_object to find DWARF data in unwinder - libgcc: Use lock-free data structures for run-time unwinder registration - Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-100148). - Sync libstdc++ pretty printers to latest GTS (RHEL-81975) - Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90239) - rs6000: Rework ELFv2 support for -fpatchable-function-entry (PR target/99888, RHEL-75806) - Debrand for AlmaLinux - Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding branches and calls to gcov output, but not conditions (RHEL-105416). - Fix testsuite failures when run with -fstack-protector* (PR testsuite/70230, RHEL-116477) - Add cross compilers for ppc64le and s390x for non-production uses (RHEL-94764) - Adjust glibc32 build dependency (RHEL-105072) - Exception handling performance improvements (RHEL-105072) - libgcc: Use _dl_find_object to find DWARF data in unwinder - libgcc: Use lock-free data structures for run-time unwinder registration - Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-100148). - Sync libstdc++ pretty printers to latest GTS (RHEL-81975) - Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90239) - rs6000: Rework ELFv2 support for -fpatchable-function-entry (PR target/99888, RHEL-75806) - Debrand for AlmaLinux - Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding branches and calls to gcov output, but not conditions (RHEL-105416). - Fix testsuite failures when run with -fstack-protector* (PR testsuite/70230, RHEL-116477) - Add cross compilers for ppc64le and s390x for non-production uses (RHEL-94764) - Adjust glibc32 build dependency (RHEL-105072) - Exception handling performance improvements (RHEL-105072) - libgcc: Use _dl_find_object to find DWARF data in unwinder - libgcc: Use lock-free data structures for run-time unwinder registration - Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-100148). - Sync libstdc++ pretty printers to latest GTS (RHEL-81975) - Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90239) - rs6000: Rework ELFv2 support for -fpatchable-function-entry (PR target/99888, RHEL-75806) - Debrand for AlmaLinux - Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding branches and calls to gcov output, but not conditions (RHEL-105416). - Fix testsuite failures when run with -fstack-protector* (PR testsuite/70230, RHEL-116477) - Add cross compilers for ppc64le and s390x for non-production uses (RHEL-94764) - Adjust glibc32 build dependency (RHEL-105072) - Exception handling performance improvements (RHEL-105072) - libgcc: Use _dl_find_object to find DWARF data in unwinder - libgcc: Use lock-free data structures for run-time unwinder registration - Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-100148). - Sync libstdc++ pretty printers to latest GTS (RHEL-81975) - Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90239) - rs6000: Rework ELFv2 support for -fpatchable-function-entry (PR target/99888, RHEL-75806) - Use triggers to select which version of the annobin plugin should be used. (#2111976) - require -annobin-plugin-gcc (#2102356) - NVR bump and rebuild - use rpm/macros.gcc-toolset-12-enable for %enable_devtoolset12 and put it in the -runtime subpackage (#2009528) - cut down the required packages, remove -toolchain and -perftools - NVR bump and rebuild, introduce CI gating setup - new package (#2077277) - Re-enable building with LTO. (#2166579) - Annocheck: Fix atexit test. Fix recording of version numbers. (#2165528) - Annocheck: Fix handling of file built by multiple versions of gcc. (#2160700) - Spec file: Enable annotated building. - Annocheck: Fix handling of empty files. (#2159292) - Annocheck: Add crti.o and crtn.o to the list of known glibc special files. (#2158740) - Annocheck: Fix memory leaks. - Annocheck: Do not assume that object files contain no code simply because they do not have an executable segment. (#2158386) - Annocheck: Add more special glibc filenames. (#2158100) - Annocheck: Improve handling of tool versions. - GCC Plugin: Fix building with gcc-13. - Annocheck: Add test for binaries built by cross compilers. - Annocheck: Improve heuristic used to detect binaries without code. (#2144533) - Annocheck: Use real filename rather than debuginfo filename. (#2152280) - Rename gcc plugin to gts-annobin. (#2111977) - Re-enable building with LTO. (#2166579) - Annocheck: Fix atexit test. Fix recording of version numbers. (#2165528) - Annocheck: Fix handling of file built by multiple versions of gcc. (#2160700) - Spec file: Enable annotated building. - Annocheck: Fix handling of empty files. (#2159292) - Annocheck: Add crti.o and crtn.o to the list of known glibc special files. (#2158740) - Annocheck: Fix memory leaks. - Annocheck: Do not assume that object files contain no code simply because they do not have an executable segment. (#2158386) - Annocheck: Add more special glibc filenames. (#2158100) - Annocheck: Improve handling of tool versions. - GCC Plugin: Fix building with gcc-13. - Annocheck: Add test for binaries built by cross compilers. - Annocheck: Improve heuristic used to detect binaries without code. (#2144533) - Annocheck: Use real filename rather than debuginfo filename. (#2152280) - Rename gcc plugin to gts-annobin. (#2111977) - Re-enable building with LTO. (#2166579) - Annocheck: Fix atexit test. Fix recording of version numbers. (#2165528) - Annocheck: Fix handling of file built by multiple versions of gcc. (#2160700) - Spec file: Enable annotated building. - Annocheck: Fix handling of empty files. (#2159292) - Annocheck: Add crti.o and crtn.o to the list of known glibc special files. (#2158740) - Annocheck: Fix memory leaks. - Annocheck: Do not assume that object files contain no code simply because they do not have an executable segment. (#2158386) - Annocheck: Add more special glibc filenames. (#2158100) - Annocheck: Improve handling of tool versions. - GCC Plugin: Fix building with gcc-13. - Annocheck: Add test for binaries built by cross compilers. - Annocheck: Improve heuristic used to detect binaries without code. (#2144533) - Annocheck: Use real filename rather than debuginfo filename. (#2152280) - Rename gcc plugin to gts-annobin. (#2111977) - Add a build requirement on gcc-plugin-annobin. (#2216456) - Use z-stream NVR: Fix the Provides fields of the binutils-gold and binutils-devel subpackages. (#2216456) - Use z-stream NVR: Fix the Provides fields of the binutils-gold and binutils-devel subpackages. (#2220917) - NVR Bump: Fix the Provides fields of the binutils-gold and binutils-devel subpackages. (#2216446) - Fix the Provides fields of the binutils-gold and binutils-devel subpackages. (#2103056) - Use GTS-12 gcc to build static libraries. (#2101443) - Adjust Provides, Obsoletes and Requires fields of the sub-packages. - NVR bump to allow rebuild with the correct tag (again). - NVR bump to allow rebuild with the correct tag. - Add gating.yaml file. - Fix reference to LD_FLAGS.. - Add a build requirement on gcc-plugin-annobin. (#2216456) - Use z-stream NVR: Fix the Provides fields of the binutils-gold and binutils-devel subpackages. (#2216456) - Use z-stream NVR: Fix the Provides fields of the binutils-gold and binutils-devel subpackages. (#2220917) - NVR Bump: Fix the Provides fields of the binutils-gold and binutils-devel subpackages. (#2216446) - Fix the Provides fields of the binutils-gold and binutils-devel subpackages. (#2103056) - Use GTS-12 gcc to build static libraries. (#2101443) - Adjust Provides, Obsoletes and Requires fields of the sub-packages. - NVR bump to allow rebuild with the correct tag (again). - NVR bump to allow rebuild with the correct tag. - Add gating.yaml file. - Fix reference to LD_FLAGS.. - Add a build requirement on gcc-plugin-annobin. (#2216456) - Use z-stream NVR: Fix the Provides fields of the binutils-gold and binutils-devel subpackages. (#2216456) - Use z-stream NVR: Fix the Provides fields of the binutils-gold and binutils-devel subpackages. (#2220917) - NVR Bump: Fix the Provides fields of the binutils-gold and binutils-devel subpackages. (#2216446) - Fix the Provides fields of the binutils-gold and binutils-devel subpackages. (#2103056) - Use GTS-12 gcc to build static libraries. (#2101443) - Adjust Provides, Obsoletes and Requires fields of the sub-packages. - NVR bump to allow rebuild with the correct tag (again). - NVR bump to allow rebuild with the correct tag. - Add gating.yaml file. - Fix reference to LD_FLAGS.. - Use triggers to select which version of the annobin plugin should be used. (#2111976) - require -annobin-plugin-gcc (#2102356) - NVR bump and rebuild - use rpm/macros.gcc-toolset-12-enable for %enable_devtoolset12 and put it in the -runtime subpackage (#2009528) - cut down the required packages, remove -toolchain and -perftools - NVR bump and rebuild, introduce CI gating setup - new package (#2077277) - NVR bump and rebuild - update to dwz 0.14 (#1841830) - add make check - use make macros - fix wrong RTL patterns for vector merge high/low word on LE (RHEL-44850) - bump NVR (RHEL-30832) - fix conditions for using memcmp in std::lexicographical_compare_three_way (PR libstdc++/113960, RHEL-30832) - avoid fma_chain for -march=alderlake and sapphirerapids (#2168919) - provide libexec/ symlinks on all RHELs (#2164262) - build libisl.so with -g (#2154936) - apply an ISL patch (#2154936) - Fixed run-time requirement for annobin plugin. (#2151927) - Build the annobin plugin. Call it gts-gcc-annobin.so. (#2151927) - update from releases/gcc-12 branch (#2110583) - fix up std::from_chars behavior in rounding modes other than FE_TONEAREST (PR libstdc++/107468) - fix wrong RTL patterns for vector merge high/low word on LE (RHEL-44850) - bump NVR (RHEL-30832) - fix conditions for using memcmp in std::lexicographical_compare_three_way (PR libstdc++/113960, RHEL-30832) - avoid fma_chain for -march=alderlake and sapphirerapids (#2168919) - provide libexec/ symlinks on all RHELs (#2164262) - build libisl.so with -g (#2154936) - apply an ISL patch (#2154936) - Fixed run-time requirement for annobin plugin. (#2151927) - Build the annobin plugin. Call it gts-gcc-annobin.so. (#2151927) - update from releases/gcc-12 branch (#2110583) - fix up std::from_chars behavior in rounding modes other than FE_TONEAREST (PR libstdc++/107468) - fix wrong RTL patterns for vector merge high/low word on LE (RHEL-44850) - bump NVR (RHEL-30832) - fix conditions for using memcmp in std::lexicographical_compare_three_way (PR libstdc++/113960, RHEL-30832) - avoid fma_chain for -march=alderlake and sapphirerapids (#2168919) - provide libexec/ symlinks on all RHELs (#2164262) - build libisl.so with -g (#2154936) - apply an ISL patch (#2154936) - Fixed run-time requirement for annobin plugin. (#2151927) - Build the annobin plugin. Call it gts-gcc-annobin.so. (#2151927) - update from releases/gcc-12 branch (#2110583) - fix up std::from_chars behavior in rounding modes other than FE_TONEAREST (PR libstdc++/107468) - fix wrong RTL patterns for vector merge high/low word on LE (RHEL-44850) - bump NVR (RHEL-30832) - fix conditions for using memcmp in std::lexicographical_compare_three_way (PR libstdc++/113960, RHEL-30832) - avoid fma_chain for -march=alderlake and sapphirerapids (#2168919) - provide libexec/ symlinks on all RHELs (#2164262) - build libisl.so with -g (#2154936) - apply an ISL patch (#2154936) - Fixed run-time requirement for annobin plugin. (#2151927) - Build the annobin plugin. Call it gts-gcc-annobin.so. (#2151927) - update from releases/gcc-12 branch (#2110583) - fix up std::from_chars behavior in rounding modes other than FE_TONEAREST (PR libstdc++/107468) - fix wrong RTL patterns for vector merge high/low word on LE (RHEL-44850) - bump NVR (RHEL-30832) - fix conditions for using memcmp in std::lexicographical_compare_three_way (PR libstdc++/113960, RHEL-30832) - avoid fma_chain for -march=alderlake and sapphirerapids (#2168919) - provide libexec/ symlinks on all RHELs (#2164262) - build libisl.so with -g (#2154936) - apply an ISL patch (#2154936) - Fixed run-time requirement for annobin plugin. (#2151927) - Build the annobin plugin. Call it gts-gcc-annobin.so. (#2151927) - update from releases/gcc-12 branch (#2110583) - fix up std::from_chars behavior in rounding modes other than FE_TONEAREST (PR libstdc++/107468) - Do not build -minimal package for GTS. - NVR bump to include {gating,rpminspect}.yaml. - Rebuild w/SCL prefix. - Rebase GTS (RH BZ 2077494). - Backport upstream patch which removes sizes from debuginfod download messages when the size is not available (RHBZ 2068280, Aaron Merey). - On ix86, add -Wno-format-overflow to --enable-gdb-build-warnings. (This is a workaround for the bogus warning/error that we now see on i686 regarding a "may write a terminating nul past the end of the destination" message for the sprintf() call in global_symbol_searcher::search() in gdb/symtab.c.) - Rebase to FSF GDB 11.2. - Fix "sect_index_data not initialized" internal error. (RHBZ 2042664, Kevin Buettner). - Fix buld issues. (RHBZ 2042257, Keith Seitz, Andrew Burgess) - Update libipt to 2.0.5. - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild - fix wrong RTL patterns for vector merge high/low word on LE (RHEL-44850) - bump NVR (RHEL-30832) - fix conditions for using memcmp in std::lexicographical_compare_three_way (PR libstdc++/113960, RHEL-30832) - avoid fma_chain for -march=alderlake and sapphirerapids (#2168919) - provide libexec/ symlinks on all RHELs (#2164262) - build libisl.so with -g (#2154936) - apply an ISL patch (#2154936) - Fixed run-time requirement for annobin plugin. (#2151927) - Build the annobin plugin. Call it gts-gcc-annobin.so. (#2151927) - update from releases/gcc-12 branch (#2110583) - fix up std::from_chars behavior in rounding modes other than FE_TONEAREST (PR libstdc++/107468) - fix wrong RTL patterns for vector merge high/low word on LE (RHEL-44850) - bump NVR (RHEL-30832) - fix conditions for using memcmp in std::lexicographical_compare_three_way (PR libstdc++/113960, RHEL-30832) - avoid fma_chain for -march=alderlake and sapphirerapids (#2168919) - provide libexec/ symlinks on all RHELs (#2164262) - build libisl.so with -g (#2154936) - apply an ISL patch (#2154936) - Fixed run-time requirement for annobin plugin. (#2151927) - Build the annobin plugin. Call it gts-gcc-annobin.so. (#2151927) - update from releases/gcc-12 branch (#2110583) - fix up std::from_chars behavior in rounding modes other than FE_TONEAREST (PR libstdc++/107468) - fix wrong RTL patterns for vector merge high/low word on LE (RHEL-44850) - bump NVR (RHEL-30832) - fix conditions for using memcmp in std::lexicographical_compare_three_way (PR libstdc++/113960, RHEL-30832) - avoid fma_chain for -march=alderlake and sapphirerapids (#2168919) - provide libexec/ symlinks on all RHELs (#2164262) - build libisl.so with -g (#2154936) - apply an ISL patch (#2154936) - Fixed run-time requirement for annobin plugin. (#2151927) - Build the annobin plugin. Call it gts-gcc-annobin.so. (#2151927) - update from releases/gcc-12 branch (#2110583) - fix up std::from_chars behavior in rounding modes other than FE_TONEAREST (PR libstdc++/107468) - fix wrong RTL patterns for vector merge high/low word on LE (RHEL-44850) - bump NVR (RHEL-30832) - fix conditions for using memcmp in std::lexicographical_compare_three_way (PR libstdc++/113960, RHEL-30832) - avoid fma_chain for -march=alderlake and sapphirerapids (#2168919) - provide libexec/ symlinks on all RHELs (#2164262) - build libisl.so with -g (#2154936) - apply an ISL patch (#2154936) - Fixed run-time requirement for annobin plugin. (#2151927) - Build the annobin plugin. Call it gts-gcc-annobin.so. (#2151927) - update from releases/gcc-12 branch (#2110583) - fix up std::from_chars behavior in rounding modes other than FE_TONEAREST (PR libstdc++/107468) - fix wrong RTL patterns for vector merge high/low word on LE (RHEL-44850) - bump NVR (RHEL-30832) - fix conditions for using memcmp in std::lexicographical_compare_three_way (PR libstdc++/113960, RHEL-30832) - avoid fma_chain for -march=alderlake and sapphirerapids (#2168919) - provide libexec/ symlinks on all RHELs (#2164262) - build libisl.so with -g (#2154936) - apply an ISL patch (#2154936) - Fixed run-time requirement for annobin plugin. (#2151927) - Build the annobin plugin. Call it gts-gcc-annobin.so. (#2151927) - update from releases/gcc-12 branch (#2110583) - fix up std::from_chars behavior in rounding modes other than FE_TONEAREST (PR libstdc++/107468) - fix wrong RTL patterns for vector merge high/low word on LE (RHEL-44850) - bump NVR (RHEL-30832) - fix conditions for using memcmp in std::lexicographical_compare_three_way (PR libstdc++/113960, RHEL-30832) - avoid fma_chain for -march=alderlake and sapphirerapids (#2168919) - provide libexec/ symlinks on all RHELs (#2164262) - build libisl.so with -g (#2154936) - apply an ISL patch (#2154936) - Fixed run-time requirement for annobin plugin. (#2151927) - Build the annobin plugin. Call it gts-gcc-annobin.so. (#2151927) - update from releases/gcc-12 branch (#2110583) - fix up std::from_chars behavior in rounding modes other than FE_TONEAREST (PR libstdc++/107468) - fix wrong RTL patterns for vector merge high/low word on LE (RHEL-44850) - bump NVR (RHEL-30832) - fix conditions for using memcmp in std::lexicographical_compare_three_way (PR libstdc++/113960, RHEL-30832) - avoid fma_chain for -march=alderlake and sapphirerapids (#2168919) - provide libexec/ symlinks on all RHELs (#2164262) - build libisl.so with -g (#2154936) - apply an ISL patch (#2154936) - Fixed run-time requirement for annobin plugin. (#2151927) - Build the annobin plugin. Call it gts-gcc-annobin.so. (#2151927) - update from releases/gcc-12 branch (#2110583) - fix up std::from_chars behavior in rounding modes other than FE_TONEAREST (PR libstdc++/107468) - fix wrong RTL patterns for vector merge high/low word on LE (RHEL-44850) - bump NVR (RHEL-30832) - fix conditions for using memcmp in std::lexicographical_compare_three_way (PR libstdc++/113960, RHEL-30832) - avoid fma_chain for -march=alderlake and sapphirerapids (#2168919) - provide libexec/ symlinks on all RHELs (#2164262) - build libisl.so with -g (#2154936) - apply an ISL patch (#2154936) - Fixed run-time requirement for annobin plugin. (#2151927) - Build the annobin plugin. Call it gts-gcc-annobin.so. (#2151927) - update from releases/gcc-12 branch (#2110583) - fix up std::from_chars behavior in rounding modes other than FE_TONEAREST (PR libstdc++/107468) - fix wrong RTL patterns for vector merge high/low word on LE (RHEL-44850) - bump NVR (RHEL-30832) - fix conditions for using memcmp in std::lexicographical_compare_three_way (PR libstdc++/113960, RHEL-30832) - avoid fma_chain for -march=alderlake and sapphirerapids (#2168919) - provide libexec/ symlinks on all RHELs (#2164262) - build libisl.so with -g (#2154936) - apply an ISL patch (#2154936) - Fixed run-time requirement for annobin plugin. (#2151927) - Build the annobin plugin. Call it gts-gcc-annobin.so. (#2151927) - update from releases/gcc-12 branch (#2110583) - fix up std::from_chars behavior in rounding modes other than FE_TONEAREST (PR libstdc++/107468) - fix wrong RTL patterns for vector merge high/low word on LE (RHEL-44850) - bump NVR (RHEL-30832) - fix conditions for using memcmp in std::lexicographical_compare_three_way (PR libstdc++/113960, RHEL-30832) - avoid fma_chain for -march=alderlake and sapphirerapids (#2168919) - provide libexec/ symlinks on all RHELs (#2164262) - build libisl.so with -g (#2154936) - apply an ISL patch (#2154936) - Fixed run-time requirement for annobin plugin. (#2151927) - Build the annobin plugin. Call it gts-gcc-annobin.so. (#2151927) - update from releases/gcc-12 branch (#2110583) - fix up std::from_chars behavior in rounding modes other than FE_TONEAREST (PR libstdc++/107468) - fix wrong RTL patterns for vector merge high/low word on LE (RHEL-44850) - bump NVR (RHEL-30832) - fix conditions for using memcmp in std::lexicographical_compare_three_way (PR libstdc++/113960, RHEL-30832) - avoid fma_chain for -march=alderlake and sapphirerapids (#2168919) - provide libexec/ symlinks on all RHELs (#2164262) - build libisl.so with -g (#2154936) - apply an ISL patch (#2154936) - Fixed run-time requirement for annobin plugin. (#2151927) - Build the annobin plugin. Call it gts-gcc-annobin.so. (#2151927) - update from releases/gcc-12 branch (#2110583) - fix up std::from_chars behavior in rounding modes other than FE_TONEAREST (PR libstdc++/107468) - Use triggers to select which version of the annobin plugin should be used. (#2111976) - require -annobin-plugin-gcc (#2102356) - NVR bump and rebuild - use rpm/macros.gcc-toolset-12-enable for %enable_devtoolset12 and put it in the -runtime subpackage (#2009528) - cut down the required packages, remove -toolchain and -perftools - NVR bump and rebuild, introduce CI gating setup - new package (#2077277) - require GTS 13 packages (#2217519) - don't require other GTS 13 packages yet - update to GTS 13 (#2188491) - drop gcc-toolset-13-build - Use triggers to select which version of the annobin plugin should be used. (#211175) - require -annobin-plugin-gcc (#2102356) - NVR bump and rebuild - use rpm/macros.gcc-toolset-13-enable for %enable_devtoolset12 and put it in the -runtime subpackage (#2009528) - cut down the required packages, remove -toolchain and -perftools - NVR bump and rebuild, introduce CI gating setup - new package (#2077277) - Rebase to bring in improvements for locating string notes. (RHEL-79807) - Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files. (RHEL-79264) - Annocheck: Fix resource leak. (RHEL-79253) - Annocheck: Fix double free. Add special handling for COMBOOT modules. - Annocheck: Improve diagnostics when a separate debug info file cannot be found. - Annocheck: Look for -fstack-clash-protection in DW_AT_producer string. (RHEL-77328) - Annocheck: Fix locating string notes (again). Add exception for glibc benchmark tests. (RHEL-76456) - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries. (RHEL-760404) - Annocheck: Fix the --debug-dir option. - Annocheck: Fix corrupt warning message when unable to locate separate debug info files. - Annocheck: Remove spurious debugging messages. - Annocheck: Always look for annobin notes in separate debug info files. (RHEL-75778) - Annocheck: Support multiple --debug-rpm and --debug-file options. (RHEL-73349) - Annocheck: Add support for sys-root'ed glibc packages. (RHEL-71296) - GCC Plugin: Tidy up use of gcc's diagnoatic headers. (#32429) - Testsuite: Use configured compiler when running tests. - GCC Plugin: Fix building with gcc 15. (#32429) - Annocheck: Fix overly long debug messages. - Annocheck: Rename rwx-seg test to load-segments. Add more checks. Add check for gaps as a future fail. - Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries. - Annocheck: Add --enable-future to enable future fail components in normal tests. - Annocheck: Fix bug preventing the inclusion of the rpm name in reports. - Annocheck: Add more exceptions for gcc binaries. (RHEL-33365) - Annocheck: Add --skip-passes option. - Annocheck: Add exceptions for gcc binaries. (RHEL-33365) - Annocheck: Skip property note test for i386 binaries created by LLVM. (#2323797) - Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info. (RHEL-65411) - GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS. - Clang & LLVM Plugins: Include install directory in binary. (RHEL-54069) - BuiltBy: Fix seg-fault when comparing language version strings. (RHEL-53497) - Spec File: Use correct names for the symlinks. (RHEL-53574) - Spec File: Use correct names for the symlinks. (RHEL-53574) - Rebase to 12.65. (RHEL-51018) - Annocheck: Fix recording arguments for later re-use. (RHEL-50802) - GCC Plugin: Fix building AArch64 components with gcc earlier than 11.3. - Annocheck: Add improvements to the builtby utility. - Annocheck: Add support for ADA binaries. - Annocheck: Add support for binaries built from more than two high level source languages. - Annocheck: Add support for object files containing no executable code. - Annocheck: Do not FAIL LLVM compiled binaries that have not been built with sanitize-cfi and/or sanitize-safe-stack. - Annocheck: Add support for Fortran binaries. - Annocheck: Add heuristic for detecting parts of the CGO runtime library. - Annocheck: Add improvements for handling Clang runtime binaries. - Annocheck: Add tweaks for mixed Rust/C binaries. (#2284605) - Annocheck: Add more glibc source file names. - Annocheck: Skip GAPS test for GO binaries. (RHEL-36308) - Annocheck: Remove some false positives for Rust binaries. (#2280239) - Annocheck: Defer passing the branch protection test until all notes have been checked. - GCC Plugin: Add extra code for detecting the branch protection setting. (RHEL-35958) - Rebuild with LLVM 18. (RHEL-49954) - Rebase to 12.52 in order to bring in fixes for LLVM 18. - GCC Plugin: Add %verify tokens to show that the default plugin names are symbolic links. (RHEL-17505) - LLVM Plugin: Fix building with LLVM version 17. (RHEL-17311) - GCC Plugin: Add support for -fhardended. - Update glibc detection heuristics for PPC64. (RHEL-16453) - Fix another atexit test failure. (#2247481) - Fix atexit test failure. - Notes: Add support for string format notes. - GCC Plugin: Record settings of -Wstrict-flex-arrays and -fstrict-flex-arrays - Annobin: Add future test of these options. - GCC Plugin: Record settings of -Wimplicit-int and -Wimplicit-function-declaration. - Annobin: Add test for these warnings. - GCC Plugin: Enable string note format by default. - Annocheck: Change GO FIPS test to look for CGO_ENABLED markers. - Annocheck: Add test for FIPS compliant GO binaries. - Annocheck: Fix double free. (#2226749) - Annocheck: Ignore AArch64 $x and $d symbols. (#2221192) - GCC Plugin: Suppress active checks for fortran sources. Improve scanning of COLLECT_GCC_OPTIONS. - Annocheck: Remove dependency upon libiberty. - Rebase to bring in improvements for locating string notes. (RHEL-79807) - Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files. (RHEL-79264) - Annocheck: Fix resource leak. (RHEL-79253) - Annocheck: Fix double free. Add special handling for COMBOOT modules. - Annocheck: Improve diagnostics when a separate debug info file cannot be found. - Annocheck: Look for -fstack-clash-protection in DW_AT_producer string. (RHEL-77328) - Annocheck: Fix locating string notes (again). Add exception for glibc benchmark tests. (RHEL-76456) - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries. (RHEL-760404) - Annocheck: Fix the --debug-dir option. - Annocheck: Fix corrupt warning message when unable to locate separate debug info files. - Annocheck: Remove spurious debugging messages. - Annocheck: Always look for annobin notes in separate debug info files. (RHEL-75778) - Annocheck: Support multiple --debug-rpm and --debug-file options. (RHEL-73349) - Annocheck: Add support for sys-root'ed glibc packages. (RHEL-71296) - GCC Plugin: Tidy up use of gcc's diagnoatic headers. (#32429) - Testsuite: Use configured compiler when running tests. - GCC Plugin: Fix building with gcc 15. (#32429) - Annocheck: Fix overly long debug messages. - Annocheck: Rename rwx-seg test to load-segments. Add more checks. Add check for gaps as a future fail. - Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries. - Annocheck: Add --enable-future to enable future fail components in normal tests. - Annocheck: Fix bug preventing the inclusion of the rpm name in reports. - Annocheck: Add more exceptions for gcc binaries. (RHEL-33365) - Annocheck: Add --skip-passes option. - Annocheck: Add exceptions for gcc binaries. (RHEL-33365) - Annocheck: Skip property note test for i386 binaries created by LLVM. (#2323797) - Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info. (RHEL-65411) - GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS. - Clang & LLVM Plugins: Include install directory in binary. (RHEL-54069) - BuiltBy: Fix seg-fault when comparing language version strings. (RHEL-53497) - Spec File: Use correct names for the symlinks. (RHEL-53574) - Spec File: Use correct names for the symlinks. (RHEL-53574) - Rebase to 12.65. (RHEL-51018) - Annocheck: Fix recording arguments for later re-use. (RHEL-50802) - GCC Plugin: Fix building AArch64 components with gcc earlier than 11.3. - Annocheck: Add improvements to the builtby utility. - Annocheck: Add support for ADA binaries. - Annocheck: Add support for binaries built from more than two high level source languages. - Annocheck: Add support for object files containing no executable code. - Annocheck: Do not FAIL LLVM compiled binaries that have not been built with sanitize-cfi and/or sanitize-safe-stack. - Annocheck: Add support for Fortran binaries. - Annocheck: Add heuristic for detecting parts of the CGO runtime library. - Annocheck: Add improvements for handling Clang runtime binaries. - Annocheck: Add tweaks for mixed Rust/C binaries. (#2284605) - Annocheck: Add more glibc source file names. - Annocheck: Skip GAPS test for GO binaries. (RHEL-36308) - Annocheck: Remove some false positives for Rust binaries. (#2280239) - Annocheck: Defer passing the branch protection test until all notes have been checked. - GCC Plugin: Add extra code for detecting the branch protection setting. (RHEL-35958) - Rebuild with LLVM 18. (RHEL-49954) - Rebase to 12.52 in order to bring in fixes for LLVM 18. - GCC Plugin: Add %verify tokens to show that the default plugin names are symbolic links. (RHEL-17505) - LLVM Plugin: Fix building with LLVM version 17. (RHEL-17311) - GCC Plugin: Add support for -fhardended. - Update glibc detection heuristics for PPC64. (RHEL-16453) - Fix another atexit test failure. (#2247481) - Fix atexit test failure. - Notes: Add support for string format notes. - GCC Plugin: Record settings of -Wstrict-flex-arrays and -fstrict-flex-arrays - Annobin: Add future test of these options. - GCC Plugin: Record settings of -Wimplicit-int and -Wimplicit-function-declaration. - Annobin: Add test for these warnings. - GCC Plugin: Enable string note format by default. - Annocheck: Change GO FIPS test to look for CGO_ENABLED markers. - Annocheck: Add test for FIPS compliant GO binaries. - Annocheck: Fix double free. (#2226749) - Annocheck: Ignore AArch64 $x and $d symbols. (#2221192) - GCC Plugin: Suppress active checks for fortran sources. Improve scanning of COLLECT_GCC_OPTIONS. - Annocheck: Remove dependency upon libiberty. - Rebase to bring in improvements for locating string notes. (RHEL-79807) - Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files. (RHEL-79264) - Annocheck: Fix resource leak. (RHEL-79253) - Annocheck: Fix double free. Add special handling for COMBOOT modules. - Annocheck: Improve diagnostics when a separate debug info file cannot be found. - Annocheck: Look for -fstack-clash-protection in DW_AT_producer string. (RHEL-77328) - Annocheck: Fix locating string notes (again). Add exception for glibc benchmark tests. (RHEL-76456) - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries. (RHEL-760404) - Annocheck: Fix the --debug-dir option. - Annocheck: Fix corrupt warning message when unable to locate separate debug info files. - Annocheck: Remove spurious debugging messages. - Annocheck: Always look for annobin notes in separate debug info files. (RHEL-75778) - Annocheck: Support multiple --debug-rpm and --debug-file options. (RHEL-73349) - Annocheck: Add support for sys-root'ed glibc packages. (RHEL-71296) - GCC Plugin: Tidy up use of gcc's diagnoatic headers. (#32429) - Testsuite: Use configured compiler when running tests. - GCC Plugin: Fix building with gcc 15. (#32429) - Annocheck: Fix overly long debug messages. - Annocheck: Rename rwx-seg test to load-segments. Add more checks. Add check for gaps as a future fail. - Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries. - Annocheck: Add --enable-future to enable future fail components in normal tests. - Annocheck: Fix bug preventing the inclusion of the rpm name in reports. - Annocheck: Add more exceptions for gcc binaries. (RHEL-33365) - Annocheck: Add --skip-passes option. - Annocheck: Add exceptions for gcc binaries. (RHEL-33365) - Annocheck: Skip property note test for i386 binaries created by LLVM. (#2323797) - Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info. (RHEL-65411) - GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS. - Clang & LLVM Plugins: Include install directory in binary. (RHEL-54069) - BuiltBy: Fix seg-fault when comparing language version strings. (RHEL-53497) - Spec File: Use correct names for the symlinks. (RHEL-53574) - Spec File: Use correct names for the symlinks. (RHEL-53574) - Rebase to 12.65. (RHEL-51018) - Annocheck: Fix recording arguments for later re-use. (RHEL-50802) - GCC Plugin: Fix building AArch64 components with gcc earlier than 11.3. - Annocheck: Add improvements to the builtby utility. - Annocheck: Add support for ADA binaries. - Annocheck: Add support for binaries built from more than two high level source languages. - Annocheck: Add support for object files containing no executable code. - Annocheck: Do not FAIL LLVM compiled binaries that have not been built with sanitize-cfi and/or sanitize-safe-stack. - Annocheck: Add support for Fortran binaries. - Annocheck: Add heuristic for detecting parts of the CGO runtime library. - Annocheck: Add improvements for handling Clang runtime binaries. - Annocheck: Add tweaks for mixed Rust/C binaries. (#2284605) - Annocheck: Add more glibc source file names. - Annocheck: Skip GAPS test for GO binaries. (RHEL-36308) - Annocheck: Remove some false positives for Rust binaries. (#2280239) - Annocheck: Defer passing the branch protection test until all notes have been checked. - GCC Plugin: Add extra code for detecting the branch protection setting. (RHEL-35958) - Rebuild with LLVM 18. (RHEL-49954) - Rebase to 12.52 in order to bring in fixes for LLVM 18. - GCC Plugin: Add %verify tokens to show that the default plugin names are symbolic links. (RHEL-17505) - LLVM Plugin: Fix building with LLVM version 17. (RHEL-17311) - GCC Plugin: Add support for -fhardended. - Update glibc detection heuristics for PPC64. (RHEL-16453) - Fix another atexit test failure. (#2247481) - Fix atexit test failure. - Notes: Add support for string format notes. - GCC Plugin: Record settings of -Wstrict-flex-arrays and -fstrict-flex-arrays - Annobin: Add future test of these options. - GCC Plugin: Record settings of -Wimplicit-int and -Wimplicit-function-declaration. - Annobin: Add test for these warnings. - GCC Plugin: Enable string note format by default. - Annocheck: Change GO FIPS test to look for CGO_ENABLED markers. - Annocheck: Add test for FIPS compliant GO binaries. - Annocheck: Fix double free. (#2226749) - Annocheck: Ignore AArch64 $x and $d symbols. (#2221192) - GCC Plugin: Suppress active checks for fortran sources. Improve scanning of COLLECT_GCC_OPTIONS. - Annocheck: Remove dependency upon libiberty. - Fix a potential illegal memory access when linking a corrupt input file. (RHEL-130655) - Run x86_64 assembler tests for znver5 architecture extension. (RHEL-23798) - Add support for AMD's znver5 architecture extension. (RHEL-23798) - Spec File: Restore the SElinux context to %{_libdir}. (RHEL-22818) - [2.40-18: was a failed attempt to fix RHEL-22818] - Spec File: Do not use of the system zlib by default. (RHEL-19373) - Spec File: Do not check the mtime of ld.bfd. (RHEL-21303) - Disable building static libraries with LTO. (RHEL-18800) - Fix a potential illegal memory access when linking a corrupt input file. (RHEL-130655) - Run x86_64 assembler tests for znver5 architecture extension. (RHEL-23798) - Add support for AMD's znver5 architecture extension. (RHEL-23798) - Spec File: Restore the SElinux context to %{_libdir}. (RHEL-22818) - [2.40-18: was a failed attempt to fix RHEL-22818] - Spec File: Do not use of the system zlib by default. (RHEL-19373) - Spec File: Do not check the mtime of ld.bfd. (RHEL-21303) - Disable building static libraries with LTO. (RHEL-18800) - Fix a potential illegal memory access when linking a corrupt input file. (RHEL-130655) - Run x86_64 assembler tests for znver5 architecture extension. (RHEL-23798) - Add support for AMD's znver5 architecture extension. (RHEL-23798) - Spec File: Restore the SElinux context to %{_libdir}. (RHEL-22818) - [2.40-18: was a failed attempt to fix RHEL-22818] - Spec File: Do not use of the system zlib by default. (RHEL-19373) - Spec File: Do not check the mtime of ld.bfd. (RHEL-21303) - Disable building static libraries with LTO. (RHEL-18800) - new package (#2188495) - bump for another rebuild (RHEL-78382) - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78382) - fix wrong RTL patterns for vector merge high/low word on LE (RHEL-45190) - update from releases/gcc-13 branch - PRs ada/114398, ada/114708, c/114493, c++/111529, c++/113598, fortran/110415, fortran/114827, fortran/115150, libstdc++/114940, libstdc++/115269, middle-end/108789, rtl-optimization/114902, rtl-optimization/115092, target/113281, target/113719, target/115297, target/115317, target/115324, tree-optimization/115192, tree-optimization/115307, tree-optimization/115337 - fix a shell condition (RHEL-40722) - backport a fix for modes_1.f90 (RHEL-40234) - fix up pointer types to may_alias structures (PR c/114493, RHEL-40244) - update from releases/gcc-13 branch - GCC 13.3 release - PRs analyzer/104042, analyzer/108171, analyzer/109251, analyzer/109577, analyzer/110014, analyzer/110112, analyzer/110700, analyzer/110882, analyzer/111289, analyzer/112790, analyzer/112889, analyzer/112969, analyzer/113253, analyzer/113333, analyzer/114408, analyzer/114473, bootstrap/106472, bootstrap/114369, c/112571, c/114780, c++/89224, c++/97990, c++/100667, c++/103825, c++/110006, c++/111284, c++/112769, c++/113141, c++/113966, c++/114303, c++/114377, c++/114537, c++/114561, c++/114562, c++/114572, c++/114580, c++/114634, c++/114691, c++/114709, debug/112718, driver/111700, fortran/36337, fortran/50410, fortran/55978, fortran/89462, fortran/93678, fortran/95374, fortran/101135, fortran/102003, fortran/103707, fortran/103715, fortran/103716, fortran/104352, fortran/106987, fortran/106999, fortran/107426, fortran/110987, fortran/112407, fortran/113799, fortran/113866, fortran/113885, fortran/113956, fortran/114001, fortran/114474, fortran/114535, fortran/114739, fortran/114825, fortran/115039, gcov-profile/114115, gcov-profile/114715, ipa/92606, ipa/108007, ipa/111571, ipa/112616, ipa/113359, ipa/113907, ipa/113964, jit/110466, libgcc/111731, libquadmath/114533, libstdc++/66146, libstdc++/93672, libstdc++/104606, libstdc++/107800, libstdc++/108976, libstdc++/110050, libstdc++/110054, libstdc++/113841, libstdc++/114147, libstdc++/114316, libstdc++/114359, libstdc++/114367, libstdc++/114401, libstdc++/114750, libstdc++/114803, libstdc++/114863, libstdc++/115063, lto/114655, middle-end/110027, middle-end/111151, middle-end/111632, middle-end/111683, middle-end/112684, middle-end/112732, middle-end/113396, middle-end/113622, middle-end/114070, middle-end/114348, middle-end/114552, middle-end/114599, middle-end/114734, middle-end/114753, middle-end/114907, rtl-optimization/54052, rtl-optimization/114415, rtl-optimization/114768, rtl-optimization/114924, sanitizer/97696, sanitizer/114687, sanitizer/114743, sanitizer/114956, sanitizer/115172, target/88309, target/101865, target/105522, target/110621, target/111234, target/111600, target/111610, target/111822, target/112397, target/113095, target/113233, target/113950, target/114049, target/114130, target/114160, target/114172, target/114175, target/114272, target/114747, target/114752, target/114794, target/114837, target/114848, target/114981, testsuite/111066, testsuite/112297, testsuite/114034, testsuite/114036, testsuite/114662, tree-optimization/91838, tree-optimization/109925, tree-optimization/110838, tree-optimization/111009, tree-optimization/111268, tree-optimization/111407, tree-optimization/111736, tree-optimization/111882, tree-optimization/112281, tree-optimization/112303, tree-optimization/112793, tree-optimization/112961, tree-optimization/112991, tree-optimization/113552, tree-optimization/113630, tree-optimization/113670, tree-optimization/113831, tree-optimization/113910, tree-optimization/114027, tree-optimization/114115, tree-optimization/114121, tree-optimization/114203, tree-optimization/114231, tree-optimization/114246, tree-optimization/114375, tree-optimization/114396, tree-optimization/114485, tree-optimization/114566, tree-optimization/114672, tree-optimization/114733, tree-optimization/114736, tree-optimization/114749, tree-optimization/114787, tree-optimization/114799, tree-optimization/114876, tree-optimization/114965, tree-optimization/115143, tree-optimization/115152, tree-optimization/115154 - add --without-clang-plugin --without-llvm-plugin to annobin configure options - use the system dir in --with-libstdcxx-zoneinfo (RHEL-21093) - fix for libstdc++_nonshared.a on ppc64le (RHEL-17960) - add f95 (RHEL-17655) - update from releases/gcc-13 branch - PRs c++/33799, c++/102191, c++/111703, c++/112269, c++/112301, c++/112633, c/112339, fortran/111880, fortran/112764, libgomp/111413, libstdc++/112348, libstdc++/112491, libstdc++/112607, middle-end/111497, target/53372, target/110411, target/111408, target/111815, target/111828, target/112672, tree-optimization/111137, tree-optimization/111465, tree-optimization/111967, tree-optimization/112496 - add -fno-stack-protector to aarch64 tests (RHEL-17684) - update from releases/gcc-13 branch - PRs c++/89038, c/111884, d/110712, d/112270, fortran/67740, fortran/97245, fortran/111837, fortran/112316, libbacktrace/111315, libbacktrace/112263, libstdc++/110944, libstdc++/111172, libstdc++/111936, libstdc++/112089, libstdc++/112314, middle-end/111253, middle-end/111818, modula2/111756, modula2/112110, target/101177, target/110170, target/111001, target/111366, target/111367, target/111380, target/111935, target/112443, tree-optimization/111397, tree-optimization/111445, tree-optimization/111489, tree-optimization/111583, tree-optimization/111614, tree-optimization/111622, tree-optimization/111694, tree-optimization/111764, tree-optimization/111820, tree-optimization/111833, tree-optimization/111917 - fix aarch64 RA ICE (#2241139, PR target/111528) - fix ia32 doubleword rotates (#2238781, PR target/110792) - bump for another rebuild (RHEL-78382) - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78382) - fix wrong RTL patterns for vector merge high/low word on LE (RHEL-45190) - update from releases/gcc-13 branch - PRs ada/114398, ada/114708, c/114493, c++/111529, c++/113598, fortran/110415, fortran/114827, fortran/115150, libstdc++/114940, libstdc++/115269, middle-end/108789, rtl-optimization/114902, rtl-optimization/115092, target/113281, target/113719, target/115297, target/115317, target/115324, tree-optimization/115192, tree-optimization/115307, tree-optimization/115337 - fix a shell condition (RHEL-40722) - backport a fix for modes_1.f90 (RHEL-40234) - fix up pointer types to may_alias structures (PR c/114493, RHEL-40244) - update from releases/gcc-13 branch - GCC 13.3 release - PRs analyzer/104042, analyzer/108171, analyzer/109251, analyzer/109577, analyzer/110014, analyzer/110112, analyzer/110700, analyzer/110882, analyzer/111289, analyzer/112790, analyzer/112889, analyzer/112969, analyzer/113253, analyzer/113333, analyzer/114408, analyzer/114473, bootstrap/106472, bootstrap/114369, c/112571, c/114780, c++/89224, c++/97990, c++/100667, c++/103825, c++/110006, c++/111284, c++/112769, c++/113141, c++/113966, c++/114303, c++/114377, c++/114537, c++/114561, c++/114562, c++/114572, c++/114580, c++/114634, c++/114691, c++/114709, debug/112718, driver/111700, fortran/36337, fortran/50410, fortran/55978, fortran/89462, fortran/93678, fortran/95374, fortran/101135, fortran/102003, fortran/103707, fortran/103715, fortran/103716, fortran/104352, fortran/106987, fortran/106999, fortran/107426, fortran/110987, fortran/112407, fortran/113799, fortran/113866, fortran/113885, fortran/113956, fortran/114001, fortran/114474, fortran/114535, fortran/114739, fortran/114825, fortran/115039, gcov-profile/114115, gcov-profile/114715, ipa/92606, ipa/108007, ipa/111571, ipa/112616, ipa/113359, ipa/113907, ipa/113964, jit/110466, libgcc/111731, libquadmath/114533, libstdc++/66146, libstdc++/93672, libstdc++/104606, libstdc++/107800, libstdc++/108976, libstdc++/110050, libstdc++/110054, libstdc++/113841, libstdc++/114147, libstdc++/114316, libstdc++/114359, libstdc++/114367, libstdc++/114401, libstdc++/114750, libstdc++/114803, libstdc++/114863, libstdc++/115063, lto/114655, middle-end/110027, middle-end/111151, middle-end/111632, middle-end/111683, middle-end/112684, middle-end/112732, middle-end/113396, middle-end/113622, middle-end/114070, middle-end/114348, middle-end/114552, middle-end/114599, middle-end/114734, middle-end/114753, middle-end/114907, rtl-optimization/54052, rtl-optimization/114415, rtl-optimization/114768, rtl-optimization/114924, sanitizer/97696, sanitizer/114687, sanitizer/114743, sanitizer/114956, sanitizer/115172, target/88309, target/101865, target/105522, target/110621, target/111234, target/111600, target/111610, target/111822, target/112397, target/113095, target/113233, target/113950, target/114049, target/114130, target/114160, target/114172, target/114175, target/114272, target/114747, target/114752, target/114794, target/114837, target/114848, target/114981, testsuite/111066, testsuite/112297, testsuite/114034, testsuite/114036, testsuite/114662, tree-optimization/91838, tree-optimization/109925, tree-optimization/110838, tree-optimization/111009, tree-optimization/111268, tree-optimization/111407, tree-optimization/111736, tree-optimization/111882, tree-optimization/112281, tree-optimization/112303, tree-optimization/112793, tree-optimization/112961, tree-optimization/112991, tree-optimization/113552, tree-optimization/113630, tree-optimization/113670, tree-optimization/113831, tree-optimization/113910, tree-optimization/114027, tree-optimization/114115, tree-optimization/114121, tree-optimization/114203, tree-optimization/114231, tree-optimization/114246, tree-optimization/114375, tree-optimization/114396, tree-optimization/114485, tree-optimization/114566, tree-optimization/114672, tree-optimization/114733, tree-optimization/114736, tree-optimization/114749, tree-optimization/114787, tree-optimization/114799, tree-optimization/114876, tree-optimization/114965, tree-optimization/115143, tree-optimization/115152, tree-optimization/115154 - add --without-clang-plugin --without-llvm-plugin to annobin configure options - use the system dir in --with-libstdcxx-zoneinfo (RHEL-21093) - fix for libstdc++_nonshared.a on ppc64le (RHEL-17960) - add f95 (RHEL-17655) - update from releases/gcc-13 branch - PRs c++/33799, c++/102191, c++/111703, c++/112269, c++/112301, c++/112633, c/112339, fortran/111880, fortran/112764, libgomp/111413, libstdc++/112348, libstdc++/112491, libstdc++/112607, middle-end/111497, target/53372, target/110411, target/111408, target/111815, target/111828, target/112672, tree-optimization/111137, tree-optimization/111465, tree-optimization/111967, tree-optimization/112496 - add -fno-stack-protector to aarch64 tests (RHEL-17684) - update from releases/gcc-13 branch - PRs c++/89038, c/111884, d/110712, d/112270, fortran/67740, fortran/97245, fortran/111837, fortran/112316, libbacktrace/111315, libbacktrace/112263, libstdc++/110944, libstdc++/111172, libstdc++/111936, libstdc++/112089, libstdc++/112314, middle-end/111253, middle-end/111818, modula2/111756, modula2/112110, target/101177, target/110170, target/111001, target/111366, target/111367, target/111380, target/111935, target/112443, tree-optimization/111397, tree-optimization/111445, tree-optimization/111489, tree-optimization/111583, tree-optimization/111614, tree-optimization/111622, tree-optimization/111694, tree-optimization/111764, tree-optimization/111820, tree-optimization/111833, tree-optimization/111917 - fix aarch64 RA ICE (#2241139, PR target/111528) - fix ia32 doubleword rotates (#2238781, PR target/110792) - bump for another rebuild (RHEL-78382) - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78382) - fix wrong RTL patterns for vector merge high/low word on LE (RHEL-45190) - update from releases/gcc-13 branch - PRs ada/114398, ada/114708, c/114493, c++/111529, c++/113598, fortran/110415, fortran/114827, fortran/115150, libstdc++/114940, libstdc++/115269, middle-end/108789, rtl-optimization/114902, rtl-optimization/115092, target/113281, target/113719, target/115297, target/115317, target/115324, tree-optimization/115192, tree-optimization/115307, tree-optimization/115337 - fix a shell condition (RHEL-40722) - backport a fix for modes_1.f90 (RHEL-40234) - fix up pointer types to may_alias structures (PR c/114493, RHEL-40244) - update from releases/gcc-13 branch - GCC 13.3 release - PRs analyzer/104042, analyzer/108171, analyzer/109251, analyzer/109577, analyzer/110014, analyzer/110112, analyzer/110700, analyzer/110882, analyzer/111289, analyzer/112790, analyzer/112889, analyzer/112969, analyzer/113253, analyzer/113333, analyzer/114408, analyzer/114473, bootstrap/106472, bootstrap/114369, c/112571, c/114780, c++/89224, c++/97990, c++/100667, c++/103825, c++/110006, c++/111284, c++/112769, c++/113141, c++/113966, c++/114303, c++/114377, c++/114537, c++/114561, c++/114562, c++/114572, c++/114580, c++/114634, c++/114691, c++/114709, debug/112718, driver/111700, fortran/36337, fortran/50410, fortran/55978, fortran/89462, fortran/93678, fortran/95374, fortran/101135, fortran/102003, fortran/103707, fortran/103715, fortran/103716, fortran/104352, fortran/106987, fortran/106999, fortran/107426, fortran/110987, fortran/112407, fortran/113799, fortran/113866, fortran/113885, fortran/113956, fortran/114001, fortran/114474, fortran/114535, fortran/114739, fortran/114825, fortran/115039, gcov-profile/114115, gcov-profile/114715, ipa/92606, ipa/108007, ipa/111571, ipa/112616, ipa/113359, ipa/113907, ipa/113964, jit/110466, libgcc/111731, libquadmath/114533, libstdc++/66146, libstdc++/93672, libstdc++/104606, libstdc++/107800, libstdc++/108976, libstdc++/110050, libstdc++/110054, libstdc++/113841, libstdc++/114147, libstdc++/114316, libstdc++/114359, libstdc++/114367, libstdc++/114401, libstdc++/114750, libstdc++/114803, libstdc++/114863, libstdc++/115063, lto/114655, middle-end/110027, middle-end/111151, middle-end/111632, middle-end/111683, middle-end/112684, middle-end/112732, middle-end/113396, middle-end/113622, middle-end/114070, middle-end/114348, middle-end/114552, middle-end/114599, middle-end/114734, middle-end/114753, middle-end/114907, rtl-optimization/54052, rtl-optimization/114415, rtl-optimization/114768, rtl-optimization/114924, sanitizer/97696, sanitizer/114687, sanitizer/114743, sanitizer/114956, sanitizer/115172, target/88309, target/101865, target/105522, target/110621, target/111234, target/111600, target/111610, target/111822, target/112397, target/113095, target/113233, target/113950, target/114049, target/114130, target/114160, target/114172, target/114175, target/114272, target/114747, target/114752, target/114794, target/114837, target/114848, target/114981, testsuite/111066, testsuite/112297, testsuite/114034, testsuite/114036, testsuite/114662, tree-optimization/91838, tree-optimization/109925, tree-optimization/110838, tree-optimization/111009, tree-optimization/111268, tree-optimization/111407, tree-optimization/111736, tree-optimization/111882, tree-optimization/112281, tree-optimization/112303, tree-optimization/112793, tree-optimization/112961, tree-optimization/112991, tree-optimization/113552, tree-optimization/113630, tree-optimization/113670, tree-optimization/113831, tree-optimization/113910, tree-optimization/114027, tree-optimization/114115, tree-optimization/114121, tree-optimization/114203, tree-optimization/114231, tree-optimization/114246, tree-optimization/114375, tree-optimization/114396, tree-optimization/114485, tree-optimization/114566, tree-optimization/114672, tree-optimization/114733, tree-optimization/114736, tree-optimization/114749, tree-optimization/114787, tree-optimization/114799, tree-optimization/114876, tree-optimization/114965, tree-optimization/115143, tree-optimization/115152, tree-optimization/115154 - add --without-clang-plugin --without-llvm-plugin to annobin configure options - use the system dir in --with-libstdcxx-zoneinfo (RHEL-21093) - fix for libstdc++_nonshared.a on ppc64le (RHEL-17960) - add f95 (RHEL-17655) - update from releases/gcc-13 branch - PRs c++/33799, c++/102191, c++/111703, c++/112269, c++/112301, c++/112633, c/112339, fortran/111880, fortran/112764, libgomp/111413, libstdc++/112348, libstdc++/112491, libstdc++/112607, middle-end/111497, target/53372, target/110411, target/111408, target/111815, target/111828, target/112672, tree-optimization/111137, tree-optimization/111465, tree-optimization/111967, tree-optimization/112496 - add -fno-stack-protector to aarch64 tests (RHEL-17684) - update from releases/gcc-13 branch - PRs c++/89038, c/111884, d/110712, d/112270, fortran/67740, fortran/97245, fortran/111837, fortran/112316, libbacktrace/111315, libbacktrace/112263, libstdc++/110944, libstdc++/111172, libstdc++/111936, libstdc++/112089, libstdc++/112314, middle-end/111253, middle-end/111818, modula2/111756, modula2/112110, target/101177, target/110170, target/111001, target/111366, target/111367, target/111380, target/111935, target/112443, tree-optimization/111397, tree-optimization/111445, tree-optimization/111489, tree-optimization/111583, tree-optimization/111614, tree-optimization/111622, tree-optimization/111694, tree-optimization/111764, tree-optimization/111820, tree-optimization/111833, tree-optimization/111917 - fix aarch64 RA ICE (#2241139, PR target/111528) - fix ia32 doubleword rotates (#2238781, PR target/110792) - bump for another rebuild (RHEL-78382) - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78382) - fix wrong RTL patterns for vector merge high/low word on LE (RHEL-45190) - update from releases/gcc-13 branch - PRs ada/114398, ada/114708, c/114493, c++/111529, c++/113598, fortran/110415, fortran/114827, fortran/115150, libstdc++/114940, libstdc++/115269, middle-end/108789, rtl-optimization/114902, rtl-optimization/115092, target/113281, target/113719, target/115297, target/115317, target/115324, tree-optimization/115192, tree-optimization/115307, tree-optimization/115337 - fix a shell condition (RHEL-40722) - backport a fix for modes_1.f90 (RHEL-40234) - fix up pointer types to may_alias structures (PR c/114493, RHEL-40244) - update from releases/gcc-13 branch - GCC 13.3 release - PRs analyzer/104042, analyzer/108171, analyzer/109251, analyzer/109577, analyzer/110014, analyzer/110112, analyzer/110700, analyzer/110882, analyzer/111289, analyzer/112790, analyzer/112889, analyzer/112969, analyzer/113253, analyzer/113333, analyzer/114408, analyzer/114473, bootstrap/106472, bootstrap/114369, c/112571, c/114780, c++/89224, c++/97990, c++/100667, c++/103825, c++/110006, c++/111284, c++/112769, c++/113141, c++/113966, c++/114303, c++/114377, c++/114537, c++/114561, c++/114562, c++/114572, c++/114580, c++/114634, c++/114691, c++/114709, debug/112718, driver/111700, fortran/36337, fortran/50410, fortran/55978, fortran/89462, fortran/93678, fortran/95374, fortran/101135, fortran/102003, fortran/103707, fortran/103715, fortran/103716, fortran/104352, fortran/106987, fortran/106999, fortran/107426, fortran/110987, fortran/112407, fortran/113799, fortran/113866, fortran/113885, fortran/113956, fortran/114001, fortran/114474, fortran/114535, fortran/114739, fortran/114825, fortran/115039, gcov-profile/114115, gcov-profile/114715, ipa/92606, ipa/108007, ipa/111571, ipa/112616, ipa/113359, ipa/113907, ipa/113964, jit/110466, libgcc/111731, libquadmath/114533, libstdc++/66146, libstdc++/93672, libstdc++/104606, libstdc++/107800, libstdc++/108976, libstdc++/110050, libstdc++/110054, libstdc++/113841, libstdc++/114147, libstdc++/114316, libstdc++/114359, libstdc++/114367, libstdc++/114401, libstdc++/114750, libstdc++/114803, libstdc++/114863, libstdc++/115063, lto/114655, middle-end/110027, middle-end/111151, middle-end/111632, middle-end/111683, middle-end/112684, middle-end/112732, middle-end/113396, middle-end/113622, middle-end/114070, middle-end/114348, middle-end/114552, middle-end/114599, middle-end/114734, middle-end/114753, middle-end/114907, rtl-optimization/54052, rtl-optimization/114415, rtl-optimization/114768, rtl-optimization/114924, sanitizer/97696, sanitizer/114687, sanitizer/114743, sanitizer/114956, sanitizer/115172, target/88309, target/101865, target/105522, target/110621, target/111234, target/111600, target/111610, target/111822, target/112397, target/113095, target/113233, target/113950, target/114049, target/114130, target/114160, target/114172, target/114175, target/114272, target/114747, target/114752, target/114794, target/114837, target/114848, target/114981, testsuite/111066, testsuite/112297, testsuite/114034, testsuite/114036, testsuite/114662, tree-optimization/91838, tree-optimization/109925, tree-optimization/110838, tree-optimization/111009, tree-optimization/111268, tree-optimization/111407, tree-optimization/111736, tree-optimization/111882, tree-optimization/112281, tree-optimization/112303, tree-optimization/112793, tree-optimization/112961, tree-optimization/112991, tree-optimization/113552, tree-optimization/113630, tree-optimization/113670, tree-optimization/113831, tree-optimization/113910, tree-optimization/114027, tree-optimization/114115, tree-optimization/114121, tree-optimization/114203, tree-optimization/114231, tree-optimization/114246, tree-optimization/114375, tree-optimization/114396, tree-optimization/114485, tree-optimization/114566, tree-optimization/114672, tree-optimization/114733, tree-optimization/114736, tree-optimization/114749, tree-optimization/114787, tree-optimization/114799, tree-optimization/114876, tree-optimization/114965, tree-optimization/115143, tree-optimization/115152, tree-optimization/115154 - add --without-clang-plugin --without-llvm-plugin to annobin configure options - use the system dir in --with-libstdcxx-zoneinfo (RHEL-21093) - fix for libstdc++_nonshared.a on ppc64le (RHEL-17960) - add f95 (RHEL-17655) - update from releases/gcc-13 branch - PRs c++/33799, c++/102191, c++/111703, c++/112269, c++/112301, c++/112633, c/112339, fortran/111880, fortran/112764, libgomp/111413, libstdc++/112348, libstdc++/112491, libstdc++/112607, middle-end/111497, target/53372, target/110411, target/111408, target/111815, target/111828, target/112672, tree-optimization/111137, tree-optimization/111465, tree-optimization/111967, tree-optimization/112496 - add -fno-stack-protector to aarch64 tests (RHEL-17684) - update from releases/gcc-13 branch - PRs c++/89038, c/111884, d/110712, d/112270, fortran/67740, fortran/97245, fortran/111837, fortran/112316, libbacktrace/111315, libbacktrace/112263, libstdc++/110944, libstdc++/111172, libstdc++/111936, libstdc++/112089, libstdc++/112314, middle-end/111253, middle-end/111818, modula2/111756, modula2/112110, target/101177, target/110170, target/111001, target/111366, target/111367, target/111380, target/111935, target/112443, tree-optimization/111397, tree-optimization/111445, tree-optimization/111489, tree-optimization/111583, tree-optimization/111614, tree-optimization/111622, tree-optimization/111694, tree-optimization/111764, tree-optimization/111820, tree-optimization/111833, tree-optimization/111917 - fix aarch64 RA ICE (#2241139, PR target/111528) - fix ia32 doubleword rotates (#2238781, PR target/110792) - bump for another rebuild (RHEL-78382) - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78382) - fix wrong RTL patterns for vector merge high/low word on LE (RHEL-45190) - update from releases/gcc-13 branch - PRs ada/114398, ada/114708, c/114493, c++/111529, c++/113598, fortran/110415, fortran/114827, fortran/115150, libstdc++/114940, libstdc++/115269, middle-end/108789, rtl-optimization/114902, rtl-optimization/115092, target/113281, target/113719, target/115297, target/115317, target/115324, tree-optimization/115192, tree-optimization/115307, tree-optimization/115337 - fix a shell condition (RHEL-40722) - backport a fix for modes_1.f90 (RHEL-40234) - fix up pointer types to may_alias structures (PR c/114493, RHEL-40244) - update from releases/gcc-13 branch - GCC 13.3 release - PRs analyzer/104042, analyzer/108171, analyzer/109251, analyzer/109577, analyzer/110014, analyzer/110112, analyzer/110700, analyzer/110882, analyzer/111289, analyzer/112790, analyzer/112889, analyzer/112969, analyzer/113253, analyzer/113333, analyzer/114408, analyzer/114473, bootstrap/106472, bootstrap/114369, c/112571, c/114780, c++/89224, c++/97990, c++/100667, c++/103825, c++/110006, c++/111284, c++/112769, c++/113141, c++/113966, c++/114303, c++/114377, c++/114537, c++/114561, c++/114562, c++/114572, c++/114580, c++/114634, c++/114691, c++/114709, debug/112718, driver/111700, fortran/36337, fortran/50410, fortran/55978, fortran/89462, fortran/93678, fortran/95374, fortran/101135, fortran/102003, fortran/103707, fortran/103715, fortran/103716, fortran/104352, fortran/106987, fortran/106999, fortran/107426, fortran/110987, fortran/112407, fortran/113799, fortran/113866, fortran/113885, fortran/113956, fortran/114001, fortran/114474, fortran/114535, fortran/114739, fortran/114825, fortran/115039, gcov-profile/114115, gcov-profile/114715, ipa/92606, ipa/108007, ipa/111571, ipa/112616, ipa/113359, ipa/113907, ipa/113964, jit/110466, libgcc/111731, libquadmath/114533, libstdc++/66146, libstdc++/93672, libstdc++/104606, libstdc++/107800, libstdc++/108976, libstdc++/110050, libstdc++/110054, libstdc++/113841, libstdc++/114147, libstdc++/114316, libstdc++/114359, libstdc++/114367, libstdc++/114401, libstdc++/114750, libstdc++/114803, libstdc++/114863, libstdc++/115063, lto/114655, middle-end/110027, middle-end/111151, middle-end/111632, middle-end/111683, middle-end/112684, middle-end/112732, middle-end/113396, middle-end/113622, middle-end/114070, middle-end/114348, middle-end/114552, middle-end/114599, middle-end/114734, middle-end/114753, middle-end/114907, rtl-optimization/54052, rtl-optimization/114415, rtl-optimization/114768, rtl-optimization/114924, sanitizer/97696, sanitizer/114687, sanitizer/114743, sanitizer/114956, sanitizer/115172, target/88309, target/101865, target/105522, target/110621, target/111234, target/111600, target/111610, target/111822, target/112397, target/113095, target/113233, target/113950, target/114049, target/114130, target/114160, target/114172, target/114175, target/114272, target/114747, target/114752, target/114794, target/114837, target/114848, target/114981, testsuite/111066, testsuite/112297, testsuite/114034, testsuite/114036, testsuite/114662, tree-optimization/91838, tree-optimization/109925, tree-optimization/110838, tree-optimization/111009, tree-optimization/111268, tree-optimization/111407, tree-optimization/111736, tree-optimization/111882, tree-optimization/112281, tree-optimization/112303, tree-optimization/112793, tree-optimization/112961, tree-optimization/112991, tree-optimization/113552, tree-optimization/113630, tree-optimization/113670, tree-optimization/113831, tree-optimization/113910, tree-optimization/114027, tree-optimization/114115, tree-optimization/114121, tree-optimization/114203, tree-optimization/114231, tree-optimization/114246, tree-optimization/114375, tree-optimization/114396, tree-optimization/114485, tree-optimization/114566, tree-optimization/114672, tree-optimization/114733, tree-optimization/114736, tree-optimization/114749, tree-optimization/114787, tree-optimization/114799, tree-optimization/114876, tree-optimization/114965, tree-optimization/115143, tree-optimization/115152, tree-optimization/115154 - add --without-clang-plugin --without-llvm-plugin to annobin configure options - use the system dir in --with-libstdcxx-zoneinfo (RHEL-21093) - fix for libstdc++_nonshared.a on ppc64le (RHEL-17960) - add f95 (RHEL-17655) - update from releases/gcc-13 branch - PRs c++/33799, c++/102191, c++/111703, c++/112269, c++/112301, c++/112633, c/112339, fortran/111880, fortran/112764, libgomp/111413, libstdc++/112348, libstdc++/112491, libstdc++/112607, middle-end/111497, target/53372, target/110411, target/111408, target/111815, target/111828, target/112672, tree-optimization/111137, tree-optimization/111465, tree-optimization/111967, tree-optimization/112496 - add -fno-stack-protector to aarch64 tests (RHEL-17684) - update from releases/gcc-13 branch - PRs c++/89038, c/111884, d/110712, d/112270, fortran/67740, fortran/97245, fortran/111837, fortran/112316, libbacktrace/111315, libbacktrace/112263, libstdc++/110944, libstdc++/111172, libstdc++/111936, libstdc++/112089, libstdc++/112314, middle-end/111253, middle-end/111818, modula2/111756, modula2/112110, target/101177, target/110170, target/111001, target/111366, target/111367, target/111380, target/111935, target/112443, tree-optimization/111397, tree-optimization/111445, tree-optimization/111489, tree-optimization/111583, tree-optimization/111614, tree-optimization/111622, tree-optimization/111694, tree-optimization/111764, tree-optimization/111820, tree-optimization/111833, tree-optimization/111917 - fix aarch64 RA ICE (#2241139, PR target/111528) - fix ia32 doubleword rotates (#2238781, PR target/110792) - Fix issue introduced when backporting the recursion limit to the rust demangler. - Backport "Fix typo in recent code to add stack recursion limit to the Rust demangler." (Nick Clifton) - Backport "Add a recursion limit to the demangle_const function in the Rust demangler." (Nick Clifton, RHEL-4234) - Backport "Update gdb-add-index.sh ..." (Andrew Burgess, RHBZ 2213228) - Backport binutls/29699 "Fix an illegal memory access when parsing..." (Nick Clifton, RHBZ 2153228) - Initial import for GTS13. - Tweak gdb-6.3-rh-testversion-20041202.patch so that $_gdb_major and $_gdb_minor will be obtained correctly. - Remove gdb-rhbz1398387-tab-crash-test.patch as that test didn't work anymore. - NVR bump for failed build. - More tweaks to gdb-6.6-buildid-locate-rpm.patch, in which rpmTag is replaced with rpmDbiTagVal. From Sergey Mende: - Backport upstream patch "gdb: call check_typedef at beginning of dwarf_expr_context::fetch_result". (Simon Marchi) - bump for another rebuild (RHEL-78382) - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78382) - fix wrong RTL patterns for vector merge high/low word on LE (RHEL-45190) - update from releases/gcc-13 branch - PRs ada/114398, ada/114708, c/114493, c++/111529, c++/113598, fortran/110415, fortran/114827, fortran/115150, libstdc++/114940, libstdc++/115269, middle-end/108789, rtl-optimization/114902, rtl-optimization/115092, target/113281, target/113719, target/115297, target/115317, target/115324, tree-optimization/115192, tree-optimization/115307, tree-optimization/115337 - fix a shell condition (RHEL-40722) - backport a fix for modes_1.f90 (RHEL-40234) - fix up pointer types to may_alias structures (PR c/114493, RHEL-40244) - update from releases/gcc-13 branch - GCC 13.3 release - PRs analyzer/104042, analyzer/108171, analyzer/109251, analyzer/109577, analyzer/110014, analyzer/110112, analyzer/110700, analyzer/110882, analyzer/111289, analyzer/112790, analyzer/112889, analyzer/112969, analyzer/113253, analyzer/113333, analyzer/114408, analyzer/114473, bootstrap/106472, bootstrap/114369, c/112571, c/114780, c++/89224, c++/97990, c++/100667, c++/103825, c++/110006, c++/111284, c++/112769, c++/113141, c++/113966, c++/114303, c++/114377, c++/114537, c++/114561, c++/114562, c++/114572, c++/114580, c++/114634, c++/114691, c++/114709, debug/112718, driver/111700, fortran/36337, fortran/50410, fortran/55978, fortran/89462, fortran/93678, fortran/95374, fortran/101135, fortran/102003, fortran/103707, fortran/103715, fortran/103716, fortran/104352, fortran/106987, fortran/106999, fortran/107426, fortran/110987, fortran/112407, fortran/113799, fortran/113866, fortran/113885, fortran/113956, fortran/114001, fortran/114474, fortran/114535, fortran/114739, fortran/114825, fortran/115039, gcov-profile/114115, gcov-profile/114715, ipa/92606, ipa/108007, ipa/111571, ipa/112616, ipa/113359, ipa/113907, ipa/113964, jit/110466, libgcc/111731, libquadmath/114533, libstdc++/66146, libstdc++/93672, libstdc++/104606, libstdc++/107800, libstdc++/108976, libstdc++/110050, libstdc++/110054, libstdc++/113841, libstdc++/114147, libstdc++/114316, libstdc++/114359, libstdc++/114367, libstdc++/114401, libstdc++/114750, libstdc++/114803, libstdc++/114863, libstdc++/115063, lto/114655, middle-end/110027, middle-end/111151, middle-end/111632, middle-end/111683, middle-end/112684, middle-end/112732, middle-end/113396, middle-end/113622, middle-end/114070, middle-end/114348, middle-end/114552, middle-end/114599, middle-end/114734, middle-end/114753, middle-end/114907, rtl-optimization/54052, rtl-optimization/114415, rtl-optimization/114768, rtl-optimization/114924, sanitizer/97696, sanitizer/114687, sanitizer/114743, sanitizer/114956, sanitizer/115172, target/88309, target/101865, target/105522, target/110621, target/111234, target/111600, target/111610, target/111822, target/112397, target/113095, target/113233, target/113950, target/114049, target/114130, target/114160, target/114172, target/114175, target/114272, target/114747, target/114752, target/114794, target/114837, target/114848, target/114981, testsuite/111066, testsuite/112297, testsuite/114034, testsuite/114036, testsuite/114662, tree-optimization/91838, tree-optimization/109925, tree-optimization/110838, tree-optimization/111009, tree-optimization/111268, tree-optimization/111407, tree-optimization/111736, tree-optimization/111882, tree-optimization/112281, tree-optimization/112303, tree-optimization/112793, tree-optimization/112961, tree-optimization/112991, tree-optimization/113552, tree-optimization/113630, tree-optimization/113670, tree-optimization/113831, tree-optimization/113910, tree-optimization/114027, tree-optimization/114115, tree-optimization/114121, tree-optimization/114203, tree-optimization/114231, tree-optimization/114246, tree-optimization/114375, tree-optimization/114396, tree-optimization/114485, tree-optimization/114566, tree-optimization/114672, tree-optimization/114733, tree-optimization/114736, tree-optimization/114749, tree-optimization/114787, tree-optimization/114799, tree-optimization/114876, tree-optimization/114965, tree-optimization/115143, tree-optimization/115152, tree-optimization/115154 - add --without-clang-plugin --without-llvm-plugin to annobin configure options - use the system dir in --with-libstdcxx-zoneinfo (RHEL-21093) - fix for libstdc++_nonshared.a on ppc64le (RHEL-17960) - add f95 (RHEL-17655) - update from releases/gcc-13 branch - PRs c++/33799, c++/102191, c++/111703, c++/112269, c++/112301, c++/112633, c/112339, fortran/111880, fortran/112764, libgomp/111413, libstdc++/112348, libstdc++/112491, libstdc++/112607, middle-end/111497, target/53372, target/110411, target/111408, target/111815, target/111828, target/112672, tree-optimization/111137, tree-optimization/111465, tree-optimization/111967, tree-optimization/112496 - add -fno-stack-protector to aarch64 tests (RHEL-17684) - update from releases/gcc-13 branch - PRs c++/89038, c/111884, d/110712, d/112270, fortran/67740, fortran/97245, fortran/111837, fortran/112316, libbacktrace/111315, libbacktrace/112263, libstdc++/110944, libstdc++/111172, libstdc++/111936, libstdc++/112089, libstdc++/112314, middle-end/111253, middle-end/111818, modula2/111756, modula2/112110, target/101177, target/110170, target/111001, target/111366, target/111367, target/111380, target/111935, target/112443, tree-optimization/111397, tree-optimization/111445, tree-optimization/111489, tree-optimization/111583, tree-optimization/111614, tree-optimization/111622, tree-optimization/111694, tree-optimization/111764, tree-optimization/111820, tree-optimization/111833, tree-optimization/111917 - fix aarch64 RA ICE (#2241139, PR target/111528) - fix ia32 doubleword rotates (#2238781, PR target/110792) - bump for another rebuild (RHEL-78382) - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78382) - fix wrong RTL patterns for vector merge high/low word on LE (RHEL-45190) - update from releases/gcc-13 branch - PRs ada/114398, ada/114708, c/114493, c++/111529, c++/113598, fortran/110415, fortran/114827, fortran/115150, libstdc++/114940, libstdc++/115269, middle-end/108789, rtl-optimization/114902, rtl-optimization/115092, target/113281, target/113719, target/115297, target/115317, target/115324, tree-optimization/115192, tree-optimization/115307, tree-optimization/115337 - fix a shell condition (RHEL-40722) - backport a fix for modes_1.f90 (RHEL-40234) - fix up pointer types to may_alias structures (PR c/114493, RHEL-40244) - update from releases/gcc-13 branch - GCC 13.3 release - PRs analyzer/104042, analyzer/108171, analyzer/109251, analyzer/109577, analyzer/110014, analyzer/110112, analyzer/110700, analyzer/110882, analyzer/111289, analyzer/112790, analyzer/112889, analyzer/112969, analyzer/113253, analyzer/113333, analyzer/114408, analyzer/114473, bootstrap/106472, bootstrap/114369, c/112571, c/114780, c++/89224, c++/97990, c++/100667, c++/103825, c++/110006, c++/111284, c++/112769, c++/113141, c++/113966, c++/114303, c++/114377, c++/114537, c++/114561, c++/114562, c++/114572, c++/114580, c++/114634, c++/114691, c++/114709, debug/112718, driver/111700, fortran/36337, fortran/50410, fortran/55978, fortran/89462, fortran/93678, fortran/95374, fortran/101135, fortran/102003, fortran/103707, fortran/103715, fortran/103716, fortran/104352, fortran/106987, fortran/106999, fortran/107426, fortran/110987, fortran/112407, fortran/113799, fortran/113866, fortran/113885, fortran/113956, fortran/114001, fortran/114474, fortran/114535, fortran/114739, fortran/114825, fortran/115039, gcov-profile/114115, gcov-profile/114715, ipa/92606, ipa/108007, ipa/111571, ipa/112616, ipa/113359, ipa/113907, ipa/113964, jit/110466, libgcc/111731, libquadmath/114533, libstdc++/66146, libstdc++/93672, libstdc++/104606, libstdc++/107800, libstdc++/108976, libstdc++/110050, libstdc++/110054, libstdc++/113841, libstdc++/114147, libstdc++/114316, libstdc++/114359, libstdc++/114367, libstdc++/114401, libstdc++/114750, libstdc++/114803, libstdc++/114863, libstdc++/115063, lto/114655, middle-end/110027, middle-end/111151, middle-end/111632, middle-end/111683, middle-end/112684, middle-end/112732, middle-end/113396, middle-end/113622, middle-end/114070, middle-end/114348, middle-end/114552, middle-end/114599, middle-end/114734, middle-end/114753, middle-end/114907, rtl-optimization/54052, rtl-optimization/114415, rtl-optimization/114768, rtl-optimization/114924, sanitizer/97696, sanitizer/114687, sanitizer/114743, sanitizer/114956, sanitizer/115172, target/88309, target/101865, target/105522, target/110621, target/111234, target/111600, target/111610, target/111822, target/112397, target/113095, target/113233, target/113950, target/114049, target/114130, target/114160, target/114172, target/114175, target/114272, target/114747, target/114752, target/114794, target/114837, target/114848, target/114981, testsuite/111066, testsuite/112297, testsuite/114034, testsuite/114036, testsuite/114662, tree-optimization/91838, tree-optimization/109925, tree-optimization/110838, tree-optimization/111009, tree-optimization/111268, tree-optimization/111407, tree-optimization/111736, tree-optimization/111882, tree-optimization/112281, tree-optimization/112303, tree-optimization/112793, tree-optimization/112961, tree-optimization/112991, tree-optimization/113552, tree-optimization/113630, tree-optimization/113670, tree-optimization/113831, tree-optimization/113910, tree-optimization/114027, tree-optimization/114115, tree-optimization/114121, tree-optimization/114203, tree-optimization/114231, tree-optimization/114246, tree-optimization/114375, tree-optimization/114396, tree-optimization/114485, tree-optimization/114566, tree-optimization/114672, tree-optimization/114733, tree-optimization/114736, tree-optimization/114749, tree-optimization/114787, tree-optimization/114799, tree-optimization/114876, tree-optimization/114965, tree-optimization/115143, tree-optimization/115152, tree-optimization/115154 - add --without-clang-plugin --without-llvm-plugin to annobin configure options - use the system dir in --with-libstdcxx-zoneinfo (RHEL-21093) - fix for libstdc++_nonshared.a on ppc64le (RHEL-17960) - add f95 (RHEL-17655) - update from releases/gcc-13 branch - PRs c++/33799, c++/102191, c++/111703, c++/112269, c++/112301, c++/112633, c/112339, fortran/111880, fortran/112764, libgomp/111413, libstdc++/112348, libstdc++/112491, libstdc++/112607, middle-end/111497, target/53372, target/110411, target/111408, target/111815, target/111828, target/112672, tree-optimization/111137, tree-optimization/111465, tree-optimization/111967, tree-optimization/112496 - add -fno-stack-protector to aarch64 tests (RHEL-17684) - update from releases/gcc-13 branch - PRs c++/89038, c/111884, d/110712, d/112270, fortran/67740, fortran/97245, fortran/111837, fortran/112316, libbacktrace/111315, libbacktrace/112263, libstdc++/110944, libstdc++/111172, libstdc++/111936, libstdc++/112089, libstdc++/112314, middle-end/111253, middle-end/111818, modula2/111756, modula2/112110, target/101177, target/110170, target/111001, target/111366, target/111367, target/111380, target/111935, target/112443, tree-optimization/111397, tree-optimization/111445, tree-optimization/111489, tree-optimization/111583, tree-optimization/111614, tree-optimization/111622, tree-optimization/111694, tree-optimization/111764, tree-optimization/111820, tree-optimization/111833, tree-optimization/111917 - fix aarch64 RA ICE (#2241139, PR target/111528) - fix ia32 doubleword rotates (#2238781, PR target/110792) - bump for another rebuild (RHEL-78382) - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78382) - fix wrong RTL patterns for vector merge high/low word on LE (RHEL-45190) - update from releases/gcc-13 branch - PRs ada/114398, ada/114708, c/114493, c++/111529, c++/113598, fortran/110415, fortran/114827, fortran/115150, libstdc++/114940, libstdc++/115269, middle-end/108789, rtl-optimization/114902, rtl-optimization/115092, target/113281, target/113719, target/115297, target/115317, target/115324, tree-optimization/115192, tree-optimization/115307, tree-optimization/115337 - fix a shell condition (RHEL-40722) - backport a fix for modes_1.f90 (RHEL-40234) - fix up pointer types to may_alias structures (PR c/114493, RHEL-40244) - update from releases/gcc-13 branch - GCC 13.3 release - PRs analyzer/104042, analyzer/108171, analyzer/109251, analyzer/109577, analyzer/110014, analyzer/110112, analyzer/110700, analyzer/110882, analyzer/111289, analyzer/112790, analyzer/112889, analyzer/112969, analyzer/113253, analyzer/113333, analyzer/114408, analyzer/114473, bootstrap/106472, bootstrap/114369, c/112571, c/114780, c++/89224, c++/97990, c++/100667, c++/103825, c++/110006, c++/111284, c++/112769, c++/113141, c++/113966, c++/114303, c++/114377, c++/114537, c++/114561, c++/114562, c++/114572, c++/114580, c++/114634, c++/114691, c++/114709, debug/112718, driver/111700, fortran/36337, fortran/50410, fortran/55978, fortran/89462, fortran/93678, fortran/95374, fortran/101135, fortran/102003, fortran/103707, fortran/103715, fortran/103716, fortran/104352, fortran/106987, fortran/106999, fortran/107426, fortran/110987, fortran/112407, fortran/113799, fortran/113866, fortran/113885, fortran/113956, fortran/114001, fortran/114474, fortran/114535, fortran/114739, fortran/114825, fortran/115039, gcov-profile/114115, gcov-profile/114715, ipa/92606, ipa/108007, ipa/111571, ipa/112616, ipa/113359, ipa/113907, ipa/113964, jit/110466, libgcc/111731, libquadmath/114533, libstdc++/66146, libstdc++/93672, libstdc++/104606, libstdc++/107800, libstdc++/108976, libstdc++/110050, libstdc++/110054, libstdc++/113841, libstdc++/114147, libstdc++/114316, libstdc++/114359, libstdc++/114367, libstdc++/114401, libstdc++/114750, libstdc++/114803, libstdc++/114863, libstdc++/115063, lto/114655, middle-end/110027, middle-end/111151, middle-end/111632, middle-end/111683, middle-end/112684, middle-end/112732, middle-end/113396, middle-end/113622, middle-end/114070, middle-end/114348, middle-end/114552, middle-end/114599, middle-end/114734, middle-end/114753, middle-end/114907, rtl-optimization/54052, rtl-optimization/114415, rtl-optimization/114768, rtl-optimization/114924, sanitizer/97696, sanitizer/114687, sanitizer/114743, sanitizer/114956, sanitizer/115172, target/88309, target/101865, target/105522, target/110621, target/111234, target/111600, target/111610, target/111822, target/112397, target/113095, target/113233, target/113950, target/114049, target/114130, target/114160, target/114172, target/114175, target/114272, target/114747, target/114752, target/114794, target/114837, target/114848, target/114981, testsuite/111066, testsuite/112297, testsuite/114034, testsuite/114036, testsuite/114662, tree-optimization/91838, tree-optimization/109925, tree-optimization/110838, tree-optimization/111009, tree-optimization/111268, tree-optimization/111407, tree-optimization/111736, tree-optimization/111882, tree-optimization/112281, tree-optimization/112303, tree-optimization/112793, tree-optimization/112961, tree-optimization/112991, tree-optimization/113552, tree-optimization/113630, tree-optimization/113670, tree-optimization/113831, tree-optimization/113910, tree-optimization/114027, tree-optimization/114115, tree-optimization/114121, tree-optimization/114203, tree-optimization/114231, tree-optimization/114246, tree-optimization/114375, tree-optimization/114396, tree-optimization/114485, tree-optimization/114566, tree-optimization/114672, tree-optimization/114733, tree-optimization/114736, tree-optimization/114749, tree-optimization/114787, tree-optimization/114799, tree-optimization/114876, tree-optimization/114965, tree-optimization/115143, tree-optimization/115152, tree-optimization/115154 - add --without-clang-plugin --without-llvm-plugin to annobin configure options - use the system dir in --with-libstdcxx-zoneinfo (RHEL-21093) - fix for libstdc++_nonshared.a on ppc64le (RHEL-17960) - add f95 (RHEL-17655) - update from releases/gcc-13 branch - PRs c++/33799, c++/102191, c++/111703, c++/112269, c++/112301, c++/112633, c/112339, fortran/111880, fortran/112764, libgomp/111413, libstdc++/112348, libstdc++/112491, libstdc++/112607, middle-end/111497, target/53372, target/110411, target/111408, target/111815, target/111828, target/112672, tree-optimization/111137, tree-optimization/111465, tree-optimization/111967, tree-optimization/112496 - add -fno-stack-protector to aarch64 tests (RHEL-17684) - update from releases/gcc-13 branch - PRs c++/89038, c/111884, d/110712, d/112270, fortran/67740, fortran/97245, fortran/111837, fortran/112316, libbacktrace/111315, libbacktrace/112263, libstdc++/110944, libstdc++/111172, libstdc++/111936, libstdc++/112089, libstdc++/112314, middle-end/111253, middle-end/111818, modula2/111756, modula2/112110, target/101177, target/110170, target/111001, target/111366, target/111367, target/111380, target/111935, target/112443, tree-optimization/111397, tree-optimization/111445, tree-optimization/111489, tree-optimization/111583, tree-optimization/111614, tree-optimization/111622, tree-optimization/111694, tree-optimization/111764, tree-optimization/111820, tree-optimization/111833, tree-optimization/111917 - fix aarch64 RA ICE (#2241139, PR target/111528) - fix ia32 doubleword rotates (#2238781, PR target/110792) - bump for another rebuild (RHEL-78382) - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78382) - fix wrong RTL patterns for vector merge high/low word on LE (RHEL-45190) - update from releases/gcc-13 branch - PRs ada/114398, ada/114708, c/114493, c++/111529, c++/113598, fortran/110415, fortran/114827, fortran/115150, libstdc++/114940, libstdc++/115269, middle-end/108789, rtl-optimization/114902, rtl-optimization/115092, target/113281, target/113719, target/115297, target/115317, target/115324, tree-optimization/115192, tree-optimization/115307, tree-optimization/115337 - fix a shell condition (RHEL-40722) - backport a fix for modes_1.f90 (RHEL-40234) - fix up pointer types to may_alias structures (PR c/114493, RHEL-40244) - update from releases/gcc-13 branch - GCC 13.3 release - PRs analyzer/104042, analyzer/108171, analyzer/109251, analyzer/109577, analyzer/110014, analyzer/110112, analyzer/110700, analyzer/110882, analyzer/111289, analyzer/112790, analyzer/112889, analyzer/112969, analyzer/113253, analyzer/113333, analyzer/114408, analyzer/114473, bootstrap/106472, bootstrap/114369, c/112571, c/114780, c++/89224, c++/97990, c++/100667, c++/103825, c++/110006, c++/111284, c++/112769, c++/113141, c++/113966, c++/114303, c++/114377, c++/114537, c++/114561, c++/114562, c++/114572, c++/114580, c++/114634, c++/114691, c++/114709, debug/112718, driver/111700, fortran/36337, fortran/50410, fortran/55978, fortran/89462, fortran/93678, fortran/95374, fortran/101135, fortran/102003, fortran/103707, fortran/103715, fortran/103716, fortran/104352, fortran/106987, fortran/106999, fortran/107426, fortran/110987, fortran/112407, fortran/113799, fortran/113866, fortran/113885, fortran/113956, fortran/114001, fortran/114474, fortran/114535, fortran/114739, fortran/114825, fortran/115039, gcov-profile/114115, gcov-profile/114715, ipa/92606, ipa/108007, ipa/111571, ipa/112616, ipa/113359, ipa/113907, ipa/113964, jit/110466, libgcc/111731, libquadmath/114533, libstdc++/66146, libstdc++/93672, libstdc++/104606, libstdc++/107800, libstdc++/108976, libstdc++/110050, libstdc++/110054, libstdc++/113841, libstdc++/114147, libstdc++/114316, libstdc++/114359, libstdc++/114367, libstdc++/114401, libstdc++/114750, libstdc++/114803, libstdc++/114863, libstdc++/115063, lto/114655, middle-end/110027, middle-end/111151, middle-end/111632, middle-end/111683, middle-end/112684, middle-end/112732, middle-end/113396, middle-end/113622, middle-end/114070, middle-end/114348, middle-end/114552, middle-end/114599, middle-end/114734, middle-end/114753, middle-end/114907, rtl-optimization/54052, rtl-optimization/114415, rtl-optimization/114768, rtl-optimization/114924, sanitizer/97696, sanitizer/114687, sanitizer/114743, sanitizer/114956, sanitizer/115172, target/88309, target/101865, target/105522, target/110621, target/111234, target/111600, target/111610, target/111822, target/112397, target/113095, target/113233, target/113950, target/114049, target/114130, target/114160, target/114172, target/114175, target/114272, target/114747, target/114752, target/114794, target/114837, target/114848, target/114981, testsuite/111066, testsuite/112297, testsuite/114034, testsuite/114036, testsuite/114662, tree-optimization/91838, tree-optimization/109925, tree-optimization/110838, tree-optimization/111009, tree-optimization/111268, tree-optimization/111407, tree-optimization/111736, tree-optimization/111882, tree-optimization/112281, tree-optimization/112303, tree-optimization/112793, tree-optimization/112961, tree-optimization/112991, tree-optimization/113552, tree-optimization/113630, tree-optimization/113670, tree-optimization/113831, tree-optimization/113910, tree-optimization/114027, tree-optimization/114115, tree-optimization/114121, tree-optimization/114203, tree-optimization/114231, tree-optimization/114246, tree-optimization/114375, tree-optimization/114396, tree-optimization/114485, tree-optimization/114566, tree-optimization/114672, tree-optimization/114733, tree-optimization/114736, tree-optimization/114749, tree-optimization/114787, tree-optimization/114799, tree-optimization/114876, tree-optimization/114965, tree-optimization/115143, tree-optimization/115152, tree-optimization/115154 - add --without-clang-plugin --without-llvm-plugin to annobin configure options - use the system dir in --with-libstdcxx-zoneinfo (RHEL-21093) - fix for libstdc++_nonshared.a on ppc64le (RHEL-17960) - add f95 (RHEL-17655) - update from releases/gcc-13 branch - PRs c++/33799, c++/102191, c++/111703, c++/112269, c++/112301, c++/112633, c/112339, fortran/111880, fortran/112764, libgomp/111413, libstdc++/112348, libstdc++/112491, libstdc++/112607, middle-end/111497, target/53372, target/110411, target/111408, target/111815, target/111828, target/112672, tree-optimization/111137, tree-optimization/111465, tree-optimization/111967, tree-optimization/112496 - add -fno-stack-protector to aarch64 tests (RHEL-17684) - update from releases/gcc-13 branch - PRs c++/89038, c/111884, d/110712, d/112270, fortran/67740, fortran/97245, fortran/111837, fortran/112316, libbacktrace/111315, libbacktrace/112263, libstdc++/110944, libstdc++/111172, libstdc++/111936, libstdc++/112089, libstdc++/112314, middle-end/111253, middle-end/111818, modula2/111756, modula2/112110, target/101177, target/110170, target/111001, target/111366, target/111367, target/111380, target/111935, target/112443, tree-optimization/111397, tree-optimization/111445, tree-optimization/111489, tree-optimization/111583, tree-optimization/111614, tree-optimization/111622, tree-optimization/111694, tree-optimization/111764, tree-optimization/111820, tree-optimization/111833, tree-optimization/111917 - fix aarch64 RA ICE (#2241139, PR target/111528) - fix ia32 doubleword rotates (#2238781, PR target/110792) - bump for another rebuild (RHEL-78382) - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78382) - fix wrong RTL patterns for vector merge high/low word on LE (RHEL-45190) - update from releases/gcc-13 branch - PRs ada/114398, ada/114708, c/114493, c++/111529, c++/113598, fortran/110415, fortran/114827, fortran/115150, libstdc++/114940, libstdc++/115269, middle-end/108789, rtl-optimization/114902, rtl-optimization/115092, target/113281, target/113719, target/115297, target/115317, target/115324, tree-optimization/115192, tree-optimization/115307, tree-optimization/115337 - fix a shell condition (RHEL-40722) - backport a fix for modes_1.f90 (RHEL-40234) - fix up pointer types to may_alias structures (PR c/114493, RHEL-40244) - update from releases/gcc-13 branch - GCC 13.3 release - PRs analyzer/104042, analyzer/108171, analyzer/109251, analyzer/109577, analyzer/110014, analyzer/110112, analyzer/110700, analyzer/110882, analyzer/111289, analyzer/112790, analyzer/112889, analyzer/112969, analyzer/113253, analyzer/113333, analyzer/114408, analyzer/114473, bootstrap/106472, bootstrap/114369, c/112571, c/114780, c++/89224, c++/97990, c++/100667, c++/103825, c++/110006, c++/111284, c++/112769, c++/113141, c++/113966, c++/114303, c++/114377, c++/114537, c++/114561, c++/114562, c++/114572, c++/114580, c++/114634, c++/114691, c++/114709, debug/112718, driver/111700, fortran/36337, fortran/50410, fortran/55978, fortran/89462, fortran/93678, fortran/95374, fortran/101135, fortran/102003, fortran/103707, fortran/103715, fortran/103716, fortran/104352, fortran/106987, fortran/106999, fortran/107426, fortran/110987, fortran/112407, fortran/113799, fortran/113866, fortran/113885, fortran/113956, fortran/114001, fortran/114474, fortran/114535, fortran/114739, fortran/114825, fortran/115039, gcov-profile/114115, gcov-profile/114715, ipa/92606, ipa/108007, ipa/111571, ipa/112616, ipa/113359, ipa/113907, ipa/113964, jit/110466, libgcc/111731, libquadmath/114533, libstdc++/66146, libstdc++/93672, libstdc++/104606, libstdc++/107800, libstdc++/108976, libstdc++/110050, libstdc++/110054, libstdc++/113841, libstdc++/114147, libstdc++/114316, libstdc++/114359, libstdc++/114367, libstdc++/114401, libstdc++/114750, libstdc++/114803, libstdc++/114863, libstdc++/115063, lto/114655, middle-end/110027, middle-end/111151, middle-end/111632, middle-end/111683, middle-end/112684, middle-end/112732, middle-end/113396, middle-end/113622, middle-end/114070, middle-end/114348, middle-end/114552, middle-end/114599, middle-end/114734, middle-end/114753, middle-end/114907, rtl-optimization/54052, rtl-optimization/114415, rtl-optimization/114768, rtl-optimization/114924, sanitizer/97696, sanitizer/114687, sanitizer/114743, sanitizer/114956, sanitizer/115172, target/88309, target/101865, target/105522, target/110621, target/111234, target/111600, target/111610, target/111822, target/112397, target/113095, target/113233, target/113950, target/114049, target/114130, target/114160, target/114172, target/114175, target/114272, target/114747, target/114752, target/114794, target/114837, target/114848, target/114981, testsuite/111066, testsuite/112297, testsuite/114034, testsuite/114036, testsuite/114662, tree-optimization/91838, tree-optimization/109925, tree-optimization/110838, tree-optimization/111009, tree-optimization/111268, tree-optimization/111407, tree-optimization/111736, tree-optimization/111882, tree-optimization/112281, tree-optimization/112303, tree-optimization/112793, tree-optimization/112961, tree-optimization/112991, tree-optimization/113552, tree-optimization/113630, tree-optimization/113670, tree-optimization/113831, tree-optimization/113910, tree-optimization/114027, tree-optimization/114115, tree-optimization/114121, tree-optimization/114203, tree-optimization/114231, tree-optimization/114246, tree-optimization/114375, tree-optimization/114396, tree-optimization/114485, tree-optimization/114566, tree-optimization/114672, tree-optimization/114733, tree-optimization/114736, tree-optimization/114749, tree-optimization/114787, tree-optimization/114799, tree-optimization/114876, tree-optimization/114965, tree-optimization/115143, tree-optimization/115152, tree-optimization/115154 - add --without-clang-plugin --without-llvm-plugin to annobin configure options - use the system dir in --with-libstdcxx-zoneinfo (RHEL-21093) - fix for libstdc++_nonshared.a on ppc64le (RHEL-17960) - add f95 (RHEL-17655) - update from releases/gcc-13 branch - PRs c++/33799, c++/102191, c++/111703, c++/112269, c++/112301, c++/112633, c/112339, fortran/111880, fortran/112764, libgomp/111413, libstdc++/112348, libstdc++/112491, libstdc++/112607, middle-end/111497, target/53372, target/110411, target/111408, target/111815, target/111828, target/112672, tree-optimization/111137, tree-optimization/111465, tree-optimization/111967, tree-optimization/112496 - add -fno-stack-protector to aarch64 tests (RHEL-17684) - update from releases/gcc-13 branch - PRs c++/89038, c/111884, d/110712, d/112270, fortran/67740, fortran/97245, fortran/111837, fortran/112316, libbacktrace/111315, libbacktrace/112263, libstdc++/110944, libstdc++/111172, libstdc++/111936, libstdc++/112089, libstdc++/112314, middle-end/111253, middle-end/111818, modula2/111756, modula2/112110, target/101177, target/110170, target/111001, target/111366, target/111367, target/111380, target/111935, target/112443, tree-optimization/111397, tree-optimization/111445, tree-optimization/111489, tree-optimization/111583, tree-optimization/111614, tree-optimization/111622, tree-optimization/111694, tree-optimization/111764, tree-optimization/111820, tree-optimization/111833, tree-optimization/111917 - fix aarch64 RA ICE (#2241139, PR target/111528) - fix ia32 doubleword rotates (#2238781, PR target/110792) - bump for another rebuild (RHEL-78382) - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78382) - fix wrong RTL patterns for vector merge high/low word on LE (RHEL-45190) - update from releases/gcc-13 branch - PRs ada/114398, ada/114708, c/114493, c++/111529, c++/113598, fortran/110415, fortran/114827, fortran/115150, libstdc++/114940, libstdc++/115269, middle-end/108789, rtl-optimization/114902, rtl-optimization/115092, target/113281, target/113719, target/115297, target/115317, target/115324, tree-optimization/115192, tree-optimization/115307, tree-optimization/115337 - fix a shell condition (RHEL-40722) - backport a fix for modes_1.f90 (RHEL-40234) - fix up pointer types to may_alias structures (PR c/114493, RHEL-40244) - update from releases/gcc-13 branch - GCC 13.3 release - PRs analyzer/104042, analyzer/108171, analyzer/109251, analyzer/109577, analyzer/110014, analyzer/110112, analyzer/110700, analyzer/110882, analyzer/111289, analyzer/112790, analyzer/112889, analyzer/112969, analyzer/113253, analyzer/113333, analyzer/114408, analyzer/114473, bootstrap/106472, bootstrap/114369, c/112571, c/114780, c++/89224, c++/97990, c++/100667, c++/103825, c++/110006, c++/111284, c++/112769, c++/113141, c++/113966, c++/114303, c++/114377, c++/114537, c++/114561, c++/114562, c++/114572, c++/114580, c++/114634, c++/114691, c++/114709, debug/112718, driver/111700, fortran/36337, fortran/50410, fortran/55978, fortran/89462, fortran/93678, fortran/95374, fortran/101135, fortran/102003, fortran/103707, fortran/103715, fortran/103716, fortran/104352, fortran/106987, fortran/106999, fortran/107426, fortran/110987, fortran/112407, fortran/113799, fortran/113866, fortran/113885, fortran/113956, fortran/114001, fortran/114474, fortran/114535, fortran/114739, fortran/114825, fortran/115039, gcov-profile/114115, gcov-profile/114715, ipa/92606, ipa/108007, ipa/111571, ipa/112616, ipa/113359, ipa/113907, ipa/113964, jit/110466, libgcc/111731, libquadmath/114533, libstdc++/66146, libstdc++/93672, libstdc++/104606, libstdc++/107800, libstdc++/108976, libstdc++/110050, libstdc++/110054, libstdc++/113841, libstdc++/114147, libstdc++/114316, libstdc++/114359, libstdc++/114367, libstdc++/114401, libstdc++/114750, libstdc++/114803, libstdc++/114863, libstdc++/115063, lto/114655, middle-end/110027, middle-end/111151, middle-end/111632, middle-end/111683, middle-end/112684, middle-end/112732, middle-end/113396, middle-end/113622, middle-end/114070, middle-end/114348, middle-end/114552, middle-end/114599, middle-end/114734, middle-end/114753, middle-end/114907, rtl-optimization/54052, rtl-optimization/114415, rtl-optimization/114768, rtl-optimization/114924, sanitizer/97696, sanitizer/114687, sanitizer/114743, sanitizer/114956, sanitizer/115172, target/88309, target/101865, target/105522, target/110621, target/111234, target/111600, target/111610, target/111822, target/112397, target/113095, target/113233, target/113950, target/114049, target/114130, target/114160, target/114172, target/114175, target/114272, target/114747, target/114752, target/114794, target/114837, target/114848, target/114981, testsuite/111066, testsuite/112297, testsuite/114034, testsuite/114036, testsuite/114662, tree-optimization/91838, tree-optimization/109925, tree-optimization/110838, tree-optimization/111009, tree-optimization/111268, tree-optimization/111407, tree-optimization/111736, tree-optimization/111882, tree-optimization/112281, tree-optimization/112303, tree-optimization/112793, tree-optimization/112961, tree-optimization/112991, tree-optimization/113552, tree-optimization/113630, tree-optimization/113670, tree-optimization/113831, tree-optimization/113910, tree-optimization/114027, tree-optimization/114115, tree-optimization/114121, tree-optimization/114203, tree-optimization/114231, tree-optimization/114246, tree-optimization/114375, tree-optimization/114396, tree-optimization/114485, tree-optimization/114566, tree-optimization/114672, tree-optimization/114733, tree-optimization/114736, tree-optimization/114749, tree-optimization/114787, tree-optimization/114799, tree-optimization/114876, tree-optimization/114965, tree-optimization/115143, tree-optimization/115152, tree-optimization/115154 - add --without-clang-plugin --without-llvm-plugin to annobin configure options - use the system dir in --with-libstdcxx-zoneinfo (RHEL-21093) - fix for libstdc++_nonshared.a on ppc64le (RHEL-17960) - add f95 (RHEL-17655) - update from releases/gcc-13 branch - PRs c++/33799, c++/102191, c++/111703, c++/112269, c++/112301, c++/112633, c/112339, fortran/111880, fortran/112764, libgomp/111413, libstdc++/112348, libstdc++/112491, libstdc++/112607, middle-end/111497, target/53372, target/110411, target/111408, target/111815, target/111828, target/112672, tree-optimization/111137, tree-optimization/111465, tree-optimization/111967, tree-optimization/112496 - add -fno-stack-protector to aarch64 tests (RHEL-17684) - update from releases/gcc-13 branch - PRs c++/89038, c/111884, d/110712, d/112270, fortran/67740, fortran/97245, fortran/111837, fortran/112316, libbacktrace/111315, libbacktrace/112263, libstdc++/110944, libstdc++/111172, libstdc++/111936, libstdc++/112089, libstdc++/112314, middle-end/111253, middle-end/111818, modula2/111756, modula2/112110, target/101177, target/110170, target/111001, target/111366, target/111367, target/111380, target/111935, target/112443, tree-optimization/111397, tree-optimization/111445, tree-optimization/111489, tree-optimization/111583, tree-optimization/111614, tree-optimization/111622, tree-optimization/111694, tree-optimization/111764, tree-optimization/111820, tree-optimization/111833, tree-optimization/111917 - fix aarch64 RA ICE (#2241139, PR target/111528) - fix ia32 doubleword rotates (#2238781, PR target/110792) - bump for another rebuild (RHEL-78382) - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78382) - fix wrong RTL patterns for vector merge high/low word on LE (RHEL-45190) - update from releases/gcc-13 branch - PRs ada/114398, ada/114708, c/114493, c++/111529, c++/113598, fortran/110415, fortran/114827, fortran/115150, libstdc++/114940, libstdc++/115269, middle-end/108789, rtl-optimization/114902, rtl-optimization/115092, target/113281, target/113719, target/115297, target/115317, target/115324, tree-optimization/115192, tree-optimization/115307, tree-optimization/115337 - fix a shell condition (RHEL-40722) - backport a fix for modes_1.f90 (RHEL-40234) - fix up pointer types to may_alias structures (PR c/114493, RHEL-40244) - update from releases/gcc-13 branch - GCC 13.3 release - PRs analyzer/104042, analyzer/108171, analyzer/109251, analyzer/109577, analyzer/110014, analyzer/110112, analyzer/110700, analyzer/110882, analyzer/111289, analyzer/112790, analyzer/112889, analyzer/112969, analyzer/113253, analyzer/113333, analyzer/114408, analyzer/114473, bootstrap/106472, bootstrap/114369, c/112571, c/114780, c++/89224, c++/97990, c++/100667, c++/103825, c++/110006, c++/111284, c++/112769, c++/113141, c++/113966, c++/114303, c++/114377, c++/114537, c++/114561, c++/114562, c++/114572, c++/114580, c++/114634, c++/114691, c++/114709, debug/112718, driver/111700, fortran/36337, fortran/50410, fortran/55978, fortran/89462, fortran/93678, fortran/95374, fortran/101135, fortran/102003, fortran/103707, fortran/103715, fortran/103716, fortran/104352, fortran/106987, fortran/106999, fortran/107426, fortran/110987, fortran/112407, fortran/113799, fortran/113866, fortran/113885, fortran/113956, fortran/114001, fortran/114474, fortran/114535, fortran/114739, fortran/114825, fortran/115039, gcov-profile/114115, gcov-profile/114715, ipa/92606, ipa/108007, ipa/111571, ipa/112616, ipa/113359, ipa/113907, ipa/113964, jit/110466, libgcc/111731, libquadmath/114533, libstdc++/66146, libstdc++/93672, libstdc++/104606, libstdc++/107800, libstdc++/108976, libstdc++/110050, libstdc++/110054, libstdc++/113841, libstdc++/114147, libstdc++/114316, libstdc++/114359, libstdc++/114367, libstdc++/114401, libstdc++/114750, libstdc++/114803, libstdc++/114863, libstdc++/115063, lto/114655, middle-end/110027, middle-end/111151, middle-end/111632, middle-end/111683, middle-end/112684, middle-end/112732, middle-end/113396, middle-end/113622, middle-end/114070, middle-end/114348, middle-end/114552, middle-end/114599, middle-end/114734, middle-end/114753, middle-end/114907, rtl-optimization/54052, rtl-optimization/114415, rtl-optimization/114768, rtl-optimization/114924, sanitizer/97696, sanitizer/114687, sanitizer/114743, sanitizer/114956, sanitizer/115172, target/88309, target/101865, target/105522, target/110621, target/111234, target/111600, target/111610, target/111822, target/112397, target/113095, target/113233, target/113950, target/114049, target/114130, target/114160, target/114172, target/114175, target/114272, target/114747, target/114752, target/114794, target/114837, target/114848, target/114981, testsuite/111066, testsuite/112297, testsuite/114034, testsuite/114036, testsuite/114662, tree-optimization/91838, tree-optimization/109925, tree-optimization/110838, tree-optimization/111009, tree-optimization/111268, tree-optimization/111407, tree-optimization/111736, tree-optimization/111882, tree-optimization/112281, tree-optimization/112303, tree-optimization/112793, tree-optimization/112961, tree-optimization/112991, tree-optimization/113552, tree-optimization/113630, tree-optimization/113670, tree-optimization/113831, tree-optimization/113910, tree-optimization/114027, tree-optimization/114115, tree-optimization/114121, tree-optimization/114203, tree-optimization/114231, tree-optimization/114246, tree-optimization/114375, tree-optimization/114396, tree-optimization/114485, tree-optimization/114566, tree-optimization/114672, tree-optimization/114733, tree-optimization/114736, tree-optimization/114749, tree-optimization/114787, tree-optimization/114799, tree-optimization/114876, tree-optimization/114965, tree-optimization/115143, tree-optimization/115152, tree-optimization/115154 - add --without-clang-plugin --without-llvm-plugin to annobin configure options - use the system dir in --with-libstdcxx-zoneinfo (RHEL-21093) - fix for libstdc++_nonshared.a on ppc64le (RHEL-17960) - add f95 (RHEL-17655) - update from releases/gcc-13 branch - PRs c++/33799, c++/102191, c++/111703, c++/112269, c++/112301, c++/112633, c/112339, fortran/111880, fortran/112764, libgomp/111413, libstdc++/112348, libstdc++/112491, libstdc++/112607, middle-end/111497, target/53372, target/110411, target/111408, target/111815, target/111828, target/112672, tree-optimization/111137, tree-optimization/111465, tree-optimization/111967, tree-optimization/112496 - add -fno-stack-protector to aarch64 tests (RHEL-17684) - update from releases/gcc-13 branch - PRs c++/89038, c/111884, d/110712, d/112270, fortran/67740, fortran/97245, fortran/111837, fortran/112316, libbacktrace/111315, libbacktrace/112263, libstdc++/110944, libstdc++/111172, libstdc++/111936, libstdc++/112089, libstdc++/112314, middle-end/111253, middle-end/111818, modula2/111756, modula2/112110, target/101177, target/110170, target/111001, target/111366, target/111367, target/111380, target/111935, target/112443, tree-optimization/111397, tree-optimization/111445, tree-optimization/111489, tree-optimization/111583, tree-optimization/111614, tree-optimization/111622, tree-optimization/111694, tree-optimization/111764, tree-optimization/111820, tree-optimization/111833, tree-optimization/111917 - fix aarch64 RA ICE (#2241139, PR target/111528) - fix ia32 doubleword rotates (#2238781, PR target/110792) - bump for another rebuild (RHEL-78382) - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78382) - fix wrong RTL patterns for vector merge high/low word on LE (RHEL-45190) - update from releases/gcc-13 branch - PRs ada/114398, ada/114708, c/114493, c++/111529, c++/113598, fortran/110415, fortran/114827, fortran/115150, libstdc++/114940, libstdc++/115269, middle-end/108789, rtl-optimization/114902, rtl-optimization/115092, target/113281, target/113719, target/115297, target/115317, target/115324, tree-optimization/115192, tree-optimization/115307, tree-optimization/115337 - fix a shell condition (RHEL-40722) - backport a fix for modes_1.f90 (RHEL-40234) - fix up pointer types to may_alias structures (PR c/114493, RHEL-40244) - update from releases/gcc-13 branch - GCC 13.3 release - PRs analyzer/104042, analyzer/108171, analyzer/109251, analyzer/109577, analyzer/110014, analyzer/110112, analyzer/110700, analyzer/110882, analyzer/111289, analyzer/112790, analyzer/112889, analyzer/112969, analyzer/113253, analyzer/113333, analyzer/114408, analyzer/114473, bootstrap/106472, bootstrap/114369, c/112571, c/114780, c++/89224, c++/97990, c++/100667, c++/103825, c++/110006, c++/111284, c++/112769, c++/113141, c++/113966, c++/114303, c++/114377, c++/114537, c++/114561, c++/114562, c++/114572, c++/114580, c++/114634, c++/114691, c++/114709, debug/112718, driver/111700, fortran/36337, fortran/50410, fortran/55978, fortran/89462, fortran/93678, fortran/95374, fortran/101135, fortran/102003, fortran/103707, fortran/103715, fortran/103716, fortran/104352, fortran/106987, fortran/106999, fortran/107426, fortran/110987, fortran/112407, fortran/113799, fortran/113866, fortran/113885, fortran/113956, fortran/114001, fortran/114474, fortran/114535, fortran/114739, fortran/114825, fortran/115039, gcov-profile/114115, gcov-profile/114715, ipa/92606, ipa/108007, ipa/111571, ipa/112616, ipa/113359, ipa/113907, ipa/113964, jit/110466, libgcc/111731, libquadmath/114533, libstdc++/66146, libstdc++/93672, libstdc++/104606, libstdc++/107800, libstdc++/108976, libstdc++/110050, libstdc++/110054, libstdc++/113841, libstdc++/114147, libstdc++/114316, libstdc++/114359, libstdc++/114367, libstdc++/114401, libstdc++/114750, libstdc++/114803, libstdc++/114863, libstdc++/115063, lto/114655, middle-end/110027, middle-end/111151, middle-end/111632, middle-end/111683, middle-end/112684, middle-end/112732, middle-end/113396, middle-end/113622, middle-end/114070, middle-end/114348, middle-end/114552, middle-end/114599, middle-end/114734, middle-end/114753, middle-end/114907, rtl-optimization/54052, rtl-optimization/114415, rtl-optimization/114768, rtl-optimization/114924, sanitizer/97696, sanitizer/114687, sanitizer/114743, sanitizer/114956, sanitizer/115172, target/88309, target/101865, target/105522, target/110621, target/111234, target/111600, target/111610, target/111822, target/112397, target/113095, target/113233, target/113950, target/114049, target/114130, target/114160, target/114172, target/114175, target/114272, target/114747, target/114752, target/114794, target/114837, target/114848, target/114981, testsuite/111066, testsuite/112297, testsuite/114034, testsuite/114036, testsuite/114662, tree-optimization/91838, tree-optimization/109925, tree-optimization/110838, tree-optimization/111009, tree-optimization/111268, tree-optimization/111407, tree-optimization/111736, tree-optimization/111882, tree-optimization/112281, tree-optimization/112303, tree-optimization/112793, tree-optimization/112961, tree-optimization/112991, tree-optimization/113552, tree-optimization/113630, tree-optimization/113670, tree-optimization/113831, tree-optimization/113910, tree-optimization/114027, tree-optimization/114115, tree-optimization/114121, tree-optimization/114203, tree-optimization/114231, tree-optimization/114246, tree-optimization/114375, tree-optimization/114396, tree-optimization/114485, tree-optimization/114566, tree-optimization/114672, tree-optimization/114733, tree-optimization/114736, tree-optimization/114749, tree-optimization/114787, tree-optimization/114799, tree-optimization/114876, tree-optimization/114965, tree-optimization/115143, tree-optimization/115152, tree-optimization/115154 - add --without-clang-plugin --without-llvm-plugin to annobin configure options - use the system dir in --with-libstdcxx-zoneinfo (RHEL-21093) - fix for libstdc++_nonshared.a on ppc64le (RHEL-17960) - add f95 (RHEL-17655) - update from releases/gcc-13 branch - PRs c++/33799, c++/102191, c++/111703, c++/112269, c++/112301, c++/112633, c/112339, fortran/111880, fortran/112764, libgomp/111413, libstdc++/112348, libstdc++/112491, libstdc++/112607, middle-end/111497, target/53372, target/110411, target/111408, target/111815, target/111828, target/112672, tree-optimization/111137, tree-optimization/111465, tree-optimization/111967, tree-optimization/112496 - add -fno-stack-protector to aarch64 tests (RHEL-17684) - update from releases/gcc-13 branch - PRs c++/89038, c/111884, d/110712, d/112270, fortran/67740, fortran/97245, fortran/111837, fortran/112316, libbacktrace/111315, libbacktrace/112263, libstdc++/110944, libstdc++/111172, libstdc++/111936, libstdc++/112089, libstdc++/112314, middle-end/111253, middle-end/111818, modula2/111756, modula2/112110, target/101177, target/110170, target/111001, target/111366, target/111367, target/111380, target/111935, target/112443, tree-optimization/111397, tree-optimization/111445, tree-optimization/111489, tree-optimization/111583, tree-optimization/111614, tree-optimization/111622, tree-optimization/111694, tree-optimization/111764, tree-optimization/111820, tree-optimization/111833, tree-optimization/111917 - fix aarch64 RA ICE (#2241139, PR target/111528) - fix ia32 doubleword rotates (#2238781, PR target/110792) - bump for another rebuild (RHEL-78382) - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78382) - fix wrong RTL patterns for vector merge high/low word on LE (RHEL-45190) - update from releases/gcc-13 branch - PRs ada/114398, ada/114708, c/114493, c++/111529, c++/113598, fortran/110415, fortran/114827, fortran/115150, libstdc++/114940, libstdc++/115269, middle-end/108789, rtl-optimization/114902, rtl-optimization/115092, target/113281, target/113719, target/115297, target/115317, target/115324, tree-optimization/115192, tree-optimization/115307, tree-optimization/115337 - fix a shell condition (RHEL-40722) - backport a fix for modes_1.f90 (RHEL-40234) - fix up pointer types to may_alias structures (PR c/114493, RHEL-40244) - update from releases/gcc-13 branch - GCC 13.3 release - PRs analyzer/104042, analyzer/108171, analyzer/109251, analyzer/109577, analyzer/110014, analyzer/110112, analyzer/110700, analyzer/110882, analyzer/111289, analyzer/112790, analyzer/112889, analyzer/112969, analyzer/113253, analyzer/113333, analyzer/114408, analyzer/114473, bootstrap/106472, bootstrap/114369, c/112571, c/114780, c++/89224, c++/97990, c++/100667, c++/103825, c++/110006, c++/111284, c++/112769, c++/113141, c++/113966, c++/114303, c++/114377, c++/114537, c++/114561, c++/114562, c++/114572, c++/114580, c++/114634, c++/114691, c++/114709, debug/112718, driver/111700, fortran/36337, fortran/50410, fortran/55978, fortran/89462, fortran/93678, fortran/95374, fortran/101135, fortran/102003, fortran/103707, fortran/103715, fortran/103716, fortran/104352, fortran/106987, fortran/106999, fortran/107426, fortran/110987, fortran/112407, fortran/113799, fortran/113866, fortran/113885, fortran/113956, fortran/114001, fortran/114474, fortran/114535, fortran/114739, fortran/114825, fortran/115039, gcov-profile/114115, gcov-profile/114715, ipa/92606, ipa/108007, ipa/111571, ipa/112616, ipa/113359, ipa/113907, ipa/113964, jit/110466, libgcc/111731, libquadmath/114533, libstdc++/66146, libstdc++/93672, libstdc++/104606, libstdc++/107800, libstdc++/108976, libstdc++/110050, libstdc++/110054, libstdc++/113841, libstdc++/114147, libstdc++/114316, libstdc++/114359, libstdc++/114367, libstdc++/114401, libstdc++/114750, libstdc++/114803, libstdc++/114863, libstdc++/115063, lto/114655, middle-end/110027, middle-end/111151, middle-end/111632, middle-end/111683, middle-end/112684, middle-end/112732, middle-end/113396, middle-end/113622, middle-end/114070, middle-end/114348, middle-end/114552, middle-end/114599, middle-end/114734, middle-end/114753, middle-end/114907, rtl-optimization/54052, rtl-optimization/114415, rtl-optimization/114768, rtl-optimization/114924, sanitizer/97696, sanitizer/114687, sanitizer/114743, sanitizer/114956, sanitizer/115172, target/88309, target/101865, target/105522, target/110621, target/111234, target/111600, target/111610, target/111822, target/112397, target/113095, target/113233, target/113950, target/114049, target/114130, target/114160, target/114172, target/114175, target/114272, target/114747, target/114752, target/114794, target/114837, target/114848, target/114981, testsuite/111066, testsuite/112297, testsuite/114034, testsuite/114036, testsuite/114662, tree-optimization/91838, tree-optimization/109925, tree-optimization/110838, tree-optimization/111009, tree-optimization/111268, tree-optimization/111407, tree-optimization/111736, tree-optimization/111882, tree-optimization/112281, tree-optimization/112303, tree-optimization/112793, tree-optimization/112961, tree-optimization/112991, tree-optimization/113552, tree-optimization/113630, tree-optimization/113670, tree-optimization/113831, tree-optimization/113910, tree-optimization/114027, tree-optimization/114115, tree-optimization/114121, tree-optimization/114203, tree-optimization/114231, tree-optimization/114246, tree-optimization/114375, tree-optimization/114396, tree-optimization/114485, tree-optimization/114566, tree-optimization/114672, tree-optimization/114733, tree-optimization/114736, tree-optimization/114749, tree-optimization/114787, tree-optimization/114799, tree-optimization/114876, tree-optimization/114965, tree-optimization/115143, tree-optimization/115152, tree-optimization/115154 - add --without-clang-plugin --without-llvm-plugin to annobin configure options - use the system dir in --with-libstdcxx-zoneinfo (RHEL-21093) - fix for libstdc++_nonshared.a on ppc64le (RHEL-17960) - add f95 (RHEL-17655) - update from releases/gcc-13 branch - PRs c++/33799, c++/102191, c++/111703, c++/112269, c++/112301, c++/112633, c/112339, fortran/111880, fortran/112764, libgomp/111413, libstdc++/112348, libstdc++/112491, libstdc++/112607, middle-end/111497, target/53372, target/110411, target/111408, target/111815, target/111828, target/112672, tree-optimization/111137, tree-optimization/111465, tree-optimization/111967, tree-optimization/112496 - add -fno-stack-protector to aarch64 tests (RHEL-17684) - update from releases/gcc-13 branch - PRs c++/89038, c/111884, d/110712, d/112270, fortran/67740, fortran/97245, fortran/111837, fortran/112316, libbacktrace/111315, libbacktrace/112263, libstdc++/110944, libstdc++/111172, libstdc++/111936, libstdc++/112089, libstdc++/112314, middle-end/111253, middle-end/111818, modula2/111756, modula2/112110, target/101177, target/110170, target/111001, target/111366, target/111367, target/111380, target/111935, target/112443, tree-optimization/111397, tree-optimization/111445, tree-optimization/111489, tree-optimization/111583, tree-optimization/111614, tree-optimization/111622, tree-optimization/111694, tree-optimization/111764, tree-optimization/111820, tree-optimization/111833, tree-optimization/111917 - fix aarch64 RA ICE (#2241139, PR target/111528) - fix ia32 doubleword rotates (#2238781, PR target/110792) - bump for another rebuild (RHEL-78382) - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78382) - fix wrong RTL patterns for vector merge high/low word on LE (RHEL-45190) - update from releases/gcc-13 branch - PRs ada/114398, ada/114708, c/114493, c++/111529, c++/113598, fortran/110415, fortran/114827, fortran/115150, libstdc++/114940, libstdc++/115269, middle-end/108789, rtl-optimization/114902, rtl-optimization/115092, target/113281, target/113719, target/115297, target/115317, target/115324, tree-optimization/115192, tree-optimization/115307, tree-optimization/115337 - fix a shell condition (RHEL-40722) - backport a fix for modes_1.f90 (RHEL-40234) - fix up pointer types to may_alias structures (PR c/114493, RHEL-40244) - update from releases/gcc-13 branch - GCC 13.3 release - PRs analyzer/104042, analyzer/108171, analyzer/109251, analyzer/109577, analyzer/110014, analyzer/110112, analyzer/110700, analyzer/110882, analyzer/111289, analyzer/112790, analyzer/112889, analyzer/112969, analyzer/113253, analyzer/113333, analyzer/114408, analyzer/114473, bootstrap/106472, bootstrap/114369, c/112571, c/114780, c++/89224, c++/97990, c++/100667, c++/103825, c++/110006, c++/111284, c++/112769, c++/113141, c++/113966, c++/114303, c++/114377, c++/114537, c++/114561, c++/114562, c++/114572, c++/114580, c++/114634, c++/114691, c++/114709, debug/112718, driver/111700, fortran/36337, fortran/50410, fortran/55978, fortran/89462, fortran/93678, fortran/95374, fortran/101135, fortran/102003, fortran/103707, fortran/103715, fortran/103716, fortran/104352, fortran/106987, fortran/106999, fortran/107426, fortran/110987, fortran/112407, fortran/113799, fortran/113866, fortran/113885, fortran/113956, fortran/114001, fortran/114474, fortran/114535, fortran/114739, fortran/114825, fortran/115039, gcov-profile/114115, gcov-profile/114715, ipa/92606, ipa/108007, ipa/111571, ipa/112616, ipa/113359, ipa/113907, ipa/113964, jit/110466, libgcc/111731, libquadmath/114533, libstdc++/66146, libstdc++/93672, libstdc++/104606, libstdc++/107800, libstdc++/108976, libstdc++/110050, libstdc++/110054, libstdc++/113841, libstdc++/114147, libstdc++/114316, libstdc++/114359, libstdc++/114367, libstdc++/114401, libstdc++/114750, libstdc++/114803, libstdc++/114863, libstdc++/115063, lto/114655, middle-end/110027, middle-end/111151, middle-end/111632, middle-end/111683, middle-end/112684, middle-end/112732, middle-end/113396, middle-end/113622, middle-end/114070, middle-end/114348, middle-end/114552, middle-end/114599, middle-end/114734, middle-end/114753, middle-end/114907, rtl-optimization/54052, rtl-optimization/114415, rtl-optimization/114768, rtl-optimization/114924, sanitizer/97696, sanitizer/114687, sanitizer/114743, sanitizer/114956, sanitizer/115172, target/88309, target/101865, target/105522, target/110621, target/111234, target/111600, target/111610, target/111822, target/112397, target/113095, target/113233, target/113950, target/114049, target/114130, target/114160, target/114172, target/114175, target/114272, target/114747, target/114752, target/114794, target/114837, target/114848, target/114981, testsuite/111066, testsuite/112297, testsuite/114034, testsuite/114036, testsuite/114662, tree-optimization/91838, tree-optimization/109925, tree-optimization/110838, tree-optimization/111009, tree-optimization/111268, tree-optimization/111407, tree-optimization/111736, tree-optimization/111882, tree-optimization/112281, tree-optimization/112303, tree-optimization/112793, tree-optimization/112961, tree-optimization/112991, tree-optimization/113552, tree-optimization/113630, tree-optimization/113670, tree-optimization/113831, tree-optimization/113910, tree-optimization/114027, tree-optimization/114115, tree-optimization/114121, tree-optimization/114203, tree-optimization/114231, tree-optimization/114246, tree-optimization/114375, tree-optimization/114396, tree-optimization/114485, tree-optimization/114566, tree-optimization/114672, tree-optimization/114733, tree-optimization/114736, tree-optimization/114749, tree-optimization/114787, tree-optimization/114799, tree-optimization/114876, tree-optimization/114965, tree-optimization/115143, tree-optimization/115152, tree-optimization/115154 - add --without-clang-plugin --without-llvm-plugin to annobin configure options - use the system dir in --with-libstdcxx-zoneinfo (RHEL-21093) - fix for libstdc++_nonshared.a on ppc64le (RHEL-17960) - add f95 (RHEL-17655) - update from releases/gcc-13 branch - PRs c++/33799, c++/102191, c++/111703, c++/112269, c++/112301, c++/112633, c/112339, fortran/111880, fortran/112764, libgomp/111413, libstdc++/112348, libstdc++/112491, libstdc++/112607, middle-end/111497, target/53372, target/110411, target/111408, target/111815, target/111828, target/112672, tree-optimization/111137, tree-optimization/111465, tree-optimization/111967, tree-optimization/112496 - add -fno-stack-protector to aarch64 tests (RHEL-17684) - update from releases/gcc-13 branch - PRs c++/89038, c/111884, d/110712, d/112270, fortran/67740, fortran/97245, fortran/111837, fortran/112316, libbacktrace/111315, libbacktrace/112263, libstdc++/110944, libstdc++/111172, libstdc++/111936, libstdc++/112089, libstdc++/112314, middle-end/111253, middle-end/111818, modula2/111756, modula2/112110, target/101177, target/110170, target/111001, target/111366, target/111367, target/111380, target/111935, target/112443, tree-optimization/111397, tree-optimization/111445, tree-optimization/111489, tree-optimization/111583, tree-optimization/111614, tree-optimization/111622, tree-optimization/111694, tree-optimization/111764, tree-optimization/111820, tree-optimization/111833, tree-optimization/111917 - fix aarch64 RA ICE (#2241139, PR target/111528) - fix ia32 doubleword rotates (#2238781, PR target/110792) - require GTS 13 packages (#2217519) - don't require other GTS 13 packages yet - update to GTS 13 (#2188491) - drop gcc-toolset-13-build - Use triggers to select which version of the annobin plugin should be used. (#211175) - require -annobin-plugin-gcc (#2102356) - NVR bump and rebuild - use rpm/macros.gcc-toolset-13-enable for %enable_devtoolset12 and put it in the -runtime subpackage (#2009528) - cut down the required packages, remove -toolchain and -perftools - NVR bump and rebuild, introduce CI gating setup - new package (#2077277) - Drop the sudo wrapper script (RHEL-90066) - don't require gdb on RHEL9 (RHEL-54245) - update to GTS 14 (RHEL-34748) - require GTS 13 packages (#2217520) - Annocheck: Look for -fstack-clash-protection in DW_AT_producer string. (RHEL-77605) - Rebase for GTS 14.1 release. (RHEL-76932) - Annocheck: Fix locating string notes (again). Add exception for glibc benchmark tests. (RHEL-76456) - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries. (RHEL-760404) - Annocheck: Fix the --debug-dir option. - Annocheck: Fix corrupt warning message when unable to locate separate debug info files. - Annocheck: Remove spurious debugging messages. - Annocheck: Always look for annobin notes in separate debug info files. (RHEL-75778) - Annocheck: Support multiple --debug-rpm and --debug-file options. (RHEL-73349) - Annocheck: Add support for sys-root'ed glibc packages. (RHEL-71296) - GCC Plugin: Tidy up use of gcc's diagnoatic headers. (#32429) - Testsuite: Use configured compiler when running tests. - GCC Plugin: Fix building with gcc 15. (#32429) - Annocheck: Fix overly long debug messages. - Annocheck: Rename rwx-seg test to load-segments. Add more checks. Add check for gaps as a future fail. - Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries. - Annocheck: Add --enable-future to enable future fail components in normal tests. - Annocheck: Fix bug preventing the inclusion of the rpm name in reports. - Annocheck: Add more exceptions for gcc binaries. (RHEL-33365) - Annocheck: Add --skip-passes option. - Annocheck: Add exceptions for gcc binaries. (RHEL-33365) - Annocheck: Skip property note test for i386 binaries created by LLVM. (#2323797) - Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info. (RHEL-65411) - GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS. - NVR Bump to allow rebuilding with annotation. - Clang & LLVM Plugins: Include install directory in binary. (RHEL-54069) - BuiltBy: Fix seg-fault when comparing language version strings. (RHEL-53497) - Spec File: Use correct names for the symlinks. (RHEL-53209) - Spec File: Use correct names for the symlinks. (RHEL-53209) - Spec File: Use correct names for the plugins. (RHEL-53209) - Spec File: Disable bootstrapping. (RHEL-53543) - Spec File: Use correct directory for plugin installation. (RHEL-53209) - Spec File: Disable plugin when running on wrong major version of the compiler. - Annocheck: Stop spurious assembler warnings. (RHEL-53213) - Annocheck: Stop warnings about known gaps. (RHEL-53218) - Annocheck: Fix stack realign test. (#2302427) - Annocheck: Look for -fstack-clash-protection in DW_AT_producer string. (RHEL-77605) - Rebase for GTS 14.1 release. (RHEL-76932) - Annocheck: Fix locating string notes (again). Add exception for glibc benchmark tests. (RHEL-76456) - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries. (RHEL-760404) - Annocheck: Fix the --debug-dir option. - Annocheck: Fix corrupt warning message when unable to locate separate debug info files. - Annocheck: Remove spurious debugging messages. - Annocheck: Always look for annobin notes in separate debug info files. (RHEL-75778) - Annocheck: Support multiple --debug-rpm and --debug-file options. (RHEL-73349) - Annocheck: Add support for sys-root'ed glibc packages. (RHEL-71296) - GCC Plugin: Tidy up use of gcc's diagnoatic headers. (#32429) - Testsuite: Use configured compiler when running tests. - GCC Plugin: Fix building with gcc 15. (#32429) - Annocheck: Fix overly long debug messages. - Annocheck: Rename rwx-seg test to load-segments. Add more checks. Add check for gaps as a future fail. - Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries. - Annocheck: Add --enable-future to enable future fail components in normal tests. - Annocheck: Fix bug preventing the inclusion of the rpm name in reports. - Annocheck: Add more exceptions for gcc binaries. (RHEL-33365) - Annocheck: Add --skip-passes option. - Annocheck: Add exceptions for gcc binaries. (RHEL-33365) - Annocheck: Skip property note test for i386 binaries created by LLVM. (#2323797) - Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info. (RHEL-65411) - GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS. - NVR Bump to allow rebuilding with annotation. - Clang & LLVM Plugins: Include install directory in binary. (RHEL-54069) - BuiltBy: Fix seg-fault when comparing language version strings. (RHEL-53497) - Spec File: Use correct names for the symlinks. (RHEL-53209) - Spec File: Use correct names for the symlinks. (RHEL-53209) - Spec File: Use correct names for the plugins. (RHEL-53209) - Spec File: Disable bootstrapping. (RHEL-53543) - Spec File: Use correct directory for plugin installation. (RHEL-53209) - Spec File: Disable plugin when running on wrong major version of the compiler. - Annocheck: Stop spurious assembler warnings. (RHEL-53213) - Annocheck: Stop warnings about known gaps. (RHEL-53218) - Annocheck: Fix stack realign test. (#2302427) - Annocheck: Look for -fstack-clash-protection in DW_AT_producer string. (RHEL-77605) - Rebase for GTS 14.1 release. (RHEL-76932) - Annocheck: Fix locating string notes (again). Add exception for glibc benchmark tests. (RHEL-76456) - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries. (RHEL-760404) - Annocheck: Fix the --debug-dir option. - Annocheck: Fix corrupt warning message when unable to locate separate debug info files. - Annocheck: Remove spurious debugging messages. - Annocheck: Always look for annobin notes in separate debug info files. (RHEL-75778) - Annocheck: Support multiple --debug-rpm and --debug-file options. (RHEL-73349) - Annocheck: Add support for sys-root'ed glibc packages. (RHEL-71296) - GCC Plugin: Tidy up use of gcc's diagnoatic headers. (#32429) - Testsuite: Use configured compiler when running tests. - GCC Plugin: Fix building with gcc 15. (#32429) - Annocheck: Fix overly long debug messages. - Annocheck: Rename rwx-seg test to load-segments. Add more checks. Add check for gaps as a future fail. - Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries. - Annocheck: Add --enable-future to enable future fail components in normal tests. - Annocheck: Fix bug preventing the inclusion of the rpm name in reports. - Annocheck: Add more exceptions for gcc binaries. (RHEL-33365) - Annocheck: Add --skip-passes option. - Annocheck: Add exceptions for gcc binaries. (RHEL-33365) - Annocheck: Skip property note test for i386 binaries created by LLVM. (#2323797) - Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info. (RHEL-65411) - GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS. - NVR Bump to allow rebuilding with annotation. - Clang & LLVM Plugins: Include install directory in binary. (RHEL-54069) - BuiltBy: Fix seg-fault when comparing language version strings. (RHEL-53497) - Spec File: Use correct names for the symlinks. (RHEL-53209) - Spec File: Use correct names for the symlinks. (RHEL-53209) - Spec File: Use correct names for the plugins. (RHEL-53209) - Spec File: Disable bootstrapping. (RHEL-53543) - Spec File: Use correct directory for plugin installation. (RHEL-53209) - Spec File: Disable plugin when running on wrong major version of the compiler. - Annocheck: Stop spurious assembler warnings. (RHEL-53213) - Annocheck: Stop warnings about known gaps. (RHEL-53218) - Annocheck: Fix stack realign test. (#2302427) - Fix a potential illegal memory access when linking a corrupt input file. (RHEL-130667) - Fix assertion failure in ppc64 ld due to compiler miscompilation. - Backport fixes for PR 32082 and PR 32153 in order to fix the PR 20267 linker tests. (RHEL-80372) - Fix restoring contect to gprofng.rc file. (RHEL-54563) - NVR Bump to allow rebuilding with GTS-14 gcc. (RHEL-53516) - Initial import of upstream 2.41 release with patches from Fedora 40. - Fix a potential illegal memory access when linking a corrupt input file. (RHEL-130667) - Fix assertion failure in ppc64 ld due to compiler miscompilation. - Backport fixes for PR 32082 and PR 32153 in order to fix the PR 20267 linker tests. (RHEL-80372) - Fix restoring contect to gprofng.rc file. (RHEL-54563) - NVR Bump to allow rebuilding with GTS-14 gcc. (RHEL-53516) - Initial import of upstream 2.41 release with patches from Fedora 40. - Fix a potential illegal memory access when linking a corrupt input file. (RHEL-130667) - Fix assertion failure in ppc64 ld due to compiler miscompilation. - Backport fixes for PR 32082 and PR 32153 in order to fix the PR 20267 linker tests. (RHEL-80372) - Fix restoring contect to gprofng.rc file. (RHEL-54563) - NVR Bump to allow rebuilding with GTS-14 gcc. (RHEL-53516) - Initial import of upstream 2.41 release with patches from Fedora 40. - Fix a potential illegal memory access when linking a corrupt input file. (RHEL-130667) - Fix assertion failure in ppc64 ld due to compiler miscompilation. - Backport fixes for PR 32082 and PR 32153 in order to fix the PR 20267 linker tests. (RHEL-80372) - Fix restoring contect to gprofng.rc file. (RHEL-54563) - NVR Bump to allow rebuilding with GTS-14 gcc. (RHEL-53516) - Initial import of upstream 2.41 release with patches from Fedora 40. - Add dwz-0.14-sw-pr-32146.patch - new package (RHEL-29852) - Add missing headers arm_neon_sve_bridge.h and arm_sme.h for aarch64 (RHEL-124589) - Fix glibc32 dependency (RHEL-112209) - Fix ICE in rebuild_jump_labels on aarch64-linux-gnu (RHEL-106790) - Put the libstdc++ AS_NEEDED in the right places (RHEL-84679) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-84679) - libstdc++: Fix -Warray-bounds warning in std::vector<bool> (RHEL-90244) - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78387) - update from releases/gcc-14 branch (RHEL-74061) - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996, analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463, c++/102594, c++/109859, c++/113108, c++/114854, c++/115008, c++/115430, c++/115657, c++/116108, c++/116634, c++/117158, c++/117317, c++/117614, c++/117615, c++/117792, c++/117825, c++/117845, c++/117880, c++/117925, c++/117985, c++/118060, c++/118069, driver/117942, fortran/84674, fortran/84869, fortran/105054, fortran/109105, fortran/109345, fortran/115070, fortran/115348, fortran/116388, fortran/117730, fortran/117763, fortran/117774, fortran/117791, fortran/117797, fortran/117819, fortran/117820, fortran/117843, fortran/117897, libgomp/117851, libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236, libstdc++/109517, libstdc++/109976, libstdc++/112349, libstdc++/112641, libstdc++/117520, libstdc++/117560, libstdc++/117822, libstdc++/117962, libstdc++/117966, libstdc++/118035, libstdc++/118093, middle-end/43374, middle-end/102674, middle-end/116997, middle-end/117433, middle-end/117458, middle-end/117459, middle-end/117847, middle-end/118024, modula2/114529, modula2/115003, modula2/115057, modula2/115164, modula2/115276, modula2/115328, modula2/115536, modula2/115540, modula2/115804, modula2/115823, modula2/115957, modula2/116048, modula2/116181, modula2/116378, modula2/116557, modula2/116918, modula2/117120, modula2/117371, modula2/117555, modula2/117660, modula2/117904, modula2/117948, other/116603, preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799, rtl-optimization/117095, sanitizer/117960, target/64242, target/114801, target/114942, target/116371, target/116629, target/116999, target/117045, target/117105, target/117304, target/117357, target/117408, target/117418, target/117443, target/117500, target/117525, target/117562, target/117564, target/117642, target/117659, target/117675, target/117744, target/117926, testsuite/103298, testsuite/109360, tree-optimization/94589, tree-optimization/112376, tree-optimization/116463, tree-optimization/117142, tree-optimization/117254, tree-optimization/117307, tree-optimization/117333, tree-optimization/117398, tree-optimization/117417, tree-optimization/117439, tree-optimization/117574, tree-optimization/117594, tree-optimization/117612, tree-optimization/117912 - fix up -freport-bug default (#2330362, RHEL-70192) - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on aarch64 to match upstream (RHEL-74059) - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509) - have gfortran require install-info (RHEL-62417) - bump NVR (RHEL-53492) - do not hide _ZSt21ios_base_library_initv - Add missing headers arm_neon_sve_bridge.h and arm_sme.h for aarch64 (RHEL-124589) - Fix glibc32 dependency (RHEL-112209) - Fix ICE in rebuild_jump_labels on aarch64-linux-gnu (RHEL-106790) - Put the libstdc++ AS_NEEDED in the right places (RHEL-84679) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-84679) - libstdc++: Fix -Warray-bounds warning in std::vector<bool> (RHEL-90244) - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78387) - update from releases/gcc-14 branch (RHEL-74061) - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996, analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463, c++/102594, c++/109859, c++/113108, c++/114854, c++/115008, c++/115430, c++/115657, c++/116108, c++/116634, c++/117158, c++/117317, c++/117614, c++/117615, c++/117792, c++/117825, c++/117845, c++/117880, c++/117925, c++/117985, c++/118060, c++/118069, driver/117942, fortran/84674, fortran/84869, fortran/105054, fortran/109105, fortran/109345, fortran/115070, fortran/115348, fortran/116388, fortran/117730, fortran/117763, fortran/117774, fortran/117791, fortran/117797, fortran/117819, fortran/117820, fortran/117843, fortran/117897, libgomp/117851, libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236, libstdc++/109517, libstdc++/109976, libstdc++/112349, libstdc++/112641, libstdc++/117520, libstdc++/117560, libstdc++/117822, libstdc++/117962, libstdc++/117966, libstdc++/118035, libstdc++/118093, middle-end/43374, middle-end/102674, middle-end/116997, middle-end/117433, middle-end/117458, middle-end/117459, middle-end/117847, middle-end/118024, modula2/114529, modula2/115003, modula2/115057, modula2/115164, modula2/115276, modula2/115328, modula2/115536, modula2/115540, modula2/115804, modula2/115823, modula2/115957, modula2/116048, modula2/116181, modula2/116378, modula2/116557, modula2/116918, modula2/117120, modula2/117371, modula2/117555, modula2/117660, modula2/117904, modula2/117948, other/116603, preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799, rtl-optimization/117095, sanitizer/117960, target/64242, target/114801, target/114942, target/116371, target/116629, target/116999, target/117045, target/117105, target/117304, target/117357, target/117408, target/117418, target/117443, target/117500, target/117525, target/117562, target/117564, target/117642, target/117659, target/117675, target/117744, target/117926, testsuite/103298, testsuite/109360, tree-optimization/94589, tree-optimization/112376, tree-optimization/116463, tree-optimization/117142, tree-optimization/117254, tree-optimization/117307, tree-optimization/117333, tree-optimization/117398, tree-optimization/117417, tree-optimization/117439, tree-optimization/117574, tree-optimization/117594, tree-optimization/117612, tree-optimization/117912 - fix up -freport-bug default (#2330362, RHEL-70192) - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on aarch64 to match upstream (RHEL-74059) - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509) - have gfortran require install-info (RHEL-62417) - bump NVR (RHEL-53492) - do not hide _ZSt21ios_base_library_initv - Add missing headers arm_neon_sve_bridge.h and arm_sme.h for aarch64 (RHEL-124589) - Fix glibc32 dependency (RHEL-112209) - Fix ICE in rebuild_jump_labels on aarch64-linux-gnu (RHEL-106790) - Put the libstdc++ AS_NEEDED in the right places (RHEL-84679) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-84679) - libstdc++: Fix -Warray-bounds warning in std::vector<bool> (RHEL-90244) - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78387) - update from releases/gcc-14 branch (RHEL-74061) - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996, analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463, c++/102594, c++/109859, c++/113108, c++/114854, c++/115008, c++/115430, c++/115657, c++/116108, c++/116634, c++/117158, c++/117317, c++/117614, c++/117615, c++/117792, c++/117825, c++/117845, c++/117880, c++/117925, c++/117985, c++/118060, c++/118069, driver/117942, fortran/84674, fortran/84869, fortran/105054, fortran/109105, fortran/109345, fortran/115070, fortran/115348, fortran/116388, fortran/117730, fortran/117763, fortran/117774, fortran/117791, fortran/117797, fortran/117819, fortran/117820, fortran/117843, fortran/117897, libgomp/117851, libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236, libstdc++/109517, libstdc++/109976, libstdc++/112349, libstdc++/112641, libstdc++/117520, libstdc++/117560, libstdc++/117822, libstdc++/117962, libstdc++/117966, libstdc++/118035, libstdc++/118093, middle-end/43374, middle-end/102674, middle-end/116997, middle-end/117433, middle-end/117458, middle-end/117459, middle-end/117847, middle-end/118024, modula2/114529, modula2/115003, modula2/115057, modula2/115164, modula2/115276, modula2/115328, modula2/115536, modula2/115540, modula2/115804, modula2/115823, modula2/115957, modula2/116048, modula2/116181, modula2/116378, modula2/116557, modula2/116918, modula2/117120, modula2/117371, modula2/117555, modula2/117660, modula2/117904, modula2/117948, other/116603, preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799, rtl-optimization/117095, sanitizer/117960, target/64242, target/114801, target/114942, target/116371, target/116629, target/116999, target/117045, target/117105, target/117304, target/117357, target/117408, target/117418, target/117443, target/117500, target/117525, target/117562, target/117564, target/117642, target/117659, target/117675, target/117744, target/117926, testsuite/103298, testsuite/109360, tree-optimization/94589, tree-optimization/112376, tree-optimization/116463, tree-optimization/117142, tree-optimization/117254, tree-optimization/117307, tree-optimization/117333, tree-optimization/117398, tree-optimization/117417, tree-optimization/117439, tree-optimization/117574, tree-optimization/117594, tree-optimization/117612, tree-optimization/117912 - fix up -freport-bug default (#2330362, RHEL-70192) - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on aarch64 to match upstream (RHEL-74059) - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509) - have gfortran require install-info (RHEL-62417) - bump NVR (RHEL-53492) - do not hide _ZSt21ios_base_library_initv - Add missing headers arm_neon_sve_bridge.h and arm_sme.h for aarch64 (RHEL-124589) - Fix glibc32 dependency (RHEL-112209) - Fix ICE in rebuild_jump_labels on aarch64-linux-gnu (RHEL-106790) - Put the libstdc++ AS_NEEDED in the right places (RHEL-84679) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-84679) - libstdc++: Fix -Warray-bounds warning in std::vector<bool> (RHEL-90244) - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78387) - update from releases/gcc-14 branch (RHEL-74061) - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996, analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463, c++/102594, c++/109859, c++/113108, c++/114854, c++/115008, c++/115430, c++/115657, c++/116108, c++/116634, c++/117158, c++/117317, c++/117614, c++/117615, c++/117792, c++/117825, c++/117845, c++/117880, c++/117925, c++/117985, c++/118060, c++/118069, driver/117942, fortran/84674, fortran/84869, fortran/105054, fortran/109105, fortran/109345, fortran/115070, fortran/115348, fortran/116388, fortran/117730, fortran/117763, fortran/117774, fortran/117791, fortran/117797, fortran/117819, fortran/117820, fortran/117843, fortran/117897, libgomp/117851, libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236, libstdc++/109517, libstdc++/109976, libstdc++/112349, libstdc++/112641, libstdc++/117520, libstdc++/117560, libstdc++/117822, libstdc++/117962, libstdc++/117966, libstdc++/118035, libstdc++/118093, middle-end/43374, middle-end/102674, middle-end/116997, middle-end/117433, middle-end/117458, middle-end/117459, middle-end/117847, middle-end/118024, modula2/114529, modula2/115003, modula2/115057, modula2/115164, modula2/115276, modula2/115328, modula2/115536, modula2/115540, modula2/115804, modula2/115823, modula2/115957, modula2/116048, modula2/116181, modula2/116378, modula2/116557, modula2/116918, modula2/117120, modula2/117371, modula2/117555, modula2/117660, modula2/117904, modula2/117948, other/116603, preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799, rtl-optimization/117095, sanitizer/117960, target/64242, target/114801, target/114942, target/116371, target/116629, target/116999, target/117045, target/117105, target/117304, target/117357, target/117408, target/117418, target/117443, target/117500, target/117525, target/117562, target/117564, target/117642, target/117659, target/117675, target/117744, target/117926, testsuite/103298, testsuite/109360, tree-optimization/94589, tree-optimization/112376, tree-optimization/116463, tree-optimization/117142, tree-optimization/117254, tree-optimization/117307, tree-optimization/117333, tree-optimization/117398, tree-optimization/117417, tree-optimization/117439, tree-optimization/117574, tree-optimization/117594, tree-optimization/117612, tree-optimization/117912 - fix up -freport-bug default (#2330362, RHEL-70192) - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on aarch64 to match upstream (RHEL-74059) - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509) - have gfortran require install-info (RHEL-62417) - bump NVR (RHEL-53492) - do not hide _ZSt21ios_base_library_initv - Add missing headers arm_neon_sve_bridge.h and arm_sme.h for aarch64 (RHEL-124589) - Fix glibc32 dependency (RHEL-112209) - Fix ICE in rebuild_jump_labels on aarch64-linux-gnu (RHEL-106790) - Put the libstdc++ AS_NEEDED in the right places (RHEL-84679) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-84679) - libstdc++: Fix -Warray-bounds warning in std::vector<bool> (RHEL-90244) - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78387) - update from releases/gcc-14 branch (RHEL-74061) - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996, analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463, c++/102594, c++/109859, c++/113108, c++/114854, c++/115008, c++/115430, c++/115657, c++/116108, c++/116634, c++/117158, c++/117317, c++/117614, c++/117615, c++/117792, c++/117825, c++/117845, c++/117880, c++/117925, c++/117985, c++/118060, c++/118069, driver/117942, fortran/84674, fortran/84869, fortran/105054, fortran/109105, fortran/109345, fortran/115070, fortran/115348, fortran/116388, fortran/117730, fortran/117763, fortran/117774, fortran/117791, fortran/117797, fortran/117819, fortran/117820, fortran/117843, fortran/117897, libgomp/117851, libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236, libstdc++/109517, libstdc++/109976, libstdc++/112349, libstdc++/112641, libstdc++/117520, libstdc++/117560, libstdc++/117822, libstdc++/117962, libstdc++/117966, libstdc++/118035, libstdc++/118093, middle-end/43374, middle-end/102674, middle-end/116997, middle-end/117433, middle-end/117458, middle-end/117459, middle-end/117847, middle-end/118024, modula2/114529, modula2/115003, modula2/115057, modula2/115164, modula2/115276, modula2/115328, modula2/115536, modula2/115540, modula2/115804, modula2/115823, modula2/115957, modula2/116048, modula2/116181, modula2/116378, modula2/116557, modula2/116918, modula2/117120, modula2/117371, modula2/117555, modula2/117660, modula2/117904, modula2/117948, other/116603, preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799, rtl-optimization/117095, sanitizer/117960, target/64242, target/114801, target/114942, target/116371, target/116629, target/116999, target/117045, target/117105, target/117304, target/117357, target/117408, target/117418, target/117443, target/117500, target/117525, target/117562, target/117564, target/117642, target/117659, target/117675, target/117744, target/117926, testsuite/103298, testsuite/109360, tree-optimization/94589, tree-optimization/112376, tree-optimization/116463, tree-optimization/117142, tree-optimization/117254, tree-optimization/117307, tree-optimization/117333, tree-optimization/117398, tree-optimization/117417, tree-optimization/117439, tree-optimization/117574, tree-optimization/117594, tree-optimization/117612, tree-optimization/117912 - fix up -freport-bug default (#2330362, RHEL-70192) - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on aarch64 to match upstream (RHEL-74059) - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509) - have gfortran require install-info (RHEL-62417) - bump NVR (RHEL-53492) - do not hide _ZSt21ios_base_library_initv - Add missing headers arm_neon_sve_bridge.h and arm_sme.h for aarch64 (RHEL-124589) - Fix glibc32 dependency (RHEL-112209) - Fix ICE in rebuild_jump_labels on aarch64-linux-gnu (RHEL-106790) - Put the libstdc++ AS_NEEDED in the right places (RHEL-84679) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-84679) - libstdc++: Fix -Warray-bounds warning in std::vector<bool> (RHEL-90244) - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78387) - update from releases/gcc-14 branch (RHEL-74061) - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996, analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463, c++/102594, c++/109859, c++/113108, c++/114854, c++/115008, c++/115430, c++/115657, c++/116108, c++/116634, c++/117158, c++/117317, c++/117614, c++/117615, c++/117792, c++/117825, c++/117845, c++/117880, c++/117925, c++/117985, c++/118060, c++/118069, driver/117942, fortran/84674, fortran/84869, fortran/105054, fortran/109105, fortran/109345, fortran/115070, fortran/115348, fortran/116388, fortran/117730, fortran/117763, fortran/117774, fortran/117791, fortran/117797, fortran/117819, fortran/117820, fortran/117843, fortran/117897, libgomp/117851, libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236, libstdc++/109517, libstdc++/109976, libstdc++/112349, libstdc++/112641, libstdc++/117520, libstdc++/117560, libstdc++/117822, libstdc++/117962, libstdc++/117966, libstdc++/118035, libstdc++/118093, middle-end/43374, middle-end/102674, middle-end/116997, middle-end/117433, middle-end/117458, middle-end/117459, middle-end/117847, middle-end/118024, modula2/114529, modula2/115003, modula2/115057, modula2/115164, modula2/115276, modula2/115328, modula2/115536, modula2/115540, modula2/115804, modula2/115823, modula2/115957, modula2/116048, modula2/116181, modula2/116378, modula2/116557, modula2/116918, modula2/117120, modula2/117371, modula2/117555, modula2/117660, modula2/117904, modula2/117948, other/116603, preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799, rtl-optimization/117095, sanitizer/117960, target/64242, target/114801, target/114942, target/116371, target/116629, target/116999, target/117045, target/117105, target/117304, target/117357, target/117408, target/117418, target/117443, target/117500, target/117525, target/117562, target/117564, target/117642, target/117659, target/117675, target/117744, target/117926, testsuite/103298, testsuite/109360, tree-optimization/94589, tree-optimization/112376, tree-optimization/116463, tree-optimization/117142, tree-optimization/117254, tree-optimization/117307, tree-optimization/117333, tree-optimization/117398, tree-optimization/117417, tree-optimization/117439, tree-optimization/117574, tree-optimization/117594, tree-optimization/117612, tree-optimization/117912 - fix up -freport-bug default (#2330362, RHEL-70192) - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on aarch64 to match upstream (RHEL-74059) - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509) - have gfortran require install-info (RHEL-62417) - bump NVR (RHEL-53492) - do not hide _ZSt21ios_base_library_initv - Add missing headers arm_neon_sve_bridge.h and arm_sme.h for aarch64 (RHEL-124589) - Fix glibc32 dependency (RHEL-112209) - Fix ICE in rebuild_jump_labels on aarch64-linux-gnu (RHEL-106790) - Put the libstdc++ AS_NEEDED in the right places (RHEL-84679) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-84679) - libstdc++: Fix -Warray-bounds warning in std::vector<bool> (RHEL-90244) - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78387) - update from releases/gcc-14 branch (RHEL-74061) - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996, analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463, c++/102594, c++/109859, c++/113108, c++/114854, c++/115008, c++/115430, c++/115657, c++/116108, c++/116634, c++/117158, c++/117317, c++/117614, c++/117615, c++/117792, c++/117825, c++/117845, c++/117880, c++/117925, c++/117985, c++/118060, c++/118069, driver/117942, fortran/84674, fortran/84869, fortran/105054, fortran/109105, fortran/109345, fortran/115070, fortran/115348, fortran/116388, fortran/117730, fortran/117763, fortran/117774, fortran/117791, fortran/117797, fortran/117819, fortran/117820, fortran/117843, fortran/117897, libgomp/117851, libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236, libstdc++/109517, libstdc++/109976, libstdc++/112349, libstdc++/112641, libstdc++/117520, libstdc++/117560, libstdc++/117822, libstdc++/117962, libstdc++/117966, libstdc++/118035, libstdc++/118093, middle-end/43374, middle-end/102674, middle-end/116997, middle-end/117433, middle-end/117458, middle-end/117459, middle-end/117847, middle-end/118024, modula2/114529, modula2/115003, modula2/115057, modula2/115164, modula2/115276, modula2/115328, modula2/115536, modula2/115540, modula2/115804, modula2/115823, modula2/115957, modula2/116048, modula2/116181, modula2/116378, modula2/116557, modula2/116918, modula2/117120, modula2/117371, modula2/117555, modula2/117660, modula2/117904, modula2/117948, other/116603, preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799, rtl-optimization/117095, sanitizer/117960, target/64242, target/114801, target/114942, target/116371, target/116629, target/116999, target/117045, target/117105, target/117304, target/117357, target/117408, target/117418, target/117443, target/117500, target/117525, target/117562, target/117564, target/117642, target/117659, target/117675, target/117744, target/117926, testsuite/103298, testsuite/109360, tree-optimization/94589, tree-optimization/112376, tree-optimization/116463, tree-optimization/117142, tree-optimization/117254, tree-optimization/117307, tree-optimization/117333, tree-optimization/117398, tree-optimization/117417, tree-optimization/117439, tree-optimization/117574, tree-optimization/117594, tree-optimization/117612, tree-optimization/117912 - fix up -freport-bug default (#2330362, RHEL-70192) - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on aarch64 to match upstream (RHEL-74059) - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509) - have gfortran require install-info (RHEL-62417) - bump NVR (RHEL-53492) - do not hide _ZSt21ios_base_library_initv - Add missing headers arm_neon_sve_bridge.h and arm_sme.h for aarch64 (RHEL-124589) - Fix glibc32 dependency (RHEL-112209) - Fix ICE in rebuild_jump_labels on aarch64-linux-gnu (RHEL-106790) - Put the libstdc++ AS_NEEDED in the right places (RHEL-84679) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-84679) - libstdc++: Fix -Warray-bounds warning in std::vector<bool> (RHEL-90244) - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78387) - update from releases/gcc-14 branch (RHEL-74061) - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996, analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463, c++/102594, c++/109859, c++/113108, c++/114854, c++/115008, c++/115430, c++/115657, c++/116108, c++/116634, c++/117158, c++/117317, c++/117614, c++/117615, c++/117792, c++/117825, c++/117845, c++/117880, c++/117925, c++/117985, c++/118060, c++/118069, driver/117942, fortran/84674, fortran/84869, fortran/105054, fortran/109105, fortran/109345, fortran/115070, fortran/115348, fortran/116388, fortran/117730, fortran/117763, fortran/117774, fortran/117791, fortran/117797, fortran/117819, fortran/117820, fortran/117843, fortran/117897, libgomp/117851, libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236, libstdc++/109517, libstdc++/109976, libstdc++/112349, libstdc++/112641, libstdc++/117520, libstdc++/117560, libstdc++/117822, libstdc++/117962, libstdc++/117966, libstdc++/118035, libstdc++/118093, middle-end/43374, middle-end/102674, middle-end/116997, middle-end/117433, middle-end/117458, middle-end/117459, middle-end/117847, middle-end/118024, modula2/114529, modula2/115003, modula2/115057, modula2/115164, modula2/115276, modula2/115328, modula2/115536, modula2/115540, modula2/115804, modula2/115823, modula2/115957, modula2/116048, modula2/116181, modula2/116378, modula2/116557, modula2/116918, modula2/117120, modula2/117371, modula2/117555, modula2/117660, modula2/117904, modula2/117948, other/116603, preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799, rtl-optimization/117095, sanitizer/117960, target/64242, target/114801, target/114942, target/116371, target/116629, target/116999, target/117045, target/117105, target/117304, target/117357, target/117408, target/117418, target/117443, target/117500, target/117525, target/117562, target/117564, target/117642, target/117659, target/117675, target/117744, target/117926, testsuite/103298, testsuite/109360, tree-optimization/94589, tree-optimization/112376, tree-optimization/116463, tree-optimization/117142, tree-optimization/117254, tree-optimization/117307, tree-optimization/117333, tree-optimization/117398, tree-optimization/117417, tree-optimization/117439, tree-optimization/117574, tree-optimization/117594, tree-optimization/117612, tree-optimization/117912 - fix up -freport-bug default (#2330362, RHEL-70192) - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on aarch64 to match upstream (RHEL-74059) - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509) - have gfortran require install-info (RHEL-62417) - bump NVR (RHEL-53492) - do not hide _ZSt21ios_base_library_initv - Add missing headers arm_neon_sve_bridge.h and arm_sme.h for aarch64 (RHEL-124589) - Fix glibc32 dependency (RHEL-112209) - Fix ICE in rebuild_jump_labels on aarch64-linux-gnu (RHEL-106790) - Put the libstdc++ AS_NEEDED in the right places (RHEL-84679) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-84679) - libstdc++: Fix -Warray-bounds warning in std::vector<bool> (RHEL-90244) - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78387) - update from releases/gcc-14 branch (RHEL-74061) - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996, analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463, c++/102594, c++/109859, c++/113108, c++/114854, c++/115008, c++/115430, c++/115657, c++/116108, c++/116634, c++/117158, c++/117317, c++/117614, c++/117615, c++/117792, c++/117825, c++/117845, c++/117880, c++/117925, c++/117985, c++/118060, c++/118069, driver/117942, fortran/84674, fortran/84869, fortran/105054, fortran/109105, fortran/109345, fortran/115070, fortran/115348, fortran/116388, fortran/117730, fortran/117763, fortran/117774, fortran/117791, fortran/117797, fortran/117819, fortran/117820, fortran/117843, fortran/117897, libgomp/117851, libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236, libstdc++/109517, libstdc++/109976, libstdc++/112349, libstdc++/112641, libstdc++/117520, libstdc++/117560, libstdc++/117822, libstdc++/117962, libstdc++/117966, libstdc++/118035, libstdc++/118093, middle-end/43374, middle-end/102674, middle-end/116997, middle-end/117433, middle-end/117458, middle-end/117459, middle-end/117847, middle-end/118024, modula2/114529, modula2/115003, modula2/115057, modula2/115164, modula2/115276, modula2/115328, modula2/115536, modula2/115540, modula2/115804, modula2/115823, modula2/115957, modula2/116048, modula2/116181, modula2/116378, modula2/116557, modula2/116918, modula2/117120, modula2/117371, modula2/117555, modula2/117660, modula2/117904, modula2/117948, other/116603, preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799, rtl-optimization/117095, sanitizer/117960, target/64242, target/114801, target/114942, target/116371, target/116629, target/116999, target/117045, target/117105, target/117304, target/117357, target/117408, target/117418, target/117443, target/117500, target/117525, target/117562, target/117564, target/117642, target/117659, target/117675, target/117744, target/117926, testsuite/103298, testsuite/109360, tree-optimization/94589, tree-optimization/112376, tree-optimization/116463, tree-optimization/117142, tree-optimization/117254, tree-optimization/117307, tree-optimization/117333, tree-optimization/117398, tree-optimization/117417, tree-optimization/117439, tree-optimization/117574, tree-optimization/117594, tree-optimization/117612, tree-optimization/117912 - fix up -freport-bug default (#2330362, RHEL-70192) - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on aarch64 to match upstream (RHEL-74059) - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509) - have gfortran require install-info (RHEL-62417) - bump NVR (RHEL-53492) - do not hide _ZSt21ios_base_library_initv - Add missing headers arm_neon_sve_bridge.h and arm_sme.h for aarch64 (RHEL-124589) - Fix glibc32 dependency (RHEL-112209) - Fix ICE in rebuild_jump_labels on aarch64-linux-gnu (RHEL-106790) - Put the libstdc++ AS_NEEDED in the right places (RHEL-84679) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-84679) - libstdc++: Fix -Warray-bounds warning in std::vector<bool> (RHEL-90244) - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78387) - update from releases/gcc-14 branch (RHEL-74061) - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996, analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463, c++/102594, c++/109859, c++/113108, c++/114854, c++/115008, c++/115430, c++/115657, c++/116108, c++/116634, c++/117158, c++/117317, c++/117614, c++/117615, c++/117792, c++/117825, c++/117845, c++/117880, c++/117925, c++/117985, c++/118060, c++/118069, driver/117942, fortran/84674, fortran/84869, fortran/105054, fortran/109105, fortran/109345, fortran/115070, fortran/115348, fortran/116388, fortran/117730, fortran/117763, fortran/117774, fortran/117791, fortran/117797, fortran/117819, fortran/117820, fortran/117843, fortran/117897, libgomp/117851, libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236, libstdc++/109517, libstdc++/109976, libstdc++/112349, libstdc++/112641, libstdc++/117520, libstdc++/117560, libstdc++/117822, libstdc++/117962, libstdc++/117966, libstdc++/118035, libstdc++/118093, middle-end/43374, middle-end/102674, middle-end/116997, middle-end/117433, middle-end/117458, middle-end/117459, middle-end/117847, middle-end/118024, modula2/114529, modula2/115003, modula2/115057, modula2/115164, modula2/115276, modula2/115328, modula2/115536, modula2/115540, modula2/115804, modula2/115823, modula2/115957, modula2/116048, modula2/116181, modula2/116378, modula2/116557, modula2/116918, modula2/117120, modula2/117371, modula2/117555, modula2/117660, modula2/117904, modula2/117948, other/116603, preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799, rtl-optimization/117095, sanitizer/117960, target/64242, target/114801, target/114942, target/116371, target/116629, target/116999, target/117045, target/117105, target/117304, target/117357, target/117408, target/117418, target/117443, target/117500, target/117525, target/117562, target/117564, target/117642, target/117659, target/117675, target/117744, target/117926, testsuite/103298, testsuite/109360, tree-optimization/94589, tree-optimization/112376, tree-optimization/116463, tree-optimization/117142, tree-optimization/117254, tree-optimization/117307, tree-optimization/117333, tree-optimization/117398, tree-optimization/117417, tree-optimization/117439, tree-optimization/117574, tree-optimization/117594, tree-optimization/117612, tree-optimization/117912 - fix up -freport-bug default (#2330362, RHEL-70192) - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on aarch64 to match upstream (RHEL-74059) - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509) - have gfortran require install-info (RHEL-62417) - bump NVR (RHEL-53492) - do not hide _ZSt21ios_base_library_initv - Add missing headers arm_neon_sve_bridge.h and arm_sme.h for aarch64 (RHEL-124589) - Fix glibc32 dependency (RHEL-112209) - Fix ICE in rebuild_jump_labels on aarch64-linux-gnu (RHEL-106790) - Put the libstdc++ AS_NEEDED in the right places (RHEL-84679) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-84679) - libstdc++: Fix -Warray-bounds warning in std::vector<bool> (RHEL-90244) - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78387) - update from releases/gcc-14 branch (RHEL-74061) - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996, analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463, c++/102594, c++/109859, c++/113108, c++/114854, c++/115008, c++/115430, c++/115657, c++/116108, c++/116634, c++/117158, c++/117317, c++/117614, c++/117615, c++/117792, c++/117825, c++/117845, c++/117880, c++/117925, c++/117985, c++/118060, c++/118069, driver/117942, fortran/84674, fortran/84869, fortran/105054, fortran/109105, fortran/109345, fortran/115070, fortran/115348, fortran/116388, fortran/117730, fortran/117763, fortran/117774, fortran/117791, fortran/117797, fortran/117819, fortran/117820, fortran/117843, fortran/117897, libgomp/117851, libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236, libstdc++/109517, libstdc++/109976, libstdc++/112349, libstdc++/112641, libstdc++/117520, libstdc++/117560, libstdc++/117822, libstdc++/117962, libstdc++/117966, libstdc++/118035, libstdc++/118093, middle-end/43374, middle-end/102674, middle-end/116997, middle-end/117433, middle-end/117458, middle-end/117459, middle-end/117847, middle-end/118024, modula2/114529, modula2/115003, modula2/115057, modula2/115164, modula2/115276, modula2/115328, modula2/115536, modula2/115540, modula2/115804, modula2/115823, modula2/115957, modula2/116048, modula2/116181, modula2/116378, modula2/116557, modula2/116918, modula2/117120, modula2/117371, modula2/117555, modula2/117660, modula2/117904, modula2/117948, other/116603, preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799, rtl-optimization/117095, sanitizer/117960, target/64242, target/114801, target/114942, target/116371, target/116629, target/116999, target/117045, target/117105, target/117304, target/117357, target/117408, target/117418, target/117443, target/117500, target/117525, target/117562, target/117564, target/117642, target/117659, target/117675, target/117744, target/117926, testsuite/103298, testsuite/109360, tree-optimization/94589, tree-optimization/112376, tree-optimization/116463, tree-optimization/117142, tree-optimization/117254, tree-optimization/117307, tree-optimization/117333, tree-optimization/117398, tree-optimization/117417, tree-optimization/117439, tree-optimization/117574, tree-optimization/117594, tree-optimization/117612, tree-optimization/117912 - fix up -freport-bug default (#2330362, RHEL-70192) - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on aarch64 to match upstream (RHEL-74059) - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509) - have gfortran require install-info (RHEL-62417) - bump NVR (RHEL-53492) - do not hide _ZSt21ios_base_library_initv - Add missing headers arm_neon_sve_bridge.h and arm_sme.h for aarch64 (RHEL-124589) - Fix glibc32 dependency (RHEL-112209) - Fix ICE in rebuild_jump_labels on aarch64-linux-gnu (RHEL-106790) - Put the libstdc++ AS_NEEDED in the right places (RHEL-84679) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-84679) - libstdc++: Fix -Warray-bounds warning in std::vector<bool> (RHEL-90244) - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78387) - update from releases/gcc-14 branch (RHEL-74061) - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996, analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463, c++/102594, c++/109859, c++/113108, c++/114854, c++/115008, c++/115430, c++/115657, c++/116108, c++/116634, c++/117158, c++/117317, c++/117614, c++/117615, c++/117792, c++/117825, c++/117845, c++/117880, c++/117925, c++/117985, c++/118060, c++/118069, driver/117942, fortran/84674, fortran/84869, fortran/105054, fortran/109105, fortran/109345, fortran/115070, fortran/115348, fortran/116388, fortran/117730, fortran/117763, fortran/117774, fortran/117791, fortran/117797, fortran/117819, fortran/117820, fortran/117843, fortran/117897, libgomp/117851, libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236, libstdc++/109517, libstdc++/109976, libstdc++/112349, libstdc++/112641, libstdc++/117520, libstdc++/117560, libstdc++/117822, libstdc++/117962, libstdc++/117966, libstdc++/118035, libstdc++/118093, middle-end/43374, middle-end/102674, middle-end/116997, middle-end/117433, middle-end/117458, middle-end/117459, middle-end/117847, middle-end/118024, modula2/114529, modula2/115003, modula2/115057, modula2/115164, modula2/115276, modula2/115328, modula2/115536, modula2/115540, modula2/115804, modula2/115823, modula2/115957, modula2/116048, modula2/116181, modula2/116378, modula2/116557, modula2/116918, modula2/117120, modula2/117371, modula2/117555, modula2/117660, modula2/117904, modula2/117948, other/116603, preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799, rtl-optimization/117095, sanitizer/117960, target/64242, target/114801, target/114942, target/116371, target/116629, target/116999, target/117045, target/117105, target/117304, target/117357, target/117408, target/117418, target/117443, target/117500, target/117525, target/117562, target/117564, target/117642, target/117659, target/117675, target/117744, target/117926, testsuite/103298, testsuite/109360, tree-optimization/94589, tree-optimization/112376, tree-optimization/116463, tree-optimization/117142, tree-optimization/117254, tree-optimization/117307, tree-optimization/117333, tree-optimization/117398, tree-optimization/117417, tree-optimization/117439, tree-optimization/117574, tree-optimization/117594, tree-optimization/117612, tree-optimization/117912 - fix up -freport-bug default (#2330362, RHEL-70192) - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on aarch64 to match upstream (RHEL-74059) - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509) - have gfortran require install-info (RHEL-62417) - bump NVR (RHEL-53492) - do not hide _ZSt21ios_base_library_initv - Add missing headers arm_neon_sve_bridge.h and arm_sme.h for aarch64 (RHEL-124589) - Fix glibc32 dependency (RHEL-112209) - Fix ICE in rebuild_jump_labels on aarch64-linux-gnu (RHEL-106790) - Put the libstdc++ AS_NEEDED in the right places (RHEL-84679) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-84679) - libstdc++: Fix -Warray-bounds warning in std::vector<bool> (RHEL-90244) - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78387) - update from releases/gcc-14 branch (RHEL-74061) - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996, analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463, c++/102594, c++/109859, c++/113108, c++/114854, c++/115008, c++/115430, c++/115657, c++/116108, c++/116634, c++/117158, c++/117317, c++/117614, c++/117615, c++/117792, c++/117825, c++/117845, c++/117880, c++/117925, c++/117985, c++/118060, c++/118069, driver/117942, fortran/84674, fortran/84869, fortran/105054, fortran/109105, fortran/109345, fortran/115070, fortran/115348, fortran/116388, fortran/117730, fortran/117763, fortran/117774, fortran/117791, fortran/117797, fortran/117819, fortran/117820, fortran/117843, fortran/117897, libgomp/117851, libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236, libstdc++/109517, libstdc++/109976, libstdc++/112349, libstdc++/112641, libstdc++/117520, libstdc++/117560, libstdc++/117822, libstdc++/117962, libstdc++/117966, libstdc++/118035, libstdc++/118093, middle-end/43374, middle-end/102674, middle-end/116997, middle-end/117433, middle-end/117458, middle-end/117459, middle-end/117847, middle-end/118024, modula2/114529, modula2/115003, modula2/115057, modula2/115164, modula2/115276, modula2/115328, modula2/115536, modula2/115540, modula2/115804, modula2/115823, modula2/115957, modula2/116048, modula2/116181, modula2/116378, modula2/116557, modula2/116918, modula2/117120, modula2/117371, modula2/117555, modula2/117660, modula2/117904, modula2/117948, other/116603, preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799, rtl-optimization/117095, sanitizer/117960, target/64242, target/114801, target/114942, target/116371, target/116629, target/116999, target/117045, target/117105, target/117304, target/117357, target/117408, target/117418, target/117443, target/117500, target/117525, target/117562, target/117564, target/117642, target/117659, target/117675, target/117744, target/117926, testsuite/103298, testsuite/109360, tree-optimization/94589, tree-optimization/112376, tree-optimization/116463, tree-optimization/117142, tree-optimization/117254, tree-optimization/117307, tree-optimization/117333, tree-optimization/117398, tree-optimization/117417, tree-optimization/117439, tree-optimization/117574, tree-optimization/117594, tree-optimization/117612, tree-optimization/117912 - fix up -freport-bug default (#2330362, RHEL-70192) - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on aarch64 to match upstream (RHEL-74059) - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509) - have gfortran require install-info (RHEL-62417) - bump NVR (RHEL-53492) - do not hide _ZSt21ios_base_library_initv - Add missing headers arm_neon_sve_bridge.h and arm_sme.h for aarch64 (RHEL-124589) - Fix glibc32 dependency (RHEL-112209) - Fix ICE in rebuild_jump_labels on aarch64-linux-gnu (RHEL-106790) - Put the libstdc++ AS_NEEDED in the right places (RHEL-84679) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-84679) - libstdc++: Fix -Warray-bounds warning in std::vector<bool> (RHEL-90244) - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78387) - update from releases/gcc-14 branch (RHEL-74061) - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996, analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463, c++/102594, c++/109859, c++/113108, c++/114854, c++/115008, c++/115430, c++/115657, c++/116108, c++/116634, c++/117158, c++/117317, c++/117614, c++/117615, c++/117792, c++/117825, c++/117845, c++/117880, c++/117925, c++/117985, c++/118060, c++/118069, driver/117942, fortran/84674, fortran/84869, fortran/105054, fortran/109105, fortran/109345, fortran/115070, fortran/115348, fortran/116388, fortran/117730, fortran/117763, fortran/117774, fortran/117791, fortran/117797, fortran/117819, fortran/117820, fortran/117843, fortran/117897, libgomp/117851, libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236, libstdc++/109517, libstdc++/109976, libstdc++/112349, libstdc++/112641, libstdc++/117520, libstdc++/117560, libstdc++/117822, libstdc++/117962, libstdc++/117966, libstdc++/118035, libstdc++/118093, middle-end/43374, middle-end/102674, middle-end/116997, middle-end/117433, middle-end/117458, middle-end/117459, middle-end/117847, middle-end/118024, modula2/114529, modula2/115003, modula2/115057, modula2/115164, modula2/115276, modula2/115328, modula2/115536, modula2/115540, modula2/115804, modula2/115823, modula2/115957, modula2/116048, modula2/116181, modula2/116378, modula2/116557, modula2/116918, modula2/117120, modula2/117371, modula2/117555, modula2/117660, modula2/117904, modula2/117948, other/116603, preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799, rtl-optimization/117095, sanitizer/117960, target/64242, target/114801, target/114942, target/116371, target/116629, target/116999, target/117045, target/117105, target/117304, target/117357, target/117408, target/117418, target/117443, target/117500, target/117525, target/117562, target/117564, target/117642, target/117659, target/117675, target/117744, target/117926, testsuite/103298, testsuite/109360, tree-optimization/94589, tree-optimization/112376, tree-optimization/116463, tree-optimization/117142, tree-optimization/117254, tree-optimization/117307, tree-optimization/117333, tree-optimization/117398, tree-optimization/117417, tree-optimization/117439, tree-optimization/117574, tree-optimization/117594, tree-optimization/117612, tree-optimization/117912 - fix up -freport-bug default (#2330362, RHEL-70192) - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on aarch64 to match upstream (RHEL-74059) - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509) - have gfortran require install-info (RHEL-62417) - bump NVR (RHEL-53492) - do not hide _ZSt21ios_base_library_initv - Add missing headers arm_neon_sve_bridge.h and arm_sme.h for aarch64 (RHEL-124589) - Fix glibc32 dependency (RHEL-112209) - Fix ICE in rebuild_jump_labels on aarch64-linux-gnu (RHEL-106790) - Put the libstdc++ AS_NEEDED in the right places (RHEL-84679) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-84679) - libstdc++: Fix -Warray-bounds warning in std::vector<bool> (RHEL-90244) - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78387) - update from releases/gcc-14 branch (RHEL-74061) - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996, analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463, c++/102594, c++/109859, c++/113108, c++/114854, c++/115008, c++/115430, c++/115657, c++/116108, c++/116634, c++/117158, c++/117317, c++/117614, c++/117615, c++/117792, c++/117825, c++/117845, c++/117880, c++/117925, c++/117985, c++/118060, c++/118069, driver/117942, fortran/84674, fortran/84869, fortran/105054, fortran/109105, fortran/109345, fortran/115070, fortran/115348, fortran/116388, fortran/117730, fortran/117763, fortran/117774, fortran/117791, fortran/117797, fortran/117819, fortran/117820, fortran/117843, fortran/117897, libgomp/117851, libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236, libstdc++/109517, libstdc++/109976, libstdc++/112349, libstdc++/112641, libstdc++/117520, libstdc++/117560, libstdc++/117822, libstdc++/117962, libstdc++/117966, libstdc++/118035, libstdc++/118093, middle-end/43374, middle-end/102674, middle-end/116997, middle-end/117433, middle-end/117458, middle-end/117459, middle-end/117847, middle-end/118024, modula2/114529, modula2/115003, modula2/115057, modula2/115164, modula2/115276, modula2/115328, modula2/115536, modula2/115540, modula2/115804, modula2/115823, modula2/115957, modula2/116048, modula2/116181, modula2/116378, modula2/116557, modula2/116918, modula2/117120, modula2/117371, modula2/117555, modula2/117660, modula2/117904, modula2/117948, other/116603, preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799, rtl-optimization/117095, sanitizer/117960, target/64242, target/114801, target/114942, target/116371, target/116629, target/116999, target/117045, target/117105, target/117304, target/117357, target/117408, target/117418, target/117443, target/117500, target/117525, target/117562, target/117564, target/117642, target/117659, target/117675, target/117744, target/117926, testsuite/103298, testsuite/109360, tree-optimization/94589, tree-optimization/112376, tree-optimization/116463, tree-optimization/117142, tree-optimization/117254, tree-optimization/117307, tree-optimization/117333, tree-optimization/117398, tree-optimization/117417, tree-optimization/117439, tree-optimization/117574, tree-optimization/117594, tree-optimization/117612, tree-optimization/117912 - fix up -freport-bug default (#2330362, RHEL-70192) - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on aarch64 to match upstream (RHEL-74059) - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509) - have gfortran require install-info (RHEL-62417) - bump NVR (RHEL-53492) - do not hide _ZSt21ios_base_library_initv - Drop the sudo wrapper script (RHEL-90066) - don't require gdb on RHEL9 (RHEL-54245) - update to GTS 14 (RHEL-34748) - require GTS 13 packages (#2217520) - Compress man page and fix its name (RHEL-98730) - Man page and documentation updates (RHEL-96023) - Split out scripts into a -runtime package on RHEL10 (RHEL-94841) - New rhel10-specific script to replace scl-enable (RHEL-91830). - Drop the sudo wrapper script. - Split out a devel package to break the dependency look with gts-gcc and gts-binutils. - Drop scl-utils dependency on c10s and later. - new package (RHELPLAN-171625) - Fix a potential illegal memory access when linking a corrupt input file. (RHEL-130670) - Disable bootstrapping. (RHEL-112561) - Avoid using SCL for c10s. - Use system alternatives even for bootstrap. - Initial commit: Import Fedora 42 binutils to GTS-15. - Fix a potential illegal memory access when linking a corrupt input file. (RHEL-130670) - Disable bootstrapping. (RHEL-112561) - Avoid using SCL for c10s. - Use system alternatives even for bootstrap. - Initial commit: Import Fedora 42 binutils to GTS-15. - Fix a potential illegal memory access when linking a corrupt input file. (RHEL-130670) - Disable bootstrapping. (RHEL-112561) - Avoid using SCL for c10s. - Use system alternatives even for bootstrap. - Initial commit: Import Fedora 42 binutils to GTS-15. - Fix a potential illegal memory access when linking a corrupt input file. (RHEL-130670) - Disable bootstrapping. (RHEL-112561) - Avoid using SCL for c10s. - Use system alternatives even for bootstrap. - Initial commit: Import Fedora 42 binutils to GTS-15. - Always inline _M_extract_name (RHEL-150603) - update from releases/gcc-15 branch (RHEL-116513) - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185, ada/123289, ada/123302, ada/123306, ada/123371, ada/123589, analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764, c++/116952, c++/120446, c++/121854, c++/121966, c++/122048, c++/122070, c++/122550, c++/122668, c++/122752, c++/122772, c++/122834, c++/122922, c++/123331, c++/123597, debug/121964, diagnostics/120063, fortran/107406, libfortran/122936, libstdc++/120446, libstdc++/122812, libstdc++/122907, libstdc++/123147, middle-end/111817, middle-end/123107, middle-end/123392, middle-end/123703, rtl-optimization/121773, rtl-optimization/122215, rtl-optimization/123121, rtl-optimization/123523, target/117575, target/119130, target/120250, target/121192, target/121485, target/123022, target/123092, target/123155, target/123217, target/123460, target/123484, target/123489, target/123521, target/123607, target/123742, testsuite/123353, tree-optimization/122793, tree-optimization/122868, tree-optimization/123040, tree-optimization/123300, tree-optimization/123351, tree-optimization/123372, tree-optimization/123431, tree-optimization/123513, tree-optimization/123602, tree-optimization/123736, tree-optimization/123741 - Fix glibc32 build dependency (RHEL-113182) - ship libstdc++.modules.json (RHEL-97095) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-94866) - configure with --enable-host-pie --enable-host-bind-now (RHEL-95564) - re-enable annobin-plugin and offload-nvptx - update from releases/gcc-15 branch - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938, c++/119939, c++/119981, c++/119996, c++/120012, c++/120013, c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891, fortran/102900, fortran/119928, fortran/119986, fortran/120049, fortran/120107, fortran/120139, fortran/120163, fortran/120179, fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146, libfortran/120152, libfortran/120153, libfortran/120158, libfortran/120196, libstdc++/118260, libstdc++/119427, libstdc++/119714, libstdc++/120029, libstdc++/120114, libstdc++/120159, libstdc++/120187, libstdc++/120190, libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914, modula2/119915, modula2/120117, modula2/120188, preprocessor/116047, preprocessor/120061, target/119610, testsuite/119909, tree-optimization/111873, tree-optimization/119712, tree-optimization/120043, tree-optimization/120048, tree-optimization/120074, tree-optimization/120089, tree-optimization/120143, tree-optimization/120211 - update from releases/gcc-15 branch - GCC 15.1 release - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407 - Fix GTS version in package name. - Always inline _M_extract_name (RHEL-150603) - update from releases/gcc-15 branch (RHEL-116513) - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185, ada/123289, ada/123302, ada/123306, ada/123371, ada/123589, analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764, c++/116952, c++/120446, c++/121854, c++/121966, c++/122048, c++/122070, c++/122550, c++/122668, c++/122752, c++/122772, c++/122834, c++/122922, c++/123331, c++/123597, debug/121964, diagnostics/120063, fortran/107406, libfortran/122936, libstdc++/120446, libstdc++/122812, libstdc++/122907, libstdc++/123147, middle-end/111817, middle-end/123107, middle-end/123392, middle-end/123703, rtl-optimization/121773, rtl-optimization/122215, rtl-optimization/123121, rtl-optimization/123523, target/117575, target/119130, target/120250, target/121192, target/121485, target/123022, target/123092, target/123155, target/123217, target/123460, target/123484, target/123489, target/123521, target/123607, target/123742, testsuite/123353, tree-optimization/122793, tree-optimization/122868, tree-optimization/123040, tree-optimization/123300, tree-optimization/123351, tree-optimization/123372, tree-optimization/123431, tree-optimization/123513, tree-optimization/123602, tree-optimization/123736, tree-optimization/123741 - Fix glibc32 build dependency (RHEL-113182) - ship libstdc++.modules.json (RHEL-97095) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-94866) - configure with --enable-host-pie --enable-host-bind-now (RHEL-95564) - re-enable annobin-plugin and offload-nvptx - update from releases/gcc-15 branch - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938, c++/119939, c++/119981, c++/119996, c++/120012, c++/120013, c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891, fortran/102900, fortran/119928, fortran/119986, fortran/120049, fortran/120107, fortran/120139, fortran/120163, fortran/120179, fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146, libfortran/120152, libfortran/120153, libfortran/120158, libfortran/120196, libstdc++/118260, libstdc++/119427, libstdc++/119714, libstdc++/120029, libstdc++/120114, libstdc++/120159, libstdc++/120187, libstdc++/120190, libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914, modula2/119915, modula2/120117, modula2/120188, preprocessor/116047, preprocessor/120061, target/119610, testsuite/119909, tree-optimization/111873, tree-optimization/119712, tree-optimization/120043, tree-optimization/120048, tree-optimization/120074, tree-optimization/120089, tree-optimization/120143, tree-optimization/120211 - update from releases/gcc-15 branch - GCC 15.1 release - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407 - Fix GTS version in package name. - Always inline _M_extract_name (RHEL-150603) - update from releases/gcc-15 branch (RHEL-116513) - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185, ada/123289, ada/123302, ada/123306, ada/123371, ada/123589, analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764, c++/116952, c++/120446, c++/121854, c++/121966, c++/122048, c++/122070, c++/122550, c++/122668, c++/122752, c++/122772, c++/122834, c++/122922, c++/123331, c++/123597, debug/121964, diagnostics/120063, fortran/107406, libfortran/122936, libstdc++/120446, libstdc++/122812, libstdc++/122907, libstdc++/123147, middle-end/111817, middle-end/123107, middle-end/123392, middle-end/123703, rtl-optimization/121773, rtl-optimization/122215, rtl-optimization/123121, rtl-optimization/123523, target/117575, target/119130, target/120250, target/121192, target/121485, target/123022, target/123092, target/123155, target/123217, target/123460, target/123484, target/123489, target/123521, target/123607, target/123742, testsuite/123353, tree-optimization/122793, tree-optimization/122868, tree-optimization/123040, tree-optimization/123300, tree-optimization/123351, tree-optimization/123372, tree-optimization/123431, tree-optimization/123513, tree-optimization/123602, tree-optimization/123736, tree-optimization/123741 - Fix glibc32 build dependency (RHEL-113182) - ship libstdc++.modules.json (RHEL-97095) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-94866) - configure with --enable-host-pie --enable-host-bind-now (RHEL-95564) - re-enable annobin-plugin and offload-nvptx - update from releases/gcc-15 branch - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938, c++/119939, c++/119981, c++/119996, c++/120012, c++/120013, c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891, fortran/102900, fortran/119928, fortran/119986, fortran/120049, fortran/120107, fortran/120139, fortran/120163, fortran/120179, fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146, libfortran/120152, libfortran/120153, libfortran/120158, libfortran/120196, libstdc++/118260, libstdc++/119427, libstdc++/119714, libstdc++/120029, libstdc++/120114, libstdc++/120159, libstdc++/120187, libstdc++/120190, libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914, modula2/119915, modula2/120117, modula2/120188, preprocessor/116047, preprocessor/120061, target/119610, testsuite/119909, tree-optimization/111873, tree-optimization/119712, tree-optimization/120043, tree-optimization/120048, tree-optimization/120074, tree-optimization/120089, tree-optimization/120143, tree-optimization/120211 - update from releases/gcc-15 branch - GCC 15.1 release - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407 - Fix GTS version in package name. - Always inline _M_extract_name (RHEL-150603) - update from releases/gcc-15 branch (RHEL-116513) - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185, ada/123289, ada/123302, ada/123306, ada/123371, ada/123589, analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764, c++/116952, c++/120446, c++/121854, c++/121966, c++/122048, c++/122070, c++/122550, c++/122668, c++/122752, c++/122772, c++/122834, c++/122922, c++/123331, c++/123597, debug/121964, diagnostics/120063, fortran/107406, libfortran/122936, libstdc++/120446, libstdc++/122812, libstdc++/122907, libstdc++/123147, middle-end/111817, middle-end/123107, middle-end/123392, middle-end/123703, rtl-optimization/121773, rtl-optimization/122215, rtl-optimization/123121, rtl-optimization/123523, target/117575, target/119130, target/120250, target/121192, target/121485, target/123022, target/123092, target/123155, target/123217, target/123460, target/123484, target/123489, target/123521, target/123607, target/123742, testsuite/123353, tree-optimization/122793, tree-optimization/122868, tree-optimization/123040, tree-optimization/123300, tree-optimization/123351, tree-optimization/123372, tree-optimization/123431, tree-optimization/123513, tree-optimization/123602, tree-optimization/123736, tree-optimization/123741 - Fix glibc32 build dependency (RHEL-113182) - ship libstdc++.modules.json (RHEL-97095) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-94866) - configure with --enable-host-pie --enable-host-bind-now (RHEL-95564) - re-enable annobin-plugin and offload-nvptx - update from releases/gcc-15 branch - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938, c++/119939, c++/119981, c++/119996, c++/120012, c++/120013, c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891, fortran/102900, fortran/119928, fortran/119986, fortran/120049, fortran/120107, fortran/120139, fortran/120163, fortran/120179, fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146, libfortran/120152, libfortran/120153, libfortran/120158, libfortran/120196, libstdc++/118260, libstdc++/119427, libstdc++/119714, libstdc++/120029, libstdc++/120114, libstdc++/120159, libstdc++/120187, libstdc++/120190, libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914, modula2/119915, modula2/120117, modula2/120188, preprocessor/116047, preprocessor/120061, target/119610, testsuite/119909, tree-optimization/111873, tree-optimization/119712, tree-optimization/120043, tree-optimization/120048, tree-optimization/120074, tree-optimization/120089, tree-optimization/120143, tree-optimization/120211 - update from releases/gcc-15 branch - GCC 15.1 release - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407 - Fix GTS version in package name. - Always inline _M_extract_name (RHEL-150603) - update from releases/gcc-15 branch (RHEL-116513) - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185, ada/123289, ada/123302, ada/123306, ada/123371, ada/123589, analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764, c++/116952, c++/120446, c++/121854, c++/121966, c++/122048, c++/122070, c++/122550, c++/122668, c++/122752, c++/122772, c++/122834, c++/122922, c++/123331, c++/123597, debug/121964, diagnostics/120063, fortran/107406, libfortran/122936, libstdc++/120446, libstdc++/122812, libstdc++/122907, libstdc++/123147, middle-end/111817, middle-end/123107, middle-end/123392, middle-end/123703, rtl-optimization/121773, rtl-optimization/122215, rtl-optimization/123121, rtl-optimization/123523, target/117575, target/119130, target/120250, target/121192, target/121485, target/123022, target/123092, target/123155, target/123217, target/123460, target/123484, target/123489, target/123521, target/123607, target/123742, testsuite/123353, tree-optimization/122793, tree-optimization/122868, tree-optimization/123040, tree-optimization/123300, tree-optimization/123351, tree-optimization/123372, tree-optimization/123431, tree-optimization/123513, tree-optimization/123602, tree-optimization/123736, tree-optimization/123741 - Fix glibc32 build dependency (RHEL-113182) - ship libstdc++.modules.json (RHEL-97095) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-94866) - configure with --enable-host-pie --enable-host-bind-now (RHEL-95564) - re-enable annobin-plugin and offload-nvptx - update from releases/gcc-15 branch - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938, c++/119939, c++/119981, c++/119996, c++/120012, c++/120013, c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891, fortran/102900, fortran/119928, fortran/119986, fortran/120049, fortran/120107, fortran/120139, fortran/120163, fortran/120179, fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146, libfortran/120152, libfortran/120153, libfortran/120158, libfortran/120196, libstdc++/118260, libstdc++/119427, libstdc++/119714, libstdc++/120029, libstdc++/120114, libstdc++/120159, libstdc++/120187, libstdc++/120190, libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914, modula2/119915, modula2/120117, modula2/120188, preprocessor/116047, preprocessor/120061, target/119610, testsuite/119909, tree-optimization/111873, tree-optimization/119712, tree-optimization/120043, tree-optimization/120048, tree-optimization/120074, tree-optimization/120089, tree-optimization/120143, tree-optimization/120211 - update from releases/gcc-15 branch - GCC 15.1 release - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407 - Fix GTS version in package name. - Always inline _M_extract_name (RHEL-150603) - update from releases/gcc-15 branch (RHEL-116513) - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185, ada/123289, ada/123302, ada/123306, ada/123371, ada/123589, analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764, c++/116952, c++/120446, c++/121854, c++/121966, c++/122048, c++/122070, c++/122550, c++/122668, c++/122752, c++/122772, c++/122834, c++/122922, c++/123331, c++/123597, debug/121964, diagnostics/120063, fortran/107406, libfortran/122936, libstdc++/120446, libstdc++/122812, libstdc++/122907, libstdc++/123147, middle-end/111817, middle-end/123107, middle-end/123392, middle-end/123703, rtl-optimization/121773, rtl-optimization/122215, rtl-optimization/123121, rtl-optimization/123523, target/117575, target/119130, target/120250, target/121192, target/121485, target/123022, target/123092, target/123155, target/123217, target/123460, target/123484, target/123489, target/123521, target/123607, target/123742, testsuite/123353, tree-optimization/122793, tree-optimization/122868, tree-optimization/123040, tree-optimization/123300, tree-optimization/123351, tree-optimization/123372, tree-optimization/123431, tree-optimization/123513, tree-optimization/123602, tree-optimization/123736, tree-optimization/123741 - Fix glibc32 build dependency (RHEL-113182) - ship libstdc++.modules.json (RHEL-97095) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-94866) - configure with --enable-host-pie --enable-host-bind-now (RHEL-95564) - re-enable annobin-plugin and offload-nvptx - update from releases/gcc-15 branch - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938, c++/119939, c++/119981, c++/119996, c++/120012, c++/120013, c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891, fortran/102900, fortran/119928, fortran/119986, fortran/120049, fortran/120107, fortran/120139, fortran/120163, fortran/120179, fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146, libfortran/120152, libfortran/120153, libfortran/120158, libfortran/120196, libstdc++/118260, libstdc++/119427, libstdc++/119714, libstdc++/120029, libstdc++/120114, libstdc++/120159, libstdc++/120187, libstdc++/120190, libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914, modula2/119915, modula2/120117, modula2/120188, preprocessor/116047, preprocessor/120061, target/119610, testsuite/119909, tree-optimization/111873, tree-optimization/119712, tree-optimization/120043, tree-optimization/120048, tree-optimization/120074, tree-optimization/120089, tree-optimization/120143, tree-optimization/120211 - update from releases/gcc-15 branch - GCC 15.1 release - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407 - Fix GTS version in package name. - Always inline _M_extract_name (RHEL-150603) - update from releases/gcc-15 branch (RHEL-116513) - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185, ada/123289, ada/123302, ada/123306, ada/123371, ada/123589, analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764, c++/116952, c++/120446, c++/121854, c++/121966, c++/122048, c++/122070, c++/122550, c++/122668, c++/122752, c++/122772, c++/122834, c++/122922, c++/123331, c++/123597, debug/121964, diagnostics/120063, fortran/107406, libfortran/122936, libstdc++/120446, libstdc++/122812, libstdc++/122907, libstdc++/123147, middle-end/111817, middle-end/123107, middle-end/123392, middle-end/123703, rtl-optimization/121773, rtl-optimization/122215, rtl-optimization/123121, rtl-optimization/123523, target/117575, target/119130, target/120250, target/121192, target/121485, target/123022, target/123092, target/123155, target/123217, target/123460, target/123484, target/123489, target/123521, target/123607, target/123742, testsuite/123353, tree-optimization/122793, tree-optimization/122868, tree-optimization/123040, tree-optimization/123300, tree-optimization/123351, tree-optimization/123372, tree-optimization/123431, tree-optimization/123513, tree-optimization/123602, tree-optimization/123736, tree-optimization/123741 - Fix glibc32 build dependency (RHEL-113182) - ship libstdc++.modules.json (RHEL-97095) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-94866) - configure with --enable-host-pie --enable-host-bind-now (RHEL-95564) - re-enable annobin-plugin and offload-nvptx - update from releases/gcc-15 branch - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938, c++/119939, c++/119981, c++/119996, c++/120012, c++/120013, c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891, fortran/102900, fortran/119928, fortran/119986, fortran/120049, fortran/120107, fortran/120139, fortran/120163, fortran/120179, fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146, libfortran/120152, libfortran/120153, libfortran/120158, libfortran/120196, libstdc++/118260, libstdc++/119427, libstdc++/119714, libstdc++/120029, libstdc++/120114, libstdc++/120159, libstdc++/120187, libstdc++/120190, libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914, modula2/119915, modula2/120117, modula2/120188, preprocessor/116047, preprocessor/120061, target/119610, testsuite/119909, tree-optimization/111873, tree-optimization/119712, tree-optimization/120043, tree-optimization/120048, tree-optimization/120074, tree-optimization/120089, tree-optimization/120143, tree-optimization/120211 - update from releases/gcc-15 branch - GCC 15.1 release - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407 - Fix GTS version in package name. - Always inline _M_extract_name (RHEL-150603) - update from releases/gcc-15 branch (RHEL-116513) - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185, ada/123289, ada/123302, ada/123306, ada/123371, ada/123589, analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764, c++/116952, c++/120446, c++/121854, c++/121966, c++/122048, c++/122070, c++/122550, c++/122668, c++/122752, c++/122772, c++/122834, c++/122922, c++/123331, c++/123597, debug/121964, diagnostics/120063, fortran/107406, libfortran/122936, libstdc++/120446, libstdc++/122812, libstdc++/122907, libstdc++/123147, middle-end/111817, middle-end/123107, middle-end/123392, middle-end/123703, rtl-optimization/121773, rtl-optimization/122215, rtl-optimization/123121, rtl-optimization/123523, target/117575, target/119130, target/120250, target/121192, target/121485, target/123022, target/123092, target/123155, target/123217, target/123460, target/123484, target/123489, target/123521, target/123607, target/123742, testsuite/123353, tree-optimization/122793, tree-optimization/122868, tree-optimization/123040, tree-optimization/123300, tree-optimization/123351, tree-optimization/123372, tree-optimization/123431, tree-optimization/123513, tree-optimization/123602, tree-optimization/123736, tree-optimization/123741 - Fix glibc32 build dependency (RHEL-113182) - ship libstdc++.modules.json (RHEL-97095) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-94866) - configure with --enable-host-pie --enable-host-bind-now (RHEL-95564) - re-enable annobin-plugin and offload-nvptx - update from releases/gcc-15 branch - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938, c++/119939, c++/119981, c++/119996, c++/120012, c++/120013, c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891, fortran/102900, fortran/119928, fortran/119986, fortran/120049, fortran/120107, fortran/120139, fortran/120163, fortran/120179, fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146, libfortran/120152, libfortran/120153, libfortran/120158, libfortran/120196, libstdc++/118260, libstdc++/119427, libstdc++/119714, libstdc++/120029, libstdc++/120114, libstdc++/120159, libstdc++/120187, libstdc++/120190, libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914, modula2/119915, modula2/120117, modula2/120188, preprocessor/116047, preprocessor/120061, target/119610, testsuite/119909, tree-optimization/111873, tree-optimization/119712, tree-optimization/120043, tree-optimization/120048, tree-optimization/120074, tree-optimization/120089, tree-optimization/120143, tree-optimization/120211 - update from releases/gcc-15 branch - GCC 15.1 release - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407 - Fix GTS version in package name. - Always inline _M_extract_name (RHEL-150603) - update from releases/gcc-15 branch (RHEL-116513) - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185, ada/123289, ada/123302, ada/123306, ada/123371, ada/123589, analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764, c++/116952, c++/120446, c++/121854, c++/121966, c++/122048, c++/122070, c++/122550, c++/122668, c++/122752, c++/122772, c++/122834, c++/122922, c++/123331, c++/123597, debug/121964, diagnostics/120063, fortran/107406, libfortran/122936, libstdc++/120446, libstdc++/122812, libstdc++/122907, libstdc++/123147, middle-end/111817, middle-end/123107, middle-end/123392, middle-end/123703, rtl-optimization/121773, rtl-optimization/122215, rtl-optimization/123121, rtl-optimization/123523, target/117575, target/119130, target/120250, target/121192, target/121485, target/123022, target/123092, target/123155, target/123217, target/123460, target/123484, target/123489, target/123521, target/123607, target/123742, testsuite/123353, tree-optimization/122793, tree-optimization/122868, tree-optimization/123040, tree-optimization/123300, tree-optimization/123351, tree-optimization/123372, tree-optimization/123431, tree-optimization/123513, tree-optimization/123602, tree-optimization/123736, tree-optimization/123741 - Fix glibc32 build dependency (RHEL-113182) - ship libstdc++.modules.json (RHEL-97095) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-94866) - configure with --enable-host-pie --enable-host-bind-now (RHEL-95564) - re-enable annobin-plugin and offload-nvptx - update from releases/gcc-15 branch - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938, c++/119939, c++/119981, c++/119996, c++/120012, c++/120013, c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891, fortran/102900, fortran/119928, fortran/119986, fortran/120049, fortran/120107, fortran/120139, fortran/120163, fortran/120179, fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146, libfortran/120152, libfortran/120153, libfortran/120158, libfortran/120196, libstdc++/118260, libstdc++/119427, libstdc++/119714, libstdc++/120029, libstdc++/120114, libstdc++/120159, libstdc++/120187, libstdc++/120190, libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914, modula2/119915, modula2/120117, modula2/120188, preprocessor/116047, preprocessor/120061, target/119610, testsuite/119909, tree-optimization/111873, tree-optimization/119712, tree-optimization/120043, tree-optimization/120048, tree-optimization/120074, tree-optimization/120089, tree-optimization/120143, tree-optimization/120211 - update from releases/gcc-15 branch - GCC 15.1 release - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407 - Fix GTS version in package name. - Always inline _M_extract_name (RHEL-150603) - update from releases/gcc-15 branch (RHEL-116513) - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185, ada/123289, ada/123302, ada/123306, ada/123371, ada/123589, analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764, c++/116952, c++/120446, c++/121854, c++/121966, c++/122048, c++/122070, c++/122550, c++/122668, c++/122752, c++/122772, c++/122834, c++/122922, c++/123331, c++/123597, debug/121964, diagnostics/120063, fortran/107406, libfortran/122936, libstdc++/120446, libstdc++/122812, libstdc++/122907, libstdc++/123147, middle-end/111817, middle-end/123107, middle-end/123392, middle-end/123703, rtl-optimization/121773, rtl-optimization/122215, rtl-optimization/123121, rtl-optimization/123523, target/117575, target/119130, target/120250, target/121192, target/121485, target/123022, target/123092, target/123155, target/123217, target/123460, target/123484, target/123489, target/123521, target/123607, target/123742, testsuite/123353, tree-optimization/122793, tree-optimization/122868, tree-optimization/123040, tree-optimization/123300, tree-optimization/123351, tree-optimization/123372, tree-optimization/123431, tree-optimization/123513, tree-optimization/123602, tree-optimization/123736, tree-optimization/123741 - Fix glibc32 build dependency (RHEL-113182) - ship libstdc++.modules.json (RHEL-97095) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-94866) - configure with --enable-host-pie --enable-host-bind-now (RHEL-95564) - re-enable annobin-plugin and offload-nvptx - update from releases/gcc-15 branch - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938, c++/119939, c++/119981, c++/119996, c++/120012, c++/120013, c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891, fortran/102900, fortran/119928, fortran/119986, fortran/120049, fortran/120107, fortran/120139, fortran/120163, fortran/120179, fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146, libfortran/120152, libfortran/120153, libfortran/120158, libfortran/120196, libstdc++/118260, libstdc++/119427, libstdc++/119714, libstdc++/120029, libstdc++/120114, libstdc++/120159, libstdc++/120187, libstdc++/120190, libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914, modula2/119915, modula2/120117, modula2/120188, preprocessor/116047, preprocessor/120061, target/119610, testsuite/119909, tree-optimization/111873, tree-optimization/119712, tree-optimization/120043, tree-optimization/120048, tree-optimization/120074, tree-optimization/120089, tree-optimization/120143, tree-optimization/120211 - update from releases/gcc-15 branch - GCC 15.1 release - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407 - Fix GTS version in package name. - Always inline _M_extract_name (RHEL-150603) - update from releases/gcc-15 branch (RHEL-116513) - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185, ada/123289, ada/123302, ada/123306, ada/123371, ada/123589, analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764, c++/116952, c++/120446, c++/121854, c++/121966, c++/122048, c++/122070, c++/122550, c++/122668, c++/122752, c++/122772, c++/122834, c++/122922, c++/123331, c++/123597, debug/121964, diagnostics/120063, fortran/107406, libfortran/122936, libstdc++/120446, libstdc++/122812, libstdc++/122907, libstdc++/123147, middle-end/111817, middle-end/123107, middle-end/123392, middle-end/123703, rtl-optimization/121773, rtl-optimization/122215, rtl-optimization/123121, rtl-optimization/123523, target/117575, target/119130, target/120250, target/121192, target/121485, target/123022, target/123092, target/123155, target/123217, target/123460, target/123484, target/123489, target/123521, target/123607, target/123742, testsuite/123353, tree-optimization/122793, tree-optimization/122868, tree-optimization/123040, tree-optimization/123300, tree-optimization/123351, tree-optimization/123372, tree-optimization/123431, tree-optimization/123513, tree-optimization/123602, tree-optimization/123736, tree-optimization/123741 - Fix glibc32 build dependency (RHEL-113182) - ship libstdc++.modules.json (RHEL-97095) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-94866) - configure with --enable-host-pie --enable-host-bind-now (RHEL-95564) - re-enable annobin-plugin and offload-nvptx - update from releases/gcc-15 branch - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938, c++/119939, c++/119981, c++/119996, c++/120012, c++/120013, c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891, fortran/102900, fortran/119928, fortran/119986, fortran/120049, fortran/120107, fortran/120139, fortran/120163, fortran/120179, fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146, libfortran/120152, libfortran/120153, libfortran/120158, libfortran/120196, libstdc++/118260, libstdc++/119427, libstdc++/119714, libstdc++/120029, libstdc++/120114, libstdc++/120159, libstdc++/120187, libstdc++/120190, libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914, modula2/119915, modula2/120117, modula2/120188, preprocessor/116047, preprocessor/120061, target/119610, testsuite/119909, tree-optimization/111873, tree-optimization/119712, tree-optimization/120043, tree-optimization/120048, tree-optimization/120074, tree-optimization/120089, tree-optimization/120143, tree-optimization/120211 - update from releases/gcc-15 branch - GCC 15.1 release - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407 - Fix GTS version in package name. - Always inline _M_extract_name (RHEL-150603) - update from releases/gcc-15 branch (RHEL-116513) - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185, ada/123289, ada/123302, ada/123306, ada/123371, ada/123589, analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764, c++/116952, c++/120446, c++/121854, c++/121966, c++/122048, c++/122070, c++/122550, c++/122668, c++/122752, c++/122772, c++/122834, c++/122922, c++/123331, c++/123597, debug/121964, diagnostics/120063, fortran/107406, libfortran/122936, libstdc++/120446, libstdc++/122812, libstdc++/122907, libstdc++/123147, middle-end/111817, middle-end/123107, middle-end/123392, middle-end/123703, rtl-optimization/121773, rtl-optimization/122215, rtl-optimization/123121, rtl-optimization/123523, target/117575, target/119130, target/120250, target/121192, target/121485, target/123022, target/123092, target/123155, target/123217, target/123460, target/123484, target/123489, target/123521, target/123607, target/123742, testsuite/123353, tree-optimization/122793, tree-optimization/122868, tree-optimization/123040, tree-optimization/123300, tree-optimization/123351, tree-optimization/123372, tree-optimization/123431, tree-optimization/123513, tree-optimization/123602, tree-optimization/123736, tree-optimization/123741 - Fix glibc32 build dependency (RHEL-113182) - ship libstdc++.modules.json (RHEL-97095) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-94866) - configure with --enable-host-pie --enable-host-bind-now (RHEL-95564) - re-enable annobin-plugin and offload-nvptx - update from releases/gcc-15 branch - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938, c++/119939, c++/119981, c++/119996, c++/120012, c++/120013, c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891, fortran/102900, fortran/119928, fortran/119986, fortran/120049, fortran/120107, fortran/120139, fortran/120163, fortran/120179, fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146, libfortran/120152, libfortran/120153, libfortran/120158, libfortran/120196, libstdc++/118260, libstdc++/119427, libstdc++/119714, libstdc++/120029, libstdc++/120114, libstdc++/120159, libstdc++/120187, libstdc++/120190, libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914, modula2/119915, modula2/120117, modula2/120188, preprocessor/116047, preprocessor/120061, target/119610, testsuite/119909, tree-optimization/111873, tree-optimization/119712, tree-optimization/120043, tree-optimization/120048, tree-optimization/120074, tree-optimization/120089, tree-optimization/120143, tree-optimization/120211 - update from releases/gcc-15 branch - GCC 15.1 release - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407 - Fix GTS version in package name. - Always inline _M_extract_name (RHEL-150603) - update from releases/gcc-15 branch (RHEL-116513) - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185, ada/123289, ada/123302, ada/123306, ada/123371, ada/123589, analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764, c++/116952, c++/120446, c++/121854, c++/121966, c++/122048, c++/122070, c++/122550, c++/122668, c++/122752, c++/122772, c++/122834, c++/122922, c++/123331, c++/123597, debug/121964, diagnostics/120063, fortran/107406, libfortran/122936, libstdc++/120446, libstdc++/122812, libstdc++/122907, libstdc++/123147, middle-end/111817, middle-end/123107, middle-end/123392, middle-end/123703, rtl-optimization/121773, rtl-optimization/122215, rtl-optimization/123121, rtl-optimization/123523, target/117575, target/119130, target/120250, target/121192, target/121485, target/123022, target/123092, target/123155, target/123217, target/123460, target/123484, target/123489, target/123521, target/123607, target/123742, testsuite/123353, tree-optimization/122793, tree-optimization/122868, tree-optimization/123040, tree-optimization/123300, tree-optimization/123351, tree-optimization/123372, tree-optimization/123431, tree-optimization/123513, tree-optimization/123602, tree-optimization/123736, tree-optimization/123741 - Fix glibc32 build dependency (RHEL-113182) - ship libstdc++.modules.json (RHEL-97095) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-94866) - configure with --enable-host-pie --enable-host-bind-now (RHEL-95564) - re-enable annobin-plugin and offload-nvptx - update from releases/gcc-15 branch - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938, c++/119939, c++/119981, c++/119996, c++/120012, c++/120013, c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891, fortran/102900, fortran/119928, fortran/119986, fortran/120049, fortran/120107, fortran/120139, fortran/120163, fortran/120179, fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146, libfortran/120152, libfortran/120153, libfortran/120158, libfortran/120196, libstdc++/118260, libstdc++/119427, libstdc++/119714, libstdc++/120029, libstdc++/120114, libstdc++/120159, libstdc++/120187, libstdc++/120190, libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914, modula2/119915, modula2/120117, modula2/120188, preprocessor/116047, preprocessor/120061, target/119610, testsuite/119909, tree-optimization/111873, tree-optimization/119712, tree-optimization/120043, tree-optimization/120048, tree-optimization/120074, tree-optimization/120089, tree-optimization/120143, tree-optimization/120211 - update from releases/gcc-15 branch - GCC 15.1 release - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407 - Fix GTS version in package name. - Always inline _M_extract_name (RHEL-150603) - update from releases/gcc-15 branch (RHEL-116513) - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185, ada/123289, ada/123302, ada/123306, ada/123371, ada/123589, analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764, c++/116952, c++/120446, c++/121854, c++/121966, c++/122048, c++/122070, c++/122550, c++/122668, c++/122752, c++/122772, c++/122834, c++/122922, c++/123331, c++/123597, debug/121964, diagnostics/120063, fortran/107406, libfortran/122936, libstdc++/120446, libstdc++/122812, libstdc++/122907, libstdc++/123147, middle-end/111817, middle-end/123107, middle-end/123392, middle-end/123703, rtl-optimization/121773, rtl-optimization/122215, rtl-optimization/123121, rtl-optimization/123523, target/117575, target/119130, target/120250, target/121192, target/121485, target/123022, target/123092, target/123155, target/123217, target/123460, target/123484, target/123489, target/123521, target/123607, target/123742, testsuite/123353, tree-optimization/122793, tree-optimization/122868, tree-optimization/123040, tree-optimization/123300, tree-optimization/123351, tree-optimization/123372, tree-optimization/123431, tree-optimization/123513, tree-optimization/123602, tree-optimization/123736, tree-optimization/123741 - Fix glibc32 build dependency (RHEL-113182) - ship libstdc++.modules.json (RHEL-97095) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-94866) - configure with --enable-host-pie --enable-host-bind-now (RHEL-95564) - re-enable annobin-plugin and offload-nvptx - update from releases/gcc-15 branch - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938, c++/119939, c++/119981, c++/119996, c++/120012, c++/120013, c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891, fortran/102900, fortran/119928, fortran/119986, fortran/120049, fortran/120107, fortran/120139, fortran/120163, fortran/120179, fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146, libfortran/120152, libfortran/120153, libfortran/120158, libfortran/120196, libstdc++/118260, libstdc++/119427, libstdc++/119714, libstdc++/120029, libstdc++/120114, libstdc++/120159, libstdc++/120187, libstdc++/120190, libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914, modula2/119915, modula2/120117, modula2/120188, preprocessor/116047, preprocessor/120061, target/119610, testsuite/119909, tree-optimization/111873, tree-optimization/119712, tree-optimization/120043, tree-optimization/120048, tree-optimization/120074, tree-optimization/120089, tree-optimization/120143, tree-optimization/120211 - update from releases/gcc-15 branch - GCC 15.1 release - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407 - Fix GTS version in package name. - Always inline _M_extract_name (RHEL-150603) - update from releases/gcc-15 branch (RHEL-116513) - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185, ada/123289, ada/123302, ada/123306, ada/123371, ada/123589, analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764, c++/116952, c++/120446, c++/121854, c++/121966, c++/122048, c++/122070, c++/122550, c++/122668, c++/122752, c++/122772, c++/122834, c++/122922, c++/123331, c++/123597, debug/121964, diagnostics/120063, fortran/107406, libfortran/122936, libstdc++/120446, libstdc++/122812, libstdc++/122907, libstdc++/123147, middle-end/111817, middle-end/123107, middle-end/123392, middle-end/123703, rtl-optimization/121773, rtl-optimization/122215, rtl-optimization/123121, rtl-optimization/123523, target/117575, target/119130, target/120250, target/121192, target/121485, target/123022, target/123092, target/123155, target/123217, target/123460, target/123484, target/123489, target/123521, target/123607, target/123742, testsuite/123353, tree-optimization/122793, tree-optimization/122868, tree-optimization/123040, tree-optimization/123300, tree-optimization/123351, tree-optimization/123372, tree-optimization/123431, tree-optimization/123513, tree-optimization/123602, tree-optimization/123736, tree-optimization/123741 - Fix glibc32 build dependency (RHEL-113182) - ship libstdc++.modules.json (RHEL-97095) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-94866) - configure with --enable-host-pie --enable-host-bind-now (RHEL-95564) - re-enable annobin-plugin and offload-nvptx - update from releases/gcc-15 branch - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938, c++/119939, c++/119981, c++/119996, c++/120012, c++/120013, c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891, fortran/102900, fortran/119928, fortran/119986, fortran/120049, fortran/120107, fortran/120139, fortran/120163, fortran/120179, fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146, libfortran/120152, libfortran/120153, libfortran/120158, libfortran/120196, libstdc++/118260, libstdc++/119427, libstdc++/119714, libstdc++/120029, libstdc++/120114, libstdc++/120159, libstdc++/120187, libstdc++/120190, libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914, modula2/119915, modula2/120117, modula2/120188, preprocessor/116047, preprocessor/120061, target/119610, testsuite/119909, tree-optimization/111873, tree-optimization/119712, tree-optimization/120043, tree-optimization/120048, tree-optimization/120074, tree-optimization/120089, tree-optimization/120143, tree-optimization/120211 - update from releases/gcc-15 branch - GCC 15.1 release - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407 - Fix GTS version in package name. - Compress man page and fix its name (RHEL-98730) - Man page and documentation updates (RHEL-96023) - Split out scripts into a -runtime package on RHEL10 (RHEL-94841) - New rhel10-specific script to replace scl-enable (RHEL-91830). - Drop the sudo wrapper script. - Split out a devel package to break the dependency look with gts-gcc and gts-binutils. - Drop scl-utils dependency on c10s and later. - new package (RHELPLAN-171625) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 3.40.0 - Tighten soname globs - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 3.38.1 - Avoid BuildRequiring vala twice - Update to 3.38.0 - Update to 3.37.91 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 3.36.0 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 3.40.0 - Tighten soname globs - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 3.38.1 - Avoid BuildRequiring vala twice - Update to 3.38.0 - Update to 3.37.91 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 3.36.0 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 3.40.0 - Tighten soname globs - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 3.38.1 - Avoid BuildRequiring vala twice - Update to 3.38.0 - Update to 3.37.91 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 3.36.0 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Add condition if fedora for packages not available in RHEL - enable avif support - use bcond - rebase to version 2.3.2 - Upstream released new version 2.3.1 - patch bug615 is no more needed - fixed by upstream in release - gdimagestring16/gdimagestring16 gdimagestringup16/gdimagestringup16 passed on x390s - XFAIL_TEST definition for x390s is no more necessary - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - fix gdImageStringFT() fails for empty strings https://github.com/libgd/libgd/issues/615 - update to 2.3.0 - add dependency on libraqm - remove gdlib-config - Add patch(gd-2.2.5-null-pointer.patch) - fix Null pointer reference in gdImageClone (gdImagePtr src) - Resolves: #1599032 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fix buffer overflow and use of uninitialized memory in GIF decoding (CVE-2026-9672) Related: RHEL-259613 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Add condition if fedora for packages not available in RHEL - enable avif support - use bcond - rebase to version 2.3.2 - Upstream released new version 2.3.1 - patch bug615 is no more needed - fixed by upstream in release - gdimagestring16/gdimagestring16 gdimagestringup16/gdimagestringup16 passed on x390s - XFAIL_TEST definition for x390s is no more necessary - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - fix gdImageStringFT() fails for empty strings https://github.com/libgd/libgd/issues/615 - update to 2.3.0 - add dependency on libraqm - remove gdlib-config - Add patch(gd-2.2.5-null-pointer.patch) - fix Null pointer reference in gdImageClone (gdImagePtr src) - Resolves: #1599032 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fix buffer overflow and use of uninitialized memory in GIF decoding (CVE-2026-9672) Related: RHEL-259613 - Rebuilt for Python 3.14 - Fix *.py scripts packaging - Update to 3.10.3 - Enable blosc - Rebuild (poppler) - Add definitions of missing int16_t and int32_t - Rebuild for libarrow 19 in poppler's sidetag - Update to 3.10.2 - Rebuilt for libarrow 19 - Rebuild (poppler) - Rebuilt for Python 3.14 - Fix *.py scripts packaging - Update to 3.10.3 - Enable blosc - Rebuild (poppler) - Add definitions of missing int16_t and int32_t - Rebuild for libarrow 19 in poppler's sidetag - Update to 3.10.2 - Rebuilt for libarrow 19 - Rebuild (poppler) - Backport "Fix out-of-bounds write in read_member_functions" (Tom de Vries, RHEL-190107) - Include gdb-index-generation-fixes.patch (renamed). (Tom Tromey and Andrew Burgess, RHEL-86890) - Backport amd64 decoding fixes Resolves: RHEL-93850 - Rebase RHEL 9's GDB from 14.2 to 16.3 Resolves: RHEL-91381 Resolves: RHEL-50069 - Rebase to FSF GDB 16.3. Deleted: gdb-rhbz2354997-gstack-drop-readnever.patch - Backport "Fix gstack issues" from upstream. (Keith Seitz, RH BZ 2354997) - Bump the release number. - Rebase to FSF GDB 16.2. Dropped: gdb-backport-buildid-related-changes.patch gdb-catchpoint-re-set.patch gdb-remove-qnx-neutrino-support.patch Modified: gdb-add-rpm-suggestion-script.patch - Remove upstreamed gdb-6.3-gstack-20050411.patch. - remove gdb-test-bt-cfi-without-die.patch. This test has been accepted upstream and will make its way back to testing with the GDB 17 release. - Include gdb-index-generation-fixes.patch (renamed). (Tom Tromey and Andrew Burgess, RHEL-86890) - Backport amd64 decoding fixes Resolves: RHEL-93850 - Rebase RHEL 9's GDB from 14.2 to 16.3 Resolves: RHEL-91381 Resolves: RHEL-50069 - Rebase to FSF GDB 16.3. Deleted: gdb-rhbz2354997-gstack-drop-readnever.patch - Backport "Fix gstack issues" from upstream. (Keith Seitz, RH BZ 2354997) - Bump the release number. - Rebase to FSF GDB 16.2. Dropped: gdb-backport-buildid-related-changes.patch gdb-catchpoint-re-set.patch gdb-remove-qnx-neutrino-support.patch Modified: gdb-add-rpm-suggestion-script.patch - Remove upstreamed gdb-6.3-gstack-20050411.patch. - remove gdb-test-bt-cfi-without-die.patch. This test has been accepted upstream and will make its way back to testing with the GDB 17 release. - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Backport "Fix out-of-bounds write in read_member_functions" (Tom de Vries, RHEL-190107) - Include gdb-index-generation-fixes.patch (renamed). (Tom Tromey and Andrew Burgess, RHEL-86890) - Backport amd64 decoding fixes Resolves: RHEL-93850 - Rebase RHEL 9's GDB from 14.2 to 16.3 Resolves: RHEL-91381 Resolves: RHEL-50069 - Rebase to FSF GDB 16.3. Deleted: gdb-rhbz2354997-gstack-drop-readnever.patch - Backport "Fix gstack issues" from upstream. (Keith Seitz, RH BZ 2354997) - Bump the release number. - Rebase to FSF GDB 16.2. Dropped: gdb-backport-buildid-related-changes.patch gdb-catchpoint-re-set.patch gdb-remove-qnx-neutrino-support.patch Modified: gdb-add-rpm-suggestion-script.patch - Remove upstreamed gdb-6.3-gstack-20050411.patch. - remove gdb-test-bt-cfi-without-die.patch. This test has been accepted upstream and will make its way back to testing with the GDB 17 release. - Include gdb-index-generation-fixes.patch (renamed). (Tom Tromey and Andrew Burgess, RHEL-86890) - Backport amd64 decoding fixes Resolves: RHEL-93850 - Rebase RHEL 9's GDB from 14.2 to 16.3 Resolves: RHEL-91381 Resolves: RHEL-50069 - Rebase to FSF GDB 16.3. Deleted: gdb-rhbz2354997-gstack-drop-readnever.patch - Backport "Fix gstack issues" from upstream. (Keith Seitz, RH BZ 2354997) - Bump the release number. - Rebase to FSF GDB 16.2. Dropped: gdb-backport-buildid-related-changes.patch gdb-catchpoint-re-set.patch gdb-remove-qnx-neutrino-support.patch Modified: gdb-add-rpm-suggestion-script.patch - Remove upstreamed gdb-6.3-gstack-20050411.patch. - remove gdb-test-bt-cfi-without-die.patch. This test has been accepted upstream and will make its way back to testing with the GDB 17 release. - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Backport "Fix out-of-bounds write in read_member_functions" (Tom de Vries, RHEL-190107) - Include gdb-index-generation-fixes.patch (renamed). (Tom Tromey and Andrew Burgess, RHEL-86890) - Backport amd64 decoding fixes Resolves: RHEL-93850 - Rebase RHEL 9's GDB from 14.2 to 16.3 Resolves: RHEL-91381 Resolves: RHEL-50069 - Rebase to FSF GDB 16.3. Deleted: gdb-rhbz2354997-gstack-drop-readnever.patch - Backport "Fix gstack issues" from upstream. (Keith Seitz, RH BZ 2354997) - Bump the release number. - Rebase to FSF GDB 16.2. Dropped: gdb-backport-buildid-related-changes.patch gdb-catchpoint-re-set.patch gdb-remove-qnx-neutrino-support.patch Modified: gdb-add-rpm-suggestion-script.patch - Remove upstreamed gdb-6.3-gstack-20050411.patch. - remove gdb-test-bt-cfi-without-die.patch. This test has been accepted upstream and will make its way back to testing with the GDB 17 release. - Include gdb-index-generation-fixes.patch (renamed). (Tom Tromey and Andrew Burgess, RHEL-86890) - Backport amd64 decoding fixes Resolves: RHEL-93850 - Rebase RHEL 9's GDB from 14.2 to 16.3 Resolves: RHEL-91381 Resolves: RHEL-50069 - Rebase to FSF GDB 16.3. Deleted: gdb-rhbz2354997-gstack-drop-readnever.patch - Backport "Fix gstack issues" from upstream. (Keith Seitz, RH BZ 2354997) - Bump the release number. - Rebase to FSF GDB 16.2. Dropped: gdb-backport-buildid-related-changes.patch gdb-catchpoint-re-set.patch gdb-remove-qnx-neutrino-support.patch Modified: gdb-add-rpm-suggestion-script.patch - Remove upstreamed gdb-6.3-gstack-20050411.patch. - remove gdb-test-bt-cfi-without-die.patch. This test has been accepted upstream and will make its way back to testing with the GDB 17 release. - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Backport "Fix out-of-bounds write in read_member_functions" (Tom de Vries, RHEL-190107) - Include gdb-index-generation-fixes.patch (renamed). (Tom Tromey and Andrew Burgess, RHEL-86890) - Backport amd64 decoding fixes Resolves: RHEL-93850 - Rebase RHEL 9's GDB from 14.2 to 16.3 Resolves: RHEL-91381 Resolves: RHEL-50069 - Rebase to FSF GDB 16.3. Deleted: gdb-rhbz2354997-gstack-drop-readnever.patch - Backport "Fix gstack issues" from upstream. (Keith Seitz, RH BZ 2354997) - Bump the release number. - Rebase to FSF GDB 16.2. Dropped: gdb-backport-buildid-related-changes.patch gdb-catchpoint-re-set.patch gdb-remove-qnx-neutrino-support.patch Modified: gdb-add-rpm-suggestion-script.patch - Remove upstreamed gdb-6.3-gstack-20050411.patch. - remove gdb-test-bt-cfi-without-die.patch. This test has been accepted upstream and will make its way back to testing with the GDB 17 release. - Include gdb-index-generation-fixes.patch (renamed). (Tom Tromey and Andrew Burgess, RHEL-86890) - Backport amd64 decoding fixes Resolves: RHEL-93850 - Rebase RHEL 9's GDB from 14.2 to 16.3 Resolves: RHEL-91381 Resolves: RHEL-50069 - Rebase to FSF GDB 16.3. Deleted: gdb-rhbz2354997-gstack-drop-readnever.patch - Backport "Fix gstack issues" from upstream. (Keith Seitz, RH BZ 2354997) - Bump the release number. - Rebase to FSF GDB 16.2. Dropped: gdb-backport-buildid-related-changes.patch gdb-catchpoint-re-set.patch gdb-remove-qnx-neutrino-support.patch Modified: gdb-add-rpm-suggestion-script.patch - Remove upstreamed gdb-6.3-gstack-20050411.patch. - remove gdb-test-bt-cfi-without-die.patch. This test has been accepted upstream and will make its way back to testing with the GDB 17 release. - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Backport "Fix out-of-bounds write in read_member_functions" (Tom de Vries, RHEL-190107) - Include gdb-index-generation-fixes.patch (renamed). (Tom Tromey and Andrew Burgess, RHEL-86890) - Backport amd64 decoding fixes Resolves: RHEL-93850 - Rebase RHEL 9's GDB from 14.2 to 16.3 Resolves: RHEL-91381 Resolves: RHEL-50069 - Rebase to FSF GDB 16.3. Deleted: gdb-rhbz2354997-gstack-drop-readnever.patch - Backport "Fix gstack issues" from upstream. (Keith Seitz, RH BZ 2354997) - Bump the release number. - Rebase to FSF GDB 16.2. Dropped: gdb-backport-buildid-related-changes.patch gdb-catchpoint-re-set.patch gdb-remove-qnx-neutrino-support.patch Modified: gdb-add-rpm-suggestion-script.patch - Remove upstreamed gdb-6.3-gstack-20050411.patch. - remove gdb-test-bt-cfi-without-die.patch. This test has been accepted upstream and will make its way back to testing with the GDB 17 release. - Include gdb-index-generation-fixes.patch (renamed). (Tom Tromey and Andrew Burgess, RHEL-86890) - Backport amd64 decoding fixes Resolves: RHEL-93850 - Rebase RHEL 9's GDB from 14.2 to 16.3 Resolves: RHEL-91381 Resolves: RHEL-50069 - Rebase to FSF GDB 16.3. Deleted: gdb-rhbz2354997-gstack-drop-readnever.patch - Backport "Fix gstack issues" from upstream. (Keith Seitz, RH BZ 2354997) - Bump the release number. - Rebase to FSF GDB 16.2. Dropped: gdb-backport-buildid-related-changes.patch gdb-catchpoint-re-set.patch gdb-remove-qnx-neutrino-support.patch Modified: gdb-add-rpm-suggestion-script.patch - Remove upstreamed gdb-6.3-gstack-20050411.patch. - remove gdb-test-bt-cfi-without-die.patch. This test has been accepted upstream and will make its way back to testing with the GDB 17 release. - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Add upstream tests as a gating test related: #2006964 - Fix incorrect byte order of partition names on big-endian systems resolves: #2006964 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - 1.0.7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 1.0.6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 1.0.5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Backport fixes for CVE-2026-5201 - Related: RHEL-163069 - Fix an oversight - Related: RHEL-102354 - Backport fixes for CVE-2025-7345 - Resolves: RHEL-102354 - Backport fixes for CVE-2022-48622 - Resolves: RHEL-36432 - Backport fixes for CVE-2026-5201 - Related: RHEL-163069 - Fix an oversight - Related: RHEL-102354 - Backport fixes for CVE-2025-7345 - Resolves: RHEL-102354 - Backport fixes for CVE-2022-48622 - Resolves: RHEL-36432 - Backport fixes for CVE-2026-5201 - Related: RHEL-163069 - Fix an oversight - Related: RHEL-102354 - Backport fixes for CVE-2025-7345 - Resolves: RHEL-102354 - Backport fixes for CVE-2022-48622 - Resolves: RHEL-36432 - Terminate conflicting sesions started outside of GDM Resolves: RHEL-4108 - Fix recording wtmp/utmp/btmp Resolves: RHEL-129305 - Now Plymouth will quit even when no monitor is connected. Resolves: RHEL-129215 - Fix Handle GDM_SUPPORTED_SESSION_TYPES being unset Resolves: RHEL-117034 - Fix issue on conflicting sessions when they are remote Resolves: RHEL-123357 - Fix precedence order when loading sessions Resolves: RHEL-4133 - Remove adding -nocursor option. Using a cursor-theme already allows this. Related: RHEL-81194 - Instead of allowing adding custom parameters to Xorg, only allow adding -nocursor. Allowing adding custom parameters is a potential security issue. Related: RHEL-81194 - Allow adding custom parameters to Xorg Resolves: RHEL-81194 - Fix leak on new connections Resolves: RHEL-98562 - Create display in "legacy-xorg" mode checking displays in tty Resolves: https://redhat.atlassian.net/browse/RHEL-180820 - retrigger new build in correct target Resolves: https://redhat.atlassian.net/browse/RHEL-178706 - Update how GDM handles Registering session/display to properly terminate plymouth Resolves: https://redhat.atlassian.net/browse/RHEL-178706 - Terminate conflicting sesions started outside of GDM Resolves: RHEL-4108 - Fix recording wtmp/utmp/btmp Resolves: RHEL-129305 - Now Plymouth will quit even when no monitor is connected. Resolves: RHEL-129215 - Fix Handle GDM_SUPPORTED_SESSION_TYPES being unset Resolves: RHEL-117034 - Fix issue on conflicting sessions when they are remote Resolves: RHEL-123357 - Fix precedence order when loading sessions Resolves: RHEL-4133 - Remove adding -nocursor option. Using a cursor-theme already allows this. Related: RHEL-81194 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Drop tepl dependency Related: #1948446 - Add 40.0 release info to appdata - Filter provides for plugin .so files - Update to 40.0 - Don't use gsettings key that was removed from nautilus 40 (#1931020) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 3.38.1 - Update to 3.38.0 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 40.1 - Rebuild Related: #1951302 - Avoid depending on tepl as it's unmainained upstream - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 40.0 - Filter provides for plugin .so files - Don't build gedit-plugin-charmap and gedit-plugin-git for RHEL - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 3.38.1 - Update to 3.38.0 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 40.1 - Rebuild Related: #1951302 - Avoid depending on tepl as it's unmainained upstream - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 40.0 - Filter provides for plugin .so files - Don't build gedit-plugin-charmap and gedit-plugin-git for RHEL - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 3.38.1 - Update to 3.38.0 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 40.1 - Rebuild Related: #1951302 - Avoid depending on tepl as it's unmainained upstream - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 40.0 - Filter provides for plugin .so files - Don't build gedit-plugin-charmap and gedit-plugin-git for RHEL - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 3.38.1 - Update to 3.38.0 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 40.1 - Rebuild Related: #1951302 - Avoid depending on tepl as it's unmainained upstream - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 40.0 - Filter provides for plugin .so files - Don't build gedit-plugin-charmap and gedit-plugin-git for RHEL - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 3.38.1 - Update to 3.38.0 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 40.1 - Rebuild Related: #1951302 - Avoid depending on tepl as it's unmainained upstream - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 40.0 - Filter provides for plugin .so files - Don't build gedit-plugin-charmap and gedit-plugin-git for RHEL - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 3.38.1 - Update to 3.38.0 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 40.1 - Rebuild Related: #1951302 - Avoid depending on tepl as it's unmainained upstream - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 40.0 - Filter provides for plugin .so files - Don't build gedit-plugin-charmap and gedit-plugin-git for RHEL - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 3.38.1 - Update to 3.38.0 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 40.1 - Rebuild Related: #1951302 - Avoid depending on tepl as it's unmainained upstream - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 40.0 - Filter provides for plugin .so files - Don't build gedit-plugin-charmap and gedit-plugin-git for RHEL - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 3.38.1 - Update to 3.38.0 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 40.1 - Rebuild Related: #1951302 - Avoid depending on tepl as it's unmainained upstream - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 40.0 - Filter provides for plugin .so files - Don't build gedit-plugin-charmap and gedit-plugin-git for RHEL - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 3.38.1 - Update to 3.38.0 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 40.1 - Rebuild Related: #1951302 - Avoid depending on tepl as it's unmainained upstream - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 40.0 - Filter provides for plugin .so files - Don't build gedit-plugin-charmap and gedit-plugin-git for RHEL - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 3.38.1 - Update to 3.38.0 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 40.1 - Rebuild Related: #1951302 - Avoid depending on tepl as it's unmainained upstream - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 40.0 - Filter provides for plugin .so files - Don't build gedit-plugin-charmap and gedit-plugin-git for RHEL - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 3.38.1 - Update to 3.38.0 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 40.1 - Rebuild Related: #1951302 - Avoid depending on tepl as it's unmainained upstream - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 40.0 - Filter provides for plugin .so files - Don't build gedit-plugin-charmap and gedit-plugin-git for RHEL - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 3.38.1 - Update to 3.38.0 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 40.1 - Rebuild Related: #1951302 - Avoid depending on tepl as it's unmainained upstream - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 40.0 - Filter provides for plugin .so files - Don't build gedit-plugin-charmap and gedit-plugin-git for RHEL - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 3.38.1 - Update to 3.38.0 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 40.1 - Rebuild Related: #1951302 - Avoid depending on tepl as it's unmainained upstream - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 40.0 - Filter provides for plugin .so files - Don't build gedit-plugin-charmap and gedit-plugin-git for RHEL - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 3.38.1 - Update to 3.38.0 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 40.1 - Rebuild Related: #1951302 - Avoid depending on tepl as it's unmainained upstream - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 40.0 - Filter provides for plugin .so files - Don't build gedit-plugin-charmap and gedit-plugin-git for RHEL - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 3.38.1 - Update to 3.38.0 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 40.1 - Rebuild Related: #1951302 - Avoid depending on tepl as it's unmainained upstream - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 40.0 - Filter provides for plugin .so files - Don't build gedit-plugin-charmap and gedit-plugin-git for RHEL - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 3.38.1 - Update to 3.38.0 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 40.1 - Rebuild Related: #1951302 - Avoid depending on tepl as it's unmainained upstream - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 40.0 - Filter provides for plugin .so files - Don't build gedit-plugin-charmap and gedit-plugin-git for RHEL - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 3.38.1 - Update to 3.38.0 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 40.1 - Rebuild Related: #1951302 - Avoid depending on tepl as it's unmainained upstream - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 40.0 - Filter provides for plugin .so files - Don't build gedit-plugin-charmap and gedit-plugin-git for RHEL - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 3.38.1 - Update to 3.38.0 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 40.1 - Rebuild Related: #1951302 - Avoid depending on tepl as it's unmainained upstream - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 40.0 - Filter provides for plugin .so files - Don't build gedit-plugin-charmap and gedit-plugin-git for RHEL - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 3.38.1 - Update to 3.38.0 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 40.1 - Rebuild Related: #1951302 - Avoid depending on tepl as it's unmainained upstream - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 40.0 - Filter provides for plugin .so files - Don't build gedit-plugin-charmap and gedit-plugin-git for RHEL - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 3.38.1 - Update to 3.38.0 - New upstream release 0.4.62 (RHEL-88143) - New upstream release 0.4.58 (RHEL-88143) - Rebuild against new LibRaw soname Resolves: RHEL-770 - Fix CVE-2026-2050 (RHEL-188266) - New upstream release 0.4.62 (RHEL-88143) - New upstream release 0.4.58 (RHEL-88143) - Fix CVE-2026-18300: bounds check in rgbe_read_scanlines - Fix CVE-2026-2050: buffer overflow in rgbe_read_new_rle - Resolves: RHEL-188264 - New upstream release 0.4.62 (RHEL-88143) - New upstream release 0.4.58 (RHEL-88143) - New upstream release 0.4.62 (RHEL-88143) - New upstream release 0.4.58 (RHEL-88143) - Rebuild against new LibRaw soname Resolves: RHEL-770 - Fix CVE-2026-2050 (RHEL-188266) - New upstream release 0.4.62 (RHEL-88143) - New upstream release 0.4.58 (RHEL-88143) - Fix CVE-2026-18300: bounds check in rgbe_read_scanlines - Fix CVE-2026-2050: buffer overflow in rgbe_read_new_rle - Resolves: RHEL-188264 - New upstream release 0.4.62 (RHEL-88143) - New upstream release 0.4.58 (RHEL-88143) - New upstream release 0.4.62 (RHEL-88143) - New upstream release 0.4.58 (RHEL-88143) - Rebuild against new LibRaw soname Resolves: RHEL-770 - Fix CVE-2026-2050 (RHEL-188266) - New upstream release 0.4.62 (RHEL-88143) - New upstream release 0.4.58 (RHEL-88143) - Fix CVE-2026-18300: bounds check in rgbe_read_scanlines - Fix CVE-2026-2050: buffer overflow in rgbe_read_new_rle - Resolves: RHEL-188264 - New upstream release 0.4.62 (RHEL-88143) - New upstream release 0.4.58 (RHEL-88143) - Bump release - Backport Fedora change to provide a sysusers.d file to get user() and group() provides (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format) - Resolves: RHEL-78739 - Bump release - Backport Fedora change to provide a sysusers.d file to get user() and group() provides (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format) - Resolves: RHEL-78739 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild + geocode-glib-3.26.2-1 - Update to 3.26.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild + geocode-glib-3.26.2-1 - Update to 3.26.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Latest upstream - Latest upstream - Latest upstream - Add ASN subpackage - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Latest upstream - Latest upstream - Latest upstream - Add ASN subpackage - Update to 3.13.1 - add Java 17 support patch from Mamoru Tasaka (rhbz#2182696) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add gettext-0.21-covscan.patch to fix issues detected by static analyzers Add gettext-0.21-disable-libtextstyle.patch Do not build libtextstyle, as it depends on libcroco which is now unmaintained and has known security bugs. Obsolete libtextstyle and libtextstyle-devel packages. - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - add Java 17 support patch from Mamoru Tasaka (rhbz#2182696) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add gettext-0.21-covscan.patch to fix issues detected by static analyzers Add gettext-0.21-disable-libtextstyle.patch Do not build libtextstyle, as it depends on libcroco which is now unmaintained and has known security bugs. Obsolete libtextstyle and libtextstyle-devel packages. - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - define ghc_devel_prof to handle prof/devel BRs across releases - RHEL-88966 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow - RHEL-18397 CVE-2023-46751 ghostscript: dangling pointer in gdev_prn_open_printer_seekable() - RHEL-67048 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space - RHEL-67053 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding - RHEL-67053 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript - RHEL-67053 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution - RHEL-44759 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths - RHEL-44745 CVE-2024-33869 ghostscript: path traversal and command execution due to path reduction - RHEL-44731 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass) - RHEL-38839 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library - fix for CVE-2023-43115 - Resolves: RHEL-10185 - fix for CVE-2023-38559 - Resolves: rhbz#2224372 - fix for CVE-2023-36664 - Resolves: rhbz#2217810 - RHEL-264921 CVE-2026-39919 ghostscript: Heap buffer overflow in JPEG 2000 (JPXDecode) output adapter - RHEL-88966 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow - RHEL-18397 CVE-2023-46751 ghostscript: dangling pointer in gdev_prn_open_printer_seekable() - RHEL-67048 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space - RHEL-67053 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding - RHEL-67053 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript - RHEL-67053 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution - RHEL-273957 CVE-2026-103226 ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data - CVE-2026-101258 ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free via Type 5 shading OOB write and procedure-stream use-after-free - RHEL-264921 CVE-2026-39919 ghostscript: Heap buffer overflow in JPEG 2000 (JPXDecode) output adapter - RHEL-88966 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow - RHEL-18397 CVE-2023-46751 ghostscript: dangling pointer in gdev_prn_open_printer_seekable() - RHEL-67048 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space - RHEL-67053 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding - RHEL-67053 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript - RHEL-67053 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution - RHEL-88966 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow - RHEL-18397 CVE-2023-46751 ghostscript: dangling pointer in gdev_prn_open_printer_seekable() - RHEL-67048 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space - RHEL-67053 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding - RHEL-67053 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript - RHEL-67053 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution - RHEL-44759 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths - RHEL-44745 CVE-2024-33869 ghostscript: path traversal and command execution due to path reduction - RHEL-44731 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass) - RHEL-38839 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library - fix for CVE-2023-43115 - Resolves: RHEL-10185 - fix for CVE-2023-38559 - Resolves: rhbz#2224372 - fix for CVE-2023-36664 - Resolves: rhbz#2217810 - RHEL-264921 CVE-2026-39919 ghostscript: Heap buffer overflow in JPEG 2000 (JPXDecode) output adapter - RHEL-88966 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow - RHEL-18397 CVE-2023-46751 ghostscript: dangling pointer in gdev_prn_open_printer_seekable() - RHEL-67048 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space - RHEL-67053 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding - RHEL-67053 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript - RHEL-67053 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution - RHEL-273957 CVE-2026-103226 ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data - CVE-2026-101258 ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free via Type 5 shading OOB write and procedure-stream use-after-free - RHEL-264921 CVE-2026-39919 ghostscript: Heap buffer overflow in JPEG 2000 (JPXDecode) output adapter - RHEL-88966 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow - RHEL-18397 CVE-2023-46751 ghostscript: dangling pointer in gdev_prn_open_printer_seekable() - RHEL-67048 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space - RHEL-67053 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding - RHEL-67053 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript - RHEL-67053 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution - RHEL-88966 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow - RHEL-18397 CVE-2023-46751 ghostscript: dangling pointer in gdev_prn_open_printer_seekable() - RHEL-67048 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space - RHEL-67053 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding - RHEL-67053 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript - RHEL-67053 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution - RHEL-44759 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths - RHEL-44745 CVE-2024-33869 ghostscript: path traversal and command execution due to path reduction - RHEL-44731 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass) - RHEL-38839 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library - fix for CVE-2023-43115 - Resolves: RHEL-10185 - fix for CVE-2023-38559 - Resolves: rhbz#2224372 - fix for CVE-2023-36664 - Resolves: rhbz#2217810 - RHEL-264921 CVE-2026-39919 ghostscript: Heap buffer overflow in JPEG 2000 (JPXDecode) output adapter - RHEL-88966 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow - RHEL-18397 CVE-2023-46751 ghostscript: dangling pointer in gdev_prn_open_printer_seekable() - RHEL-67048 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space - RHEL-67053 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding - RHEL-67053 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript - RHEL-67053 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution - RHEL-273957 CVE-2026-103226 ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data - CVE-2026-101258 ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free via Type 5 shading OOB write and procedure-stream use-after-free - RHEL-264921 CVE-2026-39919 ghostscript: Heap buffer overflow in JPEG 2000 (JPXDecode) output adapter - RHEL-88966 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow - RHEL-18397 CVE-2023-46751 ghostscript: dangling pointer in gdev_prn_open_printer_seekable() - RHEL-67048 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space - RHEL-67053 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding - RHEL-67053 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript - RHEL-67053 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution - RHEL-88966 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow - RHEL-18397 CVE-2023-46751 ghostscript: dangling pointer in gdev_prn_open_printer_seekable() - RHEL-67048 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space - RHEL-67053 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding - RHEL-67053 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript - RHEL-67053 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution - RHEL-44759 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths - RHEL-44745 CVE-2024-33869 ghostscript: path traversal and command execution due to path reduction - RHEL-44731 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass) - RHEL-38839 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library - fix for CVE-2023-43115 - Resolves: RHEL-10185 - fix for CVE-2023-38559 - Resolves: rhbz#2224372 - fix for CVE-2023-36664 - Resolves: rhbz#2217810 - RHEL-264921 CVE-2026-39919 ghostscript: Heap buffer overflow in JPEG 2000 (JPXDecode) output adapter - RHEL-88966 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow - RHEL-18397 CVE-2023-46751 ghostscript: dangling pointer in gdev_prn_open_printer_seekable() - RHEL-67048 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space - RHEL-67053 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding - RHEL-67053 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript - RHEL-67053 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution - RHEL-273957 CVE-2026-103226 ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data - CVE-2026-101258 ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free via Type 5 shading OOB write and procedure-stream use-after-free - RHEL-264921 CVE-2026-39919 ghostscript: Heap buffer overflow in JPEG 2000 (JPXDecode) output adapter - RHEL-88966 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow - RHEL-18397 CVE-2023-46751 ghostscript: dangling pointer in gdev_prn_open_printer_seekable() - RHEL-67048 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space - RHEL-67053 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding - RHEL-67053 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript - RHEL-67053 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution - RHEL-88966 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow - RHEL-18397 CVE-2023-46751 ghostscript: dangling pointer in gdev_prn_open_printer_seekable() - RHEL-67048 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space - RHEL-67053 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding - RHEL-67053 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript - RHEL-67053 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution - RHEL-44759 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths - RHEL-44745 CVE-2024-33869 ghostscript: path traversal and command execution due to path reduction - RHEL-44731 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass) - RHEL-38839 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library - fix for CVE-2023-43115 - Resolves: RHEL-10185 - fix for CVE-2023-38559 - Resolves: rhbz#2224372 - fix for CVE-2023-36664 - Resolves: rhbz#2217810 - RHEL-264921 CVE-2026-39919 ghostscript: Heap buffer overflow in JPEG 2000 (JPXDecode) output adapter - RHEL-88966 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow - RHEL-18397 CVE-2023-46751 ghostscript: dangling pointer in gdev_prn_open_printer_seekable() - RHEL-67048 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space - RHEL-67053 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding - RHEL-67053 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript - RHEL-67053 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution - RHEL-273957 CVE-2026-103226 ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data - CVE-2026-101258 ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free via Type 5 shading OOB write and procedure-stream use-after-free - RHEL-264921 CVE-2026-39919 ghostscript: Heap buffer overflow in JPEG 2000 (JPXDecode) output adapter - RHEL-88966 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow - RHEL-18397 CVE-2023-46751 ghostscript: dangling pointer in gdev_prn_open_printer_seekable() - RHEL-67048 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space - RHEL-67053 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding - RHEL-67053 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript - RHEL-67053 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution - RHEL-88966 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow - RHEL-18397 CVE-2023-46751 ghostscript: dangling pointer in gdev_prn_open_printer_seekable() - RHEL-67048 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space - RHEL-67053 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding - RHEL-67053 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript - RHEL-67053 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution - RHEL-44759 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths - RHEL-44745 CVE-2024-33869 ghostscript: path traversal and command execution due to path reduction - RHEL-44731 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass) - RHEL-38839 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library - fix for CVE-2023-43115 - Resolves: RHEL-10185 - fix for CVE-2023-38559 - Resolves: rhbz#2224372 - fix for CVE-2023-36664 - Resolves: rhbz#2217810 - RHEL-264921 CVE-2026-39919 ghostscript: Heap buffer overflow in JPEG 2000 (JPXDecode) output adapter - RHEL-88966 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow - RHEL-18397 CVE-2023-46751 ghostscript: dangling pointer in gdev_prn_open_printer_seekable() - RHEL-67048 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space - RHEL-67053 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding - RHEL-67053 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript - RHEL-67053 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution - RHEL-273957 CVE-2026-103226 ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data - CVE-2026-101258 ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free via Type 5 shading OOB write and procedure-stream use-after-free - RHEL-264921 CVE-2026-39919 ghostscript: Heap buffer overflow in JPEG 2000 (JPXDecode) output adapter - RHEL-88966 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow - RHEL-18397 CVE-2023-46751 ghostscript: dangling pointer in gdev_prn_open_printer_seekable() - RHEL-67048 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space - RHEL-67053 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding - RHEL-67053 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript - RHEL-67053 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution - rebuild - fix CVE-2026-23868: double free in GifMakeSavedImage (RHEL-154864) - fix CVE-2026-26740: buffer overflow in EGifGCBToExtension (RHEL-157133) - rebuild - fix CVE-2026-23868: double free in GifMakeSavedImage (RHEL-154864) - fix CVE-2026-59090 - fix CVE-2026-18301 - fix CVE-2026-18302 - fix CVE-2026-18303 - fix CVE-2026-18304 - fix CVE-2026-18305 - fix CVE-2026-18306 - fix CVE-2026-18307 - fix CVE-2026-18308 - fix CVE-2026-42169 - fix CVE-2026-66758 - fix CVE-2026-66759 - fix CVE-2026-58380 - Resolves: RHEL-192383 - fix CVE-2026-58384 - Resolves: RHEL-192536 - fix CVE-2026-58379 - Resolves: RHEL-192170 - fix CVE-2026-4150 - align with Y-stream - fix CVE-2026-4151 - fix CVE-2026-4152 - fix CVE-2026-4153 - fix CVE-2026-4154 - fix CVE-2026-4887 - fix CVE-2026-4150 - Resolves: RHEL-167738 - bump spec - fix CVE-2026-0797 - fix CVE-2026-2044 - fix CVE-2026-2045 - fix CVE-2026-2047 - fix CVE-2026-2048 - fix CVE-2026-97185 - fix CVE-2026-92248 - fix CVE-2026-90947 - fix CVE-2026-90948 - fix CVE-2026-59090 - fix CVE-2026-18301 - fix CVE-2026-18302 - fix CVE-2026-18303 - fix CVE-2026-18304 - fix CVE-2026-18305 - fix CVE-2026-18306 - fix CVE-2026-18307 - fix CVE-2026-18308 - fix CVE-2026-42169 - fix CVE-2026-66758 - fix CVE-2026-66759 - fix CVE-2026-58380 - Resolves: RHEL-192383 - fix CVE-2026-58384 - Resolves: RHEL-192536 - fix CVE-2026-58379 - Resolves: RHEL-192170 - Bump release - fix CVE-2026-0797 - fix CVE-2026-2044 - fix CVE-2026-2045 - fix CVE-2026-2047 - fix CVE-2026-2048 - fix CVE-2025-15059 - fix CVE-2025-14424 - fix CVE-2025-14425 - fix CVE-2025-14423 - fix CVE-2025-14422 - fix CVE-2025-10920 - fix CVE-2025-10921 - fix CVE-2025-10922 - fix CVE-2025-10923 - fix CVE-2025-10924 - fix CVE-2025-10925 - fix CVE-2025-10934 - Rebase to 3.0.4 stable version and exclude s390x arch (RHEL-40106) - Rebase to 3.0.2 stable version (RHEL-40106) - fix CVE-2026-4150 - align with Y-stream - fix CVE-2026-4151 - fix CVE-2026-4152 - fix CVE-2026-4153 - fix CVE-2026-4154 - fix CVE-2026-4887 - fix CVE-2026-4150 - Resolves: RHEL-167738 - bump spec - fix CVE-2026-0797 - fix CVE-2026-2044 - fix CVE-2026-2045 - fix CVE-2026-2047 - fix CVE-2026-2048 - fix CVE-2025-15059 - fix CVE-2025-14424 - fix CVE-2025-14425 - fix CVE-2025-14423 - fix CVE-2025-14422 - fix CVE-2025-10920 - fix CVE-2025-10921 - fix CVE-2025-10922 - fix CVE-2025-10923 - fix CVE-2025-10924 - fix CVE-2025-10925 - fix CVE-2025-10934 - Rebase to 3.0.4 stable version and exclude s390x arch (RHEL-40106) - Rebase to 3.0.2 stable version (RHEL-40106) - fix CVE-2026-58379 - Resolves: RHEL-192170 - fix CVE-2026-4150 - align with Y-stream - fix CVE-2026-4151 - fix CVE-2026-4152 - fix CVE-2026-4153 - fix CVE-2026-4154 - fix CVE-2026-4887 - fix CVE-2026-4150 - Resolves: RHEL-167738 - bump spec - fix CVE-2026-0797 - fix CVE-2026-2044 - fix CVE-2026-2045 - fix CVE-2026-2047 - fix CVE-2026-2048 - fix CVE-2025-15059 - fix CVE-2025-14424 - fix CVE-2025-14425 - fix CVE-2025-14423 - fix CVE-2025-14422 - fix CVE-2025-10920 - fix CVE-2025-10921 - fix CVE-2025-10922 - fix CVE-2025-10923 - fix CVE-2025-10924 - fix CVE-2025-10925 - fix CVE-2025-10934 - Rebase to 3.0.4 stable version and exclude s390x arch (RHEL-40106) - Rebase to 3.0.2 stable version (RHEL-40106) - fix CVE-2026-58384 - Resolves: RHEL-192536 - fix CVE-2026-58379 - Resolves: RHEL-192170 - fix CVE-2026-4150 - align with Y-stream - fix CVE-2026-4151 - fix CVE-2026-4152 - fix CVE-2026-4153 - fix CVE-2026-4154 - fix CVE-2026-4887 - fix CVE-2026-4150 - Resolves: RHEL-167738 - bump spec - fix CVE-2026-0797 - fix CVE-2026-2044 - fix CVE-2026-2045 - fix CVE-2026-2047 - fix CVE-2026-2048 - fix CVE-2025-15059 - fix CVE-2025-14424 - fix CVE-2025-14425 - fix CVE-2025-14423 - fix CVE-2025-14422 - fix CVE-2025-10920 - fix CVE-2025-10921 - fix CVE-2025-10922 - fix CVE-2025-10923 - fix CVE-2025-10924 - fix CVE-2025-10925 - fix CVE-2025-10934 - Rebase to 3.0.4 stable version and exclude s390x arch (RHEL-40106) - fix CVE-2026-42169 - fix CVE-2026-66758 - fix CVE-2026-66759 - fix CVE-2026-58380 - Resolves: RHEL-192383 - fix CVE-2026-58384 - Resolves: RHEL-192536 - fix CVE-2026-58379 - Resolves: RHEL-192170 - fix CVE-2026-4150 - align with Y-stream - fix CVE-2026-4151 - fix CVE-2026-4152 - fix CVE-2026-4153 - fix CVE-2026-4154 - fix CVE-2026-4887 - fix CVE-2026-4150 - Resolves: RHEL-167738 - bump spec - fix CVE-2026-0797 - fix CVE-2026-2044 - fix CVE-2026-2045 - fix CVE-2026-2047 - fix CVE-2026-2048 - fix CVE-2025-15059 - fix CVE-2026-59090 - fix CVE-2026-18301 - fix CVE-2026-18302 - fix CVE-2026-18303 - fix CVE-2026-18304 - fix CVE-2026-18305 - fix CVE-2026-18306 - fix CVE-2026-18307 - fix CVE-2026-18308 - fix CVE-2026-42169 - fix CVE-2026-66758 - fix CVE-2026-66759 - fix CVE-2026-58380 - Resolves: RHEL-192383 - fix CVE-2026-58384 - Resolves: RHEL-192536 - fix CVE-2026-58379 - Resolves: RHEL-192170 - fix CVE-2026-4150 - align with Y-stream - fix CVE-2026-4151 - fix CVE-2026-4152 - fix CVE-2026-4153 - fix CVE-2026-4154 - fix CVE-2026-4887 - fix CVE-2026-4150 - Resolves: RHEL-167738 - bump spec - fix CVE-2026-0797 - fix CVE-2026-2044 - fix CVE-2026-2045 - fix CVE-2026-2047 - fix CVE-2026-2048 - fix CVE-2026-97185 - fix CVE-2026-92248 - fix CVE-2026-90947 - fix CVE-2026-90948 - fix CVE-2026-59090 - fix CVE-2026-18301 - fix CVE-2026-18302 - fix CVE-2026-18303 - fix CVE-2026-18304 - fix CVE-2026-18305 - fix CVE-2026-18306 - fix CVE-2026-18307 - fix CVE-2026-18308 - fix CVE-2026-42169 - fix CVE-2026-66758 - fix CVE-2026-66759 - fix CVE-2026-58380 - Resolves: RHEL-192383 - fix CVE-2026-58384 - Resolves: RHEL-192536 - fix CVE-2026-58379 - Resolves: RHEL-192170 - Bump release - fix CVE-2026-0797 - fix CVE-2026-2044 - fix CVE-2026-2045 - fix CVE-2026-2047 - fix CVE-2026-2048 - fix CVE-2025-15059 - fix CVE-2025-14424 - fix CVE-2025-14425 - fix CVE-2025-14423 - fix CVE-2025-14422 - fix CVE-2025-10920 - fix CVE-2025-10921 - fix CVE-2025-10922 - fix CVE-2025-10923 - fix CVE-2025-10924 - fix CVE-2025-10925 - fix CVE-2025-10934 - Rebase to 3.0.4 stable version and exclude s390x arch (RHEL-40106) - Rebase to 3.0.2 stable version (RHEL-40106) - fix CVE-2026-4150 - align with Y-stream - fix CVE-2026-4151 - fix CVE-2026-4152 - fix CVE-2026-4153 - fix CVE-2026-4154 - fix CVE-2026-4887 - fix CVE-2026-4150 - Resolves: RHEL-167738 - bump spec - fix CVE-2026-0797 - fix CVE-2026-2044 - fix CVE-2026-2045 - fix CVE-2026-2047 - fix CVE-2026-2048 - fix CVE-2025-15059 - fix CVE-2025-14424 - fix CVE-2025-14425 - fix CVE-2025-14423 - fix CVE-2025-14422 - fix CVE-2025-10920 - fix CVE-2025-10921 - fix CVE-2025-10922 - fix CVE-2025-10923 - fix CVE-2025-10924 - fix CVE-2025-10925 - fix CVE-2025-10934 - Rebase to 3.0.4 stable version and exclude s390x arch (RHEL-40106) - Rebase to 3.0.2 stable version (RHEL-40106) - fix CVE-2026-58379 - Resolves: RHEL-192170 - fix CVE-2026-4150 - align with Y-stream - fix CVE-2026-4151 - fix CVE-2026-4152 - fix CVE-2026-4153 - fix CVE-2026-4154 - fix CVE-2026-4887 - fix CVE-2026-4150 - Resolves: RHEL-167738 - bump spec - fix CVE-2026-0797 - fix CVE-2026-2044 - fix CVE-2026-2045 - fix CVE-2026-2047 - fix CVE-2026-2048 - fix CVE-2025-15059 - fix CVE-2025-14424 - fix CVE-2025-14425 - fix CVE-2025-14423 - fix CVE-2025-14422 - fix CVE-2025-10920 - fix CVE-2025-10921 - fix CVE-2025-10922 - fix CVE-2025-10923 - fix CVE-2025-10924 - fix CVE-2025-10925 - fix CVE-2025-10934 - Rebase to 3.0.4 stable version and exclude s390x arch (RHEL-40106) - Rebase to 3.0.2 stable version (RHEL-40106) - fix CVE-2026-58384 - Resolves: RHEL-192536 - fix CVE-2026-58379 - Resolves: RHEL-192170 - fix CVE-2026-4150 - align with Y-stream - fix CVE-2026-4151 - fix CVE-2026-4152 - fix CVE-2026-4153 - fix CVE-2026-4154 - fix CVE-2026-4887 - fix CVE-2026-4150 - Resolves: RHEL-167738 - bump spec - fix CVE-2026-0797 - fix CVE-2026-2044 - fix CVE-2026-2045 - fix CVE-2026-2047 - fix CVE-2026-2048 - fix CVE-2025-15059 - fix CVE-2025-14424 - fix CVE-2025-14425 - fix CVE-2025-14423 - fix CVE-2025-14422 - fix CVE-2025-10920 - fix CVE-2025-10921 - fix CVE-2025-10922 - fix CVE-2025-10923 - fix CVE-2025-10924 - fix CVE-2025-10925 - fix CVE-2025-10934 - Rebase to 3.0.4 stable version and exclude s390x arch (RHEL-40106) - fix CVE-2026-42169 - fix CVE-2026-66758 - fix CVE-2026-66759 - fix CVE-2026-58380 - Resolves: RHEL-192383 - fix CVE-2026-58384 - Resolves: RHEL-192536 - fix CVE-2026-58379 - Resolves: RHEL-192170 - fix CVE-2026-4150 - align with Y-stream - fix CVE-2026-4151 - fix CVE-2026-4152 - fix CVE-2026-4153 - fix CVE-2026-4154 - fix CVE-2026-4887 - fix CVE-2026-4150 - Resolves: RHEL-167738 - bump spec - fix CVE-2026-0797 - fix CVE-2026-2044 - fix CVE-2026-2045 - fix CVE-2026-2047 - fix CVE-2026-2048 - fix CVE-2025-15059 - update to 2.52.0 - Resolves: RHEL-118147 - update to 2.47.3 - Resolves: RHEL-102449, RHEL-102463, RHEL-102675, RHEL-102681 - add the option to sanitize sideband channel messages - Resolves: RHEL-84513 - update to 2.47.1 - Resolves: RHEL-63964 - Update to 2.43.5 - Resolves: RHEL-36353, RHEL-36357, RHEL-36371, RHEL-36383, RHEL-36387 - update to 2.52.0 - Resolves: RHEL-118147 - update to 2.47.3 - Resolves: RHEL-102449, RHEL-102463, RHEL-102675, RHEL-102681 - add the option to sanitize sideband channel messages - Resolves: RHEL-84513 - update to 2.47.1 - Resolves: RHEL-63964 - Update to 2.43.5 - Resolves: RHEL-36353, RHEL-36357, RHEL-36371, RHEL-36383, RHEL-36387 - Remove compat libs for LLVM 20 - Update LLVM Toolset to 21.1.8 [rhel-9] - Update to 21.1.7 - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683) - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037) - Backport fix for build of highway package on ppc64le (rhbz#2383182) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to LLVM 20.1.8 - Add riscv64 enablement bits; thanks: Songsong Zhang (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com) - Update to LLVM 20.1.7 - Fix llvm-config alternatives handling (rhbz#2361779) - Use libdir suffix in versioned prefix - update to 2.52.0 - Resolves: RHEL-118147 - update to 2.47.3 - Resolves: RHEL-102449, RHEL-102463, RHEL-102675, RHEL-102681 - add the option to sanitize sideband channel messages - Resolves: RHEL-84513 - update to 2.47.1 - Resolves: RHEL-63964 - Update to 2.43.5 - Resolves: RHEL-36353, RHEL-36357, RHEL-36371, RHEL-36383, RHEL-36387 - update to 2.52.0 - Resolves: RHEL-118147 - update to 2.47.3 - Resolves: RHEL-102449, RHEL-102463, RHEL-102675, RHEL-102681 - add the option to sanitize sideband channel messages - Resolves: RHEL-84513 - update to 2.47.1 - Resolves: RHEL-63964 - Update to 2.43.5 - Resolves: RHEL-36353, RHEL-36357, RHEL-36371, RHEL-36383, RHEL-36387 - update to 2.52.0 - Resolves: RHEL-118147 - update to 2.47.3 - Resolves: RHEL-102449, RHEL-102463, RHEL-102675, RHEL-102681 - add the option to sanitize sideband channel messages - Resolves: RHEL-84513 - update to 2.47.1 - Resolves: RHEL-63964 - Update to 2.43.5 - Resolves: RHEL-36353, RHEL-36357, RHEL-36371, RHEL-36383, RHEL-36387 - update to 2.52.0 - Resolves: RHEL-118147 - update to 2.47.3 - Resolves: RHEL-102449, RHEL-102463, RHEL-102675, RHEL-102681 - add the option to sanitize sideband channel messages - Resolves: RHEL-84513 - update to 2.47.1 - Resolves: RHEL-63964 - Update to 2.43.5 - Resolves: RHEL-36353, RHEL-36357, RHEL-36371, RHEL-36383, RHEL-36387 - update to 2.52.0 - Resolves: RHEL-118147 - update to 2.47.3 - Resolves: RHEL-102449, RHEL-102463, RHEL-102675, RHEL-102681 - add the option to sanitize sideband channel messages - Resolves: RHEL-84513 - update to 2.47.1 - Resolves: RHEL-63964 - Update to 2.43.5 - Resolves: RHEL-36353, RHEL-36357, RHEL-36371, RHEL-36383, RHEL-36387 - update to 2.52.0 - Resolves: RHEL-118147 - update to 2.47.3 - Resolves: RHEL-102449, RHEL-102463, RHEL-102675, RHEL-102681 - add the option to sanitize sideband channel messages - Resolves: RHEL-84513 - update to 2.47.1 - Resolves: RHEL-63964 - Update to 2.43.5 - Resolves: RHEL-36353, RHEL-36357, RHEL-36371, RHEL-36383, RHEL-36387 - update to 2.52.0 - Resolves: RHEL-118147 - update to 2.47.3 - Resolves: RHEL-102449, RHEL-102463, RHEL-102675, RHEL-102681 - add the option to sanitize sideband channel messages - Resolves: RHEL-84513 - update to 2.47.1 - Resolves: RHEL-63964 - Update to 2.43.5 - Resolves: RHEL-36353, RHEL-36357, RHEL-36371, RHEL-36383, RHEL-36387 - Fix CVE-2026-39821: vendored golang.org/x/net/idna ToUnicode incorrectly accepting all-ASCII xn-- labels - Resolves: RHEL-183797 - Rebuild with new Golang - Resolves: RHEL-158765, RHEL-166675, RHEL-167677, RHEL-170838 - Rebuild with new Golang - Resolves: RHEL-146102, RHEL-149638 - Rebuild with new Golang - Resolves: RHEL-140548 - Update to 3.7.1 - Resolves: RHEL-118154, RHEL-122429 - Add patch to fix build failures with Go 1.24< - Resolves: RHEL-106475 - Rebuild with new Golang - Resolves: RHEL-89304 - Update to 3.6.1 - Resolves: RHEL-73940 - Update to 3.6.0 - Resolves: RHEL-63968, RHEL-61045, RHEL-47219, RHEL-43318, RHEL-35936, RHEL-2791 - Make Git-LFS FIPS compliant - Resolves: RHEL-53086 - Rebuild with new Golang - Resolves: RHEL-187329 - Fix CVE-2026-39821: vendored golang.org/x/net/idna ToUnicode incorrectly accepting all-ASCII xn-- labels - Resolves: RHEL-183797 - Rebuild with new Golang - Resolves: RHEL-158765, RHEL-166675, RHEL-167677, RHEL-170838 - Rebuild with new Golang - Resolves: RHEL-146102, RHEL-149638 - Rebuild with new Golang - Resolves: RHEL-140548 - Update to 3.7.1 - Resolves: RHEL-118154, RHEL-122429 - Add patch to fix build failures with Go 1.24< - Resolves: RHEL-106475 - Rebuild with new Golang - Resolves: RHEL-89304 - Update to 3.6.1 - Resolves: RHEL-73940 - Update to 3.6.0 - Resolves: RHEL-63968, RHEL-61045, RHEL-47219, RHEL-43318, RHEL-35936, RHEL-2791 - Rebuild with updated golang - Resolves: RHEL-241575, RHEL-242274, RHEL-241799 - Rebuild with new Golang - Resolves: RHEL-187329 - Fix CVE-2026-39821: vendored golang.org/x/net/idna ToUnicode incorrectly accepting all-ASCII xn-- labels - Resolves: RHEL-183797 - Rebuild with new Golang - Resolves: RHEL-158765, RHEL-166675, RHEL-167677, RHEL-170838 - Rebuild with new Golang - Resolves: RHEL-146102, RHEL-149638 - Rebuild with new Golang - Resolves: RHEL-140548 - Update to 3.7.1 - Resolves: RHEL-118154, RHEL-122429 - Add patch to fix build failures with Go 1.24< - Resolves: RHEL-106475 - Rebuild with new Golang - Resolves: RHEL-89304 - Update to 3.6.1 - Resolves: RHEL-73940 - Rebuild with new Golang - Resolves: RHEL-158765, RHEL-166675, RHEL-167677, RHEL-170838 - Rebuild with new Golang - Resolves: RHEL-146102, RHEL-149638 - Rebuild with new Golang - Resolves: RHEL-140548 - Update to 3.7.1 - Resolves: RHEL-118154, RHEL-122429 - Add patch to fix build failures with Go 1.24< - Resolves: RHEL-106475 - Rebuild with new Golang - Resolves: RHEL-89304 - Update to 3.6.1 - Resolves: RHEL-73940 - Update to 3.6.0 - Resolves: RHEL-63968, RHEL-61045, RHEL-47219, RHEL-43318, RHEL-35936, RHEL-2791 - Make Git-LFS FIPS compliant - Resolves: RHEL-53086 - Rebuild with new Golang - Resolves: RHEL-32571 - update to 2.52.0 - Resolves: RHEL-118147 - update to 2.47.3 - Resolves: RHEL-102449, RHEL-102463, RHEL-102675, RHEL-102681 - add the option to sanitize sideband channel messages - Resolves: RHEL-84513 - update to 2.47.1 - Resolves: RHEL-63964 - Update to 2.43.5 - Resolves: RHEL-36353, RHEL-36357, RHEL-36371, RHEL-36383, RHEL-36387 - update to 2.52.0 - Resolves: RHEL-118147 - update to 2.47.3 - Resolves: RHEL-102449, RHEL-102463, RHEL-102675, RHEL-102681 - add the option to sanitize sideband channel messages - Resolves: RHEL-84513 - update to 2.47.1 - Resolves: RHEL-63964 - Update to 2.43.5 - Resolves: RHEL-36353, RHEL-36357, RHEL-36371, RHEL-36383, RHEL-36387 - update to 2.52.0 - Resolves: RHEL-118147 - update to 2.47.3 - Resolves: RHEL-102449, RHEL-102463, RHEL-102675, RHEL-102681 - add the option to sanitize sideband channel messages - Resolves: RHEL-84513 - update to 2.47.1 - Resolves: RHEL-63964 - Update to 2.43.5 - Resolves: RHEL-36353, RHEL-36357, RHEL-36371, RHEL-36383, RHEL-36387 - update to 2.52.0 - Resolves: RHEL-118147 - update to 2.47.3 - Resolves: RHEL-102449, RHEL-102463, RHEL-102675, RHEL-102681 - add the option to sanitize sideband channel messages - Resolves: RHEL-84513 - update to 2.47.1 - Resolves: RHEL-63964 - Update to 2.43.5 - Resolves: RHEL-36353, RHEL-36357, RHEL-36371, RHEL-36383, RHEL-36387 - Always initialize callback return value Resolves: #2196877 - Guard against invalid gobject property access Resolves: #2170044 - Update to 1.68.6 Resolves: #2066167 - Update to 1.68.5 Resolves: #2054085 - Update to 1.68.4 - Increate test timeouts to make it more reliable on armv7 Resolves: #2005774 - Rebuilt for libffi 3.4.2 SONAME transition. Related: rhbz#1891914 - Update to 1.68.3 Resolves: #1993764 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Bundle mozjs (#1958111) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 3.38.2 - Drop old obsoletes - BR python3-gobject-devel rather than pygobject3-devel - Update to 3.38.1 - Drop compat ABI version - Update to 3.38.0 - Temporarily ship previous soname for ABI compat - Update to 3.37.0 - Switch to the meson build system - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 3.38.2 - Drop old obsoletes - BR python3-gobject-devel rather than pygobject3-devel - Update to 3.38.1 - Drop compat ABI version - Update to 3.38.0 - Temporarily ship previous soname for ABI compat - Update to 3.37.0 - Switch to the meson build system - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add patch for CVE-2025-14087 and CVE-2025-14512 - Add patch for CVE-2025-13601 - Fix GUnixMount issues - gdbusconnection: Prevent sending a serial of zero on overflow - Resolves: RHEL-114059 - Add patches for CVE-2024-52533 and CVE-2025-4373 - Update GDateTime test for new tzdata - Resolves: RHEL-94483 - Resolves: RHEL-102844 - Add support for x-gvfs-trash mount option - Resolves: RHEL-52360 - Fix CVE-2024-34397, signal subscription vulnerabilities - Resolves: RHEL-35775 - Fix CVE-2026-16118: heap-buffer-overflow in xdgmimemagic.c - Fix CVE-2026-15588: limit D-Bus auth line read length - Fix CVE-2026-58010: off-by-one in GVariant tuple offset checking - Resolves: RHEL-212157 - Fix CVE-2026-58012: buffer overflow in gregex.c with G_REGEX_RAW - Resolves: RHEL-212217 - Fix CVE-2026-58011: range validation in g_date_time_add_full() - Resolves: RHEL-212194 - Fix CVE-2026-58013: buffer over-read in GIOChannel with long terminators - Resolves: RHEL-212236 - Fix CVE-2026-58014: heap under-read in g_key_file_get_locale_string_list - Resolves: RHEL-190589 - Fix CVE-2026-58015: validate D-Bus DBUS_COOKIE_SHA1 cookie context - Resolves: RHEL-212261 - Fix CVE-2026-58016: broken node element nesting validation in D-Bus introspection XML parsing - Resolves: RHEL-190632 - Add patch for CVE-2025-14087 and CVE-2025-14512 - Fix CVE-2026-58016: broken node element nesting validation in D-Bus introspection XML parsing - Resolves: RHEL-190632 - Add patch for CVE-2025-14087 and CVE-2025-14512 - Add patch for CVE-2025-13601 - Fix GUnixMount issues - gdbusconnection: Prevent sending a serial of zero on overflow - Resolves: RHEL-114059 - Add patches for CVE-2024-52533 and CVE-2025-4373 - Update GDateTime test for new tzdata - Resolves: RHEL-94483 - Resolves: RHEL-102844 - Add support for x-gvfs-trash mount option - Resolves: RHEL-52360 - Fix CVE-2026-15588: limit D-Bus auth line read length - Fix CVE-2026-58010: off-by-one in GVariant tuple offset checking - Resolves: RHEL-212157 - Fix CVE-2026-58012: buffer overflow in gregex.c with G_REGEX_RAW - Resolves: RHEL-212217 - Fix CVE-2026-58011: range validation in g_date_time_add_full() - Resolves: RHEL-212194 - Fix CVE-2026-58013: buffer over-read in GIOChannel with long terminators - Resolves: RHEL-212236 - Fix CVE-2026-58014: heap under-read in g_key_file_get_locale_string_list - Resolves: RHEL-190589 - Fix CVE-2026-58015: validate D-Bus DBUS_COOKIE_SHA1 cookie context - Resolves: RHEL-212261 - Fix CVE-2026-58016: broken node element nesting validation in D-Bus introspection XML parsing - Resolves: RHEL-190632 - Add patch for CVE-2025-14087 and CVE-2025-14512 - Add patch for CVE-2025-13601 - Fix GUnixMount issues - Add patch for CVE-2025-14087 and CVE-2025-14512 - Add patch for CVE-2025-13601 - Fix GUnixMount issues - gdbusconnection: Prevent sending a serial of zero on overflow - Resolves: RHEL-114059 - Add patches for CVE-2024-52533 and CVE-2025-4373 - Update GDateTime test for new tzdata - Resolves: RHEL-94483 - Resolves: RHEL-102844 - Add support for x-gvfs-trash mount option - Resolves: RHEL-52360 - Fix CVE-2024-34397, signal subscription vulnerabilities - Resolves: RHEL-35775 - Fix CVE-2026-16118: heap-buffer-overflow in xdgmimemagic.c - Fix CVE-2026-15588: limit D-Bus auth line read length - Fix CVE-2026-58010: off-by-one in GVariant tuple offset checking - Resolves: RHEL-212157 - Fix CVE-2026-58012: buffer overflow in gregex.c with G_REGEX_RAW - Resolves: RHEL-212217 - Fix CVE-2026-58011: range validation in g_date_time_add_full() - Resolves: RHEL-212194 - Fix CVE-2026-58013: buffer over-read in GIOChannel with long terminators - Resolves: RHEL-212236 - Fix CVE-2026-58014: heap under-read in g_key_file_get_locale_string_list - Resolves: RHEL-190589 - Fix CVE-2026-58015: validate D-Bus DBUS_COOKIE_SHA1 cookie context - Resolves: RHEL-212261 - Fix CVE-2026-58016: broken node element nesting validation in D-Bus introspection XML parsing - Resolves: RHEL-190632 - Add patch for CVE-2025-14087 and CVE-2025-14512 - Fix CVE-2026-58016: broken node element nesting validation in D-Bus introspection XML parsing - Resolves: RHEL-190632 - Add patch for CVE-2025-14087 and CVE-2025-14512 - Add patch for CVE-2025-13601 - Fix GUnixMount issues - gdbusconnection: Prevent sending a serial of zero on overflow - Resolves: RHEL-114059 - Add patches for CVE-2024-52533 and CVE-2025-4373 - Update GDateTime test for new tzdata - Resolves: RHEL-94483 - Resolves: RHEL-102844 - Add support for x-gvfs-trash mount option - Resolves: RHEL-52360 - Fix CVE-2026-15588: limit D-Bus auth line read length - Fix CVE-2026-58010: off-by-one in GVariant tuple offset checking - Resolves: RHEL-212157 - Fix CVE-2026-58012: buffer overflow in gregex.c with G_REGEX_RAW - Resolves: RHEL-212217 - Fix CVE-2026-58011: range validation in g_date_time_add_full() - Resolves: RHEL-212194 - Fix CVE-2026-58013: buffer over-read in GIOChannel with long terminators - Resolves: RHEL-212236 - Fix CVE-2026-58014: heap under-read in g_key_file_get_locale_string_list - Resolves: RHEL-190589 - Fix CVE-2026-58015: validate D-Bus DBUS_COOKIE_SHA1 cookie context - Resolves: RHEL-212261 - Fix CVE-2026-58016: broken node element nesting validation in D-Bus introspection XML parsing - Resolves: RHEL-190632 - Add patch for CVE-2025-14087 and CVE-2025-14512 - Add patch for CVE-2025-13601 - Fix GUnixMount issues - Add patch for CVE-2025-14087 and CVE-2025-14512 - Add patch for CVE-2025-13601 - Fix GUnixMount issues - gdbusconnection: Prevent sending a serial of zero on overflow - Resolves: RHEL-114059 - Add patches for CVE-2024-52533 and CVE-2025-4373 - Update GDateTime test for new tzdata - Resolves: RHEL-94483 - Resolves: RHEL-102844 - Add support for x-gvfs-trash mount option - Resolves: RHEL-52360 - Fix CVE-2024-34397, signal subscription vulnerabilities - Resolves: RHEL-35775 - Fix CVE-2026-16118: heap-buffer-overflow in xdgmimemagic.c - Fix CVE-2026-15588: limit D-Bus auth line read length - Fix CVE-2026-58010: off-by-one in GVariant tuple offset checking - Resolves: RHEL-212157 - Fix CVE-2026-58012: buffer overflow in gregex.c with G_REGEX_RAW - Resolves: RHEL-212217 - Fix CVE-2026-58011: range validation in g_date_time_add_full() - Resolves: RHEL-212194 - Fix CVE-2026-58013: buffer over-read in GIOChannel with long terminators - Resolves: RHEL-212236 - Fix CVE-2026-58014: heap under-read in g_key_file_get_locale_string_list - Resolves: RHEL-190589 - Fix CVE-2026-58015: validate D-Bus DBUS_COOKIE_SHA1 cookie context - Resolves: RHEL-212261 - Fix CVE-2026-58016: broken node element nesting validation in D-Bus introspection XML parsing - Resolves: RHEL-190632 - Add patch for CVE-2025-14087 and CVE-2025-14512 - Fix CVE-2026-58016: broken node element nesting validation in D-Bus introspection XML parsing - Resolves: RHEL-190632 - Add patch for CVE-2025-14087 and CVE-2025-14512 - Add patch for CVE-2025-13601 - Fix GUnixMount issues - gdbusconnection: Prevent sending a serial of zero on overflow - Resolves: RHEL-114059 - Add patches for CVE-2024-52533 and CVE-2025-4373 - Update GDateTime test for new tzdata - Resolves: RHEL-94483 - Resolves: RHEL-102844 - Add support for x-gvfs-trash mount option - Resolves: RHEL-52360 - Fix CVE-2026-15588: limit D-Bus auth line read length - Fix CVE-2026-58010: off-by-one in GVariant tuple offset checking - Resolves: RHEL-212157 - Fix CVE-2026-58012: buffer overflow in gregex.c with G_REGEX_RAW - Resolves: RHEL-212217 - Fix CVE-2026-58011: range validation in g_date_time_add_full() - Resolves: RHEL-212194 - Fix CVE-2026-58013: buffer over-read in GIOChannel with long terminators - Resolves: RHEL-212236 - Fix CVE-2026-58014: heap under-read in g_key_file_get_locale_string_list - Resolves: RHEL-190589 - Fix CVE-2026-58015: validate D-Bus DBUS_COOKIE_SHA1 cookie context - Resolves: RHEL-212261 - Fix CVE-2026-58016: broken node element nesting validation in D-Bus introspection XML parsing - Resolves: RHEL-190632 - Add patch for CVE-2025-14087 and CVE-2025-14512 - Add patch for CVE-2025-13601 - Fix GUnixMount issues - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - Fix null pointer dereference and assertion failures in __nss_database_get (bug 28940) (RHEL-150269) - Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785) - Avoid duplicate DNS query if search list contains '.' (RHEL-153056) - dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450) - Remove default value for LD_PROFILE_OUTPUT (RHEL-142196) - Fix race condition in io/tst-stat symlink test (RHEL-142209) - Restore iconv tool verbosity for unrecognized encoding names (RHEL-1018) - Optimize trylock for high cache contention workloads. (RHEL-141072) - Update locales for Croatia to use EUR as currency symbol (RHEL-140105) - Fix incorrect setting of CXX variable in spec file (RHEL-148252) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168096) - resolv: Correctly count records and check hostname validity (RHEL-168851, RHEL-168852) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162901) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - Fix null pointer dereference and assertion failures in __nss_database_get (bug 28940) (RHEL-150269) - Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785) - Avoid duplicate DNS query if search list contains '.' (RHEL-153056) - dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450) - Remove default value for LD_PROFILE_OUTPUT (RHEL-142196) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710) - Fix gconv module reference counter overflow in swscanf and swprintf families (RHEL-145156) - Fix incorrect setting of CXX variable in spec file (RHEL-148252) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168096) - resolv: Correctly count records and check hostname validity (RHEL-168851, RHEL-168852) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162901) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - Fix null pointer dereference and assertion failures in __nss_database_get (bug 28940) (RHEL-150269) - Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785) - Avoid duplicate DNS query if search list contains '.' (RHEL-153056) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336, RHEL-185614) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710) - Fix gconv module reference counter overflow in swscanf and swprintf families (RHEL-145156) - Fix incorrect setting of CXX variable in spec file (RHEL-148252) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168096) - resolv: Correctly count records and check hostname validity (RHEL-168851, RHEL-168852) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162901) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - Fix null pointer dereference and assertion failures in __nss_database_get (bug 28940) (RHEL-150269) - iconv: Suppress intermediate errors with //TRANSLIT (RHEL-178279) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336, RHEL-185614) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710) - Fix gconv module reference counter overflow in swscanf and swprintf families (RHEL-145156) - Fix incorrect setting of CXX variable in spec file (RHEL-148252) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168096) - resolv: Correctly count records and check hostname validity (RHEL-168851, RHEL-168852) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162901) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248058) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249636) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251524) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247963) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253645) - Fail the build if there are unexpected test failures (RHEL-252939) - Adjust support/tst-support_descriptors for running under Konflux (RHEL-252863) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238488) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238478) - Stop shipping glibc32-debuginfo (RHEL-219516) - iconv: Suppress intermediate errors with //TRANSLIT (RHEL-178279) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336, RHEL-185614) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - Fix null pointer dereference and assertion failures in __nss_database_get (bug 28940) (RHEL-150269) - Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785) - Avoid duplicate DNS query if search list contains '.' (RHEL-153056) - dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450) - Remove default value for LD_PROFILE_OUTPUT (RHEL-142196) - Fix race condition in io/tst-stat symlink test (RHEL-142209) - Restore iconv tool verbosity for unrecognized encoding names (RHEL-1018) - Optimize trylock for high cache contention workloads. (RHEL-141072) - Update locales for Croatia to use EUR as currency symbol (RHEL-140105) - Fix incorrect setting of CXX variable in spec file (RHEL-148252) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168096) - resolv: Correctly count records and check hostname validity (RHEL-168851, RHEL-168852) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162901) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - Fix null pointer dereference and assertion failures in __nss_database_get (bug 28940) (RHEL-150269) - Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785) - Avoid duplicate DNS query if search list contains '.' (RHEL-153056) - dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450) - Remove default value for LD_PROFILE_OUTPUT (RHEL-142196) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710) - Fix gconv module reference counter overflow in swscanf and swprintf families (RHEL-145156) - Fix incorrect setting of CXX variable in spec file (RHEL-148252) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168096) - resolv: Correctly count records and check hostname validity (RHEL-168851, RHEL-168852) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162901) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - Fix null pointer dereference and assertion failures in __nss_database_get (bug 28940) (RHEL-150269) - Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785) - Avoid duplicate DNS query if search list contains '.' (RHEL-153056) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336, RHEL-185614) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710) - Fix gconv module reference counter overflow in swscanf and swprintf families (RHEL-145156) - Fix incorrect setting of CXX variable in spec file (RHEL-148252) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168096) - resolv: Correctly count records and check hostname validity (RHEL-168851, RHEL-168852) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162901) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - Fix null pointer dereference and assertion failures in __nss_database_get (bug 28940) (RHEL-150269) - iconv: Suppress intermediate errors with //TRANSLIT (RHEL-178279) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336, RHEL-185614) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710) - Fix gconv module reference counter overflow in swscanf and swprintf families (RHEL-145156) - Fix incorrect setting of CXX variable in spec file (RHEL-148252) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168096) - resolv: Correctly count records and check hostname validity (RHEL-168851, RHEL-168852) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162901) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248058) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249636) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251524) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247963) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253645) - Fail the build if there are unexpected test failures (RHEL-252939) - Adjust support/tst-support_descriptors for running under Konflux (RHEL-252863) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238488) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238478) - Stop shipping glibc32-debuginfo (RHEL-219516) - iconv: Suppress intermediate errors with //TRANSLIT (RHEL-178279) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336, RHEL-185614) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - Fix null pointer dereference and assertion failures in __nss_database_get (bug 28940) (RHEL-150269) - Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785) - Avoid duplicate DNS query if search list contains '.' (RHEL-153056) - dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450) - Remove default value for LD_PROFILE_OUTPUT (RHEL-142196) - Fix race condition in io/tst-stat symlink test (RHEL-142209) - Restore iconv tool verbosity for unrecognized encoding names (RHEL-1018) - Optimize trylock for high cache contention workloads. (RHEL-141072) - Update locales for Croatia to use EUR as currency symbol (RHEL-140105) - Fix incorrect setting of CXX variable in spec file (RHEL-148252) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168096) - resolv: Correctly count records and check hostname validity (RHEL-168851, RHEL-168852) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162901) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - Fix null pointer dereference and assertion failures in __nss_database_get (bug 28940) (RHEL-150269) - Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785) - Avoid duplicate DNS query if search list contains '.' (RHEL-153056) - dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450) - Remove default value for LD_PROFILE_OUTPUT (RHEL-142196) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710) - Fix gconv module reference counter overflow in swscanf and swprintf families (RHEL-145156) - Fix incorrect setting of CXX variable in spec file (RHEL-148252) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168096) - resolv: Correctly count records and check hostname validity (RHEL-168851, RHEL-168852) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162901) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - Fix null pointer dereference and assertion failures in __nss_database_get (bug 28940) (RHEL-150269) - Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785) - Avoid duplicate DNS query if search list contains '.' (RHEL-153056) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336, RHEL-185614) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710) - Fix gconv module reference counter overflow in swscanf and swprintf families (RHEL-145156) - Fix incorrect setting of CXX variable in spec file (RHEL-148252) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168096) - resolv: Correctly count records and check hostname validity (RHEL-168851, RHEL-168852) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162901) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - Fix null pointer dereference and assertion failures in __nss_database_get (bug 28940) (RHEL-150269) - iconv: Suppress intermediate errors with //TRANSLIT (RHEL-178279) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336, RHEL-185614) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710) - Fix gconv module reference counter overflow in swscanf and swprintf families (RHEL-145156) - Fix incorrect setting of CXX variable in spec file (RHEL-148252) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168096) - resolv: Correctly count records and check hostname validity (RHEL-168851, RHEL-168852) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162901) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248058) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249636) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251524) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247963) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253645) - Fail the build if there are unexpected test failures (RHEL-252939) - Adjust support/tst-support_descriptors for running under Konflux (RHEL-252863) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238488) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238478) - Stop shipping glibc32-debuginfo (RHEL-219516) - iconv: Suppress intermediate errors with //TRANSLIT (RHEL-178279) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336, RHEL-185614) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - Fix null pointer dereference and assertion failures in __nss_database_get (bug 28940) (RHEL-150269) - Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785) - Avoid duplicate DNS query if search list contains '.' (RHEL-153056) - dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450) - Remove default value for LD_PROFILE_OUTPUT (RHEL-142196) - Fix race condition in io/tst-stat symlink test (RHEL-142209) - Restore iconv tool verbosity for unrecognized encoding names (RHEL-1018) - Optimize trylock for high cache contention workloads. (RHEL-141072) - Update locales for Croatia to use EUR as currency symbol (RHEL-140105) - Fix incorrect setting of CXX variable in spec file (RHEL-148252) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168096) - resolv: Correctly count records and check hostname validity (RHEL-168851, RHEL-168852) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162901) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - Fix null pointer dereference and assertion failures in __nss_database_get (bug 28940) (RHEL-150269) - Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785) - Avoid duplicate DNS query if search list contains '.' (RHEL-153056) - dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450) - Remove default value for LD_PROFILE_OUTPUT (RHEL-142196) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710) - Fix gconv module reference counter overflow in swscanf and swprintf families (RHEL-145156) - Fix incorrect setting of CXX variable in spec file (RHEL-148252) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168096) - resolv: Correctly count records and check hostname validity (RHEL-168851, RHEL-168852) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162901) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - Fix null pointer dereference and assertion failures in __nss_database_get (bug 28940) (RHEL-150269) - Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785) - Avoid duplicate DNS query if search list contains '.' (RHEL-153056) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336, RHEL-185614) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710) - Fix gconv module reference counter overflow in swscanf and swprintf families (RHEL-145156) - Fix incorrect setting of CXX variable in spec file (RHEL-148252) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168096) - resolv: Correctly count records and check hostname validity (RHEL-168851, RHEL-168852) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162901) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - Fix null pointer dereference and assertion failures in __nss_database_get (bug 28940) (RHEL-150269) - iconv: Suppress intermediate errors with //TRANSLIT (RHEL-178279) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336, RHEL-185614) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710) - Fix gconv module reference counter overflow in swscanf and swprintf families (RHEL-145156) - Fix incorrect setting of CXX variable in spec file (RHEL-148252) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168096) - resolv: Correctly count records and check hostname validity (RHEL-168851, RHEL-168852) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162901) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248058) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249636) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251524) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247963) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253645) - Fail the build if there are unexpected test failures (RHEL-252939) - Adjust support/tst-support_descriptors for running under Konflux (RHEL-252863) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238488) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238478) - Stop shipping glibc32-debuginfo (RHEL-219516) - iconv: Suppress intermediate errors with //TRANSLIT (RHEL-178279) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336, RHEL-185614) - Update to 2.66.1 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update generated header files for C++20 compatibility (#1947838) - Update to 2.66.0 - Backport upstream fix for C++20 compatibility (#1947838) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Fix gmmproc and generate_wrap_init.pl to be executable (#1917035) - Add missing dep for generating links to libstdc++ docs - Update to 2.64.5 - Update to 2.64.4 - Switch to meson build system - Tighten soname globs - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - remove unneeded file with ambiguous licence - fixes bug bz#1939340 - Rebase with latest RHGS-3.5.4 - Fix changlog chronological order by removing unneeded changelogs - fixes bug bz#1939340 - fixes bugs bz#1953901 - fixes bugs bz#1927235 - fixes bugs bz#1948547 - fixes bugs bz#1939372 - fixes bugs bz#1832306 bz#1911292 bz#1924044 - fixes bugs bz#1224906 bz#1691320 bz#1719171 bz#1814744 bz#1865796 - fixes bugs bz#1600459 bz#1719171 bz#1830713 bz#1856574 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - remove unneeded file with ambiguous licence - fixes bug bz#1939340 - Rebase with latest RHGS-3.5.4 - Fix changlog chronological order by removing unneeded changelogs - fixes bug bz#1939340 - fixes bugs bz#1953901 - fixes bugs bz#1927235 - fixes bugs bz#1948547 - fixes bugs bz#1939372 - fixes bugs bz#1832306 bz#1911292 bz#1924044 - fixes bugs bz#1224906 bz#1691320 bz#1719171 bz#1814744 bz#1865796 - fixes bugs bz#1600459 bz#1719171 bz#1830713 bz#1856574 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - remove unneeded file with ambiguous licence - fixes bug bz#1939340 - Rebase with latest RHGS-3.5.4 - Fix changlog chronological order by removing unneeded changelogs - fixes bug bz#1939340 - fixes bugs bz#1953901 - fixes bugs bz#1927235 - fixes bugs bz#1948547 - fixes bugs bz#1939372 - fixes bugs bz#1832306 bz#1911292 bz#1924044 - fixes bugs bz#1224906 bz#1691320 bz#1719171 bz#1814744 bz#1865796 - fixes bugs bz#1600459 bz#1719171 bz#1830713 bz#1856574 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - remove unneeded file with ambiguous licence - fixes bug bz#1939340 - Rebase with latest RHGS-3.5.4 - Fix changlog chronological order by removing unneeded changelogs - fixes bug bz#1939340 - fixes bugs bz#1953901 - fixes bugs bz#1927235 - fixes bugs bz#1948547 - fixes bugs bz#1939372 - fixes bugs bz#1832306 bz#1911292 bz#1924044 - fixes bugs bz#1224906 bz#1691320 bz#1719171 bz#1814744 bz#1865796 - fixes bugs bz#1600459 bz#1719171 bz#1830713 bz#1856574 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - remove unneeded file with ambiguous licence - fixes bug bz#1939340 - Rebase with latest RHGS-3.5.4 - Fix changlog chronological order by removing unneeded changelogs - fixes bug bz#1939340 - fixes bugs bz#1953901 - fixes bugs bz#1927235 - fixes bugs bz#1948547 - fixes bugs bz#1939372 - fixes bugs bz#1832306 bz#1911292 bz#1924044 - fixes bugs bz#1224906 bz#1691320 bz#1719171 bz#1814744 bz#1865796 - fixes bugs bz#1600459 bz#1719171 bz#1830713 bz#1856574 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - remove unneeded file with ambiguous licence - fixes bug bz#1939340 - Rebase with latest RHGS-3.5.4 - Fix changlog chronological order by removing unneeded changelogs - fixes bug bz#1939340 - fixes bugs bz#1953901 - fixes bugs bz#1927235 - fixes bugs bz#1948547 - fixes bugs bz#1939372 - fixes bugs bz#1832306 bz#1911292 bz#1924044 - fixes bugs bz#1224906 bz#1691320 bz#1719171 bz#1814744 bz#1865796 - fixes bugs bz#1600459 bz#1719171 bz#1830713 bz#1856574 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - remove unneeded file with ambiguous licence - fixes bug bz#1939340 - Rebase with latest RHGS-3.5.4 - Fix changlog chronological order by removing unneeded changelogs - fixes bug bz#1939340 - fixes bugs bz#1953901 - fixes bugs bz#1927235 - fixes bugs bz#1948547 - fixes bugs bz#1939372 - fixes bugs bz#1832306 bz#1911292 bz#1924044 - fixes bugs bz#1224906 bz#1691320 bz#1719171 bz#1814744 bz#1865796 - fixes bugs bz#1600459 bz#1719171 bz#1830713 bz#1856574 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - remove unneeded file with ambiguous licence - fixes bug bz#1939340 - Rebase with latest RHGS-3.5.4 - Fix changlog chronological order by removing unneeded changelogs - fixes bug bz#1939340 - fixes bugs bz#1953901 - fixes bugs bz#1927235 - fixes bugs bz#1948547 - fixes bugs bz#1939372 - fixes bugs bz#1832306 bz#1911292 bz#1924044 - fixes bugs bz#1224906 bz#1691320 bz#1719171 bz#1814744 bz#1865796 - fixes bugs bz#1600459 bz#1719171 bz#1830713 bz#1856574 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Sync with upstream to drop the glew dependency - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for new freeglut. - Fix: previous commit removed one function from the library and thus broke the ABI - function gmpn_preinv_divrem_1 should now not be removed Related: rhbz#2044216 - Add SIMD optimization patches for s390x (provided by the IBM) Resolves: rhbz#2044216 Fix: Integer overflow and resultant buffer overflow via crafted input Resolves: CVE-2021-43618 - Add the support for intel CET Resolves: rhbz#1977890 - Move the .hmac files to the fipscheck subfolder - Make symlinks from their original location (Fedora contains the .hmac files there) pointing to their new location Resolves: rhbz#1980758 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix: previous commit removed one function from the library and thus broke the ABI - function gmpn_preinv_divrem_1 should now not be removed Related: rhbz#2044216 - Add SIMD optimization patches for s390x (provided by the IBM) Resolves: rhbz#2044216 Fix: Integer overflow and resultant buffer overflow via crafted input Resolves: CVE-2021-43618 - Add the support for intel CET Resolves: rhbz#1977890 - Move the .hmac files to the fipscheck subfolder - Make symlinks from their original location (Fedora contains the .hmac files there) pointing to their new location Resolves: rhbz#1980758 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Ship gnome-autoar-devel in CRB Resolves: RHEL-120219 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 40.1 - Update to 40.0 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 40.rc - Make -extras subpackage require the main package - Drop move-adwaita-backgrounds.patch - Remove old obsoletes - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 3.38.0 - Update to 3.37.92.1 - Rebase move-adwaita-backgrounds.patch - Update to 3.37.92 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 40.1 - Update to 40.0 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 40.rc - Make -extras subpackage require the main package - Drop move-adwaita-backgrounds.patch - Remove old obsoletes - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 3.38.0 - Update to 3.37.92.1 - Rebase move-adwaita-backgrounds.patch - Update to 3.37.92 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 + gnome-bluetooth-3.34.5-1 - Update to 3.34.5 + gnome-bluetooth-3.34.4-1 - Update to 3.34.4 + gnome-bluetooth-3.34.3-4 - Revert “Require PulseAudio _or_ Pipewire for Bluetooth audio” - Closes: #1928166 - Require PulseAudio _or_ Pipewire for Bluetooth audio - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild + gnome-bluetooth-3.34.3-1 - Update to 3.34.3 + gnome-bluetooth-3.34.2-1 - Update to 3.34.2 - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 + gnome-bluetooth-3.34.5-1 - Update to 3.34.5 + gnome-bluetooth-3.34.4-1 - Update to 3.34.4 + gnome-bluetooth-3.34.3-4 - Revert “Require PulseAudio _or_ Pipewire for Bluetooth audio” - Closes: #1928166 - Require PulseAudio _or_ Pipewire for Bluetooth audio - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild + gnome-bluetooth-3.34.3-1 - Update to 3.34.3 + gnome-bluetooth-3.34.2-1 - Update to 3.34.2 - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 40.1 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 40.0 - Update to 40.rc - Update to 40.beta - Drop old gcalctool obsoletes - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 3.38.2 - Update to 3.38.1 - Update to 3.38.0 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 40.0 - Update to 40.beta - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuild - Update to 3.34.0 + gnome-characters-3.32.1-5 - Fix use of removed functions - Fix workspace indicator cleanups Resolves: RHEL-129395 - Fix applying num-workspaces setting Resolves: RHEL-129101 - Fix loading custom CSS Resolves: RHEL-126240 - Make workspace names more prominent Resolves: RHEL-96218 - Fix window-list styling Resolves: RHEL-95787 - Stop overriding gnome-shell's overview allocation Resolves: RHEL-70892 - Indicate urgency-hint in window-list Resolves: RHEL-73146 - Change "move-clock" to "move-notifications" Resolves: RHEL-33429 - Fix app grid with dash-to-panel extension Resolves: RHEL-69665 - Fix another bug in window-list reordering backport Resolves: RHEL-22692 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Remove BRs no longer required for building - Resolves: rhbz#1961187 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 3.36.0 - Update to 3.35.90 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Remove the req for argyllcms as it is now orphaned - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Enable Graphics Pipeline for RDP connections - Resolves: RHEL-57692 - Fix graphical artifact in Wacom calibration UI Resolves: RHEL-4088 - Add translations to subscription manager interface Resolves: RHEL-4111 - Fix crash with non-supported tuned-ppd profiles - Update zh_CN translations for Keyboard settings Related: RHEL-11909 - Allow launching subscription registration dialog directly Related: RHEL-4101 - Handle gsm_sim virtual modems in Mobile Networks settings Resolves: RHEL-4193 - Scale up monitors drawing in display arrangment settings when multiple monitors Related: RHEL-4196 - Don't accidentally set value of compose key when loading Keyboard settings Related: RHEL-4226 - Don't disambiguate ethernet network devices names Related: RHEL-50729 - Replace power-profiles-daemon requirement with tuned-ppd Resolves: RHEL-68152 - Change button order for 3-button styli Resolves: RHEL-190440 - Fix graphical artifact in Wacom calibration UI Resolves: RHEL-4088 - Add translations to subscription manager interface Resolves: RHEL-4111 - Fix crash with non-supported tuned-ppd profiles - Update zh_CN translations for Keyboard settings Related: RHEL-11909 - Allow launching subscription registration dialog directly Related: RHEL-4101 - Handle gsm_sim virtual modems in Mobile Networks settings Resolves: RHEL-4193 - Scale up monitors drawing in display arrangment settings when multiple monitors Related: RHEL-4196 - Don't accidentally set value of compose key when loading Keyboard settings Related: RHEL-4226 - Don't disambiguate ethernet network devices names Related: RHEL-50729 - Fix graphical artifact in Wacom calibration UI Resolves: RHEL-4088 - Add translations to subscription manager interface Resolves: RHEL-4111 - Fix crash with non-supported tuned-ppd profiles - Update zh_CN translations for Keyboard settings Related: RHEL-11909 - Allow launching subscription registration dialog directly Related: RHEL-4101 - Handle gsm_sim virtual modems in Mobile Networks settings Resolves: RHEL-4193 - Scale up monitors drawing in display arrangment settings when multiple monitors Related: RHEL-4196 - Don't accidentally set value of compose key when loading Keyboard settings Related: RHEL-4226 - Don't disambiguate ethernet network devices names Related: RHEL-50729 - Replace power-profiles-daemon requirement with tuned-ppd Resolves: RHEL-68152 - Change button order for 3-button styli Resolves: RHEL-190440 - Fix graphical artifact in Wacom calibration UI Resolves: RHEL-4088 - Add translations to subscription manager interface Resolves: RHEL-4111 - Fix crash with non-supported tuned-ppd profiles - Update zh_CN translations for Keyboard settings Related: RHEL-11909 - Allow launching subscription registration dialog directly Related: RHEL-4101 - Handle gsm_sim virtual modems in Mobile Networks settings Resolves: RHEL-4193 - Scale up monitors drawing in display arrangment settings when multiple monitors Related: RHEL-4196 - Don't accidentally set value of compose key when loading Keyboard settings Related: RHEL-4226 - Don't disambiguate ethernet network devices names Related: RHEL-50729 - Update to 40.4 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 40.1 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 + gnome-desktop3-40.0-2 - Re-add mistakenly removed debug utilities - Update to 40.0 - Update to 40.rc - Update to 40.beta - Update to 40.alpha.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 40.4 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 40.1 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 + gnome-desktop3-40.0-2 - Re-add mistakenly removed debug utilities - Update to 40.0 - Update to 40.rc - Update to 40.beta - Update to 40.alpha.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 40.3 (#1991429) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 40.0 - Update to 40.rc - Update to 40.beta - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 3.38.2 - Update to 3.38.1 - Update to 3.38.0 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 40.2 (#1991430) - Update to 40.1 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 40.0 - Update to 40.rc - Update to 40.beta - Update upstream URL - Update to 3.38.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 3.38.1 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 40.0 - Update to 40.rc - Update to 40.beta - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 3.38.0 - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 3.37.3 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 40.0 - Update to 40.beta - Update upstream URLs - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for libgnome-desktop soname bump - Update to 3.34.0 - Add patch to fix the username validation Resolves: RHEL-70622 - Avoid SSH agent deadlocks (RHEL-25560) - Avoid SSH agent deadlocks (RHEL-25560) - Add Xwayland and dbus-daemon as weak dependencies Resolves: https://issues.redhat.com/browse/RHEL-66572 - search-app: Add systemd session files Resolves: https://issues.redhat.com/browse/RHEL-84004 - Copy and run the script from XDG_RUNTIME_DIR Resolves: https://issues.redhat.com/browse/RHEL-25536 - Add Xwayland and dbus-daemon as weak dependencies Resolves: https://issues.redhat.com/browse/RHEL-66572 - search-app: Add systemd session files Resolves: https://issues.redhat.com/browse/RHEL-84004 - Copy and run the script from XDG_RUNTIME_DIR Resolves: https://issues.redhat.com/browse/RHEL-25536 - Add Xwayland and dbus-daemon as weak dependencies Resolves: https://issues.redhat.com/browse/RHEL-66572 - search-app: Add systemd session files Resolves: https://issues.redhat.com/browse/RHEL-84004 - Copy and run the script from XDG_RUNTIME_DIR Resolves: https://issues.redhat.com/browse/RHEL-25536 - Fix window resizing Resolves: #2035832 - Fix shortcuts Resolves: #2062860 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Move things around a bit in the menus to be more logical Related: RHEL-32792 - Resolves: RHEL-34647 (goa-daemon: Mute "Unsupported account type ... (no provider)" error) - Resolves: RHEL-40831 (Use /etc/goa.conf to disable features for providers and whole providers) - Related: RHEL-10492 (Add margin around OAuth2 prompt content) - Resolves: RHEL-10492 (Move account types that depend on WebKitGTK into separate optional subpackage) - backport upstream fix to use external browser for OAuth2 - Resolves: RHEL-10492 (Move account types that depend on WebKitGTK into separate optional subpackage) - Backport various kerberos fixes from upstream Resolves: #2177765 - Resolves: RHEL-34647 (goa-daemon: Mute "Unsupported account type ... (no provider)" error) - Resolves: RHEL-40831 (Use /etc/goa.conf to disable features for providers and whole providers) - Related: RHEL-10492 (Add margin around OAuth2 prompt content) - Resolves: RHEL-10492 (Move account types that depend on WebKitGTK into separate optional subpackage) - backport upstream fix to use external browser for OAuth2 - Resolves: RHEL-10492 (Move account types that depend on WebKitGTK into separate optional subpackage) - Backport various kerberos fixes from upstream Resolves: #2177765 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add gcc to BuildRequires - Remove Facebook, Flickr and Google support Resolves: #1913641 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 40.0 - The gnome-online-miners package won't be part of RHEL 9 - Update to 40.rc - Unbreak Flatpak builds on hosts without Tracker 3 - Update to 40.beta - Update to 3.38.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add gcc to BuildRequires - Remove Facebook, Flickr and Google support Resolves: #1913641 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 40.0 - The gnome-online-miners package won't be part of RHEL 9 - Update to 40.rc - Unbreak Flatpak builds on hosts without Tracker 3 - Update to 40.beta - Update to 3.38.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Backport connection throttling Resolves: RHEL-92795 - Don't compile in SHA1 support again Resolves: #2223925 - Bump version number Related: rhbz#2188174 - Fix pasting into clipboard through CLI (RHEL-25179) - Fix headless mode (#2078976) - Add race fixes needed when terminating a conflicting session on GDM greeter. Resolves: RHEL-92341 - Silence noisy GL-check warnings Resolves: RHEL-88676 - Make subscription-manager dependency softer Related: RHEL-20449 - Add hard dependency on subscription-manager Resolves: #2175675 - Add race fixes needed when terminating a conflicting session on GDM greeter. Resolves: RHEL-92341 - Silence noisy GL-check warnings Resolves: RHEL-88676 - Make subscription-manager dependency softer Related: RHEL-20449 - Add hard dependency on subscription-manager Resolves: #2175675 - Add race fixes needed when terminating a conflicting session on GDM greeter. Resolves: RHEL-92341 - Silence noisy GL-check warnings Resolves: RHEL-88676 - Make subscription-manager dependency softer Related: RHEL-20449 - Add hard dependency on subscription-manager Resolves: #2175675 - Improve reliability of the startup registration notification Resolves: RHEL-4094 - Delay startup registration notification by 30 minutes Resolves: RHEL-4094 - Use mount path in "Low disk" notification when multiple mount points have same name Related: RHEL-11910 - Add build option to disable subman plugin Related: RHEL-4092 - Make "Register System" notification launch registration dialog directly Related: RHEL-4101 - Fix default power-button-action setting for servers Related: RHEL-71937 - Fix smartcards only working when cold-plugged Related: RHEL-47261 - Fix usb-protection crash when when screensaver service is unavailable Related: RHEL-19295 - Try to start rhsm if it's not already running Related: RHEL-20449 - Fix crashers in g-s-d and control-center related to making subscription-manager a soft dep Related: RHEL-20449 - Fix to automatically start fingerprint when enabled Resolves: RHEL-4166 - Register session with GDM on startup Resolves: RHEL-129287 - triggering a new build in correct target Resolves: RHEL-178703 - Update fix of registering session Registering the display is needed too Resolves: RHEL-178703 - Fix to automatically start fingerprint when enabled Resolves: RHEL-4166 - Register session with GDM on startup Resolves: RHEL-129287 - Fix workspace indicator cleanups Resolves: RHEL-129395 - Fix applying num-workspaces setting Resolves: RHEL-129101 - Fix loading custom CSS Resolves: RHEL-126240 - Make workspace names more prominent Resolves: RHEL-96218 - Fix window-list styling Resolves: RHEL-95787 - Stop overriding gnome-shell's overview allocation Resolves: RHEL-70892 - Indicate urgency-hint in window-list Resolves: RHEL-73146 - Change "move-clock" to "move-notifications" Resolves: RHEL-33429 - Fix app grid with dash-to-panel extension Resolves: RHEL-69665 - Fix another bug in window-list reordering backport Resolves: RHEL-22692 - Fix workspace indicator cleanups Resolves: RHEL-129395 - Fix applying num-workspaces setting Resolves: RHEL-129101 - Fix loading custom CSS Resolves: RHEL-126240 - Make workspace names more prominent Resolves: RHEL-96218 - Fix window-list styling Resolves: RHEL-95787 - Stop overriding gnome-shell's overview allocation Resolves: RHEL-70892 - Indicate urgency-hint in window-list Resolves: RHEL-73146 - Change "move-clock" to "move-notifications" Resolves: RHEL-33429 - Fix app grid with dash-to-panel extension Resolves: RHEL-69665 - Fix another bug in window-list reordering backport Resolves: RHEL-22692 - Adjust default values for RHEL Resolves: #2057150 - Backport support for top positioning in RHEL Related: #2052594 - Fix logo flickering - Update to 40.rc - Update to 40.beta - Build snapshot from current upstream - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 3.37.3 - Update to 3.36.0 - Fix workspace indicator cleanups Resolves: RHEL-129395 - Fix applying num-workspaces setting Resolves: RHEL-129101 - Fix loading custom CSS Resolves: RHEL-126240 - Make workspace names more prominent Resolves: RHEL-96218 - Fix window-list styling Resolves: RHEL-95787 - Stop overriding gnome-shell's overview allocation Resolves: RHEL-70892 - Indicate urgency-hint in window-list Resolves: RHEL-73146 - Change "move-clock" to "move-notifications" Resolves: RHEL-33429 - Fix app grid with dash-to-panel extension Resolves: RHEL-69665 - Fix another bug in window-list reordering backport Resolves: RHEL-22692 - Fix workspace indicator cleanups Resolves: RHEL-129395 - Fix applying num-workspaces setting Resolves: RHEL-129101 - Fix loading custom CSS Resolves: RHEL-126240 - Make workspace names more prominent Resolves: RHEL-96218 - Fix window-list styling Resolves: RHEL-95787 - Stop overriding gnome-shell's overview allocation Resolves: RHEL-70892 - Indicate urgency-hint in window-list Resolves: RHEL-73146 - Change "move-clock" to "move-notifications" Resolves: RHEL-33429 - Fix app grid with dash-to-panel extension Resolves: RHEL-69665 - Fix another bug in window-list reordering backport Resolves: RHEL-22692 - Fix workspace indicator cleanups Resolves: RHEL-129395 - Fix applying num-workspaces setting Resolves: RHEL-129101 - Fix loading custom CSS Resolves: RHEL-126240 - Make workspace names more prominent Resolves: RHEL-96218 - Fix window-list styling Resolves: RHEL-95787 - Stop overriding gnome-shell's overview allocation Resolves: RHEL-70892 - Indicate urgency-hint in window-list Resolves: RHEL-73146 - Change "move-clock" to "move-notifications" Resolves: RHEL-33429 - Fix app grid with dash-to-panel extension Resolves: RHEL-69665 - Fix another bug in window-list reordering backport Resolves: RHEL-22692 - Fix workspace indicator cleanups Resolves: RHEL-129395 - Fix applying num-workspaces setting Resolves: RHEL-129101 - Fix loading custom CSS Resolves: RHEL-126240 - Make workspace names more prominent Resolves: RHEL-96218 - Fix window-list styling Resolves: RHEL-95787 - Stop overriding gnome-shell's overview allocation Resolves: RHEL-70892 - Indicate urgency-hint in window-list Resolves: RHEL-73146 - Change "move-clock" to "move-notifications" Resolves: RHEL-33429 - Fix app grid with dash-to-panel extension Resolves: RHEL-69665 - Fix another bug in window-list reordering backport Resolves: RHEL-22692 - Fix workspace indicator cleanups Resolves: RHEL-129395 - Fix applying num-workspaces setting Resolves: RHEL-129101 - Fix loading custom CSS Resolves: RHEL-126240 - Make workspace names more prominent Resolves: RHEL-96218 - Fix window-list styling Resolves: RHEL-95787 - Stop overriding gnome-shell's overview allocation Resolves: RHEL-70892 - Indicate urgency-hint in window-list Resolves: RHEL-73146 - Change "move-clock" to "move-notifications" Resolves: RHEL-33429 - Fix app grid with dash-to-panel extension Resolves: RHEL-69665 - Fix another bug in window-list reordering backport Resolves: RHEL-22692 - Fix workspace indicator cleanups Resolves: RHEL-129395 - Fix applying num-workspaces setting Resolves: RHEL-129101 - Fix loading custom CSS Resolves: RHEL-126240 - Make workspace names more prominent Resolves: RHEL-96218 - Fix window-list styling Resolves: RHEL-95787 - Stop overriding gnome-shell's overview allocation Resolves: RHEL-70892 - Indicate urgency-hint in window-list Resolves: RHEL-73146 - Change "move-clock" to "move-notifications" Resolves: RHEL-33429 - Fix app grid with dash-to-panel extension Resolves: RHEL-69665 - Fix another bug in window-list reordering backport Resolves: RHEL-22692 - Fix workspace indicator cleanups Resolves: RHEL-129395 - Fix applying num-workspaces setting Resolves: RHEL-129101 - Fix loading custom CSS Resolves: RHEL-126240 - Make workspace names more prominent Resolves: RHEL-96218 - Fix window-list styling Resolves: RHEL-95787 - Stop overriding gnome-shell's overview allocation Resolves: RHEL-70892 - Indicate urgency-hint in window-list Resolves: RHEL-73146 - Change "move-clock" to "move-notifications" Resolves: RHEL-33429 - Fix app grid with dash-to-panel extension Resolves: RHEL-69665 - Fix another bug in window-list reordering backport Resolves: RHEL-22692 - Fix workspace indicator cleanups Resolves: RHEL-129395 - Fix applying num-workspaces setting Resolves: RHEL-129101 - Fix loading custom CSS Resolves: RHEL-126240 - Make workspace names more prominent Resolves: RHEL-96218 - Fix window-list styling Resolves: RHEL-95787 - Stop overriding gnome-shell's overview allocation Resolves: RHEL-70892 - Indicate urgency-hint in window-list Resolves: RHEL-73146 - Change "move-clock" to "move-notifications" Resolves: RHEL-33429 - Fix app grid with dash-to-panel extension Resolves: RHEL-69665 - Fix another bug in window-list reordering backport Resolves: RHEL-22692 - Fix workspace indicator cleanups Resolves: RHEL-129395 - Fix applying num-workspaces setting Resolves: RHEL-129101 - Fix loading custom CSS Resolves: RHEL-126240 - Make workspace names more prominent Resolves: RHEL-96218 - Fix window-list styling Resolves: RHEL-95787 - Stop overriding gnome-shell's overview allocation Resolves: RHEL-70892 - Indicate urgency-hint in window-list Resolves: RHEL-73146 - Change "move-clock" to "move-notifications" Resolves: RHEL-33429 - Fix app grid with dash-to-panel extension Resolves: RHEL-69665 - Fix another bug in window-list reordering backport Resolves: RHEL-22692 - Fix workspace indicator cleanups Resolves: RHEL-129395 - Fix applying num-workspaces setting Resolves: RHEL-129101 - Fix loading custom CSS Resolves: RHEL-126240 - Make workspace names more prominent Resolves: RHEL-96218 - Fix window-list styling Resolves: RHEL-95787 - Stop overriding gnome-shell's overview allocation Resolves: RHEL-70892 - Indicate urgency-hint in window-list Resolves: RHEL-73146 - Change "move-clock" to "move-notifications" Resolves: RHEL-33429 - Fix app grid with dash-to-panel extension Resolves: RHEL-69665 - Fix another bug in window-list reordering backport Resolves: RHEL-22692 - Fix workspace indicator cleanups Resolves: RHEL-129395 - Fix applying num-workspaces setting Resolves: RHEL-129101 - Fix loading custom CSS Resolves: RHEL-126240 - Make workspace names more prominent Resolves: RHEL-96218 - Fix window-list styling Resolves: RHEL-95787 - Stop overriding gnome-shell's overview allocation Resolves: RHEL-70892 - Indicate urgency-hint in window-list Resolves: RHEL-73146 - Change "move-clock" to "move-notifications" Resolves: RHEL-33429 - Fix app grid with dash-to-panel extension Resolves: RHEL-69665 - Fix another bug in window-list reordering backport Resolves: RHEL-22692 - Fix workspace indicator cleanups Resolves: RHEL-129395 - Fix applying num-workspaces setting Resolves: RHEL-129101 - Fix loading custom CSS Resolves: RHEL-126240 - Make workspace names more prominent Resolves: RHEL-96218 - Fix window-list styling Resolves: RHEL-95787 - Stop overriding gnome-shell's overview allocation Resolves: RHEL-70892 - Indicate urgency-hint in window-list Resolves: RHEL-73146 - Change "move-clock" to "move-notifications" Resolves: RHEL-33429 - Fix app grid with dash-to-panel extension Resolves: RHEL-69665 - Fix another bug in window-list reordering backport Resolves: RHEL-22692 - Fix workspace indicator cleanups Resolves: RHEL-129395 - Fix applying num-workspaces setting Resolves: RHEL-129101 - Fix loading custom CSS Resolves: RHEL-126240 - Make workspace names more prominent Resolves: RHEL-96218 - Fix window-list styling Resolves: RHEL-95787 - Stop overriding gnome-shell's overview allocation Resolves: RHEL-70892 - Indicate urgency-hint in window-list Resolves: RHEL-73146 - Change "move-clock" to "move-notifications" Resolves: RHEL-33429 - Fix app grid with dash-to-panel extension Resolves: RHEL-69665 - Fix another bug in window-list reordering backport Resolves: RHEL-22692 - Fix workspace indicator cleanups Resolves: RHEL-129395 - Fix applying num-workspaces setting Resolves: RHEL-129101 - Fix loading custom CSS Resolves: RHEL-126240 - Make workspace names more prominent Resolves: RHEL-96218 - Fix window-list styling Resolves: RHEL-95787 - Stop overriding gnome-shell's overview allocation Resolves: RHEL-70892 - Indicate urgency-hint in window-list Resolves: RHEL-73146 - Change "move-clock" to "move-notifications" Resolves: RHEL-33429 - Fix app grid with dash-to-panel extension Resolves: RHEL-69665 - Fix another bug in window-list reordering backport Resolves: RHEL-22692 - Fix workspace indicator cleanups Resolves: RHEL-129395 - Fix applying num-workspaces setting Resolves: RHEL-129101 - Fix loading custom CSS Resolves: RHEL-126240 - Make workspace names more prominent Resolves: RHEL-96218 - Fix window-list styling Resolves: RHEL-95787 - Stop overriding gnome-shell's overview allocation Resolves: RHEL-70892 - Indicate urgency-hint in window-list Resolves: RHEL-73146 - Change "move-clock" to "move-notifications" Resolves: RHEL-33429 - Fix app grid with dash-to-panel extension Resolves: RHEL-69665 - Fix another bug in window-list reordering backport Resolves: RHEL-22692 - Fix workspace indicator cleanups Resolves: RHEL-129395 - Fix applying num-workspaces setting Resolves: RHEL-129101 - Fix loading custom CSS Resolves: RHEL-126240 - Make workspace names more prominent Resolves: RHEL-96218 - Fix window-list styling Resolves: RHEL-95787 - Stop overriding gnome-shell's overview allocation Resolves: RHEL-70892 - Indicate urgency-hint in window-list Resolves: RHEL-73146 - Change "move-clock" to "move-notifications" Resolves: RHEL-33429 - Fix app grid with dash-to-panel extension Resolves: RHEL-69665 - Fix another bug in window-list reordering backport Resolves: RHEL-22692 - Fix workspace indicator cleanups Resolves: RHEL-129395 - Fix applying num-workspaces setting Resolves: RHEL-129101 - Fix loading custom CSS Resolves: RHEL-126240 - Make workspace names more prominent Resolves: RHEL-96218 - Fix window-list styling Resolves: RHEL-95787 - Stop overriding gnome-shell's overview allocation Resolves: RHEL-70892 - Indicate urgency-hint in window-list Resolves: RHEL-73146 - Change "move-clock" to "move-notifications" Resolves: RHEL-33429 - Fix app grid with dash-to-panel extension Resolves: RHEL-69665 - Fix another bug in window-list reordering backport Resolves: RHEL-22692 - Fix workspace indicator cleanups Resolves: RHEL-129395 - Fix applying num-workspaces setting Resolves: RHEL-129101 - Fix loading custom CSS Resolves: RHEL-126240 - Make workspace names more prominent Resolves: RHEL-96218 - Fix window-list styling Resolves: RHEL-95787 - Stop overriding gnome-shell's overview allocation Resolves: RHEL-70892 - Indicate urgency-hint in window-list Resolves: RHEL-73146 - Change "move-clock" to "move-notifications" Resolves: RHEL-33429 - Fix app grid with dash-to-panel extension Resolves: RHEL-69665 - Fix another bug in window-list reordering backport Resolves: RHEL-22692 - Fix workspace indicator cleanups Resolves: RHEL-129395 - Fix applying num-workspaces setting Resolves: RHEL-129101 - Fix loading custom CSS Resolves: RHEL-126240 - Make workspace names more prominent Resolves: RHEL-96218 - Fix window-list styling Resolves: RHEL-95787 - Stop overriding gnome-shell's overview allocation Resolves: RHEL-70892 - Indicate urgency-hint in window-list Resolves: RHEL-73146 - Change "move-clock" to "move-notifications" Resolves: RHEL-33429 - Fix app grid with dash-to-panel extension Resolves: RHEL-69665 - Fix another bug in window-list reordering backport Resolves: RHEL-22692 - Fix workspace indicator cleanups Resolves: RHEL-129395 - Fix applying num-workspaces setting Resolves: RHEL-129101 - Fix loading custom CSS Resolves: RHEL-126240 - Make workspace names more prominent Resolves: RHEL-96218 - Fix window-list styling Resolves: RHEL-95787 - Stop overriding gnome-shell's overview allocation Resolves: RHEL-70892 - Indicate urgency-hint in window-list Resolves: RHEL-73146 - Change "move-clock" to "move-notifications" Resolves: RHEL-33429 - Fix app grid with dash-to-panel extension Resolves: RHEL-69665 - Fix another bug in window-list reordering backport Resolves: RHEL-22692 - Fix workspace indicator cleanups Resolves: RHEL-129395 - Fix applying num-workspaces setting Resolves: RHEL-129101 - Fix loading custom CSS Resolves: RHEL-126240 - Make workspace names more prominent Resolves: RHEL-96218 - Fix window-list styling Resolves: RHEL-95787 - Stop overriding gnome-shell's overview allocation Resolves: RHEL-70892 - Indicate urgency-hint in window-list Resolves: RHEL-73146 - Change "move-clock" to "move-notifications" Resolves: RHEL-33429 - Fix app grid with dash-to-panel extension Resolves: RHEL-69665 - Fix another bug in window-list reordering backport Resolves: RHEL-22692 - Fix workspace indicator cleanups Resolves: RHEL-129395 - Fix applying num-workspaces setting Resolves: RHEL-129101 - Fix loading custom CSS Resolves: RHEL-126240 - Make workspace names more prominent Resolves: RHEL-96218 - Fix window-list styling Resolves: RHEL-95787 - Stop overriding gnome-shell's overview allocation Resolves: RHEL-70892 - Indicate urgency-hint in window-list Resolves: RHEL-73146 - Change "move-clock" to "move-notifications" Resolves: RHEL-33429 - Fix app grid with dash-to-panel extension Resolves: RHEL-69665 - Fix another bug in window-list reordering backport Resolves: RHEL-22692 - Resolves: RHEL-22268 (Prefer VENDOR_NAME in app origin) - Resolves: RHEL-843 (Rebase GNOME Software to its GNOME 45 version) - Resolves: #2228374 (Rebuild to move gnome-software-devel into CRB) - Resolves: #2128812 (Correct property name in GsRemovalDialog .ui file) - Resolves: #2129021 (Hide some errors in non-debug builds) - Fix help overlay shortcut (#2073741) - Fix crash when changing data points (#2062802) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 40.1 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 40.0 - Remove unused polkit BuildRequires, update URL - Update to 40.rc - Backport an upstream patch to fix out-of-bounds error when opening resources tab (MR #38) - Update to 40.beta - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 3.40.3 (#1998957) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 3.40.1 - Rebase the patches - Backport yet-to-be-released patches from upstream to avoid translation conflicts Resolves: #1959384 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Fix crash when the command line is shorter than 1024 characters - Update to 3.38.1 - Backport yet-to-be-released patches from upstream - Update to 3.38.0 - Rebase the patches - Backport yet-to-be-released patches from upstream - Update to 3.37.90 - Rebase the patches - Update to 3.36.2 - Rebase the patches - Update to 3.40.3 (#1998957) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 3.40.1 - Rebase the patches - Backport yet-to-be-released patches from upstream to avoid translation conflicts Resolves: #1959384 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Fix crash when the command line is shorter than 1024 characters - Update to 3.38.1 - Backport yet-to-be-released patches from upstream - Update to 3.38.0 - Rebase the patches - Backport yet-to-be-released patches from upstream - Update to 3.37.90 - Rebase the patches - Update to 3.36.2 - Rebase the patches - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Split highcontrast-icon-theme out to a new subpackage - Explicitly require cursor and icon themes required for the gtk2 themes - Make adwaita-gtk2-theme recommends conditional on gtk2 being installed - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update Japanese translation - Resolves: rhbz#2082188 - Fix default focus Related: rhbz#2055735 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add missing obsoletes for gnome-getting-started-docs-hu (#1954117) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 40.0 - Update the fedora logo in welcome image (#1940041) - Obsolete all language-specific gnome-getting-started-docs subpackages - Obsolete gnome-getting-started-docs - New welcome image for Fedora branding (thanks, jimmac!) - Resolves: #2063688 (Update to 40.10 release) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #1973391 (Remove the patch, not applicable due to Nautilus changes) - Resolves: #1973391 (Backport downstream patch from older RHEL) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Use upstream appdata screenshots - Update to 40.0 - Require gnome-themes-extra for gtk3 css files - Use same pre-release system as in other GNOME packages - Require libhandy1 instead of libhandy - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 40.0 - Update to 40.rc - Update to 40.beta - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 3.38.2 - Update to 3.38.1 - Update to 3.38.0 - Update to 3.37.92 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fix a mistake building -compat - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Make a compat subpackage to provide the old paths to our libraries, linker script, and includes. - Update to 3.0.11 (via patches generated from git) - Plus newer upstream fixes (also via patches generated from git) - Fix shell exit failures in make - Fix .reloc section generation - Fix CHAR8 definition - Fix "make DESTDIR=..." - Change the installed .a/.o layout - Provide makefiles for consumers to use. - Make the -devel noarch since it's just headers. - Add a bunch of compatibility symlinks for the 3.0.8 filesystem layout These will go away once we've migrated everything using them in fedora to use the newer make system... - Upstream patch for efibind.h - Latest ELF constructors/destructors patch - Minor spec cleanups - Fix some minor rpmlint complaints - Pull recent patches from upstream - Add support for ELF constructors and destructors - Fix a minor licensing problem - Fix CVE-2025-68973 (gpg.fail/memcpy) - Fix PKCS#11 token initialization label overflow (CVE-2025-9820) - Fix name constraint processing performance issue (CVE-2025-14831) - Reinstate and update the prematurely dropped rekeying patch - Rebase to 3.8.10 - Revert defaulting to PBMAC1 in FIPS mode - Revert unapproving 1024-, 1280-, 1536- and 1792-bit RSA verification - key_update: rework the rekeying logic (RHEL-107499) - Add missing changelog entry - Fix CVE-2025-32988, CVE-2025-32989, CVE-2025-32990, and CVE-2025-6395 - Bump nettle dependency to 3.10.1 (RHEL-52740) - Backport the fix for CVE-2024-12243 (RHEL-78580) - Bump release to ensure el9 package is greater than el9_* packages - Bump release to ensure el9 package is greater than el9_* packages - Fix CVE-2026-33846 (DTLS fragment reassembly, High, heap overwrite) - Fix CVE-2026-42009 (DTLS fragment reassembly, High, undefined behaviour) - Fix CVE-2026-33845 (DTLS fragment reassembly, High, heap overread) - Fix CVE-2026-42010 (PSK authentication, High, authentication bypass) - Fix CVE-2026-3833 (Name constraints, Medium, name constraint bypass) - Fix CVE-2026-42011 (Name constraints, Medium, name constraint bypass) - Fix CVE-2026-42012 (CN fallback, Medium, certificate misuse) - Fix CVE-2026-42013 (CN fallback, Medium, certificate misuse) - Fix CVE-2026-42014 (PKCS#11 PIN change, Medium, use-after-free) - Fix CVE-2026-5260 (PKCS#11 RSA, Medium, heap overread) - Fix CVE-2026-42015 (PKCS#12 appending, Low, heap overwrite) - Fix CVE-2026-3832 (OCSP, Low, revocation bypass) - Fix CVE-2026-5419 (PKCS#7, Low, timing side-channel) - Fix upstream security issue #1808 (PSK rehandshake) - Fix upstream security issue #1810 (EKU OID prefix match) - Fix upstream security issue #1813 (pkcs11-provider persistent keys) - Fix upstream security issue #1818 (RSA correctness, OpenSSL format import) - Fix upstream security issue #1819 (PKCS#11 trust removal error path) - Fix upstream security issue #1822 (SCT extension parser OOB read) - Fix upstream security issue #1841 (key zeroization in hybrid kex) - Fix upstream security issue #1823 (malformed certtool template) - Fix upstream security issue #1817 (session parameter loading robustness) - Fix upstream security issue #1820 (PKCS#11 KDF succeeding w/o deriving) - gnutls-3.8.10-CVE-2025-9820.patch: update Makefile.in - Fix PKCS#11 token initialization label overflow (CVE-2025-9820) - Fix name constraint processing performance issue (CVE-2025-14831) - Reinstate and update the prematurely dropped rekeying patch - Rebase to 3.8.10 - Revert defaulting to PBMAC1 in FIPS mode - Revert unapproving 1024-, 1280-, 1536- and 1792-bit RSA verification - key_update: rework the rekeying logic (RHEL-107499) - Add missing changelog entry - Fix CVE-2025-32988, CVE-2025-32989, CVE-2025-32990, and CVE-2025-6395 - Bump nettle dependency to 3.10.1 (RHEL-52740) - Backport the fix for CVE-2024-12243 (RHEL-78580) - Rebuild to target RHEL-9.8 - fips: Allow SigVer only with RSA keys with modulus >= 2048 bits - Fix order of previous changelog entries (RHEL-172270) - Use full hash+sign operations in pct_test (RHEL-172270) - Fix CVE-2026-33846 (DTLS fragment reassembly, High, heap overwrite) - Fix CVE-2026-42009 (DTLS fragment reassembly, High, undefined behaviour) - Fix CVE-2026-33845 (DTLS fragment reassembly, High, heap overread) - Fix CVE-2026-42010 (PSK authentication, High, authentication bypass) - Fix CVE-2026-3833 (Name constraints, Medium, name constraint bypass) - Fix CVE-2026-42011 (Name constraints, Medium, name constraint bypass) - Fix CVE-2026-42012 (CN fallback, Medium, certificate misuse) - Fix CVE-2026-42013 (CN fallback, Medium, certificate misuse) - Fix CVE-2026-42014 (PKCS#11 PIN change, Medium, use-after-free) - Fix CVE-2026-5260 (PKCS#11 RSA, Medium, heap overread) - Fix CVE-2026-42015 (PKCS#12 appending, Low, heap overwrite) - Fix CVE-2026-3832 (OCSP, Low, revocation bypass) - Fix CVE-2026-5419 (PKCS#7, Low, timing side-channel) - Fix upstream security issue #1808 (PSK rehandshake) - Fix upstream security issue #1810 (EKU OID prefix match) - Fix upstream security issue #1813 (pkcs11-provider persistent keys) - Fix upstream security issue #1818 (RSA correctness, OpenSSL format import) - Fix upstream security issue #1819 (PKCS#11 trust removal error path) - Fix upstream security issue #1822 (SCT extension parser OOB read) - Fix upstream security issue #1841 (key zeroization in hybrid kex) - Fix upstream security issue #1823 (malformed certtool template) - Fix upstream security issue #1817 (session parameter loading robustness) - Fix upstream security issue #1820 (PKCS#11 KDF succeeding w/o deriving) - gnutls-3.8.10-CVE-2025-9820.patch: update Makefile.in - Fix PKCS#11 token initialization label overflow (CVE-2025-9820) - Fix name constraint processing performance issue (CVE-2025-14831) - Reinstate and update the prematurely dropped rekeying patch - Rebase to 3.8.10 - Revert defaulting to PBMAC1 in FIPS mode - Revert unapproving 1024-, 1280-, 1536- and 1792-bit RSA verification - key_update: rework the rekeying logic (RHEL-107499) - Add missing changelog entry - Mark ML-KEM FIPS-unapproved (RHEL-250213) - Rebuild to target RHEL-9.8 - fips: Allow SigVer only with RSA keys with modulus >= 2048 bits - Fix order of previous changelog entries (RHEL-172270) - Use full hash+sign operations in pct_test (RHEL-172270) - Fix CVE-2026-33846 (DTLS fragment reassembly, High, heap overwrite) - Fix CVE-2026-42009 (DTLS fragment reassembly, High, undefined behaviour) - Fix CVE-2026-33845 (DTLS fragment reassembly, High, heap overread) - Fix CVE-2026-42010 (PSK authentication, High, authentication bypass) - Fix CVE-2026-3833 (Name constraints, Medium, name constraint bypass) - Fix CVE-2026-42011 (Name constraints, Medium, name constraint bypass) - Fix CVE-2026-42012 (CN fallback, Medium, certificate misuse) - Fix CVE-2026-42013 (CN fallback, Medium, certificate misuse) - Fix CVE-2026-42014 (PKCS#11 PIN change, Medium, use-after-free) - Fix CVE-2026-5260 (PKCS#11 RSA, Medium, heap overread) - Fix CVE-2026-42015 (PKCS#12 appending, Low, heap overwrite) - Fix CVE-2026-3832 (OCSP, Low, revocation bypass) - Fix CVE-2026-5419 (PKCS#7, Low, timing side-channel) - Fix upstream security issue #1808 (PSK rehandshake) - Fix upstream security issue #1810 (EKU OID prefix match) - Fix upstream security issue #1813 (pkcs11-provider persistent keys) - Fix upstream security issue #1818 (RSA correctness, OpenSSL format import) - Fix upstream security issue #1819 (PKCS#11 trust removal error path) - Fix upstream security issue #1822 (SCT extension parser OOB read) - Fix upstream security issue #1841 (key zeroization in hybrid kex) - Fix upstream security issue #1823 (malformed certtool template) - Fix upstream security issue #1817 (session parameter loading robustness) - Fix upstream security issue #1820 (PKCS#11 KDF succeeding w/o deriving) - gnutls-3.8.10-CVE-2025-9820.patch: update Makefile.in - Fix PKCS#11 token initialization label overflow (CVE-2025-9820) - Fix name constraint processing performance issue (CVE-2025-14831) - Reinstate and update the prematurely dropped rekeying patch - Rebase to 3.8.10 - Revert defaulting to PBMAC1 in FIPS mode - Revert unapproving 1024-, 1280-, 1536- and 1792-bit RSA verification - key_update: rework the rekeying logic (RHEL-107499) - Fix PKCS#11 token initialization label overflow (CVE-2025-9820) - Fix name constraint processing performance issue (CVE-2025-14831) - Reinstate and update the prematurely dropped rekeying patch - Rebase to 3.8.10 - Revert defaulting to PBMAC1 in FIPS mode - Revert unapproving 1024-, 1280-, 1536- and 1792-bit RSA verification - key_update: rework the rekeying logic (RHEL-107499) - Add missing changelog entry - Fix CVE-2025-32988, CVE-2025-32989, CVE-2025-32990, and CVE-2025-6395 - Bump nettle dependency to 3.10.1 (RHEL-52740) - Backport the fix for CVE-2024-12243 (RHEL-78580) - Bump release to ensure el9 package is greater than el9_* packages - Bump release to ensure el9 package is greater than el9_* packages - Fix CVE-2026-33846 (DTLS fragment reassembly, High, heap overwrite) - Fix CVE-2026-42009 (DTLS fragment reassembly, High, undefined behaviour) - Fix CVE-2026-33845 (DTLS fragment reassembly, High, heap overread) - Fix CVE-2026-42010 (PSK authentication, High, authentication bypass) - Fix CVE-2026-3833 (Name constraints, Medium, name constraint bypass) - Fix CVE-2026-42011 (Name constraints, Medium, name constraint bypass) - Fix CVE-2026-42012 (CN fallback, Medium, certificate misuse) - Fix CVE-2026-42013 (CN fallback, Medium, certificate misuse) - Fix CVE-2026-42014 (PKCS#11 PIN change, Medium, use-after-free) - Fix CVE-2026-5260 (PKCS#11 RSA, Medium, heap overread) - Fix CVE-2026-42015 (PKCS#12 appending, Low, heap overwrite) - Fix CVE-2026-3832 (OCSP, Low, revocation bypass) - Fix CVE-2026-5419 (PKCS#7, Low, timing side-channel) - Fix upstream security issue #1808 (PSK rehandshake) - Fix upstream security issue #1810 (EKU OID prefix match) - Fix upstream security issue #1813 (pkcs11-provider persistent keys) - Fix upstream security issue #1818 (RSA correctness, OpenSSL format import) - Fix upstream security issue #1819 (PKCS#11 trust removal error path) - Fix upstream security issue #1822 (SCT extension parser OOB read) - Fix upstream security issue #1841 (key zeroization in hybrid kex) - Fix upstream security issue #1823 (malformed certtool template) - Fix upstream security issue #1817 (session parameter loading robustness) - Fix upstream security issue #1820 (PKCS#11 KDF succeeding w/o deriving) - gnutls-3.8.10-CVE-2025-9820.patch: update Makefile.in - Fix PKCS#11 token initialization label overflow (CVE-2025-9820) - Fix name constraint processing performance issue (CVE-2025-14831) - Reinstate and update the prematurely dropped rekeying patch - Rebase to 3.8.10 - Revert defaulting to PBMAC1 in FIPS mode - Revert unapproving 1024-, 1280-, 1536- and 1792-bit RSA verification - key_update: rework the rekeying logic (RHEL-107499) - Add missing changelog entry - Fix CVE-2025-32988, CVE-2025-32989, CVE-2025-32990, and CVE-2025-6395 - Bump nettle dependency to 3.10.1 (RHEL-52740) - Backport the fix for CVE-2024-12243 (RHEL-78580) - Rebuild to target RHEL-9.8 - fips: Allow SigVer only with RSA keys with modulus >= 2048 bits - Fix order of previous changelog entries (RHEL-172270) - Use full hash+sign operations in pct_test (RHEL-172270) - Fix CVE-2026-33846 (DTLS fragment reassembly, High, heap overwrite) - Fix CVE-2026-42009 (DTLS fragment reassembly, High, undefined behaviour) - Fix CVE-2026-33845 (DTLS fragment reassembly, High, heap overread) - Fix CVE-2026-42010 (PSK authentication, High, authentication bypass) - Fix CVE-2026-3833 (Name constraints, Medium, name constraint bypass) - Fix CVE-2026-42011 (Name constraints, Medium, name constraint bypass) - Fix CVE-2026-42012 (CN fallback, Medium, certificate misuse) - Fix CVE-2026-42013 (CN fallback, Medium, certificate misuse) - Fix CVE-2026-42014 (PKCS#11 PIN change, Medium, use-after-free) - Fix CVE-2026-5260 (PKCS#11 RSA, Medium, heap overread) - Fix CVE-2026-42015 (PKCS#12 appending, Low, heap overwrite) - Fix CVE-2026-3832 (OCSP, Low, revocation bypass) - Fix CVE-2026-5419 (PKCS#7, Low, timing side-channel) - Fix upstream security issue #1808 (PSK rehandshake) - Fix upstream security issue #1810 (EKU OID prefix match) - Fix upstream security issue #1813 (pkcs11-provider persistent keys) - Fix upstream security issue #1818 (RSA correctness, OpenSSL format import) - Fix upstream security issue #1819 (PKCS#11 trust removal error path) - Fix upstream security issue #1822 (SCT extension parser OOB read) - Fix upstream security issue #1841 (key zeroization in hybrid kex) - Fix upstream security issue #1823 (malformed certtool template) - Fix upstream security issue #1817 (session parameter loading robustness) - Fix upstream security issue #1820 (PKCS#11 KDF succeeding w/o deriving) - gnutls-3.8.10-CVE-2025-9820.patch: update Makefile.in - Fix PKCS#11 token initialization label overflow (CVE-2025-9820) - Fix name constraint processing performance issue (CVE-2025-14831) - Reinstate and update the prematurely dropped rekeying patch - Rebase to 3.8.10 - Revert defaulting to PBMAC1 in FIPS mode - Revert unapproving 1024-, 1280-, 1536- and 1792-bit RSA verification - key_update: rework the rekeying logic (RHEL-107499) - Add missing changelog entry - Mark ML-KEM FIPS-unapproved (RHEL-250213) - Rebuild to target RHEL-9.8 - fips: Allow SigVer only with RSA keys with modulus >= 2048 bits - Fix order of previous changelog entries (RHEL-172270) - Use full hash+sign operations in pct_test (RHEL-172270) - Fix CVE-2026-33846 (DTLS fragment reassembly, High, heap overwrite) - Fix CVE-2026-42009 (DTLS fragment reassembly, High, undefined behaviour) - Fix CVE-2026-33845 (DTLS fragment reassembly, High, heap overread) - Fix CVE-2026-42010 (PSK authentication, High, authentication bypass) - Fix CVE-2026-3833 (Name constraints, Medium, name constraint bypass) - Fix CVE-2026-42011 (Name constraints, Medium, name constraint bypass) - Fix CVE-2026-42012 (CN fallback, Medium, certificate misuse) - Fix CVE-2026-42013 (CN fallback, Medium, certificate misuse) - Fix CVE-2026-42014 (PKCS#11 PIN change, Medium, use-after-free) - Fix CVE-2026-5260 (PKCS#11 RSA, Medium, heap overread) - Fix CVE-2026-42015 (PKCS#12 appending, Low, heap overwrite) - Fix CVE-2026-3832 (OCSP, Low, revocation bypass) - Fix CVE-2026-5419 (PKCS#7, Low, timing side-channel) - Fix upstream security issue #1808 (PSK rehandshake) - Fix upstream security issue #1810 (EKU OID prefix match) - Fix upstream security issue #1813 (pkcs11-provider persistent keys) - Fix upstream security issue #1818 (RSA correctness, OpenSSL format import) - Fix upstream security issue #1819 (PKCS#11 trust removal error path) - Fix upstream security issue #1822 (SCT extension parser OOB read) - Fix upstream security issue #1841 (key zeroization in hybrid kex) - Fix upstream security issue #1823 (malformed certtool template) - Fix upstream security issue #1817 (session parameter loading robustness) - Fix upstream security issue #1820 (PKCS#11 KDF succeeding w/o deriving) - gnutls-3.8.10-CVE-2025-9820.patch: update Makefile.in - Fix PKCS#11 token initialization label overflow (CVE-2025-9820) - Fix name constraint processing performance issue (CVE-2025-14831) - Reinstate and update the prematurely dropped rekeying patch - Rebase to 3.8.10 - Revert defaulting to PBMAC1 in FIPS mode - Revert unapproving 1024-, 1280-, 1536- and 1792-bit RSA verification - key_update: rework the rekeying logic (RHEL-107499) - Fix PKCS#11 token initialization label overflow (CVE-2025-9820) - Fix name constraint processing performance issue (CVE-2025-14831) - Reinstate and update the prematurely dropped rekeying patch - Rebase to 3.8.10 - Revert defaulting to PBMAC1 in FIPS mode - Revert unapproving 1024-, 1280-, 1536- and 1792-bit RSA verification - key_update: rework the rekeying logic (RHEL-107499) - Add missing changelog entry - Fix CVE-2025-32988, CVE-2025-32989, CVE-2025-32990, and CVE-2025-6395 - Bump nettle dependency to 3.10.1 (RHEL-52740) - Backport the fix for CVE-2024-12243 (RHEL-78580) - Bump release to ensure el9 package is greater than el9_* packages - Bump release to ensure el9 package is greater than el9_* packages - Fix CVE-2026-33846 (DTLS fragment reassembly, High, heap overwrite) - Fix CVE-2026-42009 (DTLS fragment reassembly, High, undefined behaviour) - Fix CVE-2026-33845 (DTLS fragment reassembly, High, heap overread) - Fix CVE-2026-42010 (PSK authentication, High, authentication bypass) - Fix CVE-2026-3833 (Name constraints, Medium, name constraint bypass) - Fix CVE-2026-42011 (Name constraints, Medium, name constraint bypass) - Fix CVE-2026-42012 (CN fallback, Medium, certificate misuse) - Fix CVE-2026-42013 (CN fallback, Medium, certificate misuse) - Fix CVE-2026-42014 (PKCS#11 PIN change, Medium, use-after-free) - Fix CVE-2026-5260 (PKCS#11 RSA, Medium, heap overread) - Fix CVE-2026-42015 (PKCS#12 appending, Low, heap overwrite) - Fix CVE-2026-3832 (OCSP, Low, revocation bypass) - Fix CVE-2026-5419 (PKCS#7, Low, timing side-channel) - Fix upstream security issue #1808 (PSK rehandshake) - Fix upstream security issue #1810 (EKU OID prefix match) - Fix upstream security issue #1813 (pkcs11-provider persistent keys) - Fix upstream security issue #1818 (RSA correctness, OpenSSL format import) - Fix upstream security issue #1819 (PKCS#11 trust removal error path) - Fix upstream security issue #1822 (SCT extension parser OOB read) - Fix upstream security issue #1841 (key zeroization in hybrid kex) - Fix upstream security issue #1823 (malformed certtool template) - Fix upstream security issue #1817 (session parameter loading robustness) - Fix upstream security issue #1820 (PKCS#11 KDF succeeding w/o deriving) - gnutls-3.8.10-CVE-2025-9820.patch: update Makefile.in - Fix PKCS#11 token initialization label overflow (CVE-2025-9820) - Fix name constraint processing performance issue (CVE-2025-14831) - Reinstate and update the prematurely dropped rekeying patch - Rebase to 3.8.10 - Revert defaulting to PBMAC1 in FIPS mode - Revert unapproving 1024-, 1280-, 1536- and 1792-bit RSA verification - key_update: rework the rekeying logic (RHEL-107499) - Add missing changelog entry - Fix CVE-2025-32988, CVE-2025-32989, CVE-2025-32990, and CVE-2025-6395 - Bump nettle dependency to 3.10.1 (RHEL-52740) - Backport the fix for CVE-2024-12243 (RHEL-78580) - Rebuild to target RHEL-9.8 - fips: Allow SigVer only with RSA keys with modulus >= 2048 bits - Fix order of previous changelog entries (RHEL-172270) - Use full hash+sign operations in pct_test (RHEL-172270) - Fix CVE-2026-33846 (DTLS fragment reassembly, High, heap overwrite) - Fix CVE-2026-42009 (DTLS fragment reassembly, High, undefined behaviour) - Fix CVE-2026-33845 (DTLS fragment reassembly, High, heap overread) - Fix CVE-2026-42010 (PSK authentication, High, authentication bypass) - Fix CVE-2026-3833 (Name constraints, Medium, name constraint bypass) - Fix CVE-2026-42011 (Name constraints, Medium, name constraint bypass) - Fix CVE-2026-42012 (CN fallback, Medium, certificate misuse) - Fix CVE-2026-42013 (CN fallback, Medium, certificate misuse) - Fix CVE-2026-42014 (PKCS#11 PIN change, Medium, use-after-free) - Fix CVE-2026-5260 (PKCS#11 RSA, Medium, heap overread) - Fix CVE-2026-42015 (PKCS#12 appending, Low, heap overwrite) - Fix CVE-2026-3832 (OCSP, Low, revocation bypass) - Fix CVE-2026-5419 (PKCS#7, Low, timing side-channel) - Fix upstream security issue #1808 (PSK rehandshake) - Fix upstream security issue #1810 (EKU OID prefix match) - Fix upstream security issue #1813 (pkcs11-provider persistent keys) - Fix upstream security issue #1818 (RSA correctness, OpenSSL format import) - Fix upstream security issue #1819 (PKCS#11 trust removal error path) - Fix upstream security issue #1822 (SCT extension parser OOB read) - Fix upstream security issue #1841 (key zeroization in hybrid kex) - Fix upstream security issue #1823 (malformed certtool template) - Fix upstream security issue #1817 (session parameter loading robustness) - Fix upstream security issue #1820 (PKCS#11 KDF succeeding w/o deriving) - gnutls-3.8.10-CVE-2025-9820.patch: update Makefile.in - Fix PKCS#11 token initialization label overflow (CVE-2025-9820) - Fix name constraint processing performance issue (CVE-2025-14831) - Reinstate and update the prematurely dropped rekeying patch - Rebase to 3.8.10 - Revert defaulting to PBMAC1 in FIPS mode - Revert unapproving 1024-, 1280-, 1536- and 1792-bit RSA verification - key_update: rework the rekeying logic (RHEL-107499) - Add missing changelog entry - Mark ML-KEM FIPS-unapproved (RHEL-250213) - Rebuild to target RHEL-9.8 - fips: Allow SigVer only with RSA keys with modulus >= 2048 bits - Fix order of previous changelog entries (RHEL-172270) - Use full hash+sign operations in pct_test (RHEL-172270) - Fix CVE-2026-33846 (DTLS fragment reassembly, High, heap overwrite) - Fix CVE-2026-42009 (DTLS fragment reassembly, High, undefined behaviour) - Fix CVE-2026-33845 (DTLS fragment reassembly, High, heap overread) - Fix CVE-2026-42010 (PSK authentication, High, authentication bypass) - Fix CVE-2026-3833 (Name constraints, Medium, name constraint bypass) - Fix CVE-2026-42011 (Name constraints, Medium, name constraint bypass) - Fix CVE-2026-42012 (CN fallback, Medium, certificate misuse) - Fix CVE-2026-42013 (CN fallback, Medium, certificate misuse) - Fix CVE-2026-42014 (PKCS#11 PIN change, Medium, use-after-free) - Fix CVE-2026-5260 (PKCS#11 RSA, Medium, heap overread) - Fix CVE-2026-42015 (PKCS#12 appending, Low, heap overwrite) - Fix CVE-2026-3832 (OCSP, Low, revocation bypass) - Fix CVE-2026-5419 (PKCS#7, Low, timing side-channel) - Fix upstream security issue #1808 (PSK rehandshake) - Fix upstream security issue #1810 (EKU OID prefix match) - Fix upstream security issue #1813 (pkcs11-provider persistent keys) - Fix upstream security issue #1818 (RSA correctness, OpenSSL format import) - Fix upstream security issue #1819 (PKCS#11 trust removal error path) - Fix upstream security issue #1822 (SCT extension parser OOB read) - Fix upstream security issue #1841 (key zeroization in hybrid kex) - Fix upstream security issue #1823 (malformed certtool template) - Fix upstream security issue #1817 (session parameter loading robustness) - Fix upstream security issue #1820 (PKCS#11 KDF succeeding w/o deriving) - gnutls-3.8.10-CVE-2025-9820.patch: update Makefile.in - Fix PKCS#11 token initialization label overflow (CVE-2025-9820) - Fix name constraint processing performance issue (CVE-2025-14831) - Reinstate and update the prematurely dropped rekeying patch - Rebase to 3.8.10 - Revert defaulting to PBMAC1 in FIPS mode - Revert unapproving 1024-, 1280-, 1536- and 1792-bit RSA verification - key_update: rework the rekeying logic (RHEL-107499) - Fix PKCS#11 token initialization label overflow (CVE-2025-9820) - Fix name constraint processing performance issue (CVE-2025-14831) - Reinstate and update the prematurely dropped rekeying patch - Rebase to 3.8.10 - Revert defaulting to PBMAC1 in FIPS mode - Revert unapproving 1024-, 1280-, 1536- and 1792-bit RSA verification - key_update: rework the rekeying logic (RHEL-107499) - Add missing changelog entry - Fix CVE-2025-32988, CVE-2025-32989, CVE-2025-32990, and CVE-2025-6395 - Bump nettle dependency to 3.10.1 (RHEL-52740) - Backport the fix for CVE-2024-12243 (RHEL-78580) - Bump release to ensure el9 package is greater than el9_* packages - Bump release to ensure el9 package is greater than el9_* packages - Fix CVE-2026-33846 (DTLS fragment reassembly, High, heap overwrite) - Fix CVE-2026-42009 (DTLS fragment reassembly, High, undefined behaviour) - Fix CVE-2026-33845 (DTLS fragment reassembly, High, heap overread) - Fix CVE-2026-42010 (PSK authentication, High, authentication bypass) - Fix CVE-2026-3833 (Name constraints, Medium, name constraint bypass) - Fix CVE-2026-42011 (Name constraints, Medium, name constraint bypass) - Fix CVE-2026-42012 (CN fallback, Medium, certificate misuse) - Fix CVE-2026-42013 (CN fallback, Medium, certificate misuse) - Fix CVE-2026-42014 (PKCS#11 PIN change, Medium, use-after-free) - Fix CVE-2026-5260 (PKCS#11 RSA, Medium, heap overread) - Fix CVE-2026-42015 (PKCS#12 appending, Low, heap overwrite) - Fix CVE-2026-3832 (OCSP, Low, revocation bypass) - Fix CVE-2026-5419 (PKCS#7, Low, timing side-channel) - Fix upstream security issue #1808 (PSK rehandshake) - Fix upstream security issue #1810 (EKU OID prefix match) - Fix upstream security issue #1813 (pkcs11-provider persistent keys) - Fix upstream security issue #1818 (RSA correctness, OpenSSL format import) - Fix upstream security issue #1819 (PKCS#11 trust removal error path) - Fix upstream security issue #1822 (SCT extension parser OOB read) - Fix upstream security issue #1841 (key zeroization in hybrid kex) - Fix upstream security issue #1823 (malformed certtool template) - Fix upstream security issue #1817 (session parameter loading robustness) - Fix upstream security issue #1820 (PKCS#11 KDF succeeding w/o deriving) - gnutls-3.8.10-CVE-2025-9820.patch: update Makefile.in - Fix PKCS#11 token initialization label overflow (CVE-2025-9820) - Fix name constraint processing performance issue (CVE-2025-14831) - Reinstate and update the prematurely dropped rekeying patch - Rebase to 3.8.10 - Revert defaulting to PBMAC1 in FIPS mode - Revert unapproving 1024-, 1280-, 1536- and 1792-bit RSA verification - key_update: rework the rekeying logic (RHEL-107499) - Add missing changelog entry - Fix CVE-2025-32988, CVE-2025-32989, CVE-2025-32990, and CVE-2025-6395 - Bump nettle dependency to 3.10.1 (RHEL-52740) - Backport the fix for CVE-2024-12243 (RHEL-78580) - Rebuild to target RHEL-9.8 - fips: Allow SigVer only with RSA keys with modulus >= 2048 bits - Fix order of previous changelog entries (RHEL-172270) - Use full hash+sign operations in pct_test (RHEL-172270) - Fix CVE-2026-33846 (DTLS fragment reassembly, High, heap overwrite) - Fix CVE-2026-42009 (DTLS fragment reassembly, High, undefined behaviour) - Fix CVE-2026-33845 (DTLS fragment reassembly, High, heap overread) - Fix CVE-2026-42010 (PSK authentication, High, authentication bypass) - Fix CVE-2026-3833 (Name constraints, Medium, name constraint bypass) - Fix CVE-2026-42011 (Name constraints, Medium, name constraint bypass) - Fix CVE-2026-42012 (CN fallback, Medium, certificate misuse) - Fix CVE-2026-42013 (CN fallback, Medium, certificate misuse) - Fix CVE-2026-42014 (PKCS#11 PIN change, Medium, use-after-free) - Fix CVE-2026-5260 (PKCS#11 RSA, Medium, heap overread) - Fix CVE-2026-42015 (PKCS#12 appending, Low, heap overwrite) - Fix CVE-2026-3832 (OCSP, Low, revocation bypass) - Fix CVE-2026-5419 (PKCS#7, Low, timing side-channel) - Fix upstream security issue #1808 (PSK rehandshake) - Fix upstream security issue #1810 (EKU OID prefix match) - Fix upstream security issue #1813 (pkcs11-provider persistent keys) - Fix upstream security issue #1818 (RSA correctness, OpenSSL format import) - Fix upstream security issue #1819 (PKCS#11 trust removal error path) - Fix upstream security issue #1822 (SCT extension parser OOB read) - Fix upstream security issue #1841 (key zeroization in hybrid kex) - Fix upstream security issue #1823 (malformed certtool template) - Fix upstream security issue #1817 (session parameter loading robustness) - Fix upstream security issue #1820 (PKCS#11 KDF succeeding w/o deriving) - gnutls-3.8.10-CVE-2025-9820.patch: update Makefile.in - Fix PKCS#11 token initialization label overflow (CVE-2025-9820) - Fix name constraint processing performance issue (CVE-2025-14831) - Reinstate and update the prematurely dropped rekeying patch - Rebase to 3.8.10 - Revert defaulting to PBMAC1 in FIPS mode - Revert unapproving 1024-, 1280-, 1536- and 1792-bit RSA verification - key_update: rework the rekeying logic (RHEL-107499) - Add missing changelog entry - Mark ML-KEM FIPS-unapproved (RHEL-250213) - Rebuild to target RHEL-9.8 - fips: Allow SigVer only with RSA keys with modulus >= 2048 bits - Fix order of previous changelog entries (RHEL-172270) - Use full hash+sign operations in pct_test (RHEL-172270) - Fix CVE-2026-33846 (DTLS fragment reassembly, High, heap overwrite) - Fix CVE-2026-42009 (DTLS fragment reassembly, High, undefined behaviour) - Fix CVE-2026-33845 (DTLS fragment reassembly, High, heap overread) - Fix CVE-2026-42010 (PSK authentication, High, authentication bypass) - Fix CVE-2026-3833 (Name constraints, Medium, name constraint bypass) - Fix CVE-2026-42011 (Name constraints, Medium, name constraint bypass) - Fix CVE-2026-42012 (CN fallback, Medium, certificate misuse) - Fix CVE-2026-42013 (CN fallback, Medium, certificate misuse) - Fix CVE-2026-42014 (PKCS#11 PIN change, Medium, use-after-free) - Fix CVE-2026-5260 (PKCS#11 RSA, Medium, heap overread) - Fix CVE-2026-42015 (PKCS#12 appending, Low, heap overwrite) - Fix CVE-2026-3832 (OCSP, Low, revocation bypass) - Fix CVE-2026-5419 (PKCS#7, Low, timing side-channel) - Fix upstream security issue #1808 (PSK rehandshake) - Fix upstream security issue #1810 (EKU OID prefix match) - Fix upstream security issue #1813 (pkcs11-provider persistent keys) - Fix upstream security issue #1818 (RSA correctness, OpenSSL format import) - Fix upstream security issue #1819 (PKCS#11 trust removal error path) - Fix upstream security issue #1822 (SCT extension parser OOB read) - Fix upstream security issue #1841 (key zeroization in hybrid kex) - Fix upstream security issue #1823 (malformed certtool template) - Fix upstream security issue #1817 (session parameter loading robustness) - Fix upstream security issue #1820 (PKCS#11 KDF succeeding w/o deriving) - gnutls-3.8.10-CVE-2025-9820.patch: update Makefile.in - Fix PKCS#11 token initialization label overflow (CVE-2025-9820) - Fix name constraint processing performance issue (CVE-2025-14831) - Reinstate and update the prematurely dropped rekeying patch - Rebase to 3.8.10 - Revert defaulting to PBMAC1 in FIPS mode - Revert unapproving 1024-, 1280-, 1536- and 1792-bit RSA verification - key_update: rework the rekeying logic (RHEL-107499) - Update to 3.8.1 - Changed the forgeurl to gitlab - Resolves: RHEL-112845 - Bump release for el9 to avoid clash with el9_6 build - Related: RHEL-86067 - Related: RHEL-7366 - Fix malformed patch macros - Related: RHEL-86067 - Related: RHEL-7366 - Add patches back again - Resolves: RHEL-86067 - Related: RHEL-7366 - Add full golist implementation - Resolves: RHEL-7366 - Revert go-rpm-templates to noarch - Resolves: RHEL-67300 - Related: RHEL-52226 - Add back again ExclusiveArch, it was removed by mistake. - Resolves: RHEL-52226 - Make golist non optional - Resolves: RHEL-52226 - Enable debuginfo package - Resolves: RHEL-52226 - Fix typo in add-gobuild-and-gotest.patch - Resolves: RHEL-7437 - Update to 3.8.1 - Changed the forgeurl to gitlab - Resolves: RHEL-112845 - Bump release for el9 to avoid clash with el9_6 build - Related: RHEL-86067 - Related: RHEL-7366 - Fix malformed patch macros - Related: RHEL-86067 - Related: RHEL-7366 - Add patches back again - Resolves: RHEL-86067 - Related: RHEL-7366 - Add full golist implementation - Resolves: RHEL-7366 - Revert go-rpm-templates to noarch - Resolves: RHEL-67300 - Related: RHEL-52226 - Add back again ExclusiveArch, it was removed by mistake. - Resolves: RHEL-52226 - Make golist non optional - Resolves: RHEL-52226 - Enable debuginfo package - Resolves: RHEL-52226 - Fix typo in add-gobuild-and-gotest.patch - Resolves: RHEL-7437 - Update to 3.8.1 - Changed the forgeurl to gitlab - Resolves: RHEL-112845 - Bump release for el9 to avoid clash with el9_6 build - Related: RHEL-86067 - Related: RHEL-7366 - Fix malformed patch macros - Related: RHEL-86067 - Related: RHEL-7366 - Add patches back again - Resolves: RHEL-86067 - Related: RHEL-7366 - Add full golist implementation - Resolves: RHEL-7366 - Revert go-rpm-templates to noarch - Resolves: RHEL-67300 - Related: RHEL-52226 - Add back again ExclusiveArch, it was removed by mistake. - Resolves: RHEL-52226 - Make golist non optional - Resolves: RHEL-52226 - Enable debuginfo package - Resolves: RHEL-52226 - Fix typo in add-gobuild-and-gotest.patch - Resolves: RHEL-7437 - Update to 3.8.1 - Changed the forgeurl to gitlab - Resolves: RHEL-112845 - Bump release for el9 to avoid clash with el9_6 build - Related: RHEL-86067 - Related: RHEL-7366 - Fix malformed patch macros - Related: RHEL-86067 - Related: RHEL-7366 - Add patches back again - Resolves: RHEL-86067 - Related: RHEL-7366 - Add full golist implementation - Resolves: RHEL-7366 - Revert go-rpm-templates to noarch - Resolves: RHEL-67300 - Related: RHEL-52226 - Add back again ExclusiveArch, it was removed by mistake. - Resolves: RHEL-52226 - Make golist non optional - Resolves: RHEL-52226 - Enable debuginfo package - Resolves: RHEL-52226 - Fix typo in add-gobuild-and-gotest.patch - Resolves: RHEL-7437 - Update to Go 1.26.10 (fips-1) - Resolves: RHEL-287192 - Update to Go 1.26.7 (fips-2) - Resolves: RHEL-266348 - Update to Go 1.26.7 (fips-1) - Resolves: RHEL-246425 - Update to Go 1.26.5 (fips-2) - Limit RAND_bytes concurrency - Resolves: RHEL-215845 - Update to Go 1.26.5 (fips-1) - Resolves: RHEL-193476 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Cleanup lib/ ownership - Update to Go 1.25.3 - Resolves: RHEL-121220 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Cleanup lib/ ownership - Update to Go 1.25.3 - Resolves: RHEL-121220 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Revert DWARF5 defaults - Add elf5 to rpminspect.yaml - Related: RHEL-109557 - Update to Go 1.25.0 - Set GOAMD64 to v2 to align with new architecture baselines - Modify the modify_go.env.patch to reflect GOAMD64 baseline version change to v2 - Resolves: RHEL-109557 - Update to Go 1.24.6 (fips-1) - Resolves: RHEL-106461 - Update to Go 1.26.3 (fips-1) - Resolves: RHEL-175607 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Cleanup lib/ ownership - Update to Go 1.25.3 - Resolves: RHEL-121220 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Revert DWARF5 defaults - Add elf5 to rpminspect.yaml - Related: RHEL-109557 - Update to Go 1.25.0 - Set GOAMD64 to v2 to align with new architecture baselines - Modify the modify_go.env.patch to reflect GOAMD64 baseline version change to v2 - Resolves: RHEL-109557 - Update to Go 1.26.4 (fips-1) - Resolves: RHEL-183349 - Update to Go 1.26.3 (fips-1) - Resolves: RHEL-175607 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Cleanup lib/ ownership - Update to Go 1.25.3 - Resolves: RHEL-121220 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Revert DWARF5 defaults - Add elf5 to rpminspect.yaml - Related: RHEL-109557 - Update to Go 1.26.5 (fips-1) - Resolves: RHEL-193475 - Update to Go 1.26.4 (fips-1) - Resolves: RHEL-183349 - Update to Go 1.26.3 (fips-1) - Resolves: RHEL-175607 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Cleanup lib/ ownership - Update to Go 1.25.3 - Resolves: RHEL-121220 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Update to Go 1.26.7 (fips-1) - Resolves: RHEL-246424 - Update to Go 1.26.5 (fips-1) - Resolves: RHEL-193475 - Update to Go 1.26.4 (fips-1) - Resolves: RHEL-183349 - Update to Go 1.26.3 (fips-1) - Resolves: RHEL-175607 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Cleanup lib/ ownership - Update to Go 1.25.3 - Resolves: RHEL-121220 - Update to Go 1.26.7 (fips-2) - Resolves: RHEL-266348 - Update to Go 1.26.7 (fips-1) - Resolves: RHEL-246425 - Update to Go 1.26.5 (fips-2) - Limit RAND_bytes concurrency - Resolves: RHEL-215845 - Update to Go 1.26.5 (fips-1) - Resolves: RHEL-193476 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Cleanup lib/ ownership - Update to Go 1.25.3 - Resolves: RHEL-121220 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Revert DWARF5 defaults - Add elf5 to rpminspect.yaml - Related: RHEL-109557 - Update to Go 1.26.10 (fips-1) - Resolves: RHEL-287192 - Update to Go 1.26.7 (fips-2) - Resolves: RHEL-266348 - Update to Go 1.26.7 (fips-1) - Resolves: RHEL-246425 - Update to Go 1.26.5 (fips-2) - Limit RAND_bytes concurrency - Resolves: RHEL-215845 - Update to Go 1.26.5 (fips-1) - Resolves: RHEL-193476 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Cleanup lib/ ownership - Update to Go 1.25.3 - Resolves: RHEL-121220 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Cleanup lib/ ownership - Update to Go 1.25.3 - Resolves: RHEL-121220 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Revert DWARF5 defaults - Add elf5 to rpminspect.yaml - Related: RHEL-109557 - Update to Go 1.25.0 - Set GOAMD64 to v2 to align with new architecture baselines - Modify the modify_go.env.patch to reflect GOAMD64 baseline version change to v2 - Resolves: RHEL-109557 - Update to Go 1.24.6 (fips-1) - Resolves: RHEL-106461 - Update to Go 1.26.3 (fips-1) - Resolves: RHEL-175607 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Cleanup lib/ ownership - Update to Go 1.25.3 - Resolves: RHEL-121220 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Revert DWARF5 defaults - Add elf5 to rpminspect.yaml - Related: RHEL-109557 - Update to Go 1.25.0 - Set GOAMD64 to v2 to align with new architecture baselines - Modify the modify_go.env.patch to reflect GOAMD64 baseline version change to v2 - Resolves: RHEL-109557 - Update to Go 1.26.4 (fips-1) - Resolves: RHEL-183349 - Update to Go 1.26.3 (fips-1) - Resolves: RHEL-175607 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Cleanup lib/ ownership - Update to Go 1.25.3 - Resolves: RHEL-121220 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Revert DWARF5 defaults - Add elf5 to rpminspect.yaml - Related: RHEL-109557 - Update to Go 1.26.5 (fips-1) - Resolves: RHEL-193475 - Update to Go 1.26.4 (fips-1) - Resolves: RHEL-183349 - Update to Go 1.26.3 (fips-1) - Resolves: RHEL-175607 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Cleanup lib/ ownership - Update to Go 1.25.3 - Resolves: RHEL-121220 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Update to Go 1.26.7 (fips-1) - Resolves: RHEL-246424 - Update to Go 1.26.5 (fips-1) - Resolves: RHEL-193475 - Update to Go 1.26.4 (fips-1) - Resolves: RHEL-183349 - Update to Go 1.26.3 (fips-1) - Resolves: RHEL-175607 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Cleanup lib/ ownership - Update to Go 1.25.3 - Resolves: RHEL-121220 - Update to Go 1.26.7 (fips-2) - Resolves: RHEL-266348 - Update to Go 1.26.7 (fips-1) - Resolves: RHEL-246425 - Update to Go 1.26.5 (fips-2) - Limit RAND_bytes concurrency - Resolves: RHEL-215845 - Update to Go 1.26.5 (fips-1) - Resolves: RHEL-193476 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Cleanup lib/ ownership - Update to Go 1.25.3 - Resolves: RHEL-121220 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Revert DWARF5 defaults - Add elf5 to rpminspect.yaml - Related: RHEL-109557 - Update to Go 1.26.10 (fips-1) - Resolves: RHEL-287192 - Update to Go 1.26.7 (fips-2) - Resolves: RHEL-266348 - Update to Go 1.26.7 (fips-1) - Resolves: RHEL-246425 - Update to Go 1.26.5 (fips-2) - Limit RAND_bytes concurrency - Resolves: RHEL-215845 - Update to Go 1.26.5 (fips-1) - Resolves: RHEL-193476 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Cleanup lib/ ownership - Update to Go 1.25.3 - Resolves: RHEL-121220 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Cleanup lib/ ownership - Update to Go 1.25.3 - Resolves: RHEL-121220 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Revert DWARF5 defaults - Add elf5 to rpminspect.yaml - Related: RHEL-109557 - Update to Go 1.25.0 - Set GOAMD64 to v2 to align with new architecture baselines - Modify the modify_go.env.patch to reflect GOAMD64 baseline version change to v2 - Resolves: RHEL-109557 - Update to Go 1.24.6 (fips-1) - Resolves: RHEL-106461 - Update to Go 1.26.3 (fips-1) - Resolves: RHEL-175607 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Cleanup lib/ ownership - Update to Go 1.25.3 - Resolves: RHEL-121220 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Revert DWARF5 defaults - Add elf5 to rpminspect.yaml - Related: RHEL-109557 - Update to Go 1.25.0 - Set GOAMD64 to v2 to align with new architecture baselines - Modify the modify_go.env.patch to reflect GOAMD64 baseline version change to v2 - Resolves: RHEL-109557 - Update to Go 1.26.4 (fips-1) - Resolves: RHEL-183349 - Update to Go 1.26.3 (fips-1) - Resolves: RHEL-175607 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Cleanup lib/ ownership - Update to Go 1.25.3 - Resolves: RHEL-121220 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Revert DWARF5 defaults - Add elf5 to rpminspect.yaml - Related: RHEL-109557 - Update to Go 1.26.5 (fips-1) - Resolves: RHEL-193475 - Update to Go 1.26.4 (fips-1) - Resolves: RHEL-183349 - Update to Go 1.26.3 (fips-1) - Resolves: RHEL-175607 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Cleanup lib/ ownership - Update to Go 1.25.3 - Resolves: RHEL-121220 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Update to Go 1.26.7 (fips-1) - Resolves: RHEL-246424 - Update to Go 1.26.5 (fips-1) - Resolves: RHEL-193475 - Update to Go 1.26.4 (fips-1) - Resolves: RHEL-183349 - Update to Go 1.26.3 (fips-1) - Resolves: RHEL-175607 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Cleanup lib/ ownership - Update to Go 1.25.3 - Resolves: RHEL-121220 - Update to Go 1.26.7 (fips-2) - Resolves: RHEL-266348 - Update to Go 1.26.7 (fips-1) - Resolves: RHEL-246425 - Update to Go 1.26.5 (fips-2) - Limit RAND_bytes concurrency - Resolves: RHEL-215845 - Update to Go 1.26.5 (fips-1) - Resolves: RHEL-193476 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Cleanup lib/ ownership - Update to Go 1.25.3 - Resolves: RHEL-121220 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Revert DWARF5 defaults - Add elf5 to rpminspect.yaml - Related: RHEL-109557 - Update to Go 1.26.10 (fips-1) - Resolves: RHEL-287192 - Update to Go 1.26.7 (fips-2) - Resolves: RHEL-266348 - Update to Go 1.26.7 (fips-1) - Resolves: RHEL-246425 - Update to Go 1.26.5 (fips-2) - Limit RAND_bytes concurrency - Resolves: RHEL-215845 - Update to Go 1.26.5 (fips-1) - Resolves: RHEL-193476 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Cleanup lib/ ownership - Update to Go 1.25.3 - Resolves: RHEL-121220 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Cleanup lib/ ownership - Update to Go 1.25.3 - Resolves: RHEL-121220 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Revert DWARF5 defaults - Add elf5 to rpminspect.yaml - Related: RHEL-109557 - Update to Go 1.25.0 - Set GOAMD64 to v2 to align with new architecture baselines - Modify the modify_go.env.patch to reflect GOAMD64 baseline version change to v2 - Resolves: RHEL-109557 - Update to Go 1.24.6 (fips-1) - Resolves: RHEL-106461 - Update to Go 1.26.3 (fips-1) - Resolves: RHEL-175607 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Cleanup lib/ ownership - Update to Go 1.25.3 - Resolves: RHEL-121220 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Revert DWARF5 defaults - Add elf5 to rpminspect.yaml - Related: RHEL-109557 - Update to Go 1.25.0 - Set GOAMD64 to v2 to align with new architecture baselines - Modify the modify_go.env.patch to reflect GOAMD64 baseline version change to v2 - Resolves: RHEL-109557 - Update to Go 1.26.4 (fips-1) - Resolves: RHEL-183349 - Update to Go 1.26.3 (fips-1) - Resolves: RHEL-175607 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Cleanup lib/ ownership - Update to Go 1.25.3 - Resolves: RHEL-121220 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Revert DWARF5 defaults - Add elf5 to rpminspect.yaml - Related: RHEL-109557 - Update to Go 1.26.5 (fips-1) - Resolves: RHEL-193475 - Update to Go 1.26.4 (fips-1) - Resolves: RHEL-183349 - Update to Go 1.26.3 (fips-1) - Resolves: RHEL-175607 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Cleanup lib/ ownership - Update to Go 1.25.3 - Resolves: RHEL-121220 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Update to Go 1.26.7 (fips-1) - Resolves: RHEL-246424 - Update to Go 1.26.5 (fips-1) - Resolves: RHEL-193475 - Update to Go 1.26.4 (fips-1) - Resolves: RHEL-183349 - Update to Go 1.26.3 (fips-1) - Resolves: RHEL-175607 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Cleanup lib/ ownership - Update to Go 1.25.3 - Resolves: RHEL-121220 - Update to Go 1.26.7 (fips-2) - Resolves: RHEL-266348 - Update to Go 1.26.7 (fips-1) - Resolves: RHEL-246425 - Update to Go 1.26.5 (fips-2) - Limit RAND_bytes concurrency - Resolves: RHEL-215845 - Update to Go 1.26.5 (fips-1) - Resolves: RHEL-193476 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Cleanup lib/ ownership - Update to Go 1.25.3 - Resolves: RHEL-121220 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Revert DWARF5 defaults - Add elf5 to rpminspect.yaml - Related: RHEL-109557 - Update to Go 1.26.10 (fips-1) - Resolves: RHEL-287192 - Update to Go 1.26.7 (fips-2) - Resolves: RHEL-266348 - Update to Go 1.26.7 (fips-1) - Resolves: RHEL-246425 - Update to Go 1.26.5 (fips-2) - Limit RAND_bytes concurrency - Resolves: RHEL-215845 - Update to Go 1.26.5 (fips-1) - Resolves: RHEL-193476 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Cleanup lib/ ownership - Update to Go 1.25.3 - Resolves: RHEL-121220 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Cleanup lib/ ownership - Update to Go 1.25.3 - Resolves: RHEL-121220 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Revert DWARF5 defaults - Add elf5 to rpminspect.yaml - Related: RHEL-109557 - Update to Go 1.25.0 - Set GOAMD64 to v2 to align with new architecture baselines - Modify the modify_go.env.patch to reflect GOAMD64 baseline version change to v2 - Resolves: RHEL-109557 - Update to Go 1.24.6 (fips-1) - Resolves: RHEL-106461 - Update to Go 1.26.3 (fips-1) - Resolves: RHEL-175607 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Cleanup lib/ ownership - Update to Go 1.25.3 - Resolves: RHEL-121220 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Revert DWARF5 defaults - Add elf5 to rpminspect.yaml - Related: RHEL-109557 - Update to Go 1.25.0 - Set GOAMD64 to v2 to align with new architecture baselines - Modify the modify_go.env.patch to reflect GOAMD64 baseline version change to v2 - Resolves: RHEL-109557 - Update to Go 1.26.4 (fips-1) - Resolves: RHEL-183349 - Update to Go 1.26.3 (fips-1) - Resolves: RHEL-175607 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Cleanup lib/ ownership - Update to Go 1.25.3 - Resolves: RHEL-121220 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Revert DWARF5 defaults - Add elf5 to rpminspect.yaml - Related: RHEL-109557 - Update to Go 1.26.5 (fips-1) - Resolves: RHEL-193475 - Update to Go 1.26.4 (fips-1) - Resolves: RHEL-183349 - Update to Go 1.26.3 (fips-1) - Resolves: RHEL-175607 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Cleanup lib/ ownership - Update to Go 1.25.3 - Resolves: RHEL-121220 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Update to Go 1.26.7 (fips-1) - Resolves: RHEL-246424 - Update to Go 1.26.5 (fips-1) - Resolves: RHEL-193475 - Update to Go 1.26.4 (fips-1) - Resolves: RHEL-183349 - Update to Go 1.26.3 (fips-1) - Resolves: RHEL-175607 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Cleanup lib/ ownership - Update to Go 1.25.3 - Resolves: RHEL-121220 - Update to Go 1.26.7 (fips-2) - Resolves: RHEL-266348 - Update to Go 1.26.7 (fips-1) - Resolves: RHEL-246425 - Update to Go 1.26.5 (fips-2) - Limit RAND_bytes concurrency - Resolves: RHEL-215845 - Update to Go 1.26.5 (fips-1) - Resolves: RHEL-193476 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Cleanup lib/ ownership - Update to Go 1.25.3 - Resolves: RHEL-121220 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Revert DWARF5 defaults - Add elf5 to rpminspect.yaml - Related: RHEL-109557 - Update to Go 1.26.10 (fips-1) - Resolves: RHEL-287192 - Update to Go 1.26.7 (fips-2) - Resolves: RHEL-266348 - Update to Go 1.26.7 (fips-1) - Resolves: RHEL-246425 - Update to Go 1.26.5 (fips-2) - Limit RAND_bytes concurrency - Resolves: RHEL-215845 - Update to Go 1.26.5 (fips-1) - Resolves: RHEL-193476 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Cleanup lib/ ownership - Update to Go 1.25.3 - Resolves: RHEL-121220 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Cleanup lib/ ownership - Update to Go 1.25.3 - Resolves: RHEL-121220 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Revert DWARF5 defaults - Add elf5 to rpminspect.yaml - Related: RHEL-109557 - Update to Go 1.25.0 - Set GOAMD64 to v2 to align with new architecture baselines - Modify the modify_go.env.patch to reflect GOAMD64 baseline version change to v2 - Resolves: RHEL-109557 - Update to Go 1.24.6 (fips-1) - Resolves: RHEL-106461 - Update to Go 1.26.3 (fips-1) - Resolves: RHEL-175607 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Cleanup lib/ ownership - Update to Go 1.25.3 - Resolves: RHEL-121220 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Revert DWARF5 defaults - Add elf5 to rpminspect.yaml - Related: RHEL-109557 - Update to Go 1.25.0 - Set GOAMD64 to v2 to align with new architecture baselines - Modify the modify_go.env.patch to reflect GOAMD64 baseline version change to v2 - Resolves: RHEL-109557 - Update to Go 1.26.4 (fips-1) - Resolves: RHEL-183349 - Update to Go 1.26.3 (fips-1) - Resolves: RHEL-175607 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Cleanup lib/ ownership - Update to Go 1.25.3 - Resolves: RHEL-121220 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Revert DWARF5 defaults - Add elf5 to rpminspect.yaml - Related: RHEL-109557 - Update to Go 1.26.5 (fips-1) - Resolves: RHEL-193475 - Update to Go 1.26.4 (fips-1) - Resolves: RHEL-183349 - Update to Go 1.26.3 (fips-1) - Resolves: RHEL-175607 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Cleanup lib/ ownership - Update to Go 1.25.3 - Resolves: RHEL-121220 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Update to Go 1.26.7 (fips-1) - Resolves: RHEL-246424 - Update to Go 1.26.5 (fips-1) - Resolves: RHEL-193475 - Update to Go 1.26.4 (fips-1) - Resolves: RHEL-183349 - Update to Go 1.26.3 (fips-1) - Resolves: RHEL-175607 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Cleanup lib/ ownership - Update to Go 1.25.3 - Resolves: RHEL-121220 - Update to Go 1.26.7 (fips-2) - Resolves: RHEL-266348 - Update to Go 1.26.7 (fips-1) - Resolves: RHEL-246425 - Update to Go 1.26.5 (fips-2) - Limit RAND_bytes concurrency - Resolves: RHEL-215845 - Update to Go 1.26.5 (fips-1) - Resolves: RHEL-193476 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Cleanup lib/ ownership - Update to Go 1.25.3 - Resolves: RHEL-121220 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Revert DWARF5 defaults - Add elf5 to rpminspect.yaml - Related: RHEL-109557 - Update to Go 1.26.10 (fips-1) - Resolves: RHEL-287192 - Update to Go 1.26.7 (fips-2) - Resolves: RHEL-266348 - Update to Go 1.26.7 (fips-1) - Resolves: RHEL-246425 - Update to Go 1.26.5 (fips-2) - Limit RAND_bytes concurrency - Resolves: RHEL-215845 - Update to Go 1.26.5 (fips-1) - Resolves: RHEL-193476 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Cleanup lib/ ownership - Update to Go 1.25.3 - Resolves: RHEL-121220 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Cleanup lib/ ownership - Update to Go 1.25.3 - Resolves: RHEL-121220 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Revert DWARF5 defaults - Add elf5 to rpminspect.yaml - Related: RHEL-109557 - Update to Go 1.25.0 - Set GOAMD64 to v2 to align with new architecture baselines - Modify the modify_go.env.patch to reflect GOAMD64 baseline version change to v2 - Resolves: RHEL-109557 - Update to Go 1.24.6 (fips-1) - Resolves: RHEL-106461 - Update to Go 1.26.3 (fips-1) - Resolves: RHEL-175607 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Cleanup lib/ ownership - Update to Go 1.25.3 - Resolves: RHEL-121220 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Revert DWARF5 defaults - Add elf5 to rpminspect.yaml - Related: RHEL-109557 - Update to Go 1.25.0 - Set GOAMD64 to v2 to align with new architecture baselines - Modify the modify_go.env.patch to reflect GOAMD64 baseline version change to v2 - Resolves: RHEL-109557 - Update to Go 1.26.4 (fips-1) - Resolves: RHEL-183349 - Update to Go 1.26.3 (fips-1) - Resolves: RHEL-175607 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Cleanup lib/ ownership - Update to Go 1.25.3 - Resolves: RHEL-121220 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Revert DWARF5 defaults - Add elf5 to rpminspect.yaml - Related: RHEL-109557 - Update to Go 1.26.5 (fips-1) - Resolves: RHEL-193475 - Update to Go 1.26.4 (fips-1) - Resolves: RHEL-183349 - Update to Go 1.26.3 (fips-1) - Resolves: RHEL-175607 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Cleanup lib/ ownership - Update to Go 1.25.3 - Resolves: RHEL-121220 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Update to Go 1.26.7 (fips-1) - Resolves: RHEL-246424 - Update to Go 1.26.5 (fips-1) - Resolves: RHEL-193475 - Update to Go 1.26.4 (fips-1) - Resolves: RHEL-183349 - Update to Go 1.26.3 (fips-1) - Resolves: RHEL-175607 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Cleanup lib/ ownership - Update to Go 1.25.3 - Resolves: RHEL-121220 - Update to Go 1.26.7 (fips-2) - Resolves: RHEL-266348 - Update to Go 1.26.7 (fips-1) - Resolves: RHEL-246425 - Update to Go 1.26.5 (fips-2) - Limit RAND_bytes concurrency - Resolves: RHEL-215845 - Update to Go 1.26.5 (fips-1) - Resolves: RHEL-193476 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Cleanup lib/ ownership - Update to Go 1.25.3 - Resolves: RHEL-121220 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Revert DWARF5 defaults - Add elf5 to rpminspect.yaml - Related: RHEL-109557 - Update to Go 1.26.10 (fips-1) - Resolves: RHEL-287192 - Update to Go 1.26.7 (fips-2) - Resolves: RHEL-266348 - Update to Go 1.26.7 (fips-1) - Resolves: RHEL-246425 - Update to Go 1.26.5 (fips-2) - Limit RAND_bytes concurrency - Resolves: RHEL-215845 - Update to Go 1.26.5 (fips-1) - Resolves: RHEL-193476 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Cleanup lib/ ownership - Update to Go 1.25.3 - Resolves: RHEL-121220 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Cleanup lib/ ownership - Update to Go 1.25.3 - Resolves: RHEL-121220 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Revert DWARF5 defaults - Add elf5 to rpminspect.yaml - Related: RHEL-109557 - Update to Go 1.25.0 - Set GOAMD64 to v2 to align with new architecture baselines - Modify the modify_go.env.patch to reflect GOAMD64 baseline version change to v2 - Resolves: RHEL-109557 - Update to Go 1.24.6 (fips-1) - Resolves: RHEL-106461 - Update to Go 1.26.3 (fips-1) - Resolves: RHEL-175607 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Cleanup lib/ ownership - Update to Go 1.25.3 - Resolves: RHEL-121220 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Revert DWARF5 defaults - Add elf5 to rpminspect.yaml - Related: RHEL-109557 - Update to Go 1.25.0 - Set GOAMD64 to v2 to align with new architecture baselines - Modify the modify_go.env.patch to reflect GOAMD64 baseline version change to v2 - Resolves: RHEL-109557 - Update to Go 1.26.4 (fips-1) - Resolves: RHEL-183349 - Update to Go 1.26.3 (fips-1) - Resolves: RHEL-175607 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Cleanup lib/ ownership - Update to Go 1.25.3 - Resolves: RHEL-121220 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Revert DWARF5 defaults - Add elf5 to rpminspect.yaml - Related: RHEL-109557 - Update to Go 1.26.5 (fips-1) - Resolves: RHEL-193475 - Update to Go 1.26.4 (fips-1) - Resolves: RHEL-183349 - Update to Go 1.26.3 (fips-1) - Resolves: RHEL-175607 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Cleanup lib/ ownership - Update to Go 1.25.3 - Resolves: RHEL-121220 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Update to Go 1.26.7 (fips-1) - Resolves: RHEL-246424 - Update to Go 1.26.5 (fips-1) - Resolves: RHEL-193475 - Update to Go 1.26.4 (fips-1) - Resolves: RHEL-183349 - Update to Go 1.26.3 (fips-1) - Resolves: RHEL-175607 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Cleanup lib/ ownership - Update to Go 1.25.3 - Resolves: RHEL-121220 - Update to Go 1.26.7 (fips-2) - Resolves: RHEL-266348 - Update to Go 1.26.7 (fips-1) - Resolves: RHEL-246425 - Update to Go 1.26.5 (fips-2) - Limit RAND_bytes concurrency - Resolves: RHEL-215845 - Update to Go 1.26.5 (fips-1) - Resolves: RHEL-193476 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Cleanup lib/ ownership - Update to Go 1.25.3 - Resolves: RHEL-121220 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Revert DWARF5 defaults - Add elf5 to rpminspect.yaml - Related: RHEL-109557 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update fontconfig DTD id in conf file - Convert to new fonts packaging guidelines - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Un-retire this package in F38+ (#2162532) - Update as per suggestions given in rename package review (#2166813) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add OFL to License tag for DroidSansDevanagari font. Resolves: rhbz#1972027 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 20200215-8 - Fix this spec file to build for F33+ - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 20200215-6 🐞 Workaround Fedora problems created by rpm commit 93604e2 - 20200215-5 💥 Actually rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are valid - 20200215-4 👻 Rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are valid - 20200215-3 ✅ Lint, lint, lint and lint again - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add OFL to License tag for DroidSansDevanagari font. Resolves: rhbz#1972027 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 20200215-8 - Fix this spec file to build for F33+ - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 20200215-6 🐞 Workaround Fedora problems created by rpm commit 93604e2 - 20200215-5 💥 Actually rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are valid - 20200215-4 👻 Rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are valid - 20200215-3 ✅ Lint, lint, lint and lint again - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add OFL to License tag for DroidSansDevanagari font. Resolves: rhbz#1972027 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 20200215-8 - Fix this spec file to build for F33+ - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 20200215-6 🐞 Workaround Fedora problems created by rpm commit 93604e2 - 20200215-5 💥 Actually rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are valid - 20200215-4 👻 Rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are valid - 20200215-3 ✅ Lint, lint, lint and lint again - Rebuild to regenerate auto-requires - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Rebuilt for java-17-openjdk as system jdk - Add noarch to ExclusiveArch - Disable building on i686 - Rebuild with regenerated Requires on Java - Rebuild to regenerate auto-requires - Update javapackages test plan to f42 - Drop unneeded Obsoletes - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Rebuilt for java-21-openjdk as system jdk - bump of release for for java-21-openjdk as system jdk - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild to regenerate auto-Requires on java - Convert License tag to SPDX format - Build with Jurand instead of deprecated javapackages-extra - Add google-noto-sans-cjk-jp-fonts back - Resolves: RHEL-13738 - Update Noto CJK to Sans 2.004 and Serif 2.002 - Drop some Noto CJK Language Specific OTFs sub packages - Resolves: RHEL-13738 - Update to v2.034 - Resolves: #2118299 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to upstream snapshot tarball (Unicode 13.1.0 support) - Update to v2.034 - Resolves: #2118299 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to upstream snapshot tarball (Unicode 13.1.0 support) - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Add google-noto-sans-cjk-jp-fonts back - Resolves: RHEL-13738 - Update Noto CJK to Sans 2.004 and Serif 2.002 - Drop some Noto CJK Language Specific OTFs sub packages - Resolves: RHEL-13738 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Add google-noto-sans-cjk-jp-fonts back - Resolves: RHEL-13738 - Update Noto CJK to Sans 2.004 and Serif 2.002 - Drop some Noto CJK Language Specific OTFs sub packages - Resolves: RHEL-13738 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update fontconfig DTD id in conf file - Convert to new fonts packaging guidelines - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuild Resolves: #2035319 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix license and covscan issues Resolves: #1938732 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Review covscan issues Resolves: #1938733 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Fix License tag - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Do not run gpm in the container (#1524034) - Two patches have been upstreamed - Better comments in spec file - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Add upstream commits for git master which contains patches 9, 10 and 11 - Add GCC10 fix - Cleanups - Review covscan issues Resolves: #1938733 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Fix License tag - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Do not run gpm in the container (#1524034) - Two patches have been upstreamed - Better comments in spec file - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Add upstream commits for git master which contains patches 9, 10 and 11 - Add GCC10 fix - Cleanups - Review covscan issues Resolves: #1938733 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Fix License tag - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Do not run gpm in the container (#1524034) - Two patches have been upstreamed - Better comments in spec file - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Add upstream commits for git master which contains patches 9, 10 and 11 - Add GCC10 fix - Cleanups - fix buffer overflow in NMEA2000 driver (CVE-2025-67268) - fix integer underflow in handling of Navcom packets (CVE-2025-67269) - update to 3.26.1 (RHEL-90132) - fix command injection in gpsprof (CVE-2026-58459) - fix buffer overflow in NMEA2000 driver (CVE-2025-67268) - fix integer underflow in handling of Navcom packets (CVE-2025-67269) - update to 3.26.1 (RHEL-90132) - fix another command injection in gpsprof (CVE-2026-60122) - fix command injection in gpsprof (CVE-2026-58459) - fix buffer overflow in NMEA2000 driver (CVE-2025-67268) - fix integer underflow in handling of Navcom packets (CVE-2025-67269) - update to 3.26.1 (RHEL-90132) - fix buffer overflow in NMEA2000 driver (CVE-2025-67268) - fix integer underflow in handling of Navcom packets (CVE-2025-67269) - update to 3.26.1 (RHEL-90132) - fix command injection in gpsprof (CVE-2026-58459) - fix buffer overflow in NMEA2000 driver (CVE-2025-67268) - fix integer underflow in handling of Navcom packets (CVE-2025-67269) - update to 3.26.1 (RHEL-90132) - fix another command injection in gpsprof (CVE-2026-60122) - fix command injection in gpsprof (CVE-2026-58459) - fix buffer overflow in NMEA2000 driver (CVE-2025-67268) - fix integer underflow in handling of Navcom packets (CVE-2025-67269) - update to 3.26.1 (RHEL-90132) - Resolves RHEL-161804: CVE-2026-27877 - Resolves RHEL-166346: CVE-2026-33810 - Resolves RHEL-166703: CVE-2026-32282 - Resolves RHEL-167390: CVE-2026-32280 - Resolves RHEL-167696: CVE-2026-32283 - Resolves RHEL-156658: CVE-2026-25679 - Resolves RHEL-144960: CVE-2026-21721 - Resolves RHEL-145419: CVE-2025-61728 - Resolves RHEL-146103: CVE-2025-61726 - Resolves RHEL-149639: CVE-2025-68121 - Resolves RHEL-140549: CVE-2025-61729 - Resolves RHEL-125696: CVE-2025-58183 - Resolves RHEL-132757: Grafana-selinux prevents plugins from searching cgroups - Resolves RHEL-97518: Rework grafana-selinux spec file sections - Resolves RHEL-87861: Add additional SELinux rules for grafana-selinux package to allow LDAP connections - Resolves RHEL-89953: CVE-2025-4123 - Resolves RHEL-85419: Move grafana home directory to /var/lib/grafana - Resolves RHEL-84636: CVE-2025-30204 - Resolves RHEL-75919: grafana selinux issue with autofs_t - fix(web/bind): cap the request body size and validate public dashboard access Backport of upstream grafana/grafana commit 82ef1399 (PR #125789), VUL-2026-0074 / VUL-2026-0077. Fixes CVE-2026-42127. - Resolves RHEL-183803: CVE-2026-39821 - Resolves RHEL-188280 - Resolves RHEL-161803: CVE-2026-27877 - Resolves RHEL-166678: CVE-2026-32282 - Resolves RHEL-167678: CVE-2026-32283 - Resolves RHEL-158767: CVE-2026-25679 - Resolves RHEL-144960: CVE-2026-21721 - Resolves RHEL-145419: CVE-2025-61728 - Resolves RHEL-146103: CVE-2025-61726 - Resolves RHEL-149639: CVE-2025-68121 - Resolves RHEL-140549: CVE-2025-61729 - Resolves RHEL-125696: CVE-2025-58183 - Resolves RHEL-132757: Grafana-selinux prevents plugins from searching cgroups - Resolves RHEL-97518: Rework grafana-selinux spec file sections - Resolves RHEL-87861: Add additional SELinux rules for grafana-selinux package to allow LDAP connections - Resolves RHEL-89953: CVE-2025-4123 - Resolves RHEL-85419: Move grafana home directory to /var/lib/grafana - Rebuild against updated golang - Resolves RHEL-251872 - Resolves RHEL-251758 - Resolves RHEL-242365 - Resolves RHEL-242251 - Resolves RHEL-241980 - Resolves RHEL-241756 - Resolves RHEL-241274 - Resolves RHEL-241243 - CVE-2026-17183 grafana: Grafana: Information disclosure vulnerability in Unified Alerting - Resolves RHEL-290771 - Rebuild against updated golang - Resolves RHEL-287510 - Resolves RHEL-279380 - Resolves RHEL-279012 - Resolves RHEL-278733 - Resolves RHEL-253159: CVE-2026-15815 - CVE-2026-42504 grafana: Golang MIME: Denial of Service via maliciously-crafted MIME header [rhel-9.8.z] - Resolves RHEL-266519 - Rebuild against updated golang - Resolves RHEL-251872 - Resolves RHEL-251758 - Resolves RHEL-242365 - Resolves RHEL-242251 - Resolves RHEL-241980 - Resolves RHEL-241756 - Resolves RHEL-241274 - Resolves RHEL-241243 - Resolves RHEL-210991: CVE-2026-33376 - Resolves RHEL-211022: CVE-2026-33377 - Resolves RHEL-242865: CVE-2026-8609 - Resolves RHEL-242866: CVE-2026-33382 - fix CVE-2026-42127: cap request body size and validate public dashboard access - Resolves RHEL-219382 - Resolves RHEL-183803: CVE-2026-39821 - Resolves RHEL-188280 - Resolves RHEL-161803: CVE-2026-27877 - Resolves RHEL-166678: CVE-2026-32282 - Resolves RHEL-167678: CVE-2026-32283 - Resolves RHEL-158767: CVE-2026-25679 - Resolves RHEL-183803: CVE-2026-39821 - Resolves RHEL-188280 - Resolves RHEL-161803: CVE-2026-27877 - Resolves RHEL-166678: CVE-2026-32282 - Resolves RHEL-167678: CVE-2026-32283 - Resolves RHEL-158767: CVE-2026-25679 - Resolves RHEL-144960: CVE-2026-21721 - Resolves RHEL-145419: CVE-2025-61728 - Resolves RHEL-146103: CVE-2025-61726 - Resolves RHEL-149639: CVE-2025-68121 - Resolves RHEL-140549: CVE-2025-61729 - Resolves RHEL-125696: CVE-2025-58183 - Resolves RHEL-132757: Grafana-selinux prevents plugins from searching cgroups - Resolves RHEL-97518: Rework grafana-selinux spec file sections - Resolves RHEL-87861: Add additional SELinux rules for grafana-selinux package to allow LDAP connections - Resolves RHEL-89953: CVE-2025-4123 - Resolves RHEL-85419: Move grafana home directory to /var/lib/grafana - Resolves RHEL-84636: CVE-2025-30204 - Resolves RHEL-166347: CVE-2026-33810 - Resolves RHEL-166704: CVE-2026-32282 - Resolves RHEL-167391: CVE-2026-32280 - Resolves RHEL-167697: CVE-2026-32283 - Resolves RHEL-156659: CVE-2026-25679 - Resolves RHEL-146104: CVE-2025-61726 - Resolves RHEL-149640: CVE-2025-68121 - Resolves RHEL-140550: CVE-2025-61729 - Resolves RHEL-89310: CVE-2025-22871 - Resolves: RHEL-57931 - Add a premade uwsgi dashboard for the vector datasource - bump release number - fix CVE-2024-1394 - Rebuild against updated golang - Resolves RHEL-241464 - Resolves RHEL-242181 - Resolves RHEL-241794 - Resolves RHEL-241448 - Resolves RHEL-183820: CVE-2026-39821 - Resolves RHEL-188285 - Resolves RHEL-183820: CVE-2026-39821 - Resolves RHEL-166679: CVE-2026-32282 - Resolves RHEL-167679: CVE-2026-32283 - Resolves RHEL-158769: CVE-2026-25679 - Resolves RHEL-146104: CVE-2025-61726 - Resolves RHEL-149640: CVE-2025-68121 - Resolves RHEL-140550: CVE-2025-61729 - Resolves RHEL-89310: CVE-2025-22871 - Resolves: RHEL-57931 - Rebuild against updated golang - Resolves RHEL-287511 - Resolves RHEL-279381 - Resolves RHEL-278739 - Rebuild against updated golang - Resolves RHEL-241464 - Resolves RHEL-242181 - Resolves RHEL-241794 - Resolves RHEL-241448 - Resolves RHEL-183820: CVE-2026-39821 - Resolves RHEL-188285 - Resolves RHEL-183820: CVE-2026-39821 - Resolves RHEL-166679: CVE-2026-32282 - Resolves RHEL-167679: CVE-2026-32283 - Resolves RHEL-158769: CVE-2026-25679 - Resolves RHEL-146104: CVE-2025-61726 - Resolves RHEL-149640: CVE-2025-68121 - Resolves RHEL-140550: CVE-2025-61729 - Resolves RHEL-89310: CVE-2025-22871 - Resolves RHEL-183820: CVE-2026-39821 - Resolves RHEL-188285 - Resolves RHEL-183820: CVE-2026-39821 - Resolves RHEL-166679: CVE-2026-32282 - Resolves RHEL-167679: CVE-2026-32283 - Resolves RHEL-158769: CVE-2026-25679 - Resolves RHEL-146104: CVE-2025-61726 - Resolves RHEL-149640: CVE-2025-68121 - Resolves RHEL-140550: CVE-2025-61729 - Resolves RHEL-89310: CVE-2025-22871 - Resolves: RHEL-57931 - Add a premade uwsgi dashboard for the vector datasource - Resolves RHEL-161804: CVE-2026-27877 - Resolves RHEL-166346: CVE-2026-33810 - Resolves RHEL-166703: CVE-2026-32282 - Resolves RHEL-167390: CVE-2026-32280 - Resolves RHEL-167696: CVE-2026-32283 - Resolves RHEL-156658: CVE-2026-25679 - Resolves RHEL-144960: CVE-2026-21721 - Resolves RHEL-145419: CVE-2025-61728 - Resolves RHEL-146103: CVE-2025-61726 - Resolves RHEL-149639: CVE-2025-68121 - Resolves RHEL-140549: CVE-2025-61729 - Resolves RHEL-125696: CVE-2025-58183 - Resolves RHEL-132757: Grafana-selinux prevents plugins from searching cgroups - Resolves RHEL-97518: Rework grafana-selinux spec file sections - Resolves RHEL-87861: Add additional SELinux rules for grafana-selinux package to allow LDAP connections - Resolves RHEL-89953: CVE-2025-4123 - Resolves RHEL-85419: Move grafana home directory to /var/lib/grafana - Resolves RHEL-84636: CVE-2025-30204 - Resolves RHEL-75919: grafana selinux issue with autofs_t - fix(web/bind): cap the request body size and validate public dashboard access Backport of upstream grafana/grafana commit 82ef1399 (PR #125789), VUL-2026-0074 / VUL-2026-0077. Fixes CVE-2026-42127. - Resolves RHEL-183803: CVE-2026-39821 - Resolves RHEL-188280 - Resolves RHEL-161803: CVE-2026-27877 - Resolves RHEL-166678: CVE-2026-32282 - Resolves RHEL-167678: CVE-2026-32283 - Resolves RHEL-158767: CVE-2026-25679 - Resolves RHEL-144960: CVE-2026-21721 - Resolves RHEL-145419: CVE-2025-61728 - Resolves RHEL-146103: CVE-2025-61726 - Resolves RHEL-149639: CVE-2025-68121 - Resolves RHEL-140549: CVE-2025-61729 - Resolves RHEL-125696: CVE-2025-58183 - Resolves RHEL-132757: Grafana-selinux prevents plugins from searching cgroups - Resolves RHEL-97518: Rework grafana-selinux spec file sections - Resolves RHEL-87861: Add additional SELinux rules for grafana-selinux package to allow LDAP connections - Resolves RHEL-89953: CVE-2025-4123 - Resolves RHEL-85419: Move grafana home directory to /var/lib/grafana - Rebuild against updated golang - Resolves RHEL-251872 - Resolves RHEL-251758 - Resolves RHEL-242365 - Resolves RHEL-242251 - Resolves RHEL-241980 - Resolves RHEL-241756 - Resolves RHEL-241274 - Resolves RHEL-241243 - CVE-2026-17183 grafana: Grafana: Information disclosure vulnerability in Unified Alerting - Resolves RHEL-290771 - Rebuild against updated golang - Resolves RHEL-287510 - Resolves RHEL-279380 - Resolves RHEL-279012 - Resolves RHEL-278733 - Resolves RHEL-253159: CVE-2026-15815 - CVE-2026-42504 grafana: Golang MIME: Denial of Service via maliciously-crafted MIME header [rhel-9.8.z] - Resolves RHEL-266519 - Rebuild against updated golang - Resolves RHEL-251872 - Resolves RHEL-251758 - Resolves RHEL-242365 - Resolves RHEL-242251 - Resolves RHEL-241980 - Resolves RHEL-241756 - Resolves RHEL-241274 - Resolves RHEL-241243 - Resolves RHEL-210991: CVE-2026-33376 - Resolves RHEL-211022: CVE-2026-33377 - Resolves RHEL-242865: CVE-2026-8609 - Resolves RHEL-242866: CVE-2026-33382 - fix CVE-2026-42127: cap request body size and validate public dashboard access - Resolves RHEL-219382 - Resolves RHEL-183803: CVE-2026-39821 - Resolves RHEL-188280 - Resolves RHEL-161803: CVE-2026-27877 - Resolves RHEL-166678: CVE-2026-32282 - Resolves RHEL-167678: CVE-2026-32283 - Resolves RHEL-158767: CVE-2026-25679 - Resolves RHEL-183803: CVE-2026-39821 - Resolves RHEL-188280 - Resolves RHEL-161803: CVE-2026-27877 - Resolves RHEL-166678: CVE-2026-32282 - Resolves RHEL-167678: CVE-2026-32283 - Resolves RHEL-158767: CVE-2026-25679 - Resolves RHEL-144960: CVE-2026-21721 - Resolves RHEL-145419: CVE-2025-61728 - Resolves RHEL-146103: CVE-2025-61726 - Resolves RHEL-149639: CVE-2025-68121 - Resolves RHEL-140549: CVE-2025-61729 - Resolves RHEL-125696: CVE-2025-58183 - Resolves RHEL-132757: Grafana-selinux prevents plugins from searching cgroups - Resolves RHEL-97518: Rework grafana-selinux spec file sections - Resolves RHEL-87861: Add additional SELinux rules for grafana-selinux package to allow LDAP connections - Resolves RHEL-89953: CVE-2025-4123 - Resolves RHEL-85419: Move grafana home directory to /var/lib/grafana - Resolves RHEL-84636: CVE-2025-30204 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 1.10.6 - Fix ray intersection bug causing picking errors in mutter Resolves: #1956294 - Rebuild with newer gobject-introspection to fix multilib conflict - Related: rhbz#1915340 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Disable neon for graphene on armv7hl - Add meson_test - Update to 1.10.4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Re-enable LTO as upstream GCC target/96939 has been fixed - Disable LTO for now - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 1.10.6 - Fix ray intersection bug causing picking errors in mutter Resolves: #1956294 - Rebuild with newer gobject-introspection to fix multilib conflict - Related: rhbz#1915340 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Disable neon for graphene on armv7hl - Add meson_test - Update to 1.10.4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Re-enable LTO as upstream GCC target/96939 has been fixed - Disable LTO for now - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Stop building the HTML manual, texlive is breaking things too frequently. - Adapt to new cmake macros. - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add missing build dependencies for building the manual with TeXLive 2020. - Update to version 1.3.14. - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for graphviz-ruby addition Resolves: RHEL-17134 - Fixed gvpack to run Resolves: rhbz#2029565 - Rebuilt for graphviz-ruby addition Resolves: RHEL-17134 - Fixed gvpack to run Resolves: rhbz#2029565 - Rebuilt for graphviz-ruby addition Resolves: RHEL-17134 - Fixed gvpack to run Resolves: rhbz#2029565 - Rebuilt for graphviz-ruby addition Resolves: RHEL-17134 - Fixed gvpack to run Resolves: rhbz#2029565 - Rebuilt for graphviz-ruby addition Resolves: RHEL-17134 - Fixed gvpack to run Resolves: rhbz#2029565 - fix os deployment type detection - restrict manual restart of healthcheck service - fixed error while running healtcheck inside container - removed bootupd dependency - fixed CI tests - Ensure rollback trigger runs before systemd-update-done and only on updates - Log the correct system type when reporting rollback decisions - Fix CI/tests (Ansible callback config, GI deps) to keep gating green - Refresh Packit release config for Fedora delivery - Fix OS type detection - Do not remount /boot superblock/filesystem readonly - Handle vendor packages in Centos-Stream - Adhering to rust packaging best practices - Various spec file cleanups - Update src to greenboot-rs, binaries remain greenboot - Obsoletes/Conflicts for bash greenboot, Provides greenboot - Initial Package - Switched to native Fedora dependencies, removing vendoring. - fix os deployment type detection - restrict manual restart of healthcheck service - fixed error while running healtcheck inside container - removed bootupd dependency - fixed CI tests - Ensure rollback trigger runs before systemd-update-done and only on updates - Log the correct system type when reporting rollback decisions - Fix CI/tests (Ansible callback config, GI deps) to keep gating green - Refresh Packit release config for Fedora delivery - Fix OS type detection - Do not remount /boot superblock/filesystem readonly - Handle vendor packages in Centos-Stream - Adhering to rust packaging best practices - Various spec file cleanups - Update src to greenboot-rs, binaries remain greenboot - Obsoletes/Conflicts for bash greenboot, Provides greenboot - Initial Package - Switched to native Fedora dependencies, removing vendoring. - Fix several important Covscan defects resolves: #1938735 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Make psutils a weak dependency - Add psutils as a runtime dependency (needed for groff -Thtml) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Move pdfpic.tmac to groff-base resolves: #1888370 - Use make macros - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to version 1.22.4 resolves: #1808072 - Add an option to disable showing password entry at login/lockscreen Resolves: RHEL-123140 - Add an option to enable restart/shutdown at lockscreen Resolves: RHEL-103998 - Rebuilt with no changes to get the -devel package to CRB. Resolves: rhbz#2035401 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt with no changes to get the -devel package to CRB. Resolves: rhbz#2035401 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - New version Resolves: rhbz#1818181 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 1.9.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.8.4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 1.8.3 - Update to 1.8.2 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Update to 1.22.12 - 1.22.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 1.22.8 - Set cap information correctly - Resolves: rhbz#2238703 - 1.22.7 - 1.22.6 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Update to 1.22.12 - 1.22.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 1.22.8 - Set cap information correctly - Resolves: rhbz#2238703 - 1.22.7 - 1.22.6 - Sync with c9s release -5..-7: fix for CVE-2026-2923, CVE-2026-3082 in dvbsuboverlay and jpegparser Resolves: RHEL-156242, RHEL-156255 - Fix bytes/bits confusion in AV1 tile data size parsing (CVE-2026-52718) Resolves: RHEL-184388 - Fix for CVE-2026-52719: vajpegdecoder out-of-bounds read Resolves: RHEL-184403 - Fix integer overflows in vmnc decoder (CVE-2026-52722) Resolves: RHEL-184422 - Fix for CVE-2026-52720: validate framebuffer update rectangles in librfb plugin Resolves: RHEL-184459 - fix for CVE-2025-3887 Resolves: RHEL-93059 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Fix incorrect bytes-per-pixel handling in rfbsrc plugin (CVE-2026-59691) Resolves: RHEL-193557 - Fix buffer overflow in DTLS connection peer certificate subject DN handling (CVE-2026-59692) Resolves: RHEL-193572 - Sync with c9s release -5..-7: fix for CVE-2026-2923, CVE-2026-3082 in dvbsuboverlay and jpegparser Resolves: RHEL-156242, RHEL-156255 - Fix bytes/bits confusion in AV1 tile data size parsing (CVE-2026-52718) Resolves: RHEL-184388 - Fix for CVE-2026-52719: vajpegdecoder out-of-bounds read Resolves: RHEL-184403 - Fix integer overflows in vmnc decoder (CVE-2026-52722) Resolves: RHEL-184422 - Fix for CVE-2026-52720: validate framebuffer update rectangles in librfb plugin Resolves: RHEL-184459 - fix for CVE-2025-3887 Resolves: RHEL-93059 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Fix ADPCM decoder negotiation and input size check (CVE-2026-19387) Resolves: RHEL-235496 - Fix incorrect bytes-per-pixel handling in rfbsrc plugin (CVE-2026-59691) Resolves: RHEL-193557 - Fix buffer overflow in DTLS connection peer certificate subject DN handling (CVE-2026-59692) Resolves: RHEL-193572 - Sync with c9s release -5..-7: fix for CVE-2026-2923, CVE-2026-3082 in dvbsuboverlay and jpegparser Resolves: RHEL-156242, RHEL-156255 - Fix bytes/bits confusion in AV1 tile data size parsing (CVE-2026-52718) Resolves: RHEL-184388 - Fix for CVE-2026-52719: vajpegdecoder out-of-bounds read Resolves: RHEL-184403 - Fix integer overflows in vmnc decoder (CVE-2026-52722) Resolves: RHEL-184422 - Fix for CVE-2026-52720: validate framebuffer update rectangles in librfb plugin Resolves: RHEL-184459 - fix for CVE-2025-3887 Resolves: RHEL-93059 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Rebuild to fix missing binaries due to buildsystem oversight - Rebuild for z-stream Resolves: RHEL-156256, RHEL-156259 - Sync with c9s release -5..-7: fix for CVE-2026-2923, CVE-2026-3082 in dvbsuboverlay and jpegparser Resolves: RHEL-156242, RHEL-156255 - Fix bytes/bits confusion in AV1 tile data size parsing (CVE-2026-52718) Resolves: RHEL-184388 - Fix for CVE-2026-52719: vajpegdecoder out-of-bounds read Resolves: RHEL-184403 - Fix integer overflows in vmnc decoder (CVE-2026-52722) Resolves: RHEL-184422 - Fix for CVE-2026-52720: validate framebuffer update rectangles in librfb plugin Resolves: RHEL-184459 - fix for CVE-2025-3887 Resolves: RHEL-93059 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Fix incorrect bytes-per-pixel handling in rfbsrc plugin (CVE-2026-59691) Resolves: RHEL-193557 - Fix buffer overflow in DTLS connection peer certificate subject DN handling (CVE-2026-59692) Resolves: RHEL-193572 - Sync with c9s release -5..-7: fix for CVE-2026-2923, CVE-2026-3082 in dvbsuboverlay and jpegparser Resolves: RHEL-156242, RHEL-156255 - Fix bytes/bits confusion in AV1 tile data size parsing (CVE-2026-52718) Resolves: RHEL-184388 - Fix for CVE-2026-52719: vajpegdecoder out-of-bounds read Resolves: RHEL-184403 - Fix integer overflows in vmnc decoder (CVE-2026-52722) Resolves: RHEL-184422 - Fix for CVE-2026-52720: validate framebuffer update rectangles in librfb plugin Resolves: RHEL-184459 - fix for CVE-2025-3887 Resolves: RHEL-93059 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Fix ADPCM decoder negotiation and input size check (CVE-2026-19387) Resolves: RHEL-235496 - Fix incorrect bytes-per-pixel handling in rfbsrc plugin (CVE-2026-59691) Resolves: RHEL-193557 - Fix buffer overflow in DTLS connection peer certificate subject DN handling (CVE-2026-59692) Resolves: RHEL-193572 - Sync with c9s release -5..-7: fix for CVE-2026-2923, CVE-2026-3082 in dvbsuboverlay and jpegparser Resolves: RHEL-156242, RHEL-156255 - Fix bytes/bits confusion in AV1 tile data size parsing (CVE-2026-52718) Resolves: RHEL-184388 - Fix for CVE-2026-52719: vajpegdecoder out-of-bounds read Resolves: RHEL-184403 - Fix integer overflows in vmnc decoder (CVE-2026-52722) Resolves: RHEL-184422 - Fix for CVE-2026-52720: validate framebuffer update rectangles in librfb plugin Resolves: RHEL-184459 - fix for CVE-2025-3887 Resolves: RHEL-93059 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Rebuild to fix missing binaries due to buildsystem oversight - Rebuild for z-stream Resolves: RHEL-156256, RHEL-156259 - Fix CVE-2026-18297: opusdec channel position bounds check Resolves: RHEL-246587 - Fix crash in RTSP auth credential parsing (CVE-2026-85150) Resolves: RHEL-253753 - Sync with c9s release -5..-8: fix for CVE-2026-2921 in riff palette parsing Resolves: RHEL-156246 - Rebuild again -7 was build in wrong target - Rebuild to fix missing binaries due to buildsystem oversight - Rebuild for z-stream Resolves: RHEL-156272, RHEL-156273 - Apply patch for CVE-2026-2921 Resolves: RHEL-156249 - Bump version - Apply patches for CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600, CVE-2024-47607, CVE-2024-47615, CVE-2024-47835 Resolves: RHEL-70983, RHEL-71035, RHEL-70932, RHEL-71037 Resolves: RHEL-71019, RHEL-70995, RHEL-71163 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Rebuild again -7 was build in wrong target - Rebuild to fix missing binaries due to buildsystem oversight - Rebuild for z-stream Resolves: RHEL-156272, RHEL-156273 - Apply patch for CVE-2026-2921 Resolves: RHEL-156249 - Bump version - Apply patches for CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600, CVE-2024-47607, CVE-2024-47615, CVE-2024-47835 Resolves: RHEL-70983, RHEL-71035, RHEL-70932, RHEL-71037 Resolves: RHEL-71019, RHEL-70995, RHEL-71163 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Update to 1.22.12 - Disable libvisual in RHEL builds - Fix CVE-2026-18297: opusdec channel position bounds check Resolves: RHEL-246587 - Fix crash in RTSP auth credential parsing (CVE-2026-85150) Resolves: RHEL-253753 - Sync with c9s release -5..-8: fix for CVE-2026-2921 in riff palette parsing Resolves: RHEL-156246 - Rebuild again -7 was build in wrong target - Rebuild to fix missing binaries due to buildsystem oversight - Rebuild for z-stream Resolves: RHEL-156272, RHEL-156273 - Apply patch for CVE-2026-2921 Resolves: RHEL-156249 - Bump version - Apply patches for CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600, CVE-2024-47607, CVE-2024-47615, CVE-2024-47835 Resolves: RHEL-70983, RHEL-71035, RHEL-70932, RHEL-71037 Resolves: RHEL-71019, RHEL-70995, RHEL-71163 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Rebuild again -7 was build in wrong target - Rebuild to fix missing binaries due to buildsystem oversight - Rebuild for z-stream Resolves: RHEL-156272, RHEL-156273 - Apply patch for CVE-2026-2921 Resolves: RHEL-156249 - Bump version - Apply patches for CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600, CVE-2024-47607, CVE-2024-47615, CVE-2024-47835 Resolves: RHEL-70983, RHEL-71035, RHEL-70932, RHEL-71037 Resolves: RHEL-71019, RHEL-70995, RHEL-71163 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Update to 1.22.12 - Disable libvisual in RHEL builds - Fix CVE-2026-18297: opusdec channel position bounds check Resolves: RHEL-246587 - Fix crash in RTSP auth credential parsing (CVE-2026-85150) Resolves: RHEL-253753 - Sync with c9s release -5..-8: fix for CVE-2026-2921 in riff palette parsing Resolves: RHEL-156246 - Rebuild again -7 was build in wrong target - Rebuild to fix missing binaries due to buildsystem oversight - Rebuild for z-stream Resolves: RHEL-156272, RHEL-156273 - Apply patch for CVE-2026-2921 Resolves: RHEL-156249 - Bump version - Apply patches for CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600, CVE-2024-47607, CVE-2024-47615, CVE-2024-47835 Resolves: RHEL-70983, RHEL-71035, RHEL-70932, RHEL-71037 Resolves: RHEL-71019, RHEL-70995, RHEL-71163 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Rebuild again -7 was build in wrong target - Rebuild to fix missing binaries due to buildsystem oversight - Rebuild for z-stream Resolves: RHEL-156272, RHEL-156273 - Apply patch for CVE-2026-2921 Resolves: RHEL-156249 - Bump version - Apply patches for CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600, CVE-2024-47607, CVE-2024-47615, CVE-2024-47835 Resolves: RHEL-70983, RHEL-71035, RHEL-70932, RHEL-71037 Resolves: RHEL-71019, RHEL-70995, RHEL-71163 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Update to 1.22.12 - Disable libvisual in RHEL builds - Rebase rhel-9.8.0 from 1.18.4 to 1.22.12 to resync with rhel-9.7.0/c9s (this branch had regressed to a stale pre-1.22.12 base) Resolves: RHEL-156269, RHEL-156270 - Fix CVE-2026-53705: integer overflow in wavpack decoder, re-applied on top of the correct 1.22.12 base Resolves: RHEL-184477 - Apply patches for CVE-2026-3083, CVE-2026-3085 Resolves: RHEL-156267, RHEL-156266 - Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 CVE-2024-47543, CVE-2024-47544, CVE-2024-47545, CVE-2024-47546, CVE-2024-47596, CVE-2024-47597, CVE-2024-47598, CVE-2024-47599, CVE-2024-47601, CVE-2024-47602, CVE-2024-47603, CVE-2024-47606, CVE-2024-47613, CVE-2024-47774, CVE-2024-47775, CVE-2024-47776, CVE-2024-47777, CVE-2024-47778, CVE-2024-47834 - Resolves: RHEL-70958, RHEL-70971, RHEL-71033, RHEL-71195 - Resolves: RHEL-71210, RHEL-71202, RHEL-71171, RHEL-71200 - Resolves: RHEL-71206, RHEL-71173, RHEL-71198, RHEL-71204 - Resolves: RHEL-71208, RHEL-71031, RHEL-71007, RHEL-71039 - Resolves: RHEL-71169, RHEL-71192, RHEL-71161, RHEL-71167 - Resolves: RHEL-71189 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Fix CVE-2026-18649: limit fragmentation unit size in RTP H.264/H.265 depayloaders to prevent excessive memory usage Resolves: RHEL-224162 - Rebase rhel-9.8.0 from 1.18.4 to 1.22.12 to resync with rhel-9.7.0/c9s (this branch had regressed to a stale pre-1.22.12 base) Resolves: RHEL-156269, RHEL-156270 - Fix CVE-2026-53705: integer overflow in wavpack decoder, re-applied on top of the correct 1.22.12 base Resolves: RHEL-184477 - Apply patches for CVE-2026-3083, CVE-2026-3085 Resolves: RHEL-156267, RHEL-156266 - Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 CVE-2024-47543, CVE-2024-47544, CVE-2024-47545, CVE-2024-47546, CVE-2024-47596, CVE-2024-47597, CVE-2024-47598, CVE-2024-47599, CVE-2024-47601, CVE-2024-47602, CVE-2024-47603, CVE-2024-47606, CVE-2024-47613, CVE-2024-47774, CVE-2024-47775, CVE-2024-47776, CVE-2024-47777, CVE-2024-47778, CVE-2024-47834 - Resolves: RHEL-70958, RHEL-70971, RHEL-71033, RHEL-71195 - Resolves: RHEL-71210, RHEL-71202, RHEL-71171, RHEL-71200 - Resolves: RHEL-71206, RHEL-71173, RHEL-71198, RHEL-71204 - Resolves: RHEL-71208, RHEL-71031, RHEL-71007, RHEL-71039 - Resolves: RHEL-71169, RHEL-71192, RHEL-71161, RHEL-71167 - Resolves: RHEL-71189 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Fix CVE-2026-73434: out-of-bounds read in AVI demuxer vprp handling Resolves: RHEL-239042 - Fix CVE-2026-73433: add bounds checks to FUJIFILM strd metadata parsing in avidemux to prevent unsigned integer underflow Resolves: RHEL-239060 - Fix CVE-2026-18649: limit fragmentation unit size in RTP H.264/H.265 depayloaders to prevent excessive memory usage Resolves: RHEL-224162 - Rebase rhel-9.8.0 from 1.18.4 to 1.22.12 to resync with rhel-9.7.0/c9s (this branch had regressed to a stale pre-1.22.12 base) Resolves: RHEL-156269, RHEL-156270 - Fix CVE-2026-53705: integer overflow in wavpack decoder, re-applied on top of the correct 1.22.12 base Resolves: RHEL-184477 - Apply patches for CVE-2026-3083, CVE-2026-3085 Resolves: RHEL-156267, RHEL-156266 - Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 CVE-2024-47543, CVE-2024-47544, CVE-2024-47545, CVE-2024-47546, CVE-2024-47596, CVE-2024-47597, CVE-2024-47598, CVE-2024-47599, CVE-2024-47601, CVE-2024-47602, CVE-2024-47603, CVE-2024-47606, CVE-2024-47613, CVE-2024-47774, CVE-2024-47775, CVE-2024-47776, CVE-2024-47777, CVE-2024-47778, CVE-2024-47834 - Resolves: RHEL-70958, RHEL-70971, RHEL-71033, RHEL-71195 - Resolves: RHEL-71210, RHEL-71202, RHEL-71171, RHEL-71200 - Resolves: RHEL-71206, RHEL-71173, RHEL-71198, RHEL-71204 - Resolves: RHEL-71208, RHEL-71031, RHEL-71007, RHEL-71039 - Resolves: RHEL-71169, RHEL-71192, RHEL-71161, RHEL-71167 - Resolves: RHEL-71189 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Fix CVE-2026-18299: Use-After-Free in rtpsbcdepay Resolves: RHEL-246619 - Fix CVE-2026-18296: size validation in qtmoovrecover MRF parsing Resolves: RHEL-246558 - Fix CVE-2026-18298 in gdkpixbufdec element Resolves: RHEL-246572 - Fix CVE-2026-18295: validate box sizes in qtmoovrecover to prevent heap buffer overflow (same upstream fix as CVE-2026-18296) Resolves: RHEL-246380 - Fix CVE-2026-73434: out-of-bounds read in AVI demuxer vprp handling Resolves: RHEL-239042 - Fix CVE-2026-73433: add bounds checks to FUJIFILM strd metadata parsing in avidemux to prevent unsigned integer underflow Resolves: RHEL-239060 - Fix CVE-2026-18649: limit fragmentation unit size in RTP H.264/H.265 depayloaders to prevent excessive memory usage Resolves: RHEL-224162 - Rebase rhel-9.8.0 from 1.18.4 to 1.22.12 to resync with rhel-9.7.0/c9s (this branch had regressed to a stale pre-1.22.12 base) Resolves: RHEL-156269, RHEL-156270 - Fix CVE-2026-53705: integer overflow in wavpack decoder, re-applied on top of the correct 1.22.12 base Resolves: RHEL-184477 - Apply patches for CVE-2026-3083, CVE-2026-3085 Resolves: RHEL-156267, RHEL-156266 - Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 CVE-2024-47543, CVE-2024-47544, CVE-2024-47545, CVE-2024-47546, CVE-2024-47596, CVE-2024-47597, CVE-2024-47598, CVE-2024-47599, CVE-2024-47601, CVE-2024-47602, CVE-2024-47603, CVE-2024-47606, CVE-2024-47613, CVE-2024-47774, CVE-2024-47775, CVE-2024-47776, CVE-2024-47777, CVE-2024-47778, CVE-2024-47834 - Resolves: RHEL-70958, RHEL-70971, RHEL-71033, RHEL-71195 - Resolves: RHEL-71210, RHEL-71202, RHEL-71171, RHEL-71200 - Resolves: RHEL-71206, RHEL-71173, RHEL-71198, RHEL-71204 - Resolves: RHEL-71208, RHEL-71031, RHEL-71007, RHEL-71039 - Resolves: RHEL-71169, RHEL-71192, RHEL-71161, RHEL-71167 - Resolves: RHEL-71189 - Rebuild to fix missing binaries due to buildsystem oversight - Rebuild for z-stream Resolves: RHEL-156272, RHEL-156273 - Apply patches for CVE-2026-3083, CVE-2026-3085 Resolves: RHEL-156272, RHEL-156273 - Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 CVE-2024-47543, CVE-2024-47544, CVE-2024-47545, CVE-2024-47546, CVE-2024-47596, CVE-2024-47597, CVE-2024-47598, CVE-2024-47599, CVE-2024-47601, CVE-2024-47602, CVE-2024-47603, CVE-2024-47606, CVE-2024-47613, CVE-2024-47774, CVE-2024-47775, CVE-2024-47776, CVE-2024-47777, CVE-2024-47778, CVE-2024-47834 - Resolves: RHEL-70958, RHEL-70971, RHEL-71033, RHEL-71195 - Resolves: RHEL-71210, RHEL-71202, RHEL-71171, RHEL-71200 - Resolves: RHEL-71206, RHEL-71173, RHEL-71198, RHEL-71204 - Resolves: RHEL-71208, RHEL-71031, RHEL-71007, RHEL-71039 - Resolves: RHEL-71169, RHEL-71192, RHEL-71161, RHEL-71167 - Resolves: RHEL-71189 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - 1.22.12 - Qt6 re-rebuild - 1.22.11 - Revert back to 1.22.9 (accidentally merged Rawhide to f40) - Rebase rhel-9.8.0 from 1.18.4 to 1.22.12 to resync with rhel-9.7.0/c9s (this branch had regressed to a stale pre-1.22.12 base) Resolves: RHEL-156269, RHEL-156270 - Fix CVE-2026-53705: integer overflow in wavpack decoder, re-applied on top of the correct 1.22.12 base Resolves: RHEL-184477 - Apply patches for CVE-2026-3083, CVE-2026-3085 Resolves: RHEL-156267, RHEL-156266 - Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 CVE-2024-47543, CVE-2024-47544, CVE-2024-47545, CVE-2024-47546, CVE-2024-47596, CVE-2024-47597, CVE-2024-47598, CVE-2024-47599, CVE-2024-47601, CVE-2024-47602, CVE-2024-47603, CVE-2024-47606, CVE-2024-47613, CVE-2024-47774, CVE-2024-47775, CVE-2024-47776, CVE-2024-47777, CVE-2024-47778, CVE-2024-47834 - Resolves: RHEL-70958, RHEL-70971, RHEL-71033, RHEL-71195 - Resolves: RHEL-71210, RHEL-71202, RHEL-71171, RHEL-71200 - Resolves: RHEL-71206, RHEL-71173, RHEL-71198, RHEL-71204 - Resolves: RHEL-71208, RHEL-71031, RHEL-71007, RHEL-71039 - Resolves: RHEL-71169, RHEL-71192, RHEL-71161, RHEL-71167 - Resolves: RHEL-71189 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Fix CVE-2026-18649: limit fragmentation unit size in RTP H.264/H.265 depayloaders to prevent excessive memory usage Resolves: RHEL-224162 - Rebase rhel-9.8.0 from 1.18.4 to 1.22.12 to resync with rhel-9.7.0/c9s (this branch had regressed to a stale pre-1.22.12 base) Resolves: RHEL-156269, RHEL-156270 - Fix CVE-2026-53705: integer overflow in wavpack decoder, re-applied on top of the correct 1.22.12 base Resolves: RHEL-184477 - Apply patches for CVE-2026-3083, CVE-2026-3085 Resolves: RHEL-156267, RHEL-156266 - Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 CVE-2024-47543, CVE-2024-47544, CVE-2024-47545, CVE-2024-47546, CVE-2024-47596, CVE-2024-47597, CVE-2024-47598, CVE-2024-47599, CVE-2024-47601, CVE-2024-47602, CVE-2024-47603, CVE-2024-47606, CVE-2024-47613, CVE-2024-47774, CVE-2024-47775, CVE-2024-47776, CVE-2024-47777, CVE-2024-47778, CVE-2024-47834 - Resolves: RHEL-70958, RHEL-70971, RHEL-71033, RHEL-71195 - Resolves: RHEL-71210, RHEL-71202, RHEL-71171, RHEL-71200 - Resolves: RHEL-71206, RHEL-71173, RHEL-71198, RHEL-71204 - Resolves: RHEL-71208, RHEL-71031, RHEL-71007, RHEL-71039 - Resolves: RHEL-71169, RHEL-71192, RHEL-71161, RHEL-71167 - Resolves: RHEL-71189 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Fix CVE-2026-73434: out-of-bounds read in AVI demuxer vprp handling Resolves: RHEL-239042 - Fix CVE-2026-73433: add bounds checks to FUJIFILM strd metadata parsing in avidemux to prevent unsigned integer underflow Resolves: RHEL-239060 - Fix CVE-2026-18649: limit fragmentation unit size in RTP H.264/H.265 depayloaders to prevent excessive memory usage Resolves: RHEL-224162 - Rebase rhel-9.8.0 from 1.18.4 to 1.22.12 to resync with rhel-9.7.0/c9s (this branch had regressed to a stale pre-1.22.12 base) Resolves: RHEL-156269, RHEL-156270 - Fix CVE-2026-53705: integer overflow in wavpack decoder, re-applied on top of the correct 1.22.12 base Resolves: RHEL-184477 - Apply patches for CVE-2026-3083, CVE-2026-3085 Resolves: RHEL-156267, RHEL-156266 - Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 CVE-2024-47543, CVE-2024-47544, CVE-2024-47545, CVE-2024-47546, CVE-2024-47596, CVE-2024-47597, CVE-2024-47598, CVE-2024-47599, CVE-2024-47601, CVE-2024-47602, CVE-2024-47603, CVE-2024-47606, CVE-2024-47613, CVE-2024-47774, CVE-2024-47775, CVE-2024-47776, CVE-2024-47777, CVE-2024-47778, CVE-2024-47834 - Resolves: RHEL-70958, RHEL-70971, RHEL-71033, RHEL-71195 - Resolves: RHEL-71210, RHEL-71202, RHEL-71171, RHEL-71200 - Resolves: RHEL-71206, RHEL-71173, RHEL-71198, RHEL-71204 - Resolves: RHEL-71208, RHEL-71031, RHEL-71007, RHEL-71039 - Resolves: RHEL-71169, RHEL-71192, RHEL-71161, RHEL-71167 - Resolves: RHEL-71189 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Fix CVE-2026-18299: Use-After-Free in rtpsbcdepay Resolves: RHEL-246619 - Fix CVE-2026-18296: size validation in qtmoovrecover MRF parsing Resolves: RHEL-246558 - Fix CVE-2026-18298 in gdkpixbufdec element Resolves: RHEL-246572 - Fix CVE-2026-18295: validate box sizes in qtmoovrecover to prevent heap buffer overflow (same upstream fix as CVE-2026-18296) Resolves: RHEL-246380 - Fix CVE-2026-73434: out-of-bounds read in AVI demuxer vprp handling Resolves: RHEL-239042 - Fix CVE-2026-73433: add bounds checks to FUJIFILM strd metadata parsing in avidemux to prevent unsigned integer underflow Resolves: RHEL-239060 - Fix CVE-2026-18649: limit fragmentation unit size in RTP H.264/H.265 depayloaders to prevent excessive memory usage Resolves: RHEL-224162 - Rebase rhel-9.8.0 from 1.18.4 to 1.22.12 to resync with rhel-9.7.0/c9s (this branch had regressed to a stale pre-1.22.12 base) Resolves: RHEL-156269, RHEL-156270 - Fix CVE-2026-53705: integer overflow in wavpack decoder, re-applied on top of the correct 1.22.12 base Resolves: RHEL-184477 - Apply patches for CVE-2026-3083, CVE-2026-3085 Resolves: RHEL-156267, RHEL-156266 - Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 CVE-2024-47543, CVE-2024-47544, CVE-2024-47545, CVE-2024-47546, CVE-2024-47596, CVE-2024-47597, CVE-2024-47598, CVE-2024-47599, CVE-2024-47601, CVE-2024-47602, CVE-2024-47603, CVE-2024-47606, CVE-2024-47613, CVE-2024-47774, CVE-2024-47775, CVE-2024-47776, CVE-2024-47777, CVE-2024-47778, CVE-2024-47834 - Resolves: RHEL-70958, RHEL-70971, RHEL-71033, RHEL-71195 - Resolves: RHEL-71210, RHEL-71202, RHEL-71171, RHEL-71200 - Resolves: RHEL-71206, RHEL-71173, RHEL-71198, RHEL-71204 - Resolves: RHEL-71208, RHEL-71031, RHEL-71007, RHEL-71039 - Resolves: RHEL-71169, RHEL-71192, RHEL-71161, RHEL-71167 - Resolves: RHEL-71189 - Rebuild to fix missing binaries due to buildsystem oversight - Rebuild for z-stream Resolves: RHEL-156272, RHEL-156273 - Apply patches for CVE-2026-3083, CVE-2026-3085 Resolves: RHEL-156272, RHEL-156273 - Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 CVE-2024-47543, CVE-2024-47544, CVE-2024-47545, CVE-2024-47546, CVE-2024-47596, CVE-2024-47597, CVE-2024-47598, CVE-2024-47599, CVE-2024-47601, CVE-2024-47602, CVE-2024-47603, CVE-2024-47606, CVE-2024-47613, CVE-2024-47774, CVE-2024-47775, CVE-2024-47776, CVE-2024-47777, CVE-2024-47778, CVE-2024-47834 - Resolves: RHEL-70958, RHEL-70971, RHEL-71033, RHEL-71195 - Resolves: RHEL-71210, RHEL-71202, RHEL-71171, RHEL-71200 - Resolves: RHEL-71206, RHEL-71173, RHEL-71198, RHEL-71204 - Resolves: RHEL-71208, RHEL-71031, RHEL-71007, RHEL-71039 - Resolves: RHEL-71169, RHEL-71192, RHEL-71161, RHEL-71167 - Resolves: RHEL-71189 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - 1.22.12 - Qt6 re-rebuild - 1.22.11 - Revert back to 1.22.9 (accidentally merged Rawhide to f40) - Fix CVE-2026-53704: multiple rmdemux security issues - Resolves: RHEL-184464 - Rebuild to fix missing binaries due to buildsystem oversight - Rebuild for z-stream - Resolves: RHEL-156061, RHEL-156274 - Add patch for CVE-2026-2920, CVE-2026-2922 Resolves: RHEL-156061, RHEL-156274 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Fix integer overflows during bounds checks in asfdemux - Resolves: RHEL-235519 - Fix CVE-2026-53704: multiple rmdemux security issues - Resolves: RHEL-184464 - Rebuild to fix missing binaries due to buildsystem oversight - Rebuild for z-stream - Resolves: RHEL-156061, RHEL-156274 - Add patch for CVE-2026-2920, CVE-2026-2922 Resolves: RHEL-156061, RHEL-156274 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Rebuild to fix missing binaries due to buildsystem oversight - Rebuild for z-stream - Resolves: RHEL-156061, RHEL-156274 - Add patch for CVE-2026-2920, CVE-2026-2922 Resolves: RHEL-156061, RHEL-156274 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - 1.22.12 - 1.22.11 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - 1.22.12 - 1.22.11 - 1.22.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 1.22.8 - 1.22.7 - Update to 1.22.5 - Resolves: RHEL-4098 - Dummy commit to get ci to rerun - Related: RHEL-4098 - Resolves: RHEL-4130 - Resolves: RHEL-22853 - Resolves: RHEL-4098 - Stop looking for modules in cwd (CVE-2024-6655) - Resolves: RHEL-46993 - Actually reduce the height of window titlebars - Reduce the height of window titlebars - Switch stylus button order to match compositor Resolves: RHEL-146566 - Resolves: RHEL-4098 - Dummy commit to get ci to rerun - Related: RHEL-4098 - Resolves: RHEL-4130 - Resolves: RHEL-22853 - Resolves: RHEL-4098 - Stop looking for modules in cwd (CVE-2024-6655) - Resolves: RHEL-46993 - Actually reduce the height of window titlebars - Reduce the height of window titlebars - Rebuild to trigger shipping devel package (RHEL-19019) - Recommend ibus-gtk2 when ibus is installed (#2066314) - Recommend adwaita-gtk2-theme (#2051573) - Recommend ibus-gtk2 when ibus is installed (#2066314) - Recommend adwaita-gtk2-theme (#2051573) - Recommend ibus-gtk2 when ibus is installed (#2066314) - Recommend adwaita-gtk2-theme (#2051573) - Recommend ibus-gtk2 when ibus is installed (#2066314) - Recommend adwaita-gtk2-theme (#2051573) - Recommend ibus-gtk2 when ibus is installed (#2066314) - Recommend adwaita-gtk2-theme (#2051573) - Resolves: RHEL-4098 - Dummy commit to get ci to rerun - Related: RHEL-4098 - Resolves: RHEL-4130 - Resolves: RHEL-22853 - Resolves: RHEL-4098 - Stop looking for modules in cwd (CVE-2024-6655) - Resolves: RHEL-46993 - Actually reduce the height of window titlebars - Reduce the height of window titlebars - Switch stylus button order to match compositor Resolves: RHEL-146566 - Resolves: RHEL-4098 - Dummy commit to get ci to rerun - Related: RHEL-4098 - Resolves: RHEL-4130 - Resolves: RHEL-22853 - Resolves: RHEL-4098 - Stop looking for modules in cwd (CVE-2024-6655) - Resolves: RHEL-46993 - Actually reduce the height of window titlebars - Reduce the height of window titlebars - Resolves: RHEL-4098 - Dummy commit to get ci to rerun - Related: RHEL-4098 - Resolves: RHEL-4130 - Resolves: RHEL-22853 - Resolves: RHEL-4098 - Stop looking for modules in cwd (CVE-2024-6655) - Resolves: RHEL-46993 - Actually reduce the height of window titlebars - Reduce the height of window titlebars - Switch stylus button order to match compositor Resolves: RHEL-146566 - Resolves: RHEL-4098 - Dummy commit to get ci to rerun - Related: RHEL-4098 - Resolves: RHEL-4130 - Resolves: RHEL-22853 - Resolves: RHEL-4098 - Stop looking for modules in cwd (CVE-2024-6655) - Resolves: RHEL-46993 - Actually reduce the height of window titlebars - Reduce the height of window titlebars - Resolves: RHEL-4098 - Dummy commit to get ci to rerun - Related: RHEL-4098 - Resolves: RHEL-4130 - Resolves: RHEL-22853 - Resolves: RHEL-4098 - Stop looking for modules in cwd (CVE-2024-6655) - Resolves: RHEL-46993 - Actually reduce the height of window titlebars - Reduce the height of window titlebars - Switch stylus button order to match compositor Resolves: RHEL-146566 - Resolves: RHEL-4098 - Dummy commit to get ci to rerun - Related: RHEL-4098 - Resolves: RHEL-4130 - Resolves: RHEL-22853 - Resolves: RHEL-4098 - Stop looking for modules in cwd (CVE-2024-6655) - Resolves: RHEL-46993 - Actually reduce the height of window titlebars - Reduce the height of window titlebars - Do not try to implement color glyphs without Pango help Resolves: RHEL-842 - Update to 4.12.3 Resolves: RHEL-842 - Ensure Wayland gets the Wayland IM context Resolves: #2087031 - Do not try to implement color glyphs without Pango help Resolves: RHEL-842 - Update to 4.12.3 Resolves: RHEL-842 - Ensure Wayland gets the Wayland IM context Resolves: #2087031 - Update to 3.24.5 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 3.24.4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 3.24.3 - Use https source URLs - Re-enable LTO now that we have upstream fix in place (#1898054) - Switch to meson build system - Tighten soname globs - Opt-out of LTO (#1898054) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 3.24.2 - Add build and test suite fix for single core VMs Related: #2062786 - Fix decrement number feature Resolves: #2062786 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 4.8.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add noarch to ExclusiveArch - Disable building on i686 - Fix patch usage - Rebuild with regenerated Requires on Java - Rebuild to regenerate auto-requires - Rebuild to regenerate auto-requires - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Rebuilt for java-17-openjdk as system jdk - Update javapackages test plan to f42 - Update to upstream version 33.3.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update to upstream version 33.2.1 - Rebuilt for java-21-openjdk as system jdk - bump of release for for java-21-openjdk as system jdk - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to upstream version 32.1.3 - Rebuild to regenerate auto-Requires on java - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Enable building for ppc64le - Update guestfs-tools firstboot.bat to match virt-v2v resolves: RHEL-109521 - builder: Update link to templates to use https resolves: RHEL-94874 - mlcustomize: Remove dnf --verbose option resolves: RHEL-83200 - Fix virt-drivers fails on opensuse guest if kernel-source is installed resolves: RHEL-80214 - Rebase to guestfs-tools 1.52.2 resolves: RHEL-56811 - Replace Jansson with json-c resolves: RHEL-65294 - Reboot Windows between each firstboot script to improve reliability resolves: RHEL-55759 - Add support for nbd+unix:// URIs resolves: RHEL-33956 - customize: Implement --inject-blnsvr operation resolves: RHEL-36634 - Rebase to guestfs-tools 1.51.6 - Implement --key all:... resolves: RHEL-19030 - Fix crash because of off-by-one error resolves: RHEL-19062 - Fix virt-customize --chown invalid format resolves: RHEL-21899 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 5.3.4 - 1773690 - cups-genppdupdate doesnt work for non-utf-8 PPDs - make is no longer in buildroot by default - dont require the gimp package as build require, pkgconfig's gimpui-2.0 suffices - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fix warning building with clang - non-void function 'stp_paths_copy_with_prefix' should return a value [-Wreturn-type] - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 5.3.4 - 1773690 - cups-genppdupdate doesnt work for non-utf-8 PPDs - make is no longer in buildroot by default - dont require the gimp package as build require, pkgconfig's gimpui-2.0 suffices - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fix warning building with clang - non-void function 'stp_paths_copy_with_prefix' should return a value [-Wreturn-type] - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 5.3.4 - 1773690 - cups-genppdupdate doesnt work for non-utf-8 PPDs - make is no longer in buildroot by default - dont require the gimp package as build require, pkgconfig's gimpui-2.0 suffices - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fix warning building with clang - non-void function 'stp_paths_copy_with_prefix' should return a value [-Wreturn-type] - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 5.3.4 - 1773690 - cups-genppdupdate doesnt work for non-utf-8 PPDs - make is no longer in buildroot by default - dont require the gimp package as build require, pkgconfig's gimpui-2.0 suffices - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fix warning building with clang - non-void function 'stp_paths_copy_with_prefix' should return a value [-Wreturn-type] - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - udisks2: Correct add to hash table for items which can clash in the monitor (RHEL-143934) - udisks2: Use hash table for quicker lookups in the monitor (RHEL-143934) - Add edit mode support for smb backend (RHEL-71088) - Add support for x-gvfs-trash mount option (RHEL-52353) - Backport several CVE fixes (CVE-2026-84268, CVE-2026-88924) Resolves: RHEL-252312, RHEL-257348 - udisks2: Correct add to hash table for items which can clash in the monitor (RHEL-143934) - udisks2: Use hash table for quicker lookups in the monitor (RHEL-143934) - Add edit mode support for smb backend (RHEL-71088) - Add support for x-gvfs-trash mount option (RHEL-52353) - udisks2: Correct add to hash table for items which can clash in the monitor (RHEL-143934) - udisks2: Use hash table for quicker lookups in the monitor (RHEL-143934) - Add edit mode support for smb backend (RHEL-71088) - Add support for x-gvfs-trash mount option (RHEL-52353) - Backport several CVE fixes (CVE-2026-84268, CVE-2026-88924) Resolves: RHEL-252312, RHEL-257348 - udisks2: Correct add to hash table for items which can clash in the monitor (RHEL-143934) - udisks2: Use hash table for quicker lookups in the monitor (RHEL-143934) - Add edit mode support for smb backend (RHEL-71088) - Add support for x-gvfs-trash mount option (RHEL-52353) - udisks2: Correct add to hash table for items which can clash in the monitor (RHEL-143934) - udisks2: Use hash table for quicker lookups in the monitor (RHEL-143934) - Add edit mode support for smb backend (RHEL-71088) - Add support for x-gvfs-trash mount option (RHEL-52353) - Backport several CVE fixes (CVE-2026-84268, CVE-2026-88924) Resolves: RHEL-252312, RHEL-257348 - udisks2: Correct add to hash table for items which can clash in the monitor (RHEL-143934) - udisks2: Use hash table for quicker lookups in the monitor (RHEL-143934) - Add edit mode support for smb backend (RHEL-71088) - Add support for x-gvfs-trash mount option (RHEL-52353) - udisks2: Correct add to hash table for items which can clash in the monitor (RHEL-143934) - udisks2: Use hash table for quicker lookups in the monitor (RHEL-143934) - Add edit mode support for smb backend (RHEL-71088) - Add support for x-gvfs-trash mount option (RHEL-52353) - Backport several CVE fixes (CVE-2026-84268, CVE-2026-88924) Resolves: RHEL-252312, RHEL-257348 - udisks2: Correct add to hash table for items which can clash in the monitor (RHEL-143934) - udisks2: Use hash table for quicker lookups in the monitor (RHEL-143934) - Add edit mode support for smb backend (RHEL-71088) - Add support for x-gvfs-trash mount option (RHEL-52353) - udisks2: Correct add to hash table for items which can clash in the monitor (RHEL-143934) - udisks2: Use hash table for quicker lookups in the monitor (RHEL-143934) - Add edit mode support for smb backend (RHEL-71088) - Add support for x-gvfs-trash mount option (RHEL-52353) - Backport several CVE fixes (CVE-2026-84268, CVE-2026-88924) Resolves: RHEL-252312, RHEL-257348 - udisks2: Correct add to hash table for items which can clash in the monitor (RHEL-143934) - udisks2: Use hash table for quicker lookups in the monitor (RHEL-143934) - Add edit mode support for smb backend (RHEL-71088) - Add support for x-gvfs-trash mount option (RHEL-52353) - udisks2: Correct add to hash table for items which can clash in the monitor (RHEL-143934) - udisks2: Use hash table for quicker lookups in the monitor (RHEL-143934) - Add edit mode support for smb backend (RHEL-71088) - Add support for x-gvfs-trash mount option (RHEL-52353) - Backport several CVE fixes (CVE-2026-84268, CVE-2026-88924) Resolves: RHEL-252312, RHEL-257348 - udisks2: Correct add to hash table for items which can clash in the monitor (RHEL-143934) - udisks2: Use hash table for quicker lookups in the monitor (RHEL-143934) - Add edit mode support for smb backend (RHEL-71088) - Add support for x-gvfs-trash mount option (RHEL-52353) - udisks2: Correct add to hash table for items which can clash in the monitor (RHEL-143934) - udisks2: Use hash table for quicker lookups in the monitor (RHEL-143934) - Add edit mode support for smb backend (RHEL-71088) - Add support for x-gvfs-trash mount option (RHEL-52353) - Backport several CVE fixes (CVE-2026-84268, CVE-2026-88924) Resolves: RHEL-252312, RHEL-257348 - udisks2: Correct add to hash table for items which can clash in the monitor (RHEL-143934) - udisks2: Use hash table for quicker lookups in the monitor (RHEL-143934) - Add edit mode support for smb backend (RHEL-71088) - Add support for x-gvfs-trash mount option (RHEL-52353) - udisks2: Correct add to hash table for items which can clash in the monitor (RHEL-143934) - udisks2: Use hash table for quicker lookups in the monitor (RHEL-143934) - Add edit mode support for smb backend (RHEL-71088) - Add support for x-gvfs-trash mount option (RHEL-52353) - Backport several CVE fixes (CVE-2026-84268, CVE-2026-88924) Resolves: RHEL-252312, RHEL-257348 - udisks2: Correct add to hash table for items which can clash in the monitor (RHEL-143934) - udisks2: Use hash table for quicker lookups in the monitor (RHEL-143934) - Add edit mode support for smb backend (RHEL-71088) - Add support for x-gvfs-trash mount option (RHEL-52353) - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.7 - Resolves: RHEL-112184 - rebuild for CVE-2025-22871 - Resolves: RHEL-90035 - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.6 - Related: RHEL-80816 - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.5 - Related: RHEL-80816 - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.4 - Resolves: RHEL-83036 - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.3 - Related: RHEL-60277 - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.2 - Related: RHEL-60277 - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.1 - Resolves: RHEL-69761 - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.0 - Related: RHEL-60277 - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.7.5 - Related: RHEL-27608 - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.7 - Resolves: RHEL-112184 - rebuild for CVE-2025-22871 - Resolves: RHEL-90035 - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.6 - Related: RHEL-80816 - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.5 - Related: RHEL-80816 - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.4 - Resolves: RHEL-83036 - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.3 - Related: RHEL-60277 - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.2 - Related: RHEL-60277 - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.1 - Resolves: RHEL-69761 - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.0 - Related: RHEL-60277 - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.7.5 - Related: RHEL-27608 - Rebuild to trigger shipping devel package (RHEL-19019) - Add noarch to ExclusiveArch - Disable building on i686 - Fix patch usage - Rebuild with regenerated Requires on Java - Fix denial of service vulnerability in mjson library (CVE-2025-11230) Resolves: RHEL-126665 - Add tmpfiles.d file to make systemd-tmpfiles create/set correct ownership/permissions of /var/lib/haproxy Resolves: RHEL-120178 - Rebase to 2.8.14 Resolves: RHEL-74039 - Always clear retry flags in read/write functions to avoid CPU usage spikes - Fix "unable to load certificate chain from file" issue Resolves: RHEL-71925, RHEL-68780 - Reject "#" as part of URI path component (CVE-2023-45539, RHEL-18169) - Reject any empty content-length header value (CVE-2023-40225, RHEL-7736) - Fix NULL pointer dereference in hpack_dht_insert() (CVE-2026-55204) Resolves: RHEL-211082 - Fix uint16_t overflow in FCGI demux record length (CVE-2026-55203) Resolves: RHEL-211062 - Fix denial of service vulnerability in mjson library (CVE-2025-11230) Resolves: RHEL-126665 - Add tmpfiles.d file to make systemd-tmpfiles create/set correct ownership/permissions of /var/lib/haproxy Resolves: RHEL-120178 - Rebase to 2.8.14 Resolves: RHEL-74039 - Always clear retry flags in read/write functions to avoid CPU usage spikes - Fix "unable to load certificate chain from file" issue Resolves: RHEL-71925, RHEL-68780 - Resolves:RHEL-2268 Fix CI tests results - Resolves:RHEL-2268 CVE-2023-25193 - Resolves:rh#2103849 - Update tests.yaml - Resolves:rh#2103849 CVE-2022-33068 - Fix Covscan compiler warning for inclusion of parenthesis - Update tests.yaml - Resolves:rh#2103849 CVE-2022-33068 harfbuzz: integer overflow in the component hb-ot-shape-fallback.c - Resolves:RHEL-2268 Fix CI tests results - Resolves:RHEL-2268 CVE-2023-25193 - Resolves:rh#2103849 - Update tests.yaml - Resolves:rh#2103849 CVE-2022-33068 - Fix Covscan compiler warning for inclusion of parenthesis - Update tests.yaml - Resolves:rh#2103849 CVE-2022-33068 harfbuzz: integer overflow in the component hb-ot-shape-fallback.c - New upstream version 1.6 resolves: rhbz#2081103 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Nwe upstream version 1.5 - Add patch to solve inconsistency between configure.ac and filename - Add Build requirement autoconf - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Own Hi-DPI directories Resolves: #2090173 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Split highcontrast-icon-theme out to a new subpackage - Explicitly require cursor and icon themes required for the gtk2 themes - Make adwaita-gtk2-theme recommends conditional on gtk2 being installed - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for make macro change - Update to 3.60 - Update to 3.57 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 3.56 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 3.54 - Rebase to Fedora Rawhide resolves: RHEL-56803 - Rebase to Fedora Rawhide resolves: RHEL-56803 - Enable CONFIG_IEEE80211BE Resolves: RHEL-58726 - Update to version 2.11 - Fix OOB memory access in Multi-Link Operation element parsing Resolves: RHEL-194042 - Enable CONFIG_IEEE80211BE Resolves: RHEL-58726 - Update to version 2.11 - add AlmaLinux support - fix permission for custom created gpg dir - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - add hplip-repack.sh as a source - 1969767 - remove redundant files - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - 1929977 - hplip-3.21.2 is available - get out of hp-setup if the device is a standalone scanner - remove the old search algorithm - 1925259 - %pre scriptlet enables and starts cups.service, which is unnecessary - 1919556 - hp-fab crashed: QFileDialog.getOpenFileName is not used correctly - Аdd AlmaLinux support - Fix permission for custom created gpg dir - Fix more leaks in hpcups - OSH fixes after CVE-2026-8631 - CVE-2026-8631 hplip: HPLIP: Arbitrary code execution and privilege escalation via integer overflow in hpcups - CVE-2026-8632 hplip: Privilege escalation and arbitrary code execution via OS command injection in Is_Process_Running() - Аdd AlmaLinux support - Fix permission for custom created gpg dir - RHEL-192001 CVE-2026-14544 hplip: Incomplete Fix for CVE-2026-8631 - Fix more leaks in hpcups - OSH fixes after CVE-2026-8631 - CVE-2026-8631 hplip: HPLIP: Arbitrary code execution and privilege escalation via integer overflow in hpcups - CVE-2026-8632 hplip: Privilege escalation and arbitrary code execution via OS command injection in Is_Process_Running() - Fix LEDM scanning - fix OSH issues - really fix missing /var/lib/hp - Rebase to 3.26.6 - RHEL-257310 [IMAGE-MODE] missing /var/lib/hp on image-mode - RHEL-192001 CVE-2026-14544 hplip: Incomplete Fix for CVE-2026-8631 - Fix more leaks in hpcups - OSH fixes after CVE-2026-8631 - CVE-2026-8631 hplip: HPLIP: Arbitrary code execution and privilege escalation via integer overflow in hpcups - CVE-2026-8632 hplip: Privilege escalation and arbitrary code execution via OS command injection in Is_Process_Running() - add AlmaLinux support - fix permission for custom created gpg dir - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - add hplip-repack.sh as a source - 1969767 - remove redundant files - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - 1929977 - hplip-3.21.2 is available - get out of hp-setup if the device is a standalone scanner - remove the old search algorithm - 1925259 - %pre scriptlet enables and starts cups.service, which is unnecessary - 1919556 - hp-fab crashed: QFileDialog.getOpenFileName is not used correctly - Аdd AlmaLinux support - Fix permission for custom created gpg dir - Fix more leaks in hpcups - OSH fixes after CVE-2026-8631 - CVE-2026-8631 hplip: HPLIP: Arbitrary code execution and privilege escalation via integer overflow in hpcups - CVE-2026-8632 hplip: Privilege escalation and arbitrary code execution via OS command injection in Is_Process_Running() - Аdd AlmaLinux support - Fix permission for custom created gpg dir - RHEL-192001 CVE-2026-14544 hplip: Incomplete Fix for CVE-2026-8631 - Fix more leaks in hpcups - OSH fixes after CVE-2026-8631 - CVE-2026-8631 hplip: HPLIP: Arbitrary code execution and privilege escalation via integer overflow in hpcups - CVE-2026-8632 hplip: Privilege escalation and arbitrary code execution via OS command injection in Is_Process_Running() - Fix LEDM scanning - fix OSH issues - really fix missing /var/lib/hp - Rebase to 3.26.6 - RHEL-257310 [IMAGE-MODE] missing /var/lib/hp on image-mode - RHEL-192001 CVE-2026-14544 hplip: Incomplete Fix for CVE-2026-8631 - Fix more leaks in hpcups - OSH fixes after CVE-2026-8631 - CVE-2026-8631 hplip: HPLIP: Arbitrary code execution and privilege escalation via integer overflow in hpcups - CVE-2026-8632 hplip: Privilege escalation and arbitrary code execution via OS command injection in Is_Process_Running() - add AlmaLinux support - fix permission for custom created gpg dir - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - add hplip-repack.sh as a source - 1969767 - remove redundant files - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - 1929977 - hplip-3.21.2 is available - get out of hp-setup if the device is a standalone scanner - remove the old search algorithm - 1925259 - %pre scriptlet enables and starts cups.service, which is unnecessary - 1919556 - hp-fab crashed: QFileDialog.getOpenFileName is not used correctly - Аdd AlmaLinux support - Fix permission for custom created gpg dir - Fix more leaks in hpcups - OSH fixes after CVE-2026-8631 - CVE-2026-8631 hplip: HPLIP: Arbitrary code execution and privilege escalation via integer overflow in hpcups - CVE-2026-8632 hplip: Privilege escalation and arbitrary code execution via OS command injection in Is_Process_Running() - Аdd AlmaLinux support - Fix permission for custom created gpg dir - RHEL-192001 CVE-2026-14544 hplip: Incomplete Fix for CVE-2026-8631 - Fix more leaks in hpcups - OSH fixes after CVE-2026-8631 - CVE-2026-8631 hplip: HPLIP: Arbitrary code execution and privilege escalation via integer overflow in hpcups - CVE-2026-8632 hplip: Privilege escalation and arbitrary code execution via OS command injection in Is_Process_Running() - Fix LEDM scanning - fix OSH issues - really fix missing /var/lib/hp - Rebase to 3.26.6 - RHEL-257310 [IMAGE-MODE] missing /var/lib/hp on image-mode - RHEL-192001 CVE-2026-14544 hplip: Incomplete Fix for CVE-2026-8631 - Fix more leaks in hpcups - OSH fixes after CVE-2026-8631 - CVE-2026-8631 hplip: HPLIP: Arbitrary code execution and privilege escalation via integer overflow in hpcups - CVE-2026-8632 hplip: Privilege escalation and arbitrary code execution via OS command injection in Is_Process_Running() - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 2.9.4 - Include patch to work with colon but no port - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuild to regenerate auto-requires - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Rebuilt for java-17-openjdk as system jdk - Add noarch to ExclusiveArch - Disable building on i686 - Fix patch usage - Rebuild with regenerated Requires on Java - Rebuild to regenerate auto-requires - Update javapackages test plan to f42 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Rebuilt for java-21-openjdk as system jdk - bump of release for for java-21-openjdk as system jdk - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Port to Mockito 5 - Rebuild to regenerate auto-Requires on java - Convert License tag to SPDX format - Update to upstream version 4.5.14 - Add noarch to ExclusiveArch - Disable building on i686 - Fix patch usage - Rebuild with regenerated Requires on Java - Rebuild to regenerate auto-requires - Rebuild to regenerate auto-requires - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Rebuilt for java-17-openjdk as system jdk - Disable tests failing without networking - Update javapackages test plan to f42 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Rebuilt for java-21-openjdk as system jdk - Port to OpenJDK 21 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Port to Mockito 5 - Rebuild to regenerate auto-Requires on java - Convert License tag to SPDX format - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-114501 Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99815 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99968 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-94562 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - mod_dav: add dav_get_base_path() API - Resolves: RHEL-41069 - Resolves: RHEL-66488 - Apache HTTPD no longer parse PHP files with unicode characters in the name - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-114501 Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99815 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99968 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-94562 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - mod_dav: add dav_get_base_path() API - Resolves: RHEL-41069 - Resolves: RHEL-192752 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-186217 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-182578 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Also addresses CVE-2026-24072, CVE-2026-33006, CVE-2026-42535, CVE-2026-43951, CVE-2026-44119, CVE-2026-44186 - Resolves: RHEL-186186 - httpd: mod_proxy_html buffer handling vulnerability (CVE-2026-34355) - Resolves: RHEL-175636 - httpd: mod_dav_lock uses wrong lock discovery (CVE-2026-29169) - Resolves: RHEL-186196 - mod_xml2enc: fix bblen accounting in fix_skipto (CVE-2026-42536) - Resolves: RHEL-186164 - httpd: fix OCSP write buffer advancement bug in mod_ssl (CVE-2026-44185) - Resolves: RHEL-184312 - httpd: ap_regname restrict to reasonable captures (CVE-2026-44631) - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-190807 - httpd: use-after-free in mod_ldap uldap_connection_find via per-directory client cert list (CVE-2026-29167) - Resolves: RHEL-192752 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-186217 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-182578 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Also addresses CVE-2026-24072, CVE-2026-33006, CVE-2026-42535, CVE-2026-43951, CVE-2026-44119, CVE-2026-44186 - Resolves: RHEL-186186 - httpd: mod_proxy_html buffer handling vulnerability (CVE-2026-34355) - Resolves: RHEL-175636 - httpd: mod_dav_lock uses wrong lock discovery (CVE-2026-29169) - Resolves: RHEL-186196 - mod_xml2enc: fix bblen accounting in fix_skipto (CVE-2026-42536) - Resolves: RHEL-186164 - httpd: fix OCSP write buffer advancement bug in mod_ssl (CVE-2026-44185) - Resolves: RHEL-184312 - httpd: ap_regname restrict to reasonable captures (CVE-2026-44631) - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Related: RHEL-275261 - httpd: Arbitrary code execution via oversized Host header in mod_vhost_alias (CVE-2026-63292) - Resolves: RHEL-280369 - httpd: Denial of Service via mod_rewrite lookahead (CVE-2026-56154) - Resolves: RHEL-275551 CVE-2026-48005 httpd: Denial of service via forged Authorization headers in mod_auth_digest - Resolves: RHEL-275338 CVE-2026-73636 httpd: Authentication bypass via credential replay in mod_auth_digest - Resolves: RHEL-275229 CVE-2026-73637 httpd: Authentication state corruption via concurrent Digest authentication requests - Resolves: RHEL-275323 CVE-2026-56153 httpd: Denial of Service via heap-based buffer overflow in mod_charset_lite - Resolves: RHEL-275307 CVE-2026-46729 httpd: mod_heartmonitor: Denial of Service via NULL pointer dereference - Resolves: RHEL-275276 CVE-2026-63045 httpd: unauthorized connection to arbitrary hosts via crafted FTP PASV response - Resolves: RHEL-275261 CVE-2026-63292 httpd: Arbitrary code execution via oversized Host header in mod_vhost_alias - Resolves: RHEL-275245 CVE-2026-63686 httpd: Denial of Service via charset conversion failure in mod_xml2enc - Resolves: RHEL-275214 CVE-2026-93546 httpd: Denial of Service via integer overflow in mod_dav_fs - Resolves: RHEL-275176 CVE-2026-63718 httpd: HTTP response smuggling via crafted Transfer-Encoding response in mod_proxy_uwsgi - Resolves: RHEL-190807 - httpd: use-after-free in mod_ldap uldap_connection_find via per-directory client cert list (CVE-2026-29167) - Resolves: RHEL-192752 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-186217 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-182578 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Also addresses CVE-2026-24072, CVE-2026-33006, CVE-2026-42535, CVE-2026-43951, CVE-2026-44119, CVE-2026-44186 - Resolves: RHEL-186186 - httpd: mod_proxy_html buffer handling vulnerability (CVE-2026-34355) - Resolves: RHEL-175636 - httpd: mod_dav_lock uses wrong lock discovery (CVE-2026-29169) - Resolves: RHEL-186196 - mod_xml2enc: fix bblen accounting in fix_skipto (CVE-2026-42536) - Resolves: RHEL-186164 - httpd: fix OCSP write buffer advancement bug in mod_ssl (CVE-2026-44185) - Resolves: RHEL-184312 - httpd: ap_regname restrict to reasonable captures (CVE-2026-44631) - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-114501 Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99815 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99968 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-94562 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - mod_dav: add dav_get_base_path() API - Resolves: RHEL-41069 - Resolves: RHEL-66488 - Apache HTTPD no longer parse PHP files with unicode characters in the name - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-114501 Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99815 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99968 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-94562 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - mod_dav: add dav_get_base_path() API - Resolves: RHEL-41069 - Resolves: RHEL-192752 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-186217 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-182578 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Also addresses CVE-2026-24072, CVE-2026-33006, CVE-2026-42535, CVE-2026-43951, CVE-2026-44119, CVE-2026-44186 - Resolves: RHEL-186186 - httpd: mod_proxy_html buffer handling vulnerability (CVE-2026-34355) - Resolves: RHEL-175636 - httpd: mod_dav_lock uses wrong lock discovery (CVE-2026-29169) - Resolves: RHEL-186196 - mod_xml2enc: fix bblen accounting in fix_skipto (CVE-2026-42536) - Resolves: RHEL-186164 - httpd: fix OCSP write buffer advancement bug in mod_ssl (CVE-2026-44185) - Resolves: RHEL-184312 - httpd: ap_regname restrict to reasonable captures (CVE-2026-44631) - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-190807 - httpd: use-after-free in mod_ldap uldap_connection_find via per-directory client cert list (CVE-2026-29167) - Resolves: RHEL-192752 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-186217 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-182578 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Also addresses CVE-2026-24072, CVE-2026-33006, CVE-2026-42535, CVE-2026-43951, CVE-2026-44119, CVE-2026-44186 - Resolves: RHEL-186186 - httpd: mod_proxy_html buffer handling vulnerability (CVE-2026-34355) - Resolves: RHEL-175636 - httpd: mod_dav_lock uses wrong lock discovery (CVE-2026-29169) - Resolves: RHEL-186196 - mod_xml2enc: fix bblen accounting in fix_skipto (CVE-2026-42536) - Resolves: RHEL-186164 - httpd: fix OCSP write buffer advancement bug in mod_ssl (CVE-2026-44185) - Resolves: RHEL-184312 - httpd: ap_regname restrict to reasonable captures (CVE-2026-44631) - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Related: RHEL-275261 - httpd: Arbitrary code execution via oversized Host header in mod_vhost_alias (CVE-2026-63292) - Resolves: RHEL-280369 - httpd: Denial of Service via mod_rewrite lookahead (CVE-2026-56154) - Resolves: RHEL-275551 CVE-2026-48005 httpd: Denial of service via forged Authorization headers in mod_auth_digest - Resolves: RHEL-275338 CVE-2026-73636 httpd: Authentication bypass via credential replay in mod_auth_digest - Resolves: RHEL-275229 CVE-2026-73637 httpd: Authentication state corruption via concurrent Digest authentication requests - Resolves: RHEL-275323 CVE-2026-56153 httpd: Denial of Service via heap-based buffer overflow in mod_charset_lite - Resolves: RHEL-275307 CVE-2026-46729 httpd: mod_heartmonitor: Denial of Service via NULL pointer dereference - Resolves: RHEL-275276 CVE-2026-63045 httpd: unauthorized connection to arbitrary hosts via crafted FTP PASV response - Resolves: RHEL-275261 CVE-2026-63292 httpd: Arbitrary code execution via oversized Host header in mod_vhost_alias - Resolves: RHEL-275245 CVE-2026-63686 httpd: Denial of Service via charset conversion failure in mod_xml2enc - Resolves: RHEL-275214 CVE-2026-93546 httpd: Denial of Service via integer overflow in mod_dav_fs - Resolves: RHEL-275176 CVE-2026-63718 httpd: HTTP response smuggling via crafted Transfer-Encoding response in mod_proxy_uwsgi - Resolves: RHEL-190807 - httpd: use-after-free in mod_ldap uldap_connection_find via per-directory client cert list (CVE-2026-29167) - Resolves: RHEL-192752 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-186217 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-182578 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Also addresses CVE-2026-24072, CVE-2026-33006, CVE-2026-42535, CVE-2026-43951, CVE-2026-44119, CVE-2026-44186 - Resolves: RHEL-186186 - httpd: mod_proxy_html buffer handling vulnerability (CVE-2026-34355) - Resolves: RHEL-175636 - httpd: mod_dav_lock uses wrong lock discovery (CVE-2026-29169) - Resolves: RHEL-186196 - mod_xml2enc: fix bblen accounting in fix_skipto (CVE-2026-42536) - Resolves: RHEL-186164 - httpd: fix OCSP write buffer advancement bug in mod_ssl (CVE-2026-44185) - Resolves: RHEL-184312 - httpd: ap_regname restrict to reasonable captures (CVE-2026-44631) - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-114501 Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99815 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99968 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-94562 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - mod_dav: add dav_get_base_path() API - Resolves: RHEL-41069 - Resolves: RHEL-66488 - Apache HTTPD no longer parse PHP files with unicode characters in the name - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-114501 Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99815 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99968 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-94562 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - mod_dav: add dav_get_base_path() API - Resolves: RHEL-41069 - Resolves: RHEL-192752 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-186217 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-182578 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Also addresses CVE-2026-24072, CVE-2026-33006, CVE-2026-42535, CVE-2026-43951, CVE-2026-44119, CVE-2026-44186 - Resolves: RHEL-186186 - httpd: mod_proxy_html buffer handling vulnerability (CVE-2026-34355) - Resolves: RHEL-175636 - httpd: mod_dav_lock uses wrong lock discovery (CVE-2026-29169) - Resolves: RHEL-186196 - mod_xml2enc: fix bblen accounting in fix_skipto (CVE-2026-42536) - Resolves: RHEL-186164 - httpd: fix OCSP write buffer advancement bug in mod_ssl (CVE-2026-44185) - Resolves: RHEL-184312 - httpd: ap_regname restrict to reasonable captures (CVE-2026-44631) - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-190807 - httpd: use-after-free in mod_ldap uldap_connection_find via per-directory client cert list (CVE-2026-29167) - Resolves: RHEL-192752 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-186217 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-182578 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Also addresses CVE-2026-24072, CVE-2026-33006, CVE-2026-42535, CVE-2026-43951, CVE-2026-44119, CVE-2026-44186 - Resolves: RHEL-186186 - httpd: mod_proxy_html buffer handling vulnerability (CVE-2026-34355) - Resolves: RHEL-175636 - httpd: mod_dav_lock uses wrong lock discovery (CVE-2026-29169) - Resolves: RHEL-186196 - mod_xml2enc: fix bblen accounting in fix_skipto (CVE-2026-42536) - Resolves: RHEL-186164 - httpd: fix OCSP write buffer advancement bug in mod_ssl (CVE-2026-44185) - Resolves: RHEL-184312 - httpd: ap_regname restrict to reasonable captures (CVE-2026-44631) - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Related: RHEL-275261 - httpd: Arbitrary code execution via oversized Host header in mod_vhost_alias (CVE-2026-63292) - Resolves: RHEL-280369 - httpd: Denial of Service via mod_rewrite lookahead (CVE-2026-56154) - Resolves: RHEL-275551 CVE-2026-48005 httpd: Denial of service via forged Authorization headers in mod_auth_digest - Resolves: RHEL-275338 CVE-2026-73636 httpd: Authentication bypass via credential replay in mod_auth_digest - Resolves: RHEL-275229 CVE-2026-73637 httpd: Authentication state corruption via concurrent Digest authentication requests - Resolves: RHEL-275323 CVE-2026-56153 httpd: Denial of Service via heap-based buffer overflow in mod_charset_lite - Resolves: RHEL-275307 CVE-2026-46729 httpd: mod_heartmonitor: Denial of Service via NULL pointer dereference - Resolves: RHEL-275276 CVE-2026-63045 httpd: unauthorized connection to arbitrary hosts via crafted FTP PASV response - Resolves: RHEL-275261 CVE-2026-63292 httpd: Arbitrary code execution via oversized Host header in mod_vhost_alias - Resolves: RHEL-275245 CVE-2026-63686 httpd: Denial of Service via charset conversion failure in mod_xml2enc - Resolves: RHEL-275214 CVE-2026-93546 httpd: Denial of Service via integer overflow in mod_dav_fs - Resolves: RHEL-275176 CVE-2026-63718 httpd: HTTP response smuggling via crafted Transfer-Encoding response in mod_proxy_uwsgi - Resolves: RHEL-190807 - httpd: use-after-free in mod_ldap uldap_connection_find via per-directory client cert list (CVE-2026-29167) - Resolves: RHEL-192752 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-186217 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-182578 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Also addresses CVE-2026-24072, CVE-2026-33006, CVE-2026-42535, CVE-2026-43951, CVE-2026-44119, CVE-2026-44186 - Resolves: RHEL-186186 - httpd: mod_proxy_html buffer handling vulnerability (CVE-2026-34355) - Resolves: RHEL-175636 - httpd: mod_dav_lock uses wrong lock discovery (CVE-2026-29169) - Resolves: RHEL-186196 - mod_xml2enc: fix bblen accounting in fix_skipto (CVE-2026-42536) - Resolves: RHEL-186164 - httpd: fix OCSP write buffer advancement bug in mod_ssl (CVE-2026-44185) - Resolves: RHEL-184312 - httpd: ap_regname restrict to reasonable captures (CVE-2026-44631) - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-114501 Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99815 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99968 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-94562 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - mod_dav: add dav_get_base_path() API - Resolves: RHEL-41069 - Resolves: RHEL-66488 - Apache HTTPD no longer parse PHP files with unicode characters in the name - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-114501 Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99815 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99968 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-94562 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - mod_dav: add dav_get_base_path() API - Resolves: RHEL-41069 - Resolves: RHEL-192752 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-186217 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-182578 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Also addresses CVE-2026-24072, CVE-2026-33006, CVE-2026-42535, CVE-2026-43951, CVE-2026-44119, CVE-2026-44186 - Resolves: RHEL-186186 - httpd: mod_proxy_html buffer handling vulnerability (CVE-2026-34355) - Resolves: RHEL-175636 - httpd: mod_dav_lock uses wrong lock discovery (CVE-2026-29169) - Resolves: RHEL-186196 - mod_xml2enc: fix bblen accounting in fix_skipto (CVE-2026-42536) - Resolves: RHEL-186164 - httpd: fix OCSP write buffer advancement bug in mod_ssl (CVE-2026-44185) - Resolves: RHEL-184312 - httpd: ap_regname restrict to reasonable captures (CVE-2026-44631) - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-190807 - httpd: use-after-free in mod_ldap uldap_connection_find via per-directory client cert list (CVE-2026-29167) - Resolves: RHEL-192752 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-186217 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-182578 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Also addresses CVE-2026-24072, CVE-2026-33006, CVE-2026-42535, CVE-2026-43951, CVE-2026-44119, CVE-2026-44186 - Resolves: RHEL-186186 - httpd: mod_proxy_html buffer handling vulnerability (CVE-2026-34355) - Resolves: RHEL-175636 - httpd: mod_dav_lock uses wrong lock discovery (CVE-2026-29169) - Resolves: RHEL-186196 - mod_xml2enc: fix bblen accounting in fix_skipto (CVE-2026-42536) - Resolves: RHEL-186164 - httpd: fix OCSP write buffer advancement bug in mod_ssl (CVE-2026-44185) - Resolves: RHEL-184312 - httpd: ap_regname restrict to reasonable captures (CVE-2026-44631) - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Related: RHEL-275261 - httpd: Arbitrary code execution via oversized Host header in mod_vhost_alias (CVE-2026-63292) - Resolves: RHEL-280369 - httpd: Denial of Service via mod_rewrite lookahead (CVE-2026-56154) - Resolves: RHEL-275551 CVE-2026-48005 httpd: Denial of service via forged Authorization headers in mod_auth_digest - Resolves: RHEL-275338 CVE-2026-73636 httpd: Authentication bypass via credential replay in mod_auth_digest - Resolves: RHEL-275229 CVE-2026-73637 httpd: Authentication state corruption via concurrent Digest authentication requests - Resolves: RHEL-275323 CVE-2026-56153 httpd: Denial of Service via heap-based buffer overflow in mod_charset_lite - Resolves: RHEL-275307 CVE-2026-46729 httpd: mod_heartmonitor: Denial of Service via NULL pointer dereference - Resolves: RHEL-275276 CVE-2026-63045 httpd: unauthorized connection to arbitrary hosts via crafted FTP PASV response - Resolves: RHEL-275261 CVE-2026-63292 httpd: Arbitrary code execution via oversized Host header in mod_vhost_alias - Resolves: RHEL-275245 CVE-2026-63686 httpd: Denial of Service via charset conversion failure in mod_xml2enc - Resolves: RHEL-275214 CVE-2026-93546 httpd: Denial of Service via integer overflow in mod_dav_fs - Resolves: RHEL-275176 CVE-2026-63718 httpd: HTTP response smuggling via crafted Transfer-Encoding response in mod_proxy_uwsgi - Resolves: RHEL-190807 - httpd: use-after-free in mod_ldap uldap_connection_find via per-directory client cert list (CVE-2026-29167) - Resolves: RHEL-192752 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-186217 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-182578 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Also addresses CVE-2026-24072, CVE-2026-33006, CVE-2026-42535, CVE-2026-43951, CVE-2026-44119, CVE-2026-44186 - Resolves: RHEL-186186 - httpd: mod_proxy_html buffer handling vulnerability (CVE-2026-34355) - Resolves: RHEL-175636 - httpd: mod_dav_lock uses wrong lock discovery (CVE-2026-29169) - Resolves: RHEL-186196 - mod_xml2enc: fix bblen accounting in fix_skipto (CVE-2026-42536) - Resolves: RHEL-186164 - httpd: fix OCSP write buffer advancement bug in mod_ssl (CVE-2026-44185) - Resolves: RHEL-184312 - httpd: ap_regname restrict to reasonable captures (CVE-2026-44631) - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-114501 Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99815 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99968 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-94562 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - mod_dav: add dav_get_base_path() API - Resolves: RHEL-41069 - Resolves: RHEL-66488 - Apache HTTPD no longer parse PHP files with unicode characters in the name - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-114501 Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99815 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99968 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-94562 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - mod_dav: add dav_get_base_path() API - Resolves: RHEL-41069 - Resolves: RHEL-192752 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-186217 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-182578 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Also addresses CVE-2026-24072, CVE-2026-33006, CVE-2026-42535, CVE-2026-43951, CVE-2026-44119, CVE-2026-44186 - Resolves: RHEL-186186 - httpd: mod_proxy_html buffer handling vulnerability (CVE-2026-34355) - Resolves: RHEL-175636 - httpd: mod_dav_lock uses wrong lock discovery (CVE-2026-29169) - Resolves: RHEL-186196 - mod_xml2enc: fix bblen accounting in fix_skipto (CVE-2026-42536) - Resolves: RHEL-186164 - httpd: fix OCSP write buffer advancement bug in mod_ssl (CVE-2026-44185) - Resolves: RHEL-184312 - httpd: ap_regname restrict to reasonable captures (CVE-2026-44631) - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-190807 - httpd: use-after-free in mod_ldap uldap_connection_find via per-directory client cert list (CVE-2026-29167) - Resolves: RHEL-192752 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-186217 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-182578 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Also addresses CVE-2026-24072, CVE-2026-33006, CVE-2026-42535, CVE-2026-43951, CVE-2026-44119, CVE-2026-44186 - Resolves: RHEL-186186 - httpd: mod_proxy_html buffer handling vulnerability (CVE-2026-34355) - Resolves: RHEL-175636 - httpd: mod_dav_lock uses wrong lock discovery (CVE-2026-29169) - Resolves: RHEL-186196 - mod_xml2enc: fix bblen accounting in fix_skipto (CVE-2026-42536) - Resolves: RHEL-186164 - httpd: fix OCSP write buffer advancement bug in mod_ssl (CVE-2026-44185) - Resolves: RHEL-184312 - httpd: ap_regname restrict to reasonable captures (CVE-2026-44631) - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Related: RHEL-275261 - httpd: Arbitrary code execution via oversized Host header in mod_vhost_alias (CVE-2026-63292) - Resolves: RHEL-280369 - httpd: Denial of Service via mod_rewrite lookahead (CVE-2026-56154) - Resolves: RHEL-275551 CVE-2026-48005 httpd: Denial of service via forged Authorization headers in mod_auth_digest - Resolves: RHEL-275338 CVE-2026-73636 httpd: Authentication bypass via credential replay in mod_auth_digest - Resolves: RHEL-275229 CVE-2026-73637 httpd: Authentication state corruption via concurrent Digest authentication requests - Resolves: RHEL-275323 CVE-2026-56153 httpd: Denial of Service via heap-based buffer overflow in mod_charset_lite - Resolves: RHEL-275307 CVE-2026-46729 httpd: mod_heartmonitor: Denial of Service via NULL pointer dereference - Resolves: RHEL-275276 CVE-2026-63045 httpd: unauthorized connection to arbitrary hosts via crafted FTP PASV response - Resolves: RHEL-275261 CVE-2026-63292 httpd: Arbitrary code execution via oversized Host header in mod_vhost_alias - Resolves: RHEL-275245 CVE-2026-63686 httpd: Denial of Service via charset conversion failure in mod_xml2enc - Resolves: RHEL-275214 CVE-2026-93546 httpd: Denial of Service via integer overflow in mod_dav_fs - Resolves: RHEL-275176 CVE-2026-63718 httpd: HTTP response smuggling via crafted Transfer-Encoding response in mod_proxy_uwsgi - Resolves: RHEL-190807 - httpd: use-after-free in mod_ldap uldap_connection_find via per-directory client cert list (CVE-2026-29167) - Resolves: RHEL-192752 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-186217 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-182578 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Also addresses CVE-2026-24072, CVE-2026-33006, CVE-2026-42535, CVE-2026-43951, CVE-2026-44119, CVE-2026-44186 - Resolves: RHEL-186186 - httpd: mod_proxy_html buffer handling vulnerability (CVE-2026-34355) - Resolves: RHEL-175636 - httpd: mod_dav_lock uses wrong lock discovery (CVE-2026-29169) - Resolves: RHEL-186196 - mod_xml2enc: fix bblen accounting in fix_skipto (CVE-2026-42536) - Resolves: RHEL-186164 - httpd: fix OCSP write buffer advancement bug in mod_ssl (CVE-2026-44185) - Resolves: RHEL-184312 - httpd: ap_regname restrict to reasonable captures (CVE-2026-44631) - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-114501 Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99815 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99968 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-94562 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - mod_dav: add dav_get_base_path() API - Resolves: RHEL-41069 - Resolves: RHEL-66488 - Apache HTTPD no longer parse PHP files with unicode characters in the name - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-114501 Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99815 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99968 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-94562 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - mod_dav: add dav_get_base_path() API - Resolves: RHEL-41069 - Resolves: RHEL-192752 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-186217 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-182578 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Also addresses CVE-2026-24072, CVE-2026-33006, CVE-2026-42535, CVE-2026-43951, CVE-2026-44119, CVE-2026-44186 - Resolves: RHEL-186186 - httpd: mod_proxy_html buffer handling vulnerability (CVE-2026-34355) - Resolves: RHEL-175636 - httpd: mod_dav_lock uses wrong lock discovery (CVE-2026-29169) - Resolves: RHEL-186196 - mod_xml2enc: fix bblen accounting in fix_skipto (CVE-2026-42536) - Resolves: RHEL-186164 - httpd: fix OCSP write buffer advancement bug in mod_ssl (CVE-2026-44185) - Resolves: RHEL-184312 - httpd: ap_regname restrict to reasonable captures (CVE-2026-44631) - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-190807 - httpd: use-after-free in mod_ldap uldap_connection_find via per-directory client cert list (CVE-2026-29167) - Resolves: RHEL-192752 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-186217 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-182578 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Also addresses CVE-2026-24072, CVE-2026-33006, CVE-2026-42535, CVE-2026-43951, CVE-2026-44119, CVE-2026-44186 - Resolves: RHEL-186186 - httpd: mod_proxy_html buffer handling vulnerability (CVE-2026-34355) - Resolves: RHEL-175636 - httpd: mod_dav_lock uses wrong lock discovery (CVE-2026-29169) - Resolves: RHEL-186196 - mod_xml2enc: fix bblen accounting in fix_skipto (CVE-2026-42536) - Resolves: RHEL-186164 - httpd: fix OCSP write buffer advancement bug in mod_ssl (CVE-2026-44185) - Resolves: RHEL-184312 - httpd: ap_regname restrict to reasonable captures (CVE-2026-44631) - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Related: RHEL-275261 - httpd: Arbitrary code execution via oversized Host header in mod_vhost_alias (CVE-2026-63292) - Resolves: RHEL-280369 - httpd: Denial of Service via mod_rewrite lookahead (CVE-2026-56154) - Resolves: RHEL-275551 CVE-2026-48005 httpd: Denial of service via forged Authorization headers in mod_auth_digest - Resolves: RHEL-275338 CVE-2026-73636 httpd: Authentication bypass via credential replay in mod_auth_digest - Resolves: RHEL-275229 CVE-2026-73637 httpd: Authentication state corruption via concurrent Digest authentication requests - Resolves: RHEL-275323 CVE-2026-56153 httpd: Denial of Service via heap-based buffer overflow in mod_charset_lite - Resolves: RHEL-275307 CVE-2026-46729 httpd: mod_heartmonitor: Denial of Service via NULL pointer dereference - Resolves: RHEL-275276 CVE-2026-63045 httpd: unauthorized connection to arbitrary hosts via crafted FTP PASV response - Resolves: RHEL-275261 CVE-2026-63292 httpd: Arbitrary code execution via oversized Host header in mod_vhost_alias - Resolves: RHEL-275245 CVE-2026-63686 httpd: Denial of Service via charset conversion failure in mod_xml2enc - Resolves: RHEL-275214 CVE-2026-93546 httpd: Denial of Service via integer overflow in mod_dav_fs - Resolves: RHEL-275176 CVE-2026-63718 httpd: HTTP response smuggling via crafted Transfer-Encoding response in mod_proxy_uwsgi - Resolves: RHEL-190807 - httpd: use-after-free in mod_ldap uldap_connection_find via per-directory client cert list (CVE-2026-29167) - Resolves: RHEL-192752 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-186217 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-182578 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Also addresses CVE-2026-24072, CVE-2026-33006, CVE-2026-42535, CVE-2026-43951, CVE-2026-44119, CVE-2026-44186 - Resolves: RHEL-186186 - httpd: mod_proxy_html buffer handling vulnerability (CVE-2026-34355) - Resolves: RHEL-175636 - httpd: mod_dav_lock uses wrong lock discovery (CVE-2026-29169) - Resolves: RHEL-186196 - mod_xml2enc: fix bblen accounting in fix_skipto (CVE-2026-42536) - Resolves: RHEL-186164 - httpd: fix OCSP write buffer advancement bug in mod_ssl (CVE-2026-44185) - Resolves: RHEL-184312 - httpd: ap_regname restrict to reasonable captures (CVE-2026-44631) - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Accomodate Nuspell by putting the dictionary dir in its own subpackage. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Resolves: rhbz#1771027 CVE-2019-16707 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: rhbz#1951295 FTBFS in Red Hat Enterprise Linux 9 CentOS Stream - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Accomodate Nuspell by putting the dictionary dir in its own subpackage. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Resolves: rhbz#1771027 CVE-2019-16707 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves:rhbz#1967646 - Correct the License: tag to LGPLv3+ based on LICENSE.txt file - Added gating tests - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to latest version - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Accomodate Nuspell by putting the dictionary dir in its own subpackage. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Resolves: rhbz#1771027 CVE-2019-16707 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves:rhbz#1967951 - Correct the license to GPLv3+ as given in README-fy.txt - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves:rhbz#1961995 - Add gating tests from rhel-8 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add perl dependencies needed for build - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Remove the duplicate source file committed to this package git repository - Update URL tag and files section to be more verbose - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - bump n-v-r - Resolves: rhbz#1912135 latest version - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: rhbz#1951294 FTBFS in Red Hat Enterprise Linux 9 CentOS Stream - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: rhbz#1951293 FTBFS in Red Hat Enterprise Linux 9 CentOS Stream - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - linux: fix support for NUMA node0 being offline (RHEL-118677) - Resolves: RHEL-118677 - linux: fix support for NUMA node0 being offline (RHEL-118677) - Resolves: RHEL-118677 - hpvd-tools-hv-Enable-debug-logs-for-hv_kvp_daemon.patch [RHEL-95812] - Resolves: RHEL-95812 ([Hyper-V][RHEL-9]Backport tools: hv: Enable debug logs for hv_kvp_daemon for RHEL 9) - hpvd-hv-hv_kvp_daemon-Support-for-keyfile-based-connectio.patch [RHEL-9902] - hpvd-hv-hv_kvp_daemon-Some-small-fixes-for-handling-NM-ke.patch [RHEL-9902] - hpvd-hv-hv_kvp_daemon-Handle-IPv4-and-Ipv6-combination-fo.patch [RHEL-9902] - hpvd-Changes-for-adding-keyfile-support-in-RHEL-specific-.patch [RHEL-9902] - Resolves: RHEL-9902 ([Hyper-V][RHEL-9] hyperv-daemons write incompatible IPv6 prefix (IPV6NETMASK) in ifcfg) - hpvd-vmbus_testing-fix-wrong-python-syntax-for-integer-va.patch [bz#2218931] - Resolves: bz#2218931 ([Hyper-V] [RHEL-9] /usr/sbin/vmbus_testing python script prints: "SyntaxWarning: "is" with a literal.") - hpvd-tools-hv-Enable-debug-logs-for-hv_kvp_daemon.patch [RHEL-95812] - Resolves: RHEL-95812 ([Hyper-V][RHEL-9]Backport tools: hv: Enable debug logs for hv_kvp_daemon for RHEL 9) - hpvd-hv-hv_kvp_daemon-Support-for-keyfile-based-connectio.patch [RHEL-9902] - hpvd-hv-hv_kvp_daemon-Some-small-fixes-for-handling-NM-ke.patch [RHEL-9902] - hpvd-hv-hv_kvp_daemon-Handle-IPv4-and-Ipv6-combination-fo.patch [RHEL-9902] - hpvd-Changes-for-adding-keyfile-support-in-RHEL-specific-.patch [RHEL-9902] - Resolves: RHEL-9902 ([Hyper-V][RHEL-9] hyperv-daemons write incompatible IPv6 prefix (IPV6NETMASK) in ifcfg) - hpvd-vmbus_testing-fix-wrong-python-syntax-for-integer-va.patch [bz#2218931] - Resolves: bz#2218931 ([Hyper-V] [RHEL-9] /usr/sbin/vmbus_testing python script prints: "SyntaxWarning: "is" with a literal.") - hpvd-tools-hv-Enable-debug-logs-for-hv_kvp_daemon.patch [RHEL-95812] - Resolves: RHEL-95812 ([Hyper-V][RHEL-9]Backport tools: hv: Enable debug logs for hv_kvp_daemon for RHEL 9) - hpvd-hv-hv_kvp_daemon-Support-for-keyfile-based-connectio.patch [RHEL-9902] - hpvd-hv-hv_kvp_daemon-Some-small-fixes-for-handling-NM-ke.patch [RHEL-9902] - hpvd-hv-hv_kvp_daemon-Handle-IPv4-and-Ipv6-combination-fo.patch [RHEL-9902] - hpvd-Changes-for-adding-keyfile-support-in-RHEL-specific-.patch [RHEL-9902] - Resolves: RHEL-9902 ([Hyper-V][RHEL-9] hyperv-daemons write incompatible IPv6 prefix (IPV6NETMASK) in ifcfg) - hpvd-vmbus_testing-fix-wrong-python-syntax-for-integer-va.patch [bz#2218931] - Resolves: bz#2218931 ([Hyper-V] [RHEL-9] /usr/sbin/vmbus_testing python script prints: "SyntaxWarning: "is" with a literal.") - hpvd-tools-hv-Enable-debug-logs-for-hv_kvp_daemon.patch [RHEL-95812] - Resolves: RHEL-95812 ([Hyper-V][RHEL-9]Backport tools: hv: Enable debug logs for hv_kvp_daemon for RHEL 9) - hpvd-hv-hv_kvp_daemon-Support-for-keyfile-based-connectio.patch [RHEL-9902] - hpvd-hv-hv_kvp_daemon-Some-small-fixes-for-handling-NM-ke.patch [RHEL-9902] - hpvd-hv-hv_kvp_daemon-Handle-IPv4-and-Ipv6-combination-fo.patch [RHEL-9902] - hpvd-Changes-for-adding-keyfile-support-in-RHEL-specific-.patch [RHEL-9902] - Resolves: RHEL-9902 ([Hyper-V][RHEL-9] hyperv-daemons write incompatible IPv6 prefix (IPV6NETMASK) in ifcfg) - hpvd-vmbus_testing-fix-wrong-python-syntax-for-integer-va.patch [bz#2218931] - Resolves: bz#2218931 ([Hyper-V] [RHEL-9] /usr/sbin/vmbus_testing python script prints: "SyntaxWarning: "is" with a literal.") - hpvd-tools-hv-Enable-debug-logs-for-hv_kvp_daemon.patch [RHEL-95812] - Resolves: RHEL-95812 ([Hyper-V][RHEL-9]Backport tools: hv: Enable debug logs for hv_kvp_daemon for RHEL 9) - hpvd-hv-hv_kvp_daemon-Support-for-keyfile-based-connectio.patch [RHEL-9902] - hpvd-hv-hv_kvp_daemon-Some-small-fixes-for-handling-NM-ke.patch [RHEL-9902] - hpvd-hv-hv_kvp_daemon-Handle-IPv4-and-Ipv6-combination-fo.patch [RHEL-9902] - hpvd-Changes-for-adding-keyfile-support-in-RHEL-specific-.patch [RHEL-9902] - Resolves: RHEL-9902 ([Hyper-V][RHEL-9] hyperv-daemons write incompatible IPv6 prefix (IPV6NETMASK) in ifcfg) - hpvd-vmbus_testing-fix-wrong-python-syntax-for-integer-va.patch [bz#2218931] - Resolves: bz#2218931 ([Hyper-V] [RHEL-9] /usr/sbin/vmbus_testing python script prints: "SyntaxWarning: "is" with a literal.") - hpvd-tools-hv-Enable-debug-logs-for-hv_kvp_daemon.patch [RHEL-95812] - Resolves: RHEL-95812 ([Hyper-V][RHEL-9]Backport tools: hv: Enable debug logs for hv_kvp_daemon for RHEL 9) - hpvd-hv-hv_kvp_daemon-Support-for-keyfile-based-connectio.patch [RHEL-9902] - hpvd-hv-hv_kvp_daemon-Some-small-fixes-for-handling-NM-ke.patch [RHEL-9902] - hpvd-hv-hv_kvp_daemon-Handle-IPv4-and-Ipv6-combination-fo.patch [RHEL-9902] - hpvd-Changes-for-adding-keyfile-support-in-RHEL-specific-.patch [RHEL-9902] - Resolves: RHEL-9902 ([Hyper-V][RHEL-9] hyperv-daemons write incompatible IPv6 prefix (IPV6NETMASK) in ifcfg) - hpvd-vmbus_testing-fix-wrong-python-syntax-for-integer-va.patch [bz#2218931] - Resolves: bz#2218931 ([Hyper-V] [RHEL-9] /usr/sbin/vmbus_testing python script prints: "SyntaxWarning: "is" with a literal.") - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves:rhbz#1962003 - Add gating tests - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves:rhbz#1969454 - Update to working Source link - License updated to MIT - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - fix dangling links - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves:rhbz#1962003 - Add gating tests - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt - Resolves: rhbz#2072719 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Version 4.3 - Resolves: rhbz#1989260 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Move eeprog to i2c-tools (shouldn't have been in eepromer sub package) - Drop/obsolete eepromer subpackage, deprecated for 6 years - Drop python2 conditionals - Minor cleanups - Version 4.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt - Resolves: rhbz#2072719 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Version 4.3 - Resolves: rhbz#1989260 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Move eeprog to i2c-tools (shouldn't have been in eepromer sub package) - Drop/obsolete eepromer subpackage, deprecated for 6 years - Drop python2 conditionals - Minor cleanups - Version 4.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Resolves: RHEL-39398 ship ibus-gtk4 in RHEL 9 CRB - Resolves: RHEL-1616 Fix RESOURCE_LEAK in OpenScanHub - Resolves: RHEL-1616 Make ibus-tests to depend on ibus-libs - Resolves: RHEL-1616 Space, back-spc, enter key not working on gtk4 - Fix CI. Related: RHEL-24804 - Bump for el9_4. Related: RHEL-24804 - Distinguish Super-space and space shortcut keys. Related: RHEL-24804 - Fix CI. Related: RHEL-24804 - Bump for el9_4. Related: RHEL-24804 - Distinguish Super-space and space shortcut keys. Related: RHEL-24804 - Resolves: RHEL-39398 ship ibus-gtk4 in RHEL 9 CRB - Resolves: RHEL-1616 Fix RESOURCE_LEAK in OpenScanHub - Resolves: RHEL-1616 Make ibus-tests to depend on ibus-libs - Resolves: RHEL-1616 Space, back-spc, enter key not working on gtk4 - Resolves: RHEL-39398 ship ibus-gtk4 in RHEL 9 CRB - Resolves: RHEL-1616 Fix RESOURCE_LEAK in OpenScanHub - Resolves: RHEL-1616 Make ibus-tests to depend on ibus-libs - Resolves: RHEL-1616 Space, back-spc, enter key not working on gtk4 - Fix CI tests - Resolves: RHEL-14878 - Add ibus-hangul-sync-process-key.patch - Resolves: RHEL-14878 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Clean up ibus write-cache in scriptlet - Resolves: #1974629 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.12.0 - bug fixes - Update to 1.11.94 - bug fixes - Fixes python3-gobject warning in setup dialog - Fixes Shift key switch issue - Update to 1.11.93 - switch to use GPLv3+ license - support network dictionary - bug fixes - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Resolves: RHEL-39398 ship ibus-gtk4 in RHEL 9 CRB - Resolves: RHEL-1616 Fix RESOURCE_LEAK in OpenScanHub - Resolves: RHEL-1616 Make ibus-tests to depend on ibus-libs - Resolves: RHEL-1616 Space, back-spc, enter key not working on gtk4 - Add ibus-libzhuyin-fixes-super-space.patch - Resolves: RHEL-106766 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 1.4.4 - Translation update from Weblate, zh_CN now 100% complete. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.4.3 - New translation: es (Spanish) 100%. - No need to call autogen.sh in %prep section - Use make_build and make_install macros - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 1.4.2 - New translations: tr (Turkish) 100%, uk (Ukrainian) 100%, id (Indonesian) 100%, ja_JP (Japanese) 100%. - Translation updates: zh_CN, pt_BR - Resolves: RHEL-39398 ship ibus-gtk4 in RHEL 9 CRB - Resolves: RHEL-1616 Fix RESOURCE_LEAK in OpenScanHub - Resolves: RHEL-1616 Make ibus-tests to depend on ibus-libs - Resolves: RHEL-1616 Space, back-spc, enter key not working on gtk4 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: rhbz#1974631 Delete ibus write-cache in scriptlet - Resolves: rhbz#1974631 Delete ibus write-cache in scriptlet - Improve CI tests and add gating.yaml - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 1.12.5 - Return False in _execute_command_commit_candidate_number(self, number) if number out of range - Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/21 - remove Use-from-unittest-import-mock-instead-of-just-import.patch (included upstream) - Update translations from Weblate (New translation for Sinhala (si) started) - Use “BuildRequires: appstream” only on Fedora - Remove i3 from BuildRequires - Use standard library mock - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.12.4 - Update translations from Weblate (updated es, cs, fa, pt_BR, zh_CN). zh_CN is 100% complete now. - Don’t index the databases in the post install - Resolves: rhbz#2047954 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Remove BuildRequirement of cmake-fedora - Fix build on rawhide - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - bump release number to force a rebuild with newer ibus-table >= 1.10.0 - Update to 1.8.3 - Turned cangjie 3 and 5's DYNAMIC_ADJUST to FALSE Resolves: https://github.com/definite/ibus-table-chinese/pull/14 - Add SUGGESTION_MODE = TRUE to the wubi tables Resolves: https://github.com/definite/ibus-table-chinese/pull/15 - Support pinyin mode also for stroke5 table Resolves: https://github.com/definite/ibus-table-chinese/pull/12 - Use nicer values for symbol and status prompt Resolves: https://github.com/definite/ibus-table-chinese/pull/8 - update jyutping table; add cantonyale table Resolves: https://github.com/definite/ibus-table-chinese/pull/11 - Update jyutping and cantonese tables Resolves: https://github.com/definite/ibus-table-chinese/pull/9 - Don’t index the databases in the post install - Resolves: rhbz#2047954 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Remove BuildRequirement of cmake-fedora - Fix build on rawhide - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - bump release number to force a rebuild with newer ibus-table >= 1.10.0 - Update to 1.8.3 - Turned cangjie 3 and 5's DYNAMIC_ADJUST to FALSE Resolves: https://github.com/definite/ibus-table-chinese/pull/14 - Add SUGGESTION_MODE = TRUE to the wubi tables Resolves: https://github.com/definite/ibus-table-chinese/pull/15 - Support pinyin mode also for stroke5 table Resolves: https://github.com/definite/ibus-table-chinese/pull/12 - Use nicer values for symbol and status prompt Resolves: https://github.com/definite/ibus-table-chinese/pull/8 - update jyutping table; add cantonyale table Resolves: https://github.com/definite/ibus-table-chinese/pull/11 - Update jyutping and cantonese tables Resolves: https://github.com/definite/ibus-table-chinese/pull/9 - Don’t index the databases in the post install - Resolves: rhbz#2047954 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Remove BuildRequirement of cmake-fedora - Fix build on rawhide - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - bump release number to force a rebuild with newer ibus-table >= 1.10.0 - Update to 1.8.3 - Turned cangjie 3 and 5's DYNAMIC_ADJUST to FALSE Resolves: https://github.com/definite/ibus-table-chinese/pull/14 - Add SUGGESTION_MODE = TRUE to the wubi tables Resolves: https://github.com/definite/ibus-table-chinese/pull/15 - Support pinyin mode also for stroke5 table Resolves: https://github.com/definite/ibus-table-chinese/pull/12 - Use nicer values for symbol and status prompt Resolves: https://github.com/definite/ibus-table-chinese/pull/8 - update jyutping table; add cantonyale table Resolves: https://github.com/definite/ibus-table-chinese/pull/11 - Update jyutping and cantonese tables Resolves: https://github.com/definite/ibus-table-chinese/pull/9 - Don’t index the databases in the post install - Resolves: rhbz#2047954 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Remove BuildRequirement of cmake-fedora - Fix build on rawhide - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - bump release number to force a rebuild with newer ibus-table >= 1.10.0 - Update to 1.8.3 - Turned cangjie 3 and 5's DYNAMIC_ADJUST to FALSE Resolves: https://github.com/definite/ibus-table-chinese/pull/14 - Add SUGGESTION_MODE = TRUE to the wubi tables Resolves: https://github.com/definite/ibus-table-chinese/pull/15 - Support pinyin mode also for stroke5 table Resolves: https://github.com/definite/ibus-table-chinese/pull/12 - Use nicer values for symbol and status prompt Resolves: https://github.com/definite/ibus-table-chinese/pull/8 - update jyutping table; add cantonyale table Resolves: https://github.com/definite/ibus-table-chinese/pull/11 - Update jyutping and cantonese tables Resolves: https://github.com/definite/ibus-table-chinese/pull/9 - Don’t index the databases in the post install - Resolves: rhbz#2047954 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Remove BuildRequirement of cmake-fedora - Fix build on rawhide - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - bump release number to force a rebuild with newer ibus-table >= 1.10.0 - Update to 1.8.3 - Turned cangjie 3 and 5's DYNAMIC_ADJUST to FALSE Resolves: https://github.com/definite/ibus-table-chinese/pull/14 - Add SUGGESTION_MODE = TRUE to the wubi tables Resolves: https://github.com/definite/ibus-table-chinese/pull/15 - Support pinyin mode also for stroke5 table Resolves: https://github.com/definite/ibus-table-chinese/pull/12 - Use nicer values for symbol and status prompt Resolves: https://github.com/definite/ibus-table-chinese/pull/8 - update jyutping table; add cantonyale table Resolves: https://github.com/definite/ibus-table-chinese/pull/11 - Update jyutping and cantonese tables Resolves: https://github.com/definite/ibus-table-chinese/pull/9 - Don’t index the databases in the post install - Resolves: rhbz#2047954 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Remove BuildRequirement of cmake-fedora - Fix build on rawhide - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - bump release number to force a rebuild with newer ibus-table >= 1.10.0 - Update to 1.8.3 - Turned cangjie 3 and 5's DYNAMIC_ADJUST to FALSE Resolves: https://github.com/definite/ibus-table-chinese/pull/14 - Add SUGGESTION_MODE = TRUE to the wubi tables Resolves: https://github.com/definite/ibus-table-chinese/pull/15 - Support pinyin mode also for stroke5 table Resolves: https://github.com/definite/ibus-table-chinese/pull/12 - Use nicer values for symbol and status prompt Resolves: https://github.com/definite/ibus-table-chinese/pull/8 - update jyutping table; add cantonyale table Resolves: https://github.com/definite/ibus-table-chinese/pull/11 - Update jyutping and cantonese tables Resolves: https://github.com/definite/ibus-table-chinese/pull/9 - Don’t index the databases in the post install - Resolves: rhbz#2047954 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Remove BuildRequirement of cmake-fedora - Fix build on rawhide - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - bump release number to force a rebuild with newer ibus-table >= 1.10.0 - Update to 1.8.3 - Turned cangjie 3 and 5's DYNAMIC_ADJUST to FALSE Resolves: https://github.com/definite/ibus-table-chinese/pull/14 - Add SUGGESTION_MODE = TRUE to the wubi tables Resolves: https://github.com/definite/ibus-table-chinese/pull/15 - Support pinyin mode also for stroke5 table Resolves: https://github.com/definite/ibus-table-chinese/pull/12 - Use nicer values for symbol and status prompt Resolves: https://github.com/definite/ibus-table-chinese/pull/8 - update jyutping table; add cantonyale table Resolves: https://github.com/definite/ibus-table-chinese/pull/11 - Update jyutping and cantonese tables Resolves: https://github.com/definite/ibus-table-chinese/pull/9 - Don’t index the databases in the post install - Resolves: rhbz#2047954 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Remove BuildRequirement of cmake-fedora - Fix build on rawhide - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - bump release number to force a rebuild with newer ibus-table >= 1.10.0 - Update to 1.8.3 - Turned cangjie 3 and 5's DYNAMIC_ADJUST to FALSE Resolves: https://github.com/definite/ibus-table-chinese/pull/14 - Add SUGGESTION_MODE = TRUE to the wubi tables Resolves: https://github.com/definite/ibus-table-chinese/pull/15 - Support pinyin mode also for stroke5 table Resolves: https://github.com/definite/ibus-table-chinese/pull/12 - Use nicer values for symbol and status prompt Resolves: https://github.com/definite/ibus-table-chinese/pull/8 - update jyutping table; add cantonyale table Resolves: https://github.com/definite/ibus-table-chinese/pull/11 - Update jyutping and cantonese tables Resolves: https://github.com/definite/ibus-table-chinese/pull/9 - Don’t index the databases in the post install - Resolves: rhbz#2047954 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Remove BuildRequirement of cmake-fedora - Fix build on rawhide - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - bump release number to force a rebuild with newer ibus-table >= 1.10.0 - Update to 1.8.3 - Turned cangjie 3 and 5's DYNAMIC_ADJUST to FALSE Resolves: https://github.com/definite/ibus-table-chinese/pull/14 - Add SUGGESTION_MODE = TRUE to the wubi tables Resolves: https://github.com/definite/ibus-table-chinese/pull/15 - Support pinyin mode also for stroke5 table Resolves: https://github.com/definite/ibus-table-chinese/pull/12 - Use nicer values for symbol and status prompt Resolves: https://github.com/definite/ibus-table-chinese/pull/8 - update jyutping table; add cantonyale table Resolves: https://github.com/definite/ibus-table-chinese/pull/11 - Update jyutping and cantonese tables Resolves: https://github.com/definite/ibus-table-chinese/pull/9 - Don’t index the databases in the post install - Resolves: rhbz#2047954 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Remove BuildRequirement of cmake-fedora - Fix build on rawhide - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - bump release number to force a rebuild with newer ibus-table >= 1.10.0 - Update to 1.8.3 - Turned cangjie 3 and 5's DYNAMIC_ADJUST to FALSE Resolves: https://github.com/definite/ibus-table-chinese/pull/14 - Add SUGGESTION_MODE = TRUE to the wubi tables Resolves: https://github.com/definite/ibus-table-chinese/pull/15 - Support pinyin mode also for stroke5 table Resolves: https://github.com/definite/ibus-table-chinese/pull/12 - Use nicer values for symbol and status prompt Resolves: https://github.com/definite/ibus-table-chinese/pull/8 - update jyutping table; add cantonyale table Resolves: https://github.com/definite/ibus-table-chinese/pull/11 - Update jyutping and cantonese tables Resolves: https://github.com/definite/ibus-table-chinese/pull/9 - Don’t index the databases in the post install - Resolves: rhbz#2047954 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Remove BuildRequirement of cmake-fedora - Fix build on rawhide - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - bump release number to force a rebuild with newer ibus-table >= 1.10.0 - Update to 1.8.3 - Turned cangjie 3 and 5's DYNAMIC_ADJUST to FALSE Resolves: https://github.com/definite/ibus-table-chinese/pull/14 - Add SUGGESTION_MODE = TRUE to the wubi tables Resolves: https://github.com/definite/ibus-table-chinese/pull/15 - Support pinyin mode also for stroke5 table Resolves: https://github.com/definite/ibus-table-chinese/pull/12 - Use nicer values for symbol and status prompt Resolves: https://github.com/definite/ibus-table-chinese/pull/8 - update jyutping table; add cantonyale table Resolves: https://github.com/definite/ibus-table-chinese/pull/11 - Update jyutping and cantonese tables Resolves: https://github.com/definite/ibus-table-chinese/pull/9 - Don’t index the databases in the post install - Resolves: rhbz#2047954 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Remove BuildRequirement of cmake-fedora - Fix build on rawhide - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - bump release number to force a rebuild with newer ibus-table >= 1.10.0 - Update to 1.8.3 - Turned cangjie 3 and 5's DYNAMIC_ADJUST to FALSE Resolves: https://github.com/definite/ibus-table-chinese/pull/14 - Add SUGGESTION_MODE = TRUE to the wubi tables Resolves: https://github.com/definite/ibus-table-chinese/pull/15 - Support pinyin mode also for stroke5 table Resolves: https://github.com/definite/ibus-table-chinese/pull/12 - Use nicer values for symbol and status prompt Resolves: https://github.com/definite/ibus-table-chinese/pull/8 - update jyutping table; add cantonyale table Resolves: https://github.com/definite/ibus-table-chinese/pull/11 - Update jyutping and cantonese tables Resolves: https://github.com/definite/ibus-table-chinese/pull/9 - Don’t index the databases in the post install - Resolves: rhbz#2047954 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Remove BuildRequirement of cmake-fedora - Fix build on rawhide - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - bump release number to force a rebuild with newer ibus-table >= 1.10.0 - Update to 1.8.3 - Turned cangjie 3 and 5's DYNAMIC_ADJUST to FALSE Resolves: https://github.com/definite/ibus-table-chinese/pull/14 - Add SUGGESTION_MODE = TRUE to the wubi tables Resolves: https://github.com/definite/ibus-table-chinese/pull/15 - Support pinyin mode also for stroke5 table Resolves: https://github.com/definite/ibus-table-chinese/pull/12 - Use nicer values for symbol and status prompt Resolves: https://github.com/definite/ibus-table-chinese/pull/8 - update jyutping table; add cantonyale table Resolves: https://github.com/definite/ibus-table-chinese/pull/11 - Update jyutping and cantonese tables Resolves: https://github.com/definite/ibus-table-chinese/pull/9 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: rhbz#1974636 Fix license tag - Resolves: rhbz#1974636 Delete ibus write-cache in scriptlet - Improve CI tests and add gating.yaml - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 2.11.0 - Use sensitivity feature of buttons in the setup tool tab where shortcuts are defined - Don’t let dialog action area of setup tool expand. - Improve the setup tool to make it possible to enter multi-line expansions of shortcuts - Resolves https://github.com/mike-fabian/ibus-typing-booster/issues/158 - Elide extremely long candidates in the lookup table in the middle. - If a candidate contains newlines, replace the newlines with arrows in the lookup table. - If a commit string contains new-lines, commit it in several chunks and forward Return between the chunks. - Update emoji annotations from CLDR - Put the remote icon back in emoji-picker.appdata.xml, it was a false positive by appstreamcli - Translation update from Weblate (pt_PT updated, 100% complete now) - Skip the inscript2 test cases if these transliterations are not available. - Remove gnome-desktop-testing and ibus-desktop-testing from the requires of the ibus-typing-booster-tests subpackage - Use the voikko build requires only for Fedora. They are only needed to run the voikko test cases during build. - Update to 2.10.5 - Run the voikko tests only for libvoikko version >= 4.3 - Adapt voikko test cases to the newest voikko version libvoikko-4.3-3, python3-libvoikko-4.3-3, voikko-fi-2.4-3 - Log a warning when language is “fi” and “import libvoikko” failed - Return an empty list [] in spellcheck_suggest_voikko() when libvoikko was not imported - Update emoji annotations from CLDR, switching “no” and “nb” See: https://unicode-org.atlassian.net/browse/CLDR-2698 - Remove icon in emoji-picker.appdata.xml (to avoid warnings from appstream-util and appstreamcli). - Use “BuildRequires: appstream” only on Fedora - Update to 2.10.4 - Use “from unittest import mock” instead of just “import mock”. - Update emoji annotations from CLDR - Translation update from Weblate for zh_CN (still 100% complete) - Resolves: RHEL-39398 ship ibus-gtk4 in RHEL 9 CRB - Resolves: RHEL-1616 Fix RESOURCE_LEAK in OpenScanHub - Resolves: RHEL-1616 Make ibus-tests to depend on ibus-libs - Resolves: RHEL-1616 Space, back-spc, enter key not working on gtk4 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - ICU-22973 Fix buffer overflow by using CharString Resolves: RHEL-96664 - Rebase to JSS 5.7.0 - Rebase to JSS 5.7.0-beta1 - Rebase to JSS 5.6.0 - Rebase to JSS 5.6.0-alpha1 - Rebase to JSS 5.5.0 - Rebuild with side tag - Add Obsoletes/Conflicts for idm-tomcatjss - Rebuild with side tag - Rebase to JSS 5.5.0-alpha3 - Rebase to JSS 5.7.0 - Rebase to JSS 5.7.0-beta1 - Rebase to JSS 5.6.0 - Rebase to JSS 5.6.0-alpha1 - Rebase to JSS 5.5.0 - Rebuild with side tag - Add Obsoletes/Conflicts for idm-tomcatjss - Rebuild with side tag - Rebase to JSS 5.5.0-alpha3 - Rebase to LDAP SDK 5.6.0 - Rebase to LDAP SDK 5.6.0-alpha1 - Rebase to LDAP SDK 5.5.0 - Rebase to LDAP SDK 5.5.0-alpha4 - Rebase to LDAP SDK 5.4.0 - Rebase to PKI 11.7.1 - Rebase to PKI 11.7.0 - Rebase to PKI 11.7.0-beta1 - Drop pki-est subpackage - Use external runtime dependencies - Rebase to PKI 11.6.0 - Rebase to PKI 11.6.0-alpha2 - Rebase to PKI 11.5.1 - Rebase to PKI 11.5.0 - RHEL-245465 CVE-2026-76561 pki-core: ExternalProcessConstraint executable allow-list - RHEL-248586 CVE-2026-80110 pki-core: ACLFilter sort order fix - Rebase to PKI 11.7.1 - Rebase to PKI 11.7.0 - Rebase to PKI 11.7.0-beta1 - Drop pki-est subpackage - Use external runtime dependencies - Rebase to PKI 11.6.0 - Rebase to PKI 11.6.0-alpha2 - Rebase to PKI 11.7.1 - Rebase to PKI 11.7.0 - Rebase to PKI 11.7.0-beta1 - Drop pki-est subpackage - Use external runtime dependencies - Rebase to PKI 11.6.0 - Rebase to PKI 11.6.0-alpha2 - Rebase to PKI 11.5.1 - Rebase to PKI 11.5.0 - RHEL-245465 CVE-2026-76561 pki-core: ExternalProcessConstraint executable allow-list - RHEL-248586 CVE-2026-80110 pki-core: ACLFilter sort order fix - Rebase to PKI 11.7.1 - Rebase to PKI 11.7.0 - Rebase to PKI 11.7.0-beta1 - Drop pki-est subpackage - Use external runtime dependencies - Rebase to PKI 11.6.0 - Rebase to PKI 11.6.0-alpha2 - Rebase to PKI 11.7.1 - Rebase to PKI 11.7.0 - Rebase to PKI 11.7.0-beta1 - Drop pki-est subpackage - Use external runtime dependencies - Rebase to PKI 11.6.0 - Rebase to PKI 11.6.0-alpha2 - Rebase to PKI 11.5.1 - Rebase to PKI 11.5.0 - RHEL-245465 CVE-2026-76561 pki-core: ExternalProcessConstraint executable allow-list - RHEL-248586 CVE-2026-80110 pki-core: ACLFilter sort order fix - Rebase to PKI 11.7.1 - Rebase to PKI 11.7.0 - Rebase to PKI 11.7.0-beta1 - Drop pki-est subpackage - Use external runtime dependencies - Rebase to PKI 11.6.0 - Rebase to PKI 11.6.0-alpha2 - Rebase to PKI 11.7.1 - Rebase to PKI 11.7.0 - Rebase to PKI 11.7.0-beta1 - Drop pki-est subpackage - Use external runtime dependencies - Rebase to PKI 11.6.0 - Rebase to PKI 11.6.0-alpha2 - Rebase to PKI 11.5.1 - Rebase to PKI 11.5.0 - RHEL-245465 CVE-2026-76561 pki-core: ExternalProcessConstraint executable allow-list - RHEL-248586 CVE-2026-80110 pki-core: ACLFilter sort order fix - Rebase to PKI 11.7.1 - Rebase to PKI 11.7.0 - Rebase to PKI 11.7.0-beta1 - Drop pki-est subpackage - Use external runtime dependencies - Rebase to PKI 11.6.0 - Rebase to PKI 11.6.0-alpha2 - Rebase to PKI 11.7.1 - Rebase to PKI 11.7.0 - Rebase to PKI 11.7.0-beta1 - Drop pki-est subpackage - Use external runtime dependencies - Rebase to PKI 11.6.0 - Rebase to PKI 11.6.0-alpha2 - Rebase to PKI 11.5.1 - Rebase to PKI 11.5.0 - RHEL-245465 CVE-2026-76561 pki-core: ExternalProcessConstraint executable allow-list - RHEL-248586 CVE-2026-80110 pki-core: ACLFilter sort order fix - Rebase to PKI 11.7.1 - Rebase to PKI 11.7.0 - Rebase to PKI 11.7.0-beta1 - Drop pki-est subpackage - Use external runtime dependencies - Rebase to PKI 11.6.0 - Rebase to PKI 11.6.0-alpha2 - Rebase to PKI 11.7.1 - Rebase to PKI 11.7.0 - Rebase to PKI 11.7.0-beta1 - Drop pki-est subpackage - Use external runtime dependencies - Rebase to PKI 11.6.0 - Rebase to PKI 11.6.0-alpha2 - Rebase to PKI 11.5.1 - Rebase to PKI 11.5.0 - RHEL-245465 CVE-2026-76561 pki-core: ExternalProcessConstraint executable allow-list - RHEL-248586 CVE-2026-80110 pki-core: ACLFilter sort order fix - Rebase to PKI 11.7.1 - Rebase to PKI 11.7.0 - Rebase to PKI 11.7.0-beta1 - Drop pki-est subpackage - Use external runtime dependencies - Rebase to PKI 11.6.0 - Rebase to PKI 11.6.0-alpha2 - Rebase to PKI 11.7.1 - Rebase to PKI 11.7.0 - Rebase to PKI 11.7.0-beta1 - Drop pki-est subpackage - Use external runtime dependencies - Rebase to PKI 11.6.0 - Rebase to PKI 11.6.0-alpha2 - Rebase to PKI 11.5.1 - Rebase to PKI 11.5.0 - RHEL-245465 CVE-2026-76561 pki-core: ExternalProcessConstraint executable allow-list - RHEL-248586 CVE-2026-80110 pki-core: ACLFilter sort order fix - Rebase to PKI 11.7.1 - Rebase to PKI 11.7.0 - Rebase to PKI 11.7.0-beta1 - Drop pki-est subpackage - Use external runtime dependencies - Rebase to PKI 11.6.0 - Rebase to PKI 11.6.0-alpha2 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Touch a couple autoconf related files to prevent undesired rebuilding if %configure changes one or more configure files. - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Upgrade to 2.3.0 (#1764345, #1772703) - new version - new version - new version - Build Ignition with GOEXPERIMENT=strictfipsruntime - Ignition-validate non-FIPS - new version - New release - Re-sync with upstream changes adding ignition-grub subpackage and a few minor changes - New release - New release - Update ignition-edge commit to support FIPS - https://github.com/fedora-iot/ignition-edge/pull/2 - Rebuild of 2.19.0 with a newer golang - new version - new version - new version - Build Ignition with GOEXPERIMENT=strictfipsruntime - Ignition-validate non-FIPS - new version - New release - Re-sync with upstream changes adding ignition-grub subpackage and a few minor changes - New release - New release - Update ignition-edge commit to support FIPS - https://github.com/fedora-iot/ignition-edge/pull/2 - Rebuild of 2.19.0 with a newer golang - new version - new version - new version - Build Ignition with GOEXPERIMENT=strictfipsruntime - Ignition-validate non-FIPS - new version - New release - Re-sync with upstream changes adding ignition-grub subpackage and a few minor changes - New release - New release - Update ignition-edge commit to support FIPS - https://github.com/fedora-iot/ignition-edge/pull/2 - Rebuild of 2.19.0 with a newer golang - new version - new version - new version - Build Ignition with GOEXPERIMENT=strictfipsruntime - Ignition-validate non-FIPS - new version - New release - Re-sync with upstream changes adding ignition-grub subpackage and a few minor changes - New release - New release - Update ignition-edge commit to support FIPS - https://github.com/fedora-iot/ignition-edge/pull/2 - Rebuild of 2.19.0 with a newer golang + iio-sensor-proxy-3.3-1 - Update to 3.3 - Resolves: rhbz#1993769 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 + iio-sensor-proxy-3.1-1 - Update to 3.1 - Resolves: rhbz#1971625 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild + iio-sensor-proxy-3.0-1 - Update to 3.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild + iio-sensor-proxy-2.8-1 - Update to 2.8 - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release 3.1.2 - Rebuilt for Python 3.10 - Add main package as dependency to python package. - Update spec per reviewer comments. - Update to 3.0.2. - Initial packaging. - Rebuilt for gating testing - Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331 - Rebase to upstream release v61.0 - Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331 - bump release to rebuild in sidetag - Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331 - bump release to rebuild in sidetag - Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331 - Rebase to upstream release v60.0 - Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331 - Fix pyverbs tests - Resolves: RHEL-107929, RHEL-107930 - Rebase to upstream release v57.0 - Resolves: RHEL-76570, RHEL-45644, RHEL-72077, RHEL-68506, RHEL-94449 - Fix data corruption in bnxt_re - Resolves: RHEL-89179 - Rebase to upstream release v54.0 - Resolves: RHEL-52886, RHEL-54647, RHEL-51876 - Rebase to upstream release v51.0 - Resolves: RHEL-24473, RHEL-23180 - Debrand for AlmaLinux - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Disable multi TTY handler when running in SSH session (#1951577) (mkolman) Resolves: rhbz#1951577 - Add gnome-kiosk to window managers usable by initial-setup (#1962198) (vponcova) Resolves: rhbz#1962198 - Remove old failing pre scriptlet (mkolman) - Include scripts in the updates image (vponcova) - Drop build time dependency on the anaconda package (mkolman) - Load the product configuration files (vponcova) - Clean up the code (vponcova) - Add BuildRequires: make (tstellar) - Fixup version number in setup.py (mkolman) - Drop python-nose from the dependencies (#1916799) (vponcova) - Add the makeupdates script (vponcova) - Remove deprecated support for add-ons (vponcova) - Don't run installation tasks of add-ons in a meta task (vponcova) - Migrate COPR builds from Jenkins to Packit (jkonecny) - Add documentation for the new test solution (jkonecny) - Add support for custom Anaconda COPR repository (jkonecny) - Use `make test` to run TMT tests locally (jkonecny) - Add TMT configuration to get Anaconda COPR build (jkonecny) - Add Packit support for initial-setup (jkonecny) - Update and use setup.py for archive creation (jkonecny) - Fix ChangeLog generation in Makefile (jkonecny) - Adapt to category title translation fix in Anaconda (mkolman) - Debrand for AlmaLinux - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Disable multi TTY handler when running in SSH session (#1951577) (mkolman) Resolves: rhbz#1951577 - Add gnome-kiosk to window managers usable by initial-setup (#1962198) (vponcova) Resolves: rhbz#1962198 - Remove old failing pre scriptlet (mkolman) - Include scripts in the updates image (vponcova) - Drop build time dependency on the anaconda package (mkolman) - Load the product configuration files (vponcova) - Clean up the code (vponcova) - Add BuildRequires: make (tstellar) - Fixup version number in setup.py (mkolman) - Drop python-nose from the dependencies (#1916799) (vponcova) - Add the makeupdates script (vponcova) - Remove deprecated support for add-ons (vponcova) - Don't run installation tasks of add-ons in a meta task (vponcova) - Migrate COPR builds from Jenkins to Packit (jkonecny) - Add documentation for the new test solution (jkonecny) - Add support for custom Anaconda COPR repository (jkonecny) - Use `make test` to run TMT tests locally (jkonecny) - Add TMT configuration to get Anaconda COPR build (jkonecny) - Add Packit support for initial-setup (jkonecny) - Update and use setup.py for archive creation (jkonecny) - Fix ChangeLog generation in Makefile (jkonecny) - Adapt to category title translation fix in Anaconda (mkolman) - Stripping extra rpath again - Using system build flags - Sync to Fedora branch - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Removed libgdl dependency - Enable gspell - Don't install development files for bundled 2geom - Update to 1.1 - Resolves: #1958287 Rebuild due to updated poppler - Resolves: #1958287 Rebuild due to updated poppler - Fix rhbz#1956875 - extra rpath - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Stripping extra rpath again - Using system build flags - Sync to Fedora branch - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Removed libgdl dependency - Enable gspell - Don't install development files for bundled 2geom - Update to 1.1 - Resolves: #1958287 Rebuild due to updated poppler - Resolves: #1958287 Rebuild due to updated poppler - Fix rhbz#1956875 - extra rpath - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Stripping extra rpath again - Using system build flags - Sync to Fedora branch - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Removed libgdl dependency - Enable gspell - Don't install development files for bundled 2geom - Update to 1.1 - Resolves: #1958287 Rebuild due to updated poppler - Resolves: #1958287 Rebuild due to updated poppler - Fix rhbz#1956875 - extra rpath - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - fix hang when BLKTRACESETUP fails and "-o -" is used - Related RHEL-54661 - Related: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-155037 Pagure #9953: Adding a group with 32Bit Idrange fails. [rhel-9.8.z] - Resolves: RHEL-153146 IdM password policy Min lifetime is not enforced when high minlife is set [rhel-9.8.z] - Resolves: RHEL-168047 ipa ca-show ipa --all failing to list RSN version - RHEL-148282 ipa-replica-conncheck fails with "an internal error has occured" - RHEL-148481 Pruning is enabled by default with RSN on RHEL 9.8 - RHEL-147191 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - RHEL-146185 Names of domains from a trusted forest should be compared case-insentive - RHEL-146184 ipa-advise client script requires keytab (should just require root access on client system) - RHEL-145854 Include latest fixes in python3-ipatests package - RHEL-143684 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - RHEL-141500 ipa use systemd-sysusers - Resolves: RHEL-141446 [RFE] Command that retrieve and install new CA certificates - Resolves: RHEL-140584 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-141297 Memory leaks in IPA plugins - Resolves: RHEL-141054 IPA fails to sign zone - Resolves: RHEL-138570 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-138473 Include latest fixes in python3-ipatests package - Resolves: RHEL-137585 ipa-server-upgrade succeeds but ipactl restart fails due to ipa-dnskeysyncd service failure caused by SELinux AVC denial on RHEL 9.8 - Resolves: RHEL-134542 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-134540 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-134196 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-132334 Include latest fixes in python3-ipatests package - Resolves: RHEL-129224 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-126974 Minor typo in ipa_idrange_fix.py - Resolves: RHEL-120954 Rebase ipa to latest 4.13.x version for RHEL 9.8 - Resolves: RHEL-128238 [RFE] Support storing LWCA private keys on an HSM [rhel-9] - Resolves: RHEL-126515 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM [rhel-9] - Resolves: RHEL-73399 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-128241 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier [rhel-9] - Resolves: RHEL-126514 [RFE] ipa-client-automount should have an option to include domain of the machine. [rhel-9] - Resolves: RHEL-124171 Include latest fixes in python3-ipatests package - Resolves: RHEL-120514 Include fixes in python3-ipatests [rhel-9.8] - Resolves: RHEL-118609 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114548 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-107483 ipa-ca-install fails on CA-less replica due to inadequate key usage in master certificate - RHEL-218866 CVE-2026-18147 ipa: FreeIPA/IdM: Cross-Site Scripting vulnerability allows arbitrary code execution via crafted URL [rhel-9.8.z] - RHEL-245474 CVE-2026-76578 ipa: FreeIPA: unauthenticated LDAP client can obtain administrator credentials via the self-managed-token ACI [rhel-9.8.z] - RHEL-248206 CVE-2026-79678 ipa: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service [rhel-9.8.z] - RHEL-245627 CVE-2026-19550 ipa: FreeIPA: trust-fetch-domains uses trust-read ACI to gate a privileged AD trust refresh, allowing unauthorized LDAP writes [rhel-9.8.z] - RHEL-240898 CVE-2026-13097 ipa: Privilege escalation via krbCanonicalName manipulation due to realm-unaware uniqueness enforcement in FreeIPA LDAP datastore [rhel-9.8.z] - RHEL-240830 CVE-2026-11861 ipa: FreeIPA: Obtaining TGS with impersonating cname through trust relationships [rhel-9.8.z] - RHEL-240815 CVE-2026-73197 ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read [rhel-9.8.z] - RHEL-240804 CVE-2026-73198 ipa: FreeIPA: Unauthenticated DoS in `/ipa/i18n_messages` via Unbounded Request Body Read [rhel-9.8.z] - RHEL-240767 ipa-migrate tool is renaming host records & host info in automount information [rhel-9.8.z] - RHEL-238677 ipa-migrate: require Replication Administrator privilege [rhel-9.8.z] - RHEL-238674 ipa-epn: drop_privileges method is mixing uid and gid [rhel-9.8.z] - RHEL-238527 ipa env: support only simple * wildcard [rhel-9.8.z] - Related: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-155037 Pagure #9953: Adding a group with 32Bit Idrange fails. [rhel-9.8.z] - Resolves: RHEL-153146 IdM password policy Min lifetime is not enforced when high minlife is set [rhel-9.8.z] - Resolves: RHEL-168047 ipa ca-show ipa --all failing to list RSN version - RHEL-148282 ipa-replica-conncheck fails with "an internal error has occured" - RHEL-148481 Pruning is enabled by default with RSN on RHEL 9.8 - RHEL-147191 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - RHEL-146185 Names of domains from a trusted forest should be compared case-insentive - RHEL-146184 ipa-advise client script requires keytab (should just require root access on client system) - RHEL-145854 Include latest fixes in python3-ipatests package - RHEL-143684 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - RHEL-141500 ipa use systemd-sysusers - Resolves: RHEL-141446 [RFE] Command that retrieve and install new CA certificates - Resolves: RHEL-140584 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-141297 Memory leaks in IPA plugins - Resolves: RHEL-141054 IPA fails to sign zone - Resolves: RHEL-138570 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-138473 Include latest fixes in python3-ipatests package - Resolves: RHEL-137585 ipa-server-upgrade succeeds but ipactl restart fails due to ipa-dnskeysyncd service failure caused by SELinux AVC denial on RHEL 9.8 - Resolves: RHEL-134542 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-134540 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-134196 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-132334 Include latest fixes in python3-ipatests package - Resolves: RHEL-129224 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-126974 Minor typo in ipa_idrange_fix.py - Resolves: RHEL-120954 Rebase ipa to latest 4.13.x version for RHEL 9.8 - Resolves: RHEL-128238 [RFE] Support storing LWCA private keys on an HSM [rhel-9] - Resolves: RHEL-126515 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM [rhel-9] - Resolves: RHEL-73399 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-128241 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier [rhel-9] - Resolves: RHEL-126514 [RFE] ipa-client-automount should have an option to include domain of the machine. [rhel-9] - Resolves: RHEL-124171 Include latest fixes in python3-ipatests package - Resolves: RHEL-120514 Include fixes in python3-ipatests [rhel-9.8] - Resolves: RHEL-118609 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114548 Rebase Samba to the latest 4.23.x release - Related: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-155037 Pagure #9953: Adding a group with 32Bit Idrange fails. [rhel-9.8.z] - Resolves: RHEL-153146 IdM password policy Min lifetime is not enforced when high minlife is set [rhel-9.8.z] - Resolves: RHEL-168047 ipa ca-show ipa --all failing to list RSN version - RHEL-148282 ipa-replica-conncheck fails with "an internal error has occured" - RHEL-148481 Pruning is enabled by default with RSN on RHEL 9.8 - RHEL-147191 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - RHEL-146185 Names of domains from a trusted forest should be compared case-insentive - RHEL-146184 ipa-advise client script requires keytab (should just require root access on client system) - RHEL-145854 Include latest fixes in python3-ipatests package - RHEL-143684 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - RHEL-141500 ipa use systemd-sysusers - Resolves: RHEL-141446 [RFE] Command that retrieve and install new CA certificates - Resolves: RHEL-140584 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-141297 Memory leaks in IPA plugins - Resolves: RHEL-141054 IPA fails to sign zone - Resolves: RHEL-138570 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-138473 Include latest fixes in python3-ipatests package - Resolves: RHEL-137585 ipa-server-upgrade succeeds but ipactl restart fails due to ipa-dnskeysyncd service failure caused by SELinux AVC denial on RHEL 9.8 - Resolves: RHEL-134542 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-134540 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-134196 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-132334 Include latest fixes in python3-ipatests package - Resolves: RHEL-129224 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-126974 Minor typo in ipa_idrange_fix.py - Resolves: RHEL-120954 Rebase ipa to latest 4.13.x version for RHEL 9.8 - Resolves: RHEL-128238 [RFE] Support storing LWCA private keys on an HSM [rhel-9] - Resolves: RHEL-126515 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM [rhel-9] - Resolves: RHEL-73399 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-128241 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier [rhel-9] - Resolves: RHEL-126514 [RFE] ipa-client-automount should have an option to include domain of the machine. [rhel-9] - Resolves: RHEL-124171 Include latest fixes in python3-ipatests package - Resolves: RHEL-120514 Include fixes in python3-ipatests [rhel-9.8] - Resolves: RHEL-118609 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114548 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-107483 ipa-ca-install fails on CA-less replica due to inadequate key usage in master certificate - RHEL-218866 CVE-2026-18147 ipa: FreeIPA/IdM: Cross-Site Scripting vulnerability allows arbitrary code execution via crafted URL [rhel-9.8.z] - RHEL-245474 CVE-2026-76578 ipa: FreeIPA: unauthenticated LDAP client can obtain administrator credentials via the self-managed-token ACI [rhel-9.8.z] - RHEL-248206 CVE-2026-79678 ipa: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service [rhel-9.8.z] - RHEL-245627 CVE-2026-19550 ipa: FreeIPA: trust-fetch-domains uses trust-read ACI to gate a privileged AD trust refresh, allowing unauthorized LDAP writes [rhel-9.8.z] - RHEL-240898 CVE-2026-13097 ipa: Privilege escalation via krbCanonicalName manipulation due to realm-unaware uniqueness enforcement in FreeIPA LDAP datastore [rhel-9.8.z] - RHEL-240830 CVE-2026-11861 ipa: FreeIPA: Obtaining TGS with impersonating cname through trust relationships [rhel-9.8.z] - RHEL-240815 CVE-2026-73197 ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read [rhel-9.8.z] - RHEL-240804 CVE-2026-73198 ipa: FreeIPA: Unauthenticated DoS in `/ipa/i18n_messages` via Unbounded Request Body Read [rhel-9.8.z] - RHEL-240767 ipa-migrate tool is renaming host records & host info in automount information [rhel-9.8.z] - RHEL-238677 ipa-migrate: require Replication Administrator privilege [rhel-9.8.z] - RHEL-238674 ipa-epn: drop_privileges method is mixing uid and gid [rhel-9.8.z] - RHEL-238527 ipa env: support only simple * wildcard [rhel-9.8.z] - Related: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-155037 Pagure #9953: Adding a group with 32Bit Idrange fails. [rhel-9.8.z] - Resolves: RHEL-153146 IdM password policy Min lifetime is not enforced when high minlife is set [rhel-9.8.z] - Resolves: RHEL-168047 ipa ca-show ipa --all failing to list RSN version - RHEL-148282 ipa-replica-conncheck fails with "an internal error has occured" - RHEL-148481 Pruning is enabled by default with RSN on RHEL 9.8 - RHEL-147191 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - RHEL-146185 Names of domains from a trusted forest should be compared case-insentive - RHEL-146184 ipa-advise client script requires keytab (should just require root access on client system) - RHEL-145854 Include latest fixes in python3-ipatests package - RHEL-143684 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - RHEL-141500 ipa use systemd-sysusers - Resolves: RHEL-141446 [RFE] Command that retrieve and install new CA certificates - Resolves: RHEL-140584 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-141297 Memory leaks in IPA plugins - Resolves: RHEL-141054 IPA fails to sign zone - Resolves: RHEL-138570 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-138473 Include latest fixes in python3-ipatests package - Resolves: RHEL-137585 ipa-server-upgrade succeeds but ipactl restart fails due to ipa-dnskeysyncd service failure caused by SELinux AVC denial on RHEL 9.8 - Resolves: RHEL-134542 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-134540 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-134196 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-132334 Include latest fixes in python3-ipatests package - Resolves: RHEL-129224 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-126974 Minor typo in ipa_idrange_fix.py - Resolves: RHEL-120954 Rebase ipa to latest 4.13.x version for RHEL 9.8 - Resolves: RHEL-128238 [RFE] Support storing LWCA private keys on an HSM [rhel-9] - Resolves: RHEL-126515 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM [rhel-9] - Resolves: RHEL-73399 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-128241 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier [rhel-9] - Resolves: RHEL-126514 [RFE] ipa-client-automount should have an option to include domain of the machine. [rhel-9] - Resolves: RHEL-124171 Include latest fixes in python3-ipatests package - Resolves: RHEL-120514 Include fixes in python3-ipatests [rhel-9.8] - Resolves: RHEL-118609 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114548 Rebase Samba to the latest 4.23.x release - Related: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-155037 Pagure #9953: Adding a group with 32Bit Idrange fails. [rhel-9.8.z] - Resolves: RHEL-153146 IdM password policy Min lifetime is not enforced when high minlife is set [rhel-9.8.z] - Resolves: RHEL-168047 ipa ca-show ipa --all failing to list RSN version - RHEL-148282 ipa-replica-conncheck fails with "an internal error has occured" - RHEL-148481 Pruning is enabled by default with RSN on RHEL 9.8 - RHEL-147191 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - RHEL-146185 Names of domains from a trusted forest should be compared case-insentive - RHEL-146184 ipa-advise client script requires keytab (should just require root access on client system) - RHEL-145854 Include latest fixes in python3-ipatests package - RHEL-143684 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - RHEL-141500 ipa use systemd-sysusers - Resolves: RHEL-141446 [RFE] Command that retrieve and install new CA certificates - Resolves: RHEL-140584 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-141297 Memory leaks in IPA plugins - Resolves: RHEL-141054 IPA fails to sign zone - Resolves: RHEL-138570 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-138473 Include latest fixes in python3-ipatests package - Resolves: RHEL-137585 ipa-server-upgrade succeeds but ipactl restart fails due to ipa-dnskeysyncd service failure caused by SELinux AVC denial on RHEL 9.8 - Resolves: RHEL-134542 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-134540 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-134196 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-132334 Include latest fixes in python3-ipatests package - Resolves: RHEL-129224 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-126974 Minor typo in ipa_idrange_fix.py - Resolves: RHEL-120954 Rebase ipa to latest 4.13.x version for RHEL 9.8 - Resolves: RHEL-128238 [RFE] Support storing LWCA private keys on an HSM [rhel-9] - Resolves: RHEL-126515 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM [rhel-9] - Resolves: RHEL-73399 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-128241 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier [rhel-9] - Resolves: RHEL-126514 [RFE] ipa-client-automount should have an option to include domain of the machine. [rhel-9] - Resolves: RHEL-124171 Include latest fixes in python3-ipatests package - Resolves: RHEL-120514 Include fixes in python3-ipatests [rhel-9.8] - Resolves: RHEL-118609 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114548 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-107483 ipa-ca-install fails on CA-less replica due to inadequate key usage in master certificate - RHEL-218866 CVE-2026-18147 ipa: FreeIPA/IdM: Cross-Site Scripting vulnerability allows arbitrary code execution via crafted URL [rhel-9.8.z] - RHEL-245474 CVE-2026-76578 ipa: FreeIPA: unauthenticated LDAP client can obtain administrator credentials via the self-managed-token ACI [rhel-9.8.z] - RHEL-248206 CVE-2026-79678 ipa: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service [rhel-9.8.z] - RHEL-245627 CVE-2026-19550 ipa: FreeIPA: trust-fetch-domains uses trust-read ACI to gate a privileged AD trust refresh, allowing unauthorized LDAP writes [rhel-9.8.z] - RHEL-240898 CVE-2026-13097 ipa: Privilege escalation via krbCanonicalName manipulation due to realm-unaware uniqueness enforcement in FreeIPA LDAP datastore [rhel-9.8.z] - RHEL-240830 CVE-2026-11861 ipa: FreeIPA: Obtaining TGS with impersonating cname through trust relationships [rhel-9.8.z] - RHEL-240815 CVE-2026-73197 ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read [rhel-9.8.z] - RHEL-240804 CVE-2026-73198 ipa: FreeIPA: Unauthenticated DoS in `/ipa/i18n_messages` via Unbounded Request Body Read [rhel-9.8.z] - RHEL-240767 ipa-migrate tool is renaming host records & host info in automount information [rhel-9.8.z] - RHEL-238677 ipa-migrate: require Replication Administrator privilege [rhel-9.8.z] - RHEL-238674 ipa-epn: drop_privileges method is mixing uid and gid [rhel-9.8.z] - RHEL-238527 ipa env: support only simple * wildcard [rhel-9.8.z] - Related: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-155037 Pagure #9953: Adding a group with 32Bit Idrange fails. [rhel-9.8.z] - Resolves: RHEL-153146 IdM password policy Min lifetime is not enforced when high minlife is set [rhel-9.8.z] - Resolves: RHEL-168047 ipa ca-show ipa --all failing to list RSN version - RHEL-148282 ipa-replica-conncheck fails with "an internal error has occured" - RHEL-148481 Pruning is enabled by default with RSN on RHEL 9.8 - RHEL-147191 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - RHEL-146185 Names of domains from a trusted forest should be compared case-insentive - RHEL-146184 ipa-advise client script requires keytab (should just require root access on client system) - RHEL-145854 Include latest fixes in python3-ipatests package - RHEL-143684 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - RHEL-141500 ipa use systemd-sysusers - Resolves: RHEL-141446 [RFE] Command that retrieve and install new CA certificates - Resolves: RHEL-140584 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-141297 Memory leaks in IPA plugins - Resolves: RHEL-141054 IPA fails to sign zone - Resolves: RHEL-138570 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-138473 Include latest fixes in python3-ipatests package - Resolves: RHEL-137585 ipa-server-upgrade succeeds but ipactl restart fails due to ipa-dnskeysyncd service failure caused by SELinux AVC denial on RHEL 9.8 - Resolves: RHEL-134542 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-134540 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-134196 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-132334 Include latest fixes in python3-ipatests package - Resolves: RHEL-129224 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-126974 Minor typo in ipa_idrange_fix.py - Resolves: RHEL-120954 Rebase ipa to latest 4.13.x version for RHEL 9.8 - Resolves: RHEL-128238 [RFE] Support storing LWCA private keys on an HSM [rhel-9] - Resolves: RHEL-126515 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM [rhel-9] - Resolves: RHEL-73399 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-128241 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier [rhel-9] - Resolves: RHEL-126514 [RFE] ipa-client-automount should have an option to include domain of the machine. [rhel-9] - Resolves: RHEL-124171 Include latest fixes in python3-ipatests package - Resolves: RHEL-120514 Include fixes in python3-ipatests [rhel-9.8] - Resolves: RHEL-118609 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114548 Rebase Samba to the latest 4.23.x release - Related: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-155037 Pagure #9953: Adding a group with 32Bit Idrange fails. [rhel-9.8.z] - Resolves: RHEL-153146 IdM password policy Min lifetime is not enforced when high minlife is set [rhel-9.8.z] - Resolves: RHEL-168047 ipa ca-show ipa --all failing to list RSN version - RHEL-148282 ipa-replica-conncheck fails with "an internal error has occured" - RHEL-148481 Pruning is enabled by default with RSN on RHEL 9.8 - RHEL-147191 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - RHEL-146185 Names of domains from a trusted forest should be compared case-insentive - RHEL-146184 ipa-advise client script requires keytab (should just require root access on client system) - RHEL-145854 Include latest fixes in python3-ipatests package - RHEL-143684 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - RHEL-141500 ipa use systemd-sysusers - Resolves: RHEL-141446 [RFE] Command that retrieve and install new CA certificates - Resolves: RHEL-140584 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-141297 Memory leaks in IPA plugins - Resolves: RHEL-141054 IPA fails to sign zone - Resolves: RHEL-138570 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-138473 Include latest fixes in python3-ipatests package - Resolves: RHEL-137585 ipa-server-upgrade succeeds but ipactl restart fails due to ipa-dnskeysyncd service failure caused by SELinux AVC denial on RHEL 9.8 - Resolves: RHEL-134542 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-134540 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-134196 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-132334 Include latest fixes in python3-ipatests package - Resolves: RHEL-129224 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-126974 Minor typo in ipa_idrange_fix.py - Resolves: RHEL-120954 Rebase ipa to latest 4.13.x version for RHEL 9.8 - Resolves: RHEL-128238 [RFE] Support storing LWCA private keys on an HSM [rhel-9] - Resolves: RHEL-126515 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM [rhel-9] - Resolves: RHEL-73399 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-128241 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier [rhel-9] - Resolves: RHEL-126514 [RFE] ipa-client-automount should have an option to include domain of the machine. [rhel-9] - Resolves: RHEL-124171 Include latest fixes in python3-ipatests package - Resolves: RHEL-120514 Include fixes in python3-ipatests [rhel-9.8] - Resolves: RHEL-118609 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114548 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-107483 ipa-ca-install fails on CA-less replica due to inadequate key usage in master certificate - RHEL-218866 CVE-2026-18147 ipa: FreeIPA/IdM: Cross-Site Scripting vulnerability allows arbitrary code execution via crafted URL [rhel-9.8.z] - RHEL-245474 CVE-2026-76578 ipa: FreeIPA: unauthenticated LDAP client can obtain administrator credentials via the self-managed-token ACI [rhel-9.8.z] - RHEL-248206 CVE-2026-79678 ipa: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service [rhel-9.8.z] - RHEL-245627 CVE-2026-19550 ipa: FreeIPA: trust-fetch-domains uses trust-read ACI to gate a privileged AD trust refresh, allowing unauthorized LDAP writes [rhel-9.8.z] - RHEL-240898 CVE-2026-13097 ipa: Privilege escalation via krbCanonicalName manipulation due to realm-unaware uniqueness enforcement in FreeIPA LDAP datastore [rhel-9.8.z] - RHEL-240830 CVE-2026-11861 ipa: FreeIPA: Obtaining TGS with impersonating cname through trust relationships [rhel-9.8.z] - RHEL-240815 CVE-2026-73197 ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read [rhel-9.8.z] - RHEL-240804 CVE-2026-73198 ipa: FreeIPA: Unauthenticated DoS in `/ipa/i18n_messages` via Unbounded Request Body Read [rhel-9.8.z] - RHEL-240767 ipa-migrate tool is renaming host records & host info in automount information [rhel-9.8.z] - RHEL-238677 ipa-migrate: require Replication Administrator privilege [rhel-9.8.z] - RHEL-238674 ipa-epn: drop_privileges method is mixing uid and gid [rhel-9.8.z] - RHEL-238527 ipa env: support only simple * wildcard [rhel-9.8.z] - Related: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-155037 Pagure #9953: Adding a group with 32Bit Idrange fails. [rhel-9.8.z] - Resolves: RHEL-153146 IdM password policy Min lifetime is not enforced when high minlife is set [rhel-9.8.z] - Resolves: RHEL-168047 ipa ca-show ipa --all failing to list RSN version - RHEL-148282 ipa-replica-conncheck fails with "an internal error has occured" - RHEL-148481 Pruning is enabled by default with RSN on RHEL 9.8 - RHEL-147191 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - RHEL-146185 Names of domains from a trusted forest should be compared case-insentive - RHEL-146184 ipa-advise client script requires keytab (should just require root access on client system) - RHEL-145854 Include latest fixes in python3-ipatests package - RHEL-143684 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - RHEL-141500 ipa use systemd-sysusers - Resolves: RHEL-141446 [RFE] Command that retrieve and install new CA certificates - Resolves: RHEL-140584 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-141297 Memory leaks in IPA plugins - Resolves: RHEL-141054 IPA fails to sign zone - Resolves: RHEL-138570 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-138473 Include latest fixes in python3-ipatests package - Resolves: RHEL-137585 ipa-server-upgrade succeeds but ipactl restart fails due to ipa-dnskeysyncd service failure caused by SELinux AVC denial on RHEL 9.8 - Resolves: RHEL-134542 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-134540 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-134196 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-132334 Include latest fixes in python3-ipatests package - Resolves: RHEL-129224 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-126974 Minor typo in ipa_idrange_fix.py - Resolves: RHEL-120954 Rebase ipa to latest 4.13.x version for RHEL 9.8 - Resolves: RHEL-128238 [RFE] Support storing LWCA private keys on an HSM [rhel-9] - Resolves: RHEL-126515 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM [rhel-9] - Resolves: RHEL-73399 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-128241 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier [rhel-9] - Resolves: RHEL-126514 [RFE] ipa-client-automount should have an option to include domain of the machine. [rhel-9] - Resolves: RHEL-124171 Include latest fixes in python3-ipatests package - Resolves: RHEL-120514 Include fixes in python3-ipatests [rhel-9.8] - Resolves: RHEL-118609 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114548 Rebase Samba to the latest 4.23.x release - Related: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-155037 Pagure #9953: Adding a group with 32Bit Idrange fails. [rhel-9.8.z] - Resolves: RHEL-153146 IdM password policy Min lifetime is not enforced when high minlife is set [rhel-9.8.z] - Resolves: RHEL-168047 ipa ca-show ipa --all failing to list RSN version - RHEL-148282 ipa-replica-conncheck fails with "an internal error has occured" - RHEL-148481 Pruning is enabled by default with RSN on RHEL 9.8 - RHEL-147191 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - RHEL-146185 Names of domains from a trusted forest should be compared case-insentive - RHEL-146184 ipa-advise client script requires keytab (should just require root access on client system) - RHEL-145854 Include latest fixes in python3-ipatests package - RHEL-143684 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - RHEL-141500 ipa use systemd-sysusers - Resolves: RHEL-141446 [RFE] Command that retrieve and install new CA certificates - Resolves: RHEL-140584 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-141297 Memory leaks in IPA plugins - Resolves: RHEL-141054 IPA fails to sign zone - Resolves: RHEL-138570 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-138473 Include latest fixes in python3-ipatests package - Resolves: RHEL-137585 ipa-server-upgrade succeeds but ipactl restart fails due to ipa-dnskeysyncd service failure caused by SELinux AVC denial on RHEL 9.8 - Resolves: RHEL-134542 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-134540 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-134196 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-132334 Include latest fixes in python3-ipatests package - Resolves: RHEL-129224 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-126974 Minor typo in ipa_idrange_fix.py - Resolves: RHEL-120954 Rebase ipa to latest 4.13.x version for RHEL 9.8 - Resolves: RHEL-128238 [RFE] Support storing LWCA private keys on an HSM [rhel-9] - Resolves: RHEL-126515 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM [rhel-9] - Resolves: RHEL-73399 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-128241 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier [rhel-9] - Resolves: RHEL-126514 [RFE] ipa-client-automount should have an option to include domain of the machine. [rhel-9] - Resolves: RHEL-124171 Include latest fixes in python3-ipatests package - Resolves: RHEL-120514 Include fixes in python3-ipatests [rhel-9.8] - Resolves: RHEL-118609 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114548 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-107483 ipa-ca-install fails on CA-less replica due to inadequate key usage in master certificate - RHEL-218866 CVE-2026-18147 ipa: FreeIPA/IdM: Cross-Site Scripting vulnerability allows arbitrary code execution via crafted URL [rhel-9.8.z] - RHEL-245474 CVE-2026-76578 ipa: FreeIPA: unauthenticated LDAP client can obtain administrator credentials via the self-managed-token ACI [rhel-9.8.z] - RHEL-248206 CVE-2026-79678 ipa: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service [rhel-9.8.z] - RHEL-245627 CVE-2026-19550 ipa: FreeIPA: trust-fetch-domains uses trust-read ACI to gate a privileged AD trust refresh, allowing unauthorized LDAP writes [rhel-9.8.z] - RHEL-240898 CVE-2026-13097 ipa: Privilege escalation via krbCanonicalName manipulation due to realm-unaware uniqueness enforcement in FreeIPA LDAP datastore [rhel-9.8.z] - RHEL-240830 CVE-2026-11861 ipa: FreeIPA: Obtaining TGS with impersonating cname through trust relationships [rhel-9.8.z] - RHEL-240815 CVE-2026-73197 ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read [rhel-9.8.z] - RHEL-240804 CVE-2026-73198 ipa: FreeIPA: Unauthenticated DoS in `/ipa/i18n_messages` via Unbounded Request Body Read [rhel-9.8.z] - RHEL-240767 ipa-migrate tool is renaming host records & host info in automount information [rhel-9.8.z] - RHEL-238677 ipa-migrate: require Replication Administrator privilege [rhel-9.8.z] - RHEL-238674 ipa-epn: drop_privileges method is mixing uid and gid [rhel-9.8.z] - RHEL-238527 ipa env: support only simple * wildcard [rhel-9.8.z] - Related: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-155037 Pagure #9953: Adding a group with 32Bit Idrange fails. [rhel-9.8.z] - Resolves: RHEL-153146 IdM password policy Min lifetime is not enforced when high minlife is set [rhel-9.8.z] - Resolves: RHEL-168047 ipa ca-show ipa --all failing to list RSN version - RHEL-148282 ipa-replica-conncheck fails with "an internal error has occured" - RHEL-148481 Pruning is enabled by default with RSN on RHEL 9.8 - RHEL-147191 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - RHEL-146185 Names of domains from a trusted forest should be compared case-insentive - RHEL-146184 ipa-advise client script requires keytab (should just require root access on client system) - RHEL-145854 Include latest fixes in python3-ipatests package - RHEL-143684 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - RHEL-141500 ipa use systemd-sysusers - Resolves: RHEL-141446 [RFE] Command that retrieve and install new CA certificates - Resolves: RHEL-140584 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-141297 Memory leaks in IPA plugins - Resolves: RHEL-141054 IPA fails to sign zone - Resolves: RHEL-138570 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-138473 Include latest fixes in python3-ipatests package - Resolves: RHEL-137585 ipa-server-upgrade succeeds but ipactl restart fails due to ipa-dnskeysyncd service failure caused by SELinux AVC denial on RHEL 9.8 - Resolves: RHEL-134542 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-134540 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-134196 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-132334 Include latest fixes in python3-ipatests package - Resolves: RHEL-129224 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-126974 Minor typo in ipa_idrange_fix.py - Resolves: RHEL-120954 Rebase ipa to latest 4.13.x version for RHEL 9.8 - Resolves: RHEL-128238 [RFE] Support storing LWCA private keys on an HSM [rhel-9] - Resolves: RHEL-126515 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM [rhel-9] - Resolves: RHEL-73399 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-128241 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier [rhel-9] - Resolves: RHEL-126514 [RFE] ipa-client-automount should have an option to include domain of the machine. [rhel-9] - Resolves: RHEL-124171 Include latest fixes in python3-ipatests package - Resolves: RHEL-120514 Include fixes in python3-ipatests [rhel-9.8] - Resolves: RHEL-118609 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114548 Rebase Samba to the latest 4.23.x release - Related: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-155037 Pagure #9953: Adding a group with 32Bit Idrange fails. [rhel-9.8.z] - Resolves: RHEL-153146 IdM password policy Min lifetime is not enforced when high minlife is set [rhel-9.8.z] - Resolves: RHEL-168047 ipa ca-show ipa --all failing to list RSN version - RHEL-148282 ipa-replica-conncheck fails with "an internal error has occured" - RHEL-148481 Pruning is enabled by default with RSN on RHEL 9.8 - RHEL-147191 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - RHEL-146185 Names of domains from a trusted forest should be compared case-insentive - RHEL-146184 ipa-advise client script requires keytab (should just require root access on client system) - RHEL-145854 Include latest fixes in python3-ipatests package - RHEL-143684 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - RHEL-141500 ipa use systemd-sysusers - Resolves: RHEL-141446 [RFE] Command that retrieve and install new CA certificates - Resolves: RHEL-140584 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-141297 Memory leaks in IPA plugins - Resolves: RHEL-141054 IPA fails to sign zone - Resolves: RHEL-138570 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-138473 Include latest fixes in python3-ipatests package - Resolves: RHEL-137585 ipa-server-upgrade succeeds but ipactl restart fails due to ipa-dnskeysyncd service failure caused by SELinux AVC denial on RHEL 9.8 - Resolves: RHEL-134542 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-134540 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-134196 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-132334 Include latest fixes in python3-ipatests package - Resolves: RHEL-129224 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-126974 Minor typo in ipa_idrange_fix.py - Resolves: RHEL-120954 Rebase ipa to latest 4.13.x version for RHEL 9.8 - Resolves: RHEL-128238 [RFE] Support storing LWCA private keys on an HSM [rhel-9] - Resolves: RHEL-126515 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM [rhel-9] - Resolves: RHEL-73399 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-128241 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier [rhel-9] - Resolves: RHEL-126514 [RFE] ipa-client-automount should have an option to include domain of the machine. [rhel-9] - Resolves: RHEL-124171 Include latest fixes in python3-ipatests package - Resolves: RHEL-120514 Include fixes in python3-ipatests [rhel-9.8] - Resolves: RHEL-118609 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114548 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-107483 ipa-ca-install fails on CA-less replica due to inadequate key usage in master certificate - RHEL-218866 CVE-2026-18147 ipa: FreeIPA/IdM: Cross-Site Scripting vulnerability allows arbitrary code execution via crafted URL [rhel-9.8.z] - RHEL-245474 CVE-2026-76578 ipa: FreeIPA: unauthenticated LDAP client can obtain administrator credentials via the self-managed-token ACI [rhel-9.8.z] - RHEL-248206 CVE-2026-79678 ipa: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service [rhel-9.8.z] - RHEL-245627 CVE-2026-19550 ipa: FreeIPA: trust-fetch-domains uses trust-read ACI to gate a privileged AD trust refresh, allowing unauthorized LDAP writes [rhel-9.8.z] - RHEL-240898 CVE-2026-13097 ipa: Privilege escalation via krbCanonicalName manipulation due to realm-unaware uniqueness enforcement in FreeIPA LDAP datastore [rhel-9.8.z] - RHEL-240830 CVE-2026-11861 ipa: FreeIPA: Obtaining TGS with impersonating cname through trust relationships [rhel-9.8.z] - RHEL-240815 CVE-2026-73197 ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read [rhel-9.8.z] - RHEL-240804 CVE-2026-73198 ipa: FreeIPA: Unauthenticated DoS in `/ipa/i18n_messages` via Unbounded Request Body Read [rhel-9.8.z] - RHEL-240767 ipa-migrate tool is renaming host records & host info in automount information [rhel-9.8.z] - RHEL-238677 ipa-migrate: require Replication Administrator privilege [rhel-9.8.z] - RHEL-238674 ipa-epn: drop_privileges method is mixing uid and gid [rhel-9.8.z] - RHEL-238527 ipa env: support only simple * wildcard [rhel-9.8.z] - Related: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-155037 Pagure #9953: Adding a group with 32Bit Idrange fails. [rhel-9.8.z] - Resolves: RHEL-153146 IdM password policy Min lifetime is not enforced when high minlife is set [rhel-9.8.z] - Resolves: RHEL-168047 ipa ca-show ipa --all failing to list RSN version - RHEL-148282 ipa-replica-conncheck fails with "an internal error has occured" - RHEL-148481 Pruning is enabled by default with RSN on RHEL 9.8 - RHEL-147191 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - RHEL-146185 Names of domains from a trusted forest should be compared case-insentive - RHEL-146184 ipa-advise client script requires keytab (should just require root access on client system) - RHEL-145854 Include latest fixes in python3-ipatests package - RHEL-143684 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - RHEL-141500 ipa use systemd-sysusers - Resolves: RHEL-141446 [RFE] Command that retrieve and install new CA certificates - Resolves: RHEL-140584 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-141297 Memory leaks in IPA plugins - Resolves: RHEL-141054 IPA fails to sign zone - Resolves: RHEL-138570 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-138473 Include latest fixes in python3-ipatests package - Resolves: RHEL-137585 ipa-server-upgrade succeeds but ipactl restart fails due to ipa-dnskeysyncd service failure caused by SELinux AVC denial on RHEL 9.8 - Resolves: RHEL-134542 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-134540 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-134196 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-132334 Include latest fixes in python3-ipatests package - Resolves: RHEL-129224 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-126974 Minor typo in ipa_idrange_fix.py - Resolves: RHEL-120954 Rebase ipa to latest 4.13.x version for RHEL 9.8 - Resolves: RHEL-128238 [RFE] Support storing LWCA private keys on an HSM [rhel-9] - Resolves: RHEL-126515 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM [rhel-9] - Resolves: RHEL-73399 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-128241 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier [rhel-9] - Resolves: RHEL-126514 [RFE] ipa-client-automount should have an option to include domain of the machine. [rhel-9] - Resolves: RHEL-124171 Include latest fixes in python3-ipatests package - Resolves: RHEL-120514 Include fixes in python3-ipatests [rhel-9.8] - Resolves: RHEL-118609 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114548 Rebase Samba to the latest 4.23.x release - Update to 0.19 release - Add a message if not a trust agent/controller (RHEL-116896) - Check that expected NSS token matches the current FIPS state (RHEL-116897) - Add /etc/pki/tls/certs/ directory to file checker (RHEL-116898) - Check that allowed_uids in the SSSD config is valid (RHEL-79092) - Don't rely on order in trust roles (RHEL-99531) - Incorrect patch merged - Warn in ipa-healthcheck if umask is not 022 (RHEL-67901) - Check for krbLastSuccessfulAuth being enabled (RHEL-4957) - Check expiration dates of user-provided certificates (RHEL-80670) - Change log file permissions of IPA as per CIS benchmark (RHEL-28575) - Skip DogtagCertsConfigCheck for PKI versions 11.5.0 (RHEL-21367) - Don't fail if a service name cannot be looked up in LDAP - Disable the ipa-ods-exporter service check - Update to upstream 0.16 (RHEL-12494) - Update to 0.19 release - Add a message if not a trust agent/controller (RHEL-116896) - Check that expected NSS token matches the current FIPS state (RHEL-116897) - Add /etc/pki/tls/certs/ directory to file checker (RHEL-116898) - Check that allowed_uids in the SSSD config is valid (RHEL-79092) - Don't rely on order in trust roles (RHEL-99531) - Incorrect patch merged - Warn in ipa-healthcheck if umask is not 022 (RHEL-67901) - Check for krbLastSuccessfulAuth being enabled (RHEL-4957) - Check expiration dates of user-provided certificates (RHEL-80670) - Change log file permissions of IPA as per CIS benchmark (RHEL-28575) - Skip DogtagCertsConfigCheck for PKI versions 11.5.0 (RHEL-21367) - Don't fail if a service name cannot be looked up in LDAP - Disable the ipa-ods-exporter service check - Update to upstream 0.16 (RHEL-12494) - Related: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-155037 Pagure #9953: Adding a group with 32Bit Idrange fails. [rhel-9.8.z] - Resolves: RHEL-153146 IdM password policy Min lifetime is not enforced when high minlife is set [rhel-9.8.z] - Resolves: RHEL-168047 ipa ca-show ipa --all failing to list RSN version - RHEL-148282 ipa-replica-conncheck fails with "an internal error has occured" - RHEL-148481 Pruning is enabled by default with RSN on RHEL 9.8 - RHEL-147191 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - RHEL-146185 Names of domains from a trusted forest should be compared case-insentive - RHEL-146184 ipa-advise client script requires keytab (should just require root access on client system) - RHEL-145854 Include latest fixes in python3-ipatests package - RHEL-143684 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - RHEL-141500 ipa use systemd-sysusers - Resolves: RHEL-141446 [RFE] Command that retrieve and install new CA certificates - Resolves: RHEL-140584 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-141297 Memory leaks in IPA plugins - Resolves: RHEL-141054 IPA fails to sign zone - Resolves: RHEL-138570 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-138473 Include latest fixes in python3-ipatests package - Resolves: RHEL-137585 ipa-server-upgrade succeeds but ipactl restart fails due to ipa-dnskeysyncd service failure caused by SELinux AVC denial on RHEL 9.8 - Resolves: RHEL-134542 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-134540 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-134196 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-132334 Include latest fixes in python3-ipatests package - Resolves: RHEL-129224 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-126974 Minor typo in ipa_idrange_fix.py - Resolves: RHEL-120954 Rebase ipa to latest 4.13.x version for RHEL 9.8 - Resolves: RHEL-128238 [RFE] Support storing LWCA private keys on an HSM [rhel-9] - Resolves: RHEL-126515 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM [rhel-9] - Resolves: RHEL-73399 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-128241 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier [rhel-9] - Resolves: RHEL-126514 [RFE] ipa-client-automount should have an option to include domain of the machine. [rhel-9] - Resolves: RHEL-124171 Include latest fixes in python3-ipatests package - Resolves: RHEL-120514 Include fixes in python3-ipatests [rhel-9.8] - Resolves: RHEL-118609 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114548 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-107483 ipa-ca-install fails on CA-less replica due to inadequate key usage in master certificate - RHEL-218866 CVE-2026-18147 ipa: FreeIPA/IdM: Cross-Site Scripting vulnerability allows arbitrary code execution via crafted URL [rhel-9.8.z] - RHEL-245474 CVE-2026-76578 ipa: FreeIPA: unauthenticated LDAP client can obtain administrator credentials via the self-managed-token ACI [rhel-9.8.z] - RHEL-248206 CVE-2026-79678 ipa: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service [rhel-9.8.z] - RHEL-245627 CVE-2026-19550 ipa: FreeIPA: trust-fetch-domains uses trust-read ACI to gate a privileged AD trust refresh, allowing unauthorized LDAP writes [rhel-9.8.z] - RHEL-240898 CVE-2026-13097 ipa: Privilege escalation via krbCanonicalName manipulation due to realm-unaware uniqueness enforcement in FreeIPA LDAP datastore [rhel-9.8.z] - RHEL-240830 CVE-2026-11861 ipa: FreeIPA: Obtaining TGS with impersonating cname through trust relationships [rhel-9.8.z] - RHEL-240815 CVE-2026-73197 ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read [rhel-9.8.z] - RHEL-240804 CVE-2026-73198 ipa: FreeIPA: Unauthenticated DoS in `/ipa/i18n_messages` via Unbounded Request Body Read [rhel-9.8.z] - RHEL-240767 ipa-migrate tool is renaming host records & host info in automount information [rhel-9.8.z] - RHEL-238677 ipa-migrate: require Replication Administrator privilege [rhel-9.8.z] - RHEL-238674 ipa-epn: drop_privileges method is mixing uid and gid [rhel-9.8.z] - RHEL-238527 ipa env: support only simple * wildcard [rhel-9.8.z] - Related: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-155037 Pagure #9953: Adding a group with 32Bit Idrange fails. [rhel-9.8.z] - Resolves: RHEL-153146 IdM password policy Min lifetime is not enforced when high minlife is set [rhel-9.8.z] - Resolves: RHEL-168047 ipa ca-show ipa --all failing to list RSN version - RHEL-148282 ipa-replica-conncheck fails with "an internal error has occured" - RHEL-148481 Pruning is enabled by default with RSN on RHEL 9.8 - RHEL-147191 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - RHEL-146185 Names of domains from a trusted forest should be compared case-insentive - RHEL-146184 ipa-advise client script requires keytab (should just require root access on client system) - RHEL-145854 Include latest fixes in python3-ipatests package - RHEL-143684 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - RHEL-141500 ipa use systemd-sysusers - Resolves: RHEL-141446 [RFE] Command that retrieve and install new CA certificates - Resolves: RHEL-140584 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-141297 Memory leaks in IPA plugins - Resolves: RHEL-141054 IPA fails to sign zone - Resolves: RHEL-138570 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-138473 Include latest fixes in python3-ipatests package - Resolves: RHEL-137585 ipa-server-upgrade succeeds but ipactl restart fails due to ipa-dnskeysyncd service failure caused by SELinux AVC denial on RHEL 9.8 - Resolves: RHEL-134542 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-134540 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-134196 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-132334 Include latest fixes in python3-ipatests package - Resolves: RHEL-129224 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-126974 Minor typo in ipa_idrange_fix.py - Resolves: RHEL-120954 Rebase ipa to latest 4.13.x version for RHEL 9.8 - Resolves: RHEL-128238 [RFE] Support storing LWCA private keys on an HSM [rhel-9] - Resolves: RHEL-126515 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM [rhel-9] - Resolves: RHEL-73399 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-128241 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier [rhel-9] - Resolves: RHEL-126514 [RFE] ipa-client-automount should have an option to include domain of the machine. [rhel-9] - Resolves: RHEL-124171 Include latest fixes in python3-ipatests package - Resolves: RHEL-120514 Include fixes in python3-ipatests [rhel-9.8] - Resolves: RHEL-118609 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114548 Rebase Samba to the latest 4.23.x release - Related: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-155037 Pagure #9953: Adding a group with 32Bit Idrange fails. [rhel-9.8.z] - Resolves: RHEL-153146 IdM password policy Min lifetime is not enforced when high minlife is set [rhel-9.8.z] - Resolves: RHEL-168047 ipa ca-show ipa --all failing to list RSN version - RHEL-148282 ipa-replica-conncheck fails with "an internal error has occured" - RHEL-148481 Pruning is enabled by default with RSN on RHEL 9.8 - RHEL-147191 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - RHEL-146185 Names of domains from a trusted forest should be compared case-insentive - RHEL-146184 ipa-advise client script requires keytab (should just require root access on client system) - RHEL-145854 Include latest fixes in python3-ipatests package - RHEL-143684 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - RHEL-141500 ipa use systemd-sysusers - Resolves: RHEL-141446 [RFE] Command that retrieve and install new CA certificates - Resolves: RHEL-140584 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-141297 Memory leaks in IPA plugins - Resolves: RHEL-141054 IPA fails to sign zone - Resolves: RHEL-138570 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-138473 Include latest fixes in python3-ipatests package - Resolves: RHEL-137585 ipa-server-upgrade succeeds but ipactl restart fails due to ipa-dnskeysyncd service failure caused by SELinux AVC denial on RHEL 9.8 - Resolves: RHEL-134542 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-134540 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-134196 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-132334 Include latest fixes in python3-ipatests package - Resolves: RHEL-129224 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-126974 Minor typo in ipa_idrange_fix.py - Resolves: RHEL-120954 Rebase ipa to latest 4.13.x version for RHEL 9.8 - Resolves: RHEL-128238 [RFE] Support storing LWCA private keys on an HSM [rhel-9] - Resolves: RHEL-126515 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM [rhel-9] - Resolves: RHEL-73399 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-128241 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier [rhel-9] - Resolves: RHEL-126514 [RFE] ipa-client-automount should have an option to include domain of the machine. [rhel-9] - Resolves: RHEL-124171 Include latest fixes in python3-ipatests package - Resolves: RHEL-120514 Include fixes in python3-ipatests [rhel-9.8] - Resolves: RHEL-118609 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114548 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-107483 ipa-ca-install fails on CA-less replica due to inadequate key usage in master certificate - RHEL-218866 CVE-2026-18147 ipa: FreeIPA/IdM: Cross-Site Scripting vulnerability allows arbitrary code execution via crafted URL [rhel-9.8.z] - RHEL-245474 CVE-2026-76578 ipa: FreeIPA: unauthenticated LDAP client can obtain administrator credentials via the self-managed-token ACI [rhel-9.8.z] - RHEL-248206 CVE-2026-79678 ipa: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service [rhel-9.8.z] - RHEL-245627 CVE-2026-19550 ipa: FreeIPA: trust-fetch-domains uses trust-read ACI to gate a privileged AD trust refresh, allowing unauthorized LDAP writes [rhel-9.8.z] - RHEL-240898 CVE-2026-13097 ipa: Privilege escalation via krbCanonicalName manipulation due to realm-unaware uniqueness enforcement in FreeIPA LDAP datastore [rhel-9.8.z] - RHEL-240830 CVE-2026-11861 ipa: FreeIPA: Obtaining TGS with impersonating cname through trust relationships [rhel-9.8.z] - RHEL-240815 CVE-2026-73197 ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read [rhel-9.8.z] - RHEL-240804 CVE-2026-73198 ipa: FreeIPA: Unauthenticated DoS in `/ipa/i18n_messages` via Unbounded Request Body Read [rhel-9.8.z] - RHEL-240767 ipa-migrate tool is renaming host records & host info in automount information [rhel-9.8.z] - RHEL-238677 ipa-migrate: require Replication Administrator privilege [rhel-9.8.z] - RHEL-238674 ipa-epn: drop_privileges method is mixing uid and gid [rhel-9.8.z] - RHEL-238527 ipa env: support only simple * wildcard [rhel-9.8.z] - Related: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-155037 Pagure #9953: Adding a group with 32Bit Idrange fails. [rhel-9.8.z] - Resolves: RHEL-153146 IdM password policy Min lifetime is not enforced when high minlife is set [rhel-9.8.z] - Resolves: RHEL-168047 ipa ca-show ipa --all failing to list RSN version - RHEL-148282 ipa-replica-conncheck fails with "an internal error has occured" - RHEL-148481 Pruning is enabled by default with RSN on RHEL 9.8 - RHEL-147191 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - RHEL-146185 Names of domains from a trusted forest should be compared case-insentive - RHEL-146184 ipa-advise client script requires keytab (should just require root access on client system) - RHEL-145854 Include latest fixes in python3-ipatests package - RHEL-143684 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - RHEL-141500 ipa use systemd-sysusers - Resolves: RHEL-141446 [RFE] Command that retrieve and install new CA certificates - Resolves: RHEL-140584 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-141297 Memory leaks in IPA plugins - Resolves: RHEL-141054 IPA fails to sign zone - Resolves: RHEL-138570 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-138473 Include latest fixes in python3-ipatests package - Resolves: RHEL-137585 ipa-server-upgrade succeeds but ipactl restart fails due to ipa-dnskeysyncd service failure caused by SELinux AVC denial on RHEL 9.8 - Resolves: RHEL-134542 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-134540 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-134196 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-132334 Include latest fixes in python3-ipatests package - Resolves: RHEL-129224 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-126974 Minor typo in ipa_idrange_fix.py - Resolves: RHEL-120954 Rebase ipa to latest 4.13.x version for RHEL 9.8 - Resolves: RHEL-128238 [RFE] Support storing LWCA private keys on an HSM [rhel-9] - Resolves: RHEL-126515 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM [rhel-9] - Resolves: RHEL-73399 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-128241 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier [rhel-9] - Resolves: RHEL-126514 [RFE] ipa-client-automount should have an option to include domain of the machine. [rhel-9] - Resolves: RHEL-124171 Include latest fixes in python3-ipatests package - Resolves: RHEL-120514 Include fixes in python3-ipatests [rhel-9.8] - Resolves: RHEL-118609 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114548 Rebase Samba to the latest 4.23.x release - Related: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-155037 Pagure #9953: Adding a group with 32Bit Idrange fails. [rhel-9.8.z] - Resolves: RHEL-153146 IdM password policy Min lifetime is not enforced when high minlife is set [rhel-9.8.z] - Resolves: RHEL-168047 ipa ca-show ipa --all failing to list RSN version - RHEL-148282 ipa-replica-conncheck fails with "an internal error has occured" - RHEL-148481 Pruning is enabled by default with RSN on RHEL 9.8 - RHEL-147191 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - RHEL-146185 Names of domains from a trusted forest should be compared case-insentive - RHEL-146184 ipa-advise client script requires keytab (should just require root access on client system) - RHEL-145854 Include latest fixes in python3-ipatests package - RHEL-143684 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - RHEL-141500 ipa use systemd-sysusers - Resolves: RHEL-141446 [RFE] Command that retrieve and install new CA certificates - Resolves: RHEL-140584 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-141297 Memory leaks in IPA plugins - Resolves: RHEL-141054 IPA fails to sign zone - Resolves: RHEL-138570 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-138473 Include latest fixes in python3-ipatests package - Resolves: RHEL-137585 ipa-server-upgrade succeeds but ipactl restart fails due to ipa-dnskeysyncd service failure caused by SELinux AVC denial on RHEL 9.8 - Resolves: RHEL-134542 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-134540 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-134196 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-132334 Include latest fixes in python3-ipatests package - Resolves: RHEL-129224 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-126974 Minor typo in ipa_idrange_fix.py - Resolves: RHEL-120954 Rebase ipa to latest 4.13.x version for RHEL 9.8 - Resolves: RHEL-128238 [RFE] Support storing LWCA private keys on an HSM [rhel-9] - Resolves: RHEL-126515 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM [rhel-9] - Resolves: RHEL-73399 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-128241 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier [rhel-9] - Resolves: RHEL-126514 [RFE] ipa-client-automount should have an option to include domain of the machine. [rhel-9] - Resolves: RHEL-124171 Include latest fixes in python3-ipatests package - Resolves: RHEL-120514 Include fixes in python3-ipatests [rhel-9.8] - Resolves: RHEL-118609 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114548 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-107483 ipa-ca-install fails on CA-less replica due to inadequate key usage in master certificate - RHEL-218866 CVE-2026-18147 ipa: FreeIPA/IdM: Cross-Site Scripting vulnerability allows arbitrary code execution via crafted URL [rhel-9.8.z] - RHEL-245474 CVE-2026-76578 ipa: FreeIPA: unauthenticated LDAP client can obtain administrator credentials via the self-managed-token ACI [rhel-9.8.z] - RHEL-248206 CVE-2026-79678 ipa: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service [rhel-9.8.z] - RHEL-245627 CVE-2026-19550 ipa: FreeIPA: trust-fetch-domains uses trust-read ACI to gate a privileged AD trust refresh, allowing unauthorized LDAP writes [rhel-9.8.z] - RHEL-240898 CVE-2026-13097 ipa: Privilege escalation via krbCanonicalName manipulation due to realm-unaware uniqueness enforcement in FreeIPA LDAP datastore [rhel-9.8.z] - RHEL-240830 CVE-2026-11861 ipa: FreeIPA: Obtaining TGS with impersonating cname through trust relationships [rhel-9.8.z] - RHEL-240815 CVE-2026-73197 ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read [rhel-9.8.z] - RHEL-240804 CVE-2026-73198 ipa: FreeIPA: Unauthenticated DoS in `/ipa/i18n_messages` via Unbounded Request Body Read [rhel-9.8.z] - RHEL-240767 ipa-migrate tool is renaming host records & host info in automount information [rhel-9.8.z] - RHEL-238677 ipa-migrate: require Replication Administrator privilege [rhel-9.8.z] - RHEL-238674 ipa-epn: drop_privileges method is mixing uid and gid [rhel-9.8.z] - RHEL-238527 ipa env: support only simple * wildcard [rhel-9.8.z] - Related: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-155037 Pagure #9953: Adding a group with 32Bit Idrange fails. [rhel-9.8.z] - Resolves: RHEL-153146 IdM password policy Min lifetime is not enforced when high minlife is set [rhel-9.8.z] - Resolves: RHEL-168047 ipa ca-show ipa --all failing to list RSN version - RHEL-148282 ipa-replica-conncheck fails with "an internal error has occured" - RHEL-148481 Pruning is enabled by default with RSN on RHEL 9.8 - RHEL-147191 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - RHEL-146185 Names of domains from a trusted forest should be compared case-insentive - RHEL-146184 ipa-advise client script requires keytab (should just require root access on client system) - RHEL-145854 Include latest fixes in python3-ipatests package - RHEL-143684 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - RHEL-141500 ipa use systemd-sysusers - Resolves: RHEL-141446 [RFE] Command that retrieve and install new CA certificates - Resolves: RHEL-140584 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-141297 Memory leaks in IPA plugins - Resolves: RHEL-141054 IPA fails to sign zone - Resolves: RHEL-138570 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-138473 Include latest fixes in python3-ipatests package - Resolves: RHEL-137585 ipa-server-upgrade succeeds but ipactl restart fails due to ipa-dnskeysyncd service failure caused by SELinux AVC denial on RHEL 9.8 - Resolves: RHEL-134542 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-134540 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-134196 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-132334 Include latest fixes in python3-ipatests package - Resolves: RHEL-129224 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-126974 Minor typo in ipa_idrange_fix.py - Resolves: RHEL-120954 Rebase ipa to latest 4.13.x version for RHEL 9.8 - Resolves: RHEL-128238 [RFE] Support storing LWCA private keys on an HSM [rhel-9] - Resolves: RHEL-126515 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM [rhel-9] - Resolves: RHEL-73399 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-128241 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier [rhel-9] - Resolves: RHEL-126514 [RFE] ipa-client-automount should have an option to include domain of the machine. [rhel-9] - Resolves: RHEL-124171 Include latest fixes in python3-ipatests package - Resolves: RHEL-120514 Include fixes in python3-ipatests [rhel-9.8] - Resolves: RHEL-118609 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114548 Rebase Samba to the latest 4.23.x release - Related: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-155037 Pagure #9953: Adding a group with 32Bit Idrange fails. [rhel-9.8.z] - Resolves: RHEL-153146 IdM password policy Min lifetime is not enforced when high minlife is set [rhel-9.8.z] - Resolves: RHEL-168047 ipa ca-show ipa --all failing to list RSN version - RHEL-148282 ipa-replica-conncheck fails with "an internal error has occured" - RHEL-148481 Pruning is enabled by default with RSN on RHEL 9.8 - RHEL-147191 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - RHEL-146185 Names of domains from a trusted forest should be compared case-insentive - RHEL-146184 ipa-advise client script requires keytab (should just require root access on client system) - RHEL-145854 Include latest fixes in python3-ipatests package - RHEL-143684 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - RHEL-141500 ipa use systemd-sysusers - Resolves: RHEL-141446 [RFE] Command that retrieve and install new CA certificates - Resolves: RHEL-140584 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-141297 Memory leaks in IPA plugins - Resolves: RHEL-141054 IPA fails to sign zone - Resolves: RHEL-138570 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-138473 Include latest fixes in python3-ipatests package - Resolves: RHEL-137585 ipa-server-upgrade succeeds but ipactl restart fails due to ipa-dnskeysyncd service failure caused by SELinux AVC denial on RHEL 9.8 - Resolves: RHEL-134542 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-134540 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-134196 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-132334 Include latest fixes in python3-ipatests package - Resolves: RHEL-129224 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-126974 Minor typo in ipa_idrange_fix.py - Resolves: RHEL-120954 Rebase ipa to latest 4.13.x version for RHEL 9.8 - Resolves: RHEL-128238 [RFE] Support storing LWCA private keys on an HSM [rhel-9] - Resolves: RHEL-126515 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM [rhel-9] - Resolves: RHEL-73399 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-128241 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier [rhel-9] - Resolves: RHEL-126514 [RFE] ipa-client-automount should have an option to include domain of the machine. [rhel-9] - Resolves: RHEL-124171 Include latest fixes in python3-ipatests package - Resolves: RHEL-120514 Include fixes in python3-ipatests [rhel-9.8] - Resolves: RHEL-118609 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114548 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-107483 ipa-ca-install fails on CA-less replica due to inadequate key usage in master certificate - RHEL-218866 CVE-2026-18147 ipa: FreeIPA/IdM: Cross-Site Scripting vulnerability allows arbitrary code execution via crafted URL [rhel-9.8.z] - RHEL-245474 CVE-2026-76578 ipa: FreeIPA: unauthenticated LDAP client can obtain administrator credentials via the self-managed-token ACI [rhel-9.8.z] - RHEL-248206 CVE-2026-79678 ipa: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service [rhel-9.8.z] - RHEL-245627 CVE-2026-19550 ipa: FreeIPA: trust-fetch-domains uses trust-read ACI to gate a privileged AD trust refresh, allowing unauthorized LDAP writes [rhel-9.8.z] - RHEL-240898 CVE-2026-13097 ipa: Privilege escalation via krbCanonicalName manipulation due to realm-unaware uniqueness enforcement in FreeIPA LDAP datastore [rhel-9.8.z] - RHEL-240830 CVE-2026-11861 ipa: FreeIPA: Obtaining TGS with impersonating cname through trust relationships [rhel-9.8.z] - RHEL-240815 CVE-2026-73197 ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read [rhel-9.8.z] - RHEL-240804 CVE-2026-73198 ipa: FreeIPA: Unauthenticated DoS in `/ipa/i18n_messages` via Unbounded Request Body Read [rhel-9.8.z] - RHEL-240767 ipa-migrate tool is renaming host records & host info in automount information [rhel-9.8.z] - RHEL-238677 ipa-migrate: require Replication Administrator privilege [rhel-9.8.z] - RHEL-238674 ipa-epn: drop_privileges method is mixing uid and gid [rhel-9.8.z] - RHEL-238527 ipa env: support only simple * wildcard [rhel-9.8.z] - Related: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-155037 Pagure #9953: Adding a group with 32Bit Idrange fails. [rhel-9.8.z] - Resolves: RHEL-153146 IdM password policy Min lifetime is not enforced when high minlife is set [rhel-9.8.z] - Resolves: RHEL-168047 ipa ca-show ipa --all failing to list RSN version - RHEL-148282 ipa-replica-conncheck fails with "an internal error has occured" - RHEL-148481 Pruning is enabled by default with RSN on RHEL 9.8 - RHEL-147191 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - RHEL-146185 Names of domains from a trusted forest should be compared case-insentive - RHEL-146184 ipa-advise client script requires keytab (should just require root access on client system) - RHEL-145854 Include latest fixes in python3-ipatests package - RHEL-143684 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - RHEL-141500 ipa use systemd-sysusers - Resolves: RHEL-141446 [RFE] Command that retrieve and install new CA certificates - Resolves: RHEL-140584 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-141297 Memory leaks in IPA plugins - Resolves: RHEL-141054 IPA fails to sign zone - Resolves: RHEL-138570 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-138473 Include latest fixes in python3-ipatests package - Resolves: RHEL-137585 ipa-server-upgrade succeeds but ipactl restart fails due to ipa-dnskeysyncd service failure caused by SELinux AVC denial on RHEL 9.8 - Resolves: RHEL-134542 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-134540 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-134196 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-132334 Include latest fixes in python3-ipatests package - Resolves: RHEL-129224 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-126974 Minor typo in ipa_idrange_fix.py - Resolves: RHEL-120954 Rebase ipa to latest 4.13.x version for RHEL 9.8 - Resolves: RHEL-128238 [RFE] Support storing LWCA private keys on an HSM [rhel-9] - Resolves: RHEL-126515 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM [rhel-9] - Resolves: RHEL-73399 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-128241 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier [rhel-9] - Resolves: RHEL-126514 [RFE] ipa-client-automount should have an option to include domain of the machine. [rhel-9] - Resolves: RHEL-124171 Include latest fixes in python3-ipatests package - Resolves: RHEL-120514 Include fixes in python3-ipatests [rhel-9.8] - Resolves: RHEL-118609 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114548 Rebase Samba to the latest 4.23.x release - Related: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-155037 Pagure #9953: Adding a group with 32Bit Idrange fails. [rhel-9.8.z] - Resolves: RHEL-153146 IdM password policy Min lifetime is not enforced when high minlife is set [rhel-9.8.z] - Resolves: RHEL-168047 ipa ca-show ipa --all failing to list RSN version - RHEL-148282 ipa-replica-conncheck fails with "an internal error has occured" - RHEL-148481 Pruning is enabled by default with RSN on RHEL 9.8 - RHEL-147191 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - RHEL-146185 Names of domains from a trusted forest should be compared case-insentive - RHEL-146184 ipa-advise client script requires keytab (should just require root access on client system) - RHEL-145854 Include latest fixes in python3-ipatests package - RHEL-143684 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - RHEL-141500 ipa use systemd-sysusers - Resolves: RHEL-141446 [RFE] Command that retrieve and install new CA certificates - Resolves: RHEL-140584 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-141297 Memory leaks in IPA plugins - Resolves: RHEL-141054 IPA fails to sign zone - Resolves: RHEL-138570 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-138473 Include latest fixes in python3-ipatests package - Resolves: RHEL-137585 ipa-server-upgrade succeeds but ipactl restart fails due to ipa-dnskeysyncd service failure caused by SELinux AVC denial on RHEL 9.8 - Resolves: RHEL-134542 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-134540 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-134196 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-132334 Include latest fixes in python3-ipatests package - Resolves: RHEL-129224 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-126974 Minor typo in ipa_idrange_fix.py - Resolves: RHEL-120954 Rebase ipa to latest 4.13.x version for RHEL 9.8 - Resolves: RHEL-128238 [RFE] Support storing LWCA private keys on an HSM [rhel-9] - Resolves: RHEL-126515 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM [rhel-9] - Resolves: RHEL-73399 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-128241 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier [rhel-9] - Resolves: RHEL-126514 [RFE] ipa-client-automount should have an option to include domain of the machine. [rhel-9] - Resolves: RHEL-124171 Include latest fixes in python3-ipatests package - Resolves: RHEL-120514 Include fixes in python3-ipatests [rhel-9.8] - Resolves: RHEL-118609 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114548 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-107483 ipa-ca-install fails on CA-less replica due to inadequate key usage in master certificate - RHEL-218866 CVE-2026-18147 ipa: FreeIPA/IdM: Cross-Site Scripting vulnerability allows arbitrary code execution via crafted URL [rhel-9.8.z] - RHEL-245474 CVE-2026-76578 ipa: FreeIPA: unauthenticated LDAP client can obtain administrator credentials via the self-managed-token ACI [rhel-9.8.z] - RHEL-248206 CVE-2026-79678 ipa: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service [rhel-9.8.z] - RHEL-245627 CVE-2026-19550 ipa: FreeIPA: trust-fetch-domains uses trust-read ACI to gate a privileged AD trust refresh, allowing unauthorized LDAP writes [rhel-9.8.z] - RHEL-240898 CVE-2026-13097 ipa: Privilege escalation via krbCanonicalName manipulation due to realm-unaware uniqueness enforcement in FreeIPA LDAP datastore [rhel-9.8.z] - RHEL-240830 CVE-2026-11861 ipa: FreeIPA: Obtaining TGS with impersonating cname through trust relationships [rhel-9.8.z] - RHEL-240815 CVE-2026-73197 ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read [rhel-9.8.z] - RHEL-240804 CVE-2026-73198 ipa: FreeIPA: Unauthenticated DoS in `/ipa/i18n_messages` via Unbounded Request Body Read [rhel-9.8.z] - RHEL-240767 ipa-migrate tool is renaming host records & host info in automount information [rhel-9.8.z] - RHEL-238677 ipa-migrate: require Replication Administrator privilege [rhel-9.8.z] - RHEL-238674 ipa-epn: drop_privileges method is mixing uid and gid [rhel-9.8.z] - RHEL-238527 ipa env: support only simple * wildcard [rhel-9.8.z] - Related: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-155037 Pagure #9953: Adding a group with 32Bit Idrange fails. [rhel-9.8.z] - Resolves: RHEL-153146 IdM password policy Min lifetime is not enforced when high minlife is set [rhel-9.8.z] - Resolves: RHEL-168047 ipa ca-show ipa --all failing to list RSN version - RHEL-148282 ipa-replica-conncheck fails with "an internal error has occured" - RHEL-148481 Pruning is enabled by default with RSN on RHEL 9.8 - RHEL-147191 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - RHEL-146185 Names of domains from a trusted forest should be compared case-insentive - RHEL-146184 ipa-advise client script requires keytab (should just require root access on client system) - RHEL-145854 Include latest fixes in python3-ipatests package - RHEL-143684 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - RHEL-141500 ipa use systemd-sysusers - Resolves: RHEL-141446 [RFE] Command that retrieve and install new CA certificates - Resolves: RHEL-140584 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-141297 Memory leaks in IPA plugins - Resolves: RHEL-141054 IPA fails to sign zone - Resolves: RHEL-138570 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-138473 Include latest fixes in python3-ipatests package - Resolves: RHEL-137585 ipa-server-upgrade succeeds but ipactl restart fails due to ipa-dnskeysyncd service failure caused by SELinux AVC denial on RHEL 9.8 - Resolves: RHEL-134542 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-134540 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-134196 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-132334 Include latest fixes in python3-ipatests package - Resolves: RHEL-129224 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-126974 Minor typo in ipa_idrange_fix.py - Resolves: RHEL-120954 Rebase ipa to latest 4.13.x version for RHEL 9.8 - Resolves: RHEL-128238 [RFE] Support storing LWCA private keys on an HSM [rhel-9] - Resolves: RHEL-126515 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM [rhel-9] - Resolves: RHEL-73399 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-128241 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier [rhel-9] - Resolves: RHEL-126514 [RFE] ipa-client-automount should have an option to include domain of the machine. [rhel-9] - Resolves: RHEL-124171 Include latest fixes in python3-ipatests package - Resolves: RHEL-120514 Include fixes in python3-ipatests [rhel-9.8] - Resolves: RHEL-118609 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114548 Rebase Samba to the latest 4.23.x release - Related: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-155037 Pagure #9953: Adding a group with 32Bit Idrange fails. [rhel-9.8.z] - Resolves: RHEL-153146 IdM password policy Min lifetime is not enforced when high minlife is set [rhel-9.8.z] - Resolves: RHEL-168047 ipa ca-show ipa --all failing to list RSN version - RHEL-148282 ipa-replica-conncheck fails with "an internal error has occured" - RHEL-148481 Pruning is enabled by default with RSN on RHEL 9.8 - RHEL-147191 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - RHEL-146185 Names of domains from a trusted forest should be compared case-insentive - RHEL-146184 ipa-advise client script requires keytab (should just require root access on client system) - RHEL-145854 Include latest fixes in python3-ipatests package - RHEL-143684 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - RHEL-141500 ipa use systemd-sysusers - Resolves: RHEL-141446 [RFE] Command that retrieve and install new CA certificates - Resolves: RHEL-140584 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-141297 Memory leaks in IPA plugins - Resolves: RHEL-141054 IPA fails to sign zone - Resolves: RHEL-138570 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-138473 Include latest fixes in python3-ipatests package - Resolves: RHEL-137585 ipa-server-upgrade succeeds but ipactl restart fails due to ipa-dnskeysyncd service failure caused by SELinux AVC denial on RHEL 9.8 - Resolves: RHEL-134542 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-134540 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-134196 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-132334 Include latest fixes in python3-ipatests package - Resolves: RHEL-129224 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-126974 Minor typo in ipa_idrange_fix.py - Resolves: RHEL-120954 Rebase ipa to latest 4.13.x version for RHEL 9.8 - Resolves: RHEL-128238 [RFE] Support storing LWCA private keys on an HSM [rhel-9] - Resolves: RHEL-126515 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM [rhel-9] - Resolves: RHEL-73399 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-128241 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier [rhel-9] - Resolves: RHEL-126514 [RFE] ipa-client-automount should have an option to include domain of the machine. [rhel-9] - Resolves: RHEL-124171 Include latest fixes in python3-ipatests package - Resolves: RHEL-120514 Include fixes in python3-ipatests [rhel-9.8] - Resolves: RHEL-118609 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114548 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-107483 ipa-ca-install fails on CA-less replica due to inadequate key usage in master certificate - RHEL-218866 CVE-2026-18147 ipa: FreeIPA/IdM: Cross-Site Scripting vulnerability allows arbitrary code execution via crafted URL [rhel-9.8.z] - RHEL-245474 CVE-2026-76578 ipa: FreeIPA: unauthenticated LDAP client can obtain administrator credentials via the self-managed-token ACI [rhel-9.8.z] - RHEL-248206 CVE-2026-79678 ipa: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service [rhel-9.8.z] - RHEL-245627 CVE-2026-19550 ipa: FreeIPA: trust-fetch-domains uses trust-read ACI to gate a privileged AD trust refresh, allowing unauthorized LDAP writes [rhel-9.8.z] - RHEL-240898 CVE-2026-13097 ipa: Privilege escalation via krbCanonicalName manipulation due to realm-unaware uniqueness enforcement in FreeIPA LDAP datastore [rhel-9.8.z] - RHEL-240830 CVE-2026-11861 ipa: FreeIPA: Obtaining TGS with impersonating cname through trust relationships [rhel-9.8.z] - RHEL-240815 CVE-2026-73197 ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read [rhel-9.8.z] - RHEL-240804 CVE-2026-73198 ipa: FreeIPA: Unauthenticated DoS in `/ipa/i18n_messages` via Unbounded Request Body Read [rhel-9.8.z] - RHEL-240767 ipa-migrate tool is renaming host records & host info in automount information [rhel-9.8.z] - RHEL-238677 ipa-migrate: require Replication Administrator privilege [rhel-9.8.z] - RHEL-238674 ipa-epn: drop_privileges method is mixing uid and gid [rhel-9.8.z] - RHEL-238527 ipa env: support only simple * wildcard [rhel-9.8.z] - Related: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-155037 Pagure #9953: Adding a group with 32Bit Idrange fails. [rhel-9.8.z] - Resolves: RHEL-153146 IdM password policy Min lifetime is not enforced when high minlife is set [rhel-9.8.z] - Resolves: RHEL-168047 ipa ca-show ipa --all failing to list RSN version - RHEL-148282 ipa-replica-conncheck fails with "an internal error has occured" - RHEL-148481 Pruning is enabled by default with RSN on RHEL 9.8 - RHEL-147191 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - RHEL-146185 Names of domains from a trusted forest should be compared case-insentive - RHEL-146184 ipa-advise client script requires keytab (should just require root access on client system) - RHEL-145854 Include latest fixes in python3-ipatests package - RHEL-143684 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - RHEL-141500 ipa use systemd-sysusers - Resolves: RHEL-141446 [RFE] Command that retrieve and install new CA certificates - Resolves: RHEL-140584 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-141297 Memory leaks in IPA plugins - Resolves: RHEL-141054 IPA fails to sign zone - Resolves: RHEL-138570 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-138473 Include latest fixes in python3-ipatests package - Resolves: RHEL-137585 ipa-server-upgrade succeeds but ipactl restart fails due to ipa-dnskeysyncd service failure caused by SELinux AVC denial on RHEL 9.8 - Resolves: RHEL-134542 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-134540 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-134196 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-132334 Include latest fixes in python3-ipatests package - Resolves: RHEL-129224 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-126974 Minor typo in ipa_idrange_fix.py - Resolves: RHEL-120954 Rebase ipa to latest 4.13.x version for RHEL 9.8 - Resolves: RHEL-128238 [RFE] Support storing LWCA private keys on an HSM [rhel-9] - Resolves: RHEL-126515 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM [rhel-9] - Resolves: RHEL-73399 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-128241 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier [rhel-9] - Resolves: RHEL-126514 [RFE] ipa-client-automount should have an option to include domain of the machine. [rhel-9] - Resolves: RHEL-124171 Include latest fixes in python3-ipatests package - Resolves: RHEL-120514 Include fixes in python3-ipatests [rhel-9.8] - Resolves: RHEL-118609 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114548 Rebase Samba to the latest 4.23.x release - Related: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-155037 Pagure #9953: Adding a group with 32Bit Idrange fails. [rhel-9.8.z] - Resolves: RHEL-153146 IdM password policy Min lifetime is not enforced when high minlife is set [rhel-9.8.z] - Resolves: RHEL-168047 ipa ca-show ipa --all failing to list RSN version - RHEL-148282 ipa-replica-conncheck fails with "an internal error has occured" - RHEL-148481 Pruning is enabled by default with RSN on RHEL 9.8 - RHEL-147191 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - RHEL-146185 Names of domains from a trusted forest should be compared case-insentive - RHEL-146184 ipa-advise client script requires keytab (should just require root access on client system) - RHEL-145854 Include latest fixes in python3-ipatests package - RHEL-143684 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - RHEL-141500 ipa use systemd-sysusers - Resolves: RHEL-141446 [RFE] Command that retrieve and install new CA certificates - Resolves: RHEL-140584 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-141297 Memory leaks in IPA plugins - Resolves: RHEL-141054 IPA fails to sign zone - Resolves: RHEL-138570 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-138473 Include latest fixes in python3-ipatests package - Resolves: RHEL-137585 ipa-server-upgrade succeeds but ipactl restart fails due to ipa-dnskeysyncd service failure caused by SELinux AVC denial on RHEL 9.8 - Resolves: RHEL-134542 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-134540 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-134196 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-132334 Include latest fixes in python3-ipatests package - Resolves: RHEL-129224 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-126974 Minor typo in ipa_idrange_fix.py - Resolves: RHEL-120954 Rebase ipa to latest 4.13.x version for RHEL 9.8 - Resolves: RHEL-128238 [RFE] Support storing LWCA private keys on an HSM [rhel-9] - Resolves: RHEL-126515 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM [rhel-9] - Resolves: RHEL-73399 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-128241 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier [rhel-9] - Resolves: RHEL-126514 [RFE] ipa-client-automount should have an option to include domain of the machine. [rhel-9] - Resolves: RHEL-124171 Include latest fixes in python3-ipatests package - Resolves: RHEL-120514 Include fixes in python3-ipatests [rhel-9.8] - Resolves: RHEL-118609 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114548 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-107483 ipa-ca-install fails on CA-less replica due to inadequate key usage in master certificate - RHEL-218866 CVE-2026-18147 ipa: FreeIPA/IdM: Cross-Site Scripting vulnerability allows arbitrary code execution via crafted URL [rhel-9.8.z] - RHEL-245474 CVE-2026-76578 ipa: FreeIPA: unauthenticated LDAP client can obtain administrator credentials via the self-managed-token ACI [rhel-9.8.z] - RHEL-248206 CVE-2026-79678 ipa: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service [rhel-9.8.z] - RHEL-245627 CVE-2026-19550 ipa: FreeIPA: trust-fetch-domains uses trust-read ACI to gate a privileged AD trust refresh, allowing unauthorized LDAP writes [rhel-9.8.z] - RHEL-240898 CVE-2026-13097 ipa: Privilege escalation via krbCanonicalName manipulation due to realm-unaware uniqueness enforcement in FreeIPA LDAP datastore [rhel-9.8.z] - RHEL-240830 CVE-2026-11861 ipa: FreeIPA: Obtaining TGS with impersonating cname through trust relationships [rhel-9.8.z] - RHEL-240815 CVE-2026-73197 ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read [rhel-9.8.z] - RHEL-240804 CVE-2026-73198 ipa: FreeIPA: Unauthenticated DoS in `/ipa/i18n_messages` via Unbounded Request Body Read [rhel-9.8.z] - RHEL-240767 ipa-migrate tool is renaming host records & host info in automount information [rhel-9.8.z] - RHEL-238677 ipa-migrate: require Replication Administrator privilege [rhel-9.8.z] - RHEL-238674 ipa-epn: drop_privileges method is mixing uid and gid [rhel-9.8.z] - RHEL-238527 ipa env: support only simple * wildcard [rhel-9.8.z] - Related: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-155037 Pagure #9953: Adding a group with 32Bit Idrange fails. [rhel-9.8.z] - Resolves: RHEL-153146 IdM password policy Min lifetime is not enforced when high minlife is set [rhel-9.8.z] - Resolves: RHEL-168047 ipa ca-show ipa --all failing to list RSN version - RHEL-148282 ipa-replica-conncheck fails with "an internal error has occured" - RHEL-148481 Pruning is enabled by default with RSN on RHEL 9.8 - RHEL-147191 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - RHEL-146185 Names of domains from a trusted forest should be compared case-insentive - RHEL-146184 ipa-advise client script requires keytab (should just require root access on client system) - RHEL-145854 Include latest fixes in python3-ipatests package - RHEL-143684 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - RHEL-141500 ipa use systemd-sysusers - Resolves: RHEL-141446 [RFE] Command that retrieve and install new CA certificates - Resolves: RHEL-140584 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-141297 Memory leaks in IPA plugins - Resolves: RHEL-141054 IPA fails to sign zone - Resolves: RHEL-138570 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-138473 Include latest fixes in python3-ipatests package - Resolves: RHEL-137585 ipa-server-upgrade succeeds but ipactl restart fails due to ipa-dnskeysyncd service failure caused by SELinux AVC denial on RHEL 9.8 - Resolves: RHEL-134542 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-134540 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-134196 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-132334 Include latest fixes in python3-ipatests package - Resolves: RHEL-129224 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-126974 Minor typo in ipa_idrange_fix.py - Resolves: RHEL-120954 Rebase ipa to latest 4.13.x version for RHEL 9.8 - Resolves: RHEL-128238 [RFE] Support storing LWCA private keys on an HSM [rhel-9] - Resolves: RHEL-126515 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM [rhel-9] - Resolves: RHEL-73399 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-128241 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier [rhel-9] - Resolves: RHEL-126514 [RFE] ipa-client-automount should have an option to include domain of the machine. [rhel-9] - Resolves: RHEL-124171 Include latest fixes in python3-ipatests package - Resolves: RHEL-120514 Include fixes in python3-ipatests [rhel-9.8] - Resolves: RHEL-118609 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114548 Rebase Samba to the latest 4.23.x release - Related: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-155037 Pagure #9953: Adding a group with 32Bit Idrange fails. [rhel-9.8.z] - Resolves: RHEL-153146 IdM password policy Min lifetime is not enforced when high minlife is set [rhel-9.8.z] - Resolves: RHEL-168047 ipa ca-show ipa --all failing to list RSN version - RHEL-148282 ipa-replica-conncheck fails with "an internal error has occured" - RHEL-148481 Pruning is enabled by default with RSN on RHEL 9.8 - RHEL-147191 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - RHEL-146185 Names of domains from a trusted forest should be compared case-insentive - RHEL-146184 ipa-advise client script requires keytab (should just require root access on client system) - RHEL-145854 Include latest fixes in python3-ipatests package - RHEL-143684 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - RHEL-141500 ipa use systemd-sysusers - Resolves: RHEL-141446 [RFE] Command that retrieve and install new CA certificates - Resolves: RHEL-140584 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-141297 Memory leaks in IPA plugins - Resolves: RHEL-141054 IPA fails to sign zone - Resolves: RHEL-138570 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-138473 Include latest fixes in python3-ipatests package - Resolves: RHEL-137585 ipa-server-upgrade succeeds but ipactl restart fails due to ipa-dnskeysyncd service failure caused by SELinux AVC denial on RHEL 9.8 - Resolves: RHEL-134542 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-134540 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-134196 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-132334 Include latest fixes in python3-ipatests package - Resolves: RHEL-129224 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-126974 Minor typo in ipa_idrange_fix.py - Resolves: RHEL-120954 Rebase ipa to latest 4.13.x version for RHEL 9.8 - Resolves: RHEL-128238 [RFE] Support storing LWCA private keys on an HSM [rhel-9] - Resolves: RHEL-126515 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM [rhel-9] - Resolves: RHEL-73399 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-128241 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier [rhel-9] - Resolves: RHEL-126514 [RFE] ipa-client-automount should have an option to include domain of the machine. [rhel-9] - Resolves: RHEL-124171 Include latest fixes in python3-ipatests package - Resolves: RHEL-120514 Include fixes in python3-ipatests [rhel-9.8] - Resolves: RHEL-118609 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114548 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-107483 ipa-ca-install fails on CA-less replica due to inadequate key usage in master certificate - RHEL-218866 CVE-2026-18147 ipa: FreeIPA/IdM: Cross-Site Scripting vulnerability allows arbitrary code execution via crafted URL [rhel-9.8.z] - RHEL-245474 CVE-2026-76578 ipa: FreeIPA: unauthenticated LDAP client can obtain administrator credentials via the self-managed-token ACI [rhel-9.8.z] - RHEL-248206 CVE-2026-79678 ipa: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service [rhel-9.8.z] - RHEL-245627 CVE-2026-19550 ipa: FreeIPA: trust-fetch-domains uses trust-read ACI to gate a privileged AD trust refresh, allowing unauthorized LDAP writes [rhel-9.8.z] - RHEL-240898 CVE-2026-13097 ipa: Privilege escalation via krbCanonicalName manipulation due to realm-unaware uniqueness enforcement in FreeIPA LDAP datastore [rhel-9.8.z] - RHEL-240830 CVE-2026-11861 ipa: FreeIPA: Obtaining TGS with impersonating cname through trust relationships [rhel-9.8.z] - RHEL-240815 CVE-2026-73197 ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read [rhel-9.8.z] - RHEL-240804 CVE-2026-73198 ipa: FreeIPA: Unauthenticated DoS in `/ipa/i18n_messages` via Unbounded Request Body Read [rhel-9.8.z] - RHEL-240767 ipa-migrate tool is renaming host records & host info in automount information [rhel-9.8.z] - RHEL-238677 ipa-migrate: require Replication Administrator privilege [rhel-9.8.z] - RHEL-238674 ipa-epn: drop_privileges method is mixing uid and gid [rhel-9.8.z] - RHEL-238527 ipa env: support only simple * wildcard [rhel-9.8.z] - Related: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-155037 Pagure #9953: Adding a group with 32Bit Idrange fails. [rhel-9.8.z] - Resolves: RHEL-153146 IdM password policy Min lifetime is not enforced when high minlife is set [rhel-9.8.z] - Resolves: RHEL-168047 ipa ca-show ipa --all failing to list RSN version - RHEL-148282 ipa-replica-conncheck fails with "an internal error has occured" - RHEL-148481 Pruning is enabled by default with RSN on RHEL 9.8 - RHEL-147191 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - RHEL-146185 Names of domains from a trusted forest should be compared case-insentive - RHEL-146184 ipa-advise client script requires keytab (should just require root access on client system) - RHEL-145854 Include latest fixes in python3-ipatests package - RHEL-143684 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - RHEL-141500 ipa use systemd-sysusers - Resolves: RHEL-141446 [RFE] Command that retrieve and install new CA certificates - Resolves: RHEL-140584 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-141297 Memory leaks in IPA plugins - Resolves: RHEL-141054 IPA fails to sign zone - Resolves: RHEL-138570 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-138473 Include latest fixes in python3-ipatests package - Resolves: RHEL-137585 ipa-server-upgrade succeeds but ipactl restart fails due to ipa-dnskeysyncd service failure caused by SELinux AVC denial on RHEL 9.8 - Resolves: RHEL-134542 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-134540 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-134196 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-132334 Include latest fixes in python3-ipatests package - Resolves: RHEL-129224 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-126974 Minor typo in ipa_idrange_fix.py - Resolves: RHEL-120954 Rebase ipa to latest 4.13.x version for RHEL 9.8 - Resolves: RHEL-128238 [RFE] Support storing LWCA private keys on an HSM [rhel-9] - Resolves: RHEL-126515 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM [rhel-9] - Resolves: RHEL-73399 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-128241 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier [rhel-9] - Resolves: RHEL-126514 [RFE] ipa-client-automount should have an option to include domain of the machine. [rhel-9] - Resolves: RHEL-124171 Include latest fixes in python3-ipatests package - Resolves: RHEL-120514 Include fixes in python3-ipatests [rhel-9.8] - Resolves: RHEL-118609 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114548 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-132941 - iperf3 broken once "--logfile" is specified on server side - Resolves: RHEL-136179 - iperf Heap Buffer Overflow (CVE-2025-54349) - Resolves: RHEL-72933 - Denial of Service in iperf Due to Improper JSON Handling - Resolves: RHEL-29579 - vulnerable to marvin attack if the authentication option is used - Resolves: RHEL-39975 - possible denial of service - Resolves: RHEL-236176 - Add JSON value checks for get_parameters (CVE-2026-71217) - Resolves: RHEL-151875 - authentication no longer works with the new openssl - Resolves: RHEL-132941 - iperf3 broken once "--logfile" is specified on server side - Resolves: RHEL-136179 - iperf Heap Buffer Overflow (CVE-2025-54349) - Resolves: RHEL-72933 - Denial of Service in iperf Due to Improper JSON Handling - Resolves: RHEL-151875 - authentication no longer works with the new openssl - Resolves: RHEL-132941 - iperf3 broken once "--logfile" is specified on server side - Resolves: RHEL-136179 - iperf Heap Buffer Overflow (CVE-2025-54349) - Resolves: RHEL-72933 - Denial of Service in iperf Due to Improper JSON Handling - Resolves: RHEL-29579 - vulnerable to marvin attack if the authentication option is used - Resolves: RHEL-39975 - possible denial of service - Backport upstream PR 120 to fix segfault on invalid unit types Resolves: rhbz#2224578 - Add vendor ID for NVIDIA BMCs Resolves: rhbz#2218358 - Update /var/run to /run in ipmievd.service that systemd warns about Resolves: rhbz#2100475 - Add upstream ipmievd patch to check received msg id against expectation Fixes problem where SEL response is not recognized correctly when SEL request times out Resolves: rhbz#2224569 - Apply changes from RHEL 8 (#1811941, #1831158, #1951480) Resolves: rhbz#2051621 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Backport upstream PR 120 to fix segfault on invalid unit types Resolves: rhbz#2224578 - Add vendor ID for NVIDIA BMCs Resolves: rhbz#2218358 - Update /var/run to /run in ipmievd.service that systemd warns about Resolves: rhbz#2100475 - Add upstream ipmievd patch to check received msg id against expectation Fixes problem where SEL response is not recognized correctly when SEL request times out Resolves: rhbz#2224569 - Apply changes from RHEL 8 (#1811941, #1831158, #1951480) Resolves: rhbz#2051621 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Bump release for gated side-tag - Fix patch "Parse port before trying by service name" - Fix for wrong comment in ipset-config file - libxtables: Attenuate effects of functions' internal static buffers (Phil Sutter) [RHEL-72027] - spec: Fix build on c9s (Phil Sutter) [RHEL-72005] - spec: Explicitly remove unpackaged files (Michel Lind) [RHEL-72005] - Revert "xshared: Print protocol numbers if --numeric was given" (Phil Sutter) [RHEL-70173] - Bump release for side-tag (Phil Sutter) [RHEL-69283 RHEL-69284] - Bump release for RHEL-9.5.z (Phil Sutter) [RHEL-69283 RHEL-69284] - xtables-monitor: Ignore ebtables policy rules unless tracing (Phil Sutter) [RHEL-47264] - xtables-monitor: Fix for ebtables rule events (Phil Sutter) [RHEL-47264] - tests: shell: New xtables-monitor test (Phil Sutter) [RHEL-47264] - xtables-monitor: Support arptables chain events (Phil Sutter) [RHEL-47264] - xtables-monitor: Align builtin chain and table output (Phil Sutter) [RHEL-47264] - xtables-monitor: Flush stdout after all lines of output (Phil Sutter) [RHEL-47264] - xtables-monitor: Proper re-init for rule's family (Phil Sutter) [RHEL-47264] - nft: Fix for zeroing existent builtin chains (Phil Sutter) [RHEL-49497] - nft: cache: Annotate faked base chains as such (Phil Sutter) [RHEL-49497] - nft: Fix for zeroing non-existent builtin chains (Phil Sutter) [RHEL-49497] - spec: Simplify legacy package integration (Phil Sutter) [RHEL-5797] - extensions: libxt_sctp: Add an extra assert() (Phil Sutter) [RHEL-40928] - spec: Add symlinks for merged extension DSOs (Phil Sutter) [RHEL-32463] - nft: Fix for broken recover_rule_compat() (Phil Sutter) [RHEL-26619] - spec: Ship ebtables-translate and man page (Phil Sutter) [RHEL-32922] - ebtables: Fix corner-case noflush restore bug (Phil Sutter) [RHEL-14147] - libxtables: Attenuate effects of functions' internal static buffers (Phil Sutter) [RHEL-72027] - spec: Fix build on c9s (Phil Sutter) [RHEL-72005] - spec: Explicitly remove unpackaged files (Michel Lind) [RHEL-72005] - Revert "xshared: Print protocol numbers if --numeric was given" (Phil Sutter) [RHEL-70173] - Bump release for side-tag (Phil Sutter) [RHEL-69283 RHEL-69284] - Bump release for RHEL-9.5.z (Phil Sutter) [RHEL-69283 RHEL-69284] - xtables-monitor: Ignore ebtables policy rules unless tracing (Phil Sutter) [RHEL-47264] - xtables-monitor: Fix for ebtables rule events (Phil Sutter) [RHEL-47264] - tests: shell: New xtables-monitor test (Phil Sutter) [RHEL-47264] - xtables-monitor: Support arptables chain events (Phil Sutter) [RHEL-47264] - xtables-monitor: Align builtin chain and table output (Phil Sutter) [RHEL-47264] - xtables-monitor: Flush stdout after all lines of output (Phil Sutter) [RHEL-47264] - xtables-monitor: Proper re-init for rule's family (Phil Sutter) [RHEL-47264] - nft: Fix for zeroing existent builtin chains (Phil Sutter) [RHEL-49497] - nft: cache: Annotate faked base chains as such (Phil Sutter) [RHEL-49497] - nft: Fix for zeroing non-existent builtin chains (Phil Sutter) [RHEL-49497] - spec: Simplify legacy package integration (Phil Sutter) [RHEL-5797] - extensions: libxt_sctp: Add an extra assert() (Phil Sutter) [RHEL-40928] - spec: Add symlinks for merged extension DSOs (Phil Sutter) [RHEL-32463] - nft: Fix for broken recover_rule_compat() (Phil Sutter) [RHEL-26619] - spec: Ship ebtables-translate and man page (Phil Sutter) [RHEL-32922] - ebtables: Fix corner-case noflush restore bug (Phil Sutter) [RHEL-14147] - Fix CVE-2025-48964 iputils: iputils integer overflow (RHEL-112000) - arping: Fix exit code if receive more replies than sent (RHEL-98281) - Fix ping hangs under ASan on aarch64 (RHEL-96871) - Fix CVE-2025-47268 iputils: Signed Integer Overflow in Timestamp Multiplication in iputils ping (RHEL-94334) - ping: Fix ping6 binding to VRF and address (RHEL-57734) - arping: Fix 1s delay on exit for unsolicited arpings (RHEL-34110) - arping: exit 0 if running in deadline mode and we see replies (RHEL-27718) - ping: Print reply with wrong source with warning & some follow-up fixes (RHEL-12789, RHEL-13480) - ping: Fix socket error reporting (RHEL-4608) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 1.31 (#1726210) - Fix Obsoletes: and changelog versioning - Add ARM 64 EFI artifacts [yselkowi] (bz 2059349) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - ipxe-Add-ping-command-support.patch [bz#1985658] - ipxe-Add-VLAN-tagging-support.patch [bz#1985658] - ipxe-netdevice-Strip-802.Q-VLAN-0-priority-tags.patch [bz#1985658] - ipxe-Provide-snponly.efi-rom.patch [bz#1985658] - ipxe-Build-hwcert-subpackage.patch [bz#1985658] - Resolves: bz#1985658 (carry forward rhel8 ipxe packaging changes) - ipxe-Disable-SHA-1.patch [bz#1935932] - ipxe-Replace-genisoimage-with-xorriso.patch [bz#1971981] - ipxe-spec-Drop-disabled-efi-ia32-build-infrastructure.patch [bz#1980138] - ipxe-spec-Generate-qemu-compatible-rom-filenames.patch [bz#1980138] - Resolves: bz#1935932 (ipxe implements and/or uses the deprecated SHA-1 algorithm by default () - Resolves: bz#1971981 (Please replace genisoimage with xorriso) - Resolves: bz#1980138 (install qemu rom symlinks so qemu doesn't have to) - ipxe-Skip-some-QEMU-ROMs-when-building-for-RHEL.patch [bz#1956931] - ipxe-spec-combine-BIOS-and-EFI-roms-using-util-catrom.pl.patch [bz#1957246] - Resolves: bz#1956931 (ipxe-roms-qemu list: Clean out old ROMs) - Resolves: bz#1957246 (boot vm from pxe failed) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to newer git snapshot, synced with qemu.git - Re-enable HTTPS support, with edk2 fix included (bz 1820836) - Workaound fatal GCC 9 compilation/link errors - Fix conditionals for perl BuildRequires - Fix Obsoletes: and changelog versioning - Add ARM 64 EFI artifacts [yselkowi] (bz 2059349) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - ipxe-Add-ping-command-support.patch [bz#1985658] - ipxe-Add-VLAN-tagging-support.patch [bz#1985658] - ipxe-netdevice-Strip-802.Q-VLAN-0-priority-tags.patch [bz#1985658] - ipxe-Provide-snponly.efi-rom.patch [bz#1985658] - ipxe-Build-hwcert-subpackage.patch [bz#1985658] - Resolves: bz#1985658 (carry forward rhel8 ipxe packaging changes) - ipxe-Disable-SHA-1.patch [bz#1935932] - ipxe-Replace-genisoimage-with-xorriso.patch [bz#1971981] - ipxe-spec-Drop-disabled-efi-ia32-build-infrastructure.patch [bz#1980138] - ipxe-spec-Generate-qemu-compatible-rom-filenames.patch [bz#1980138] - Resolves: bz#1935932 (ipxe implements and/or uses the deprecated SHA-1 algorithm by default () - Resolves: bz#1971981 (Please replace genisoimage with xorriso) - Resolves: bz#1980138 (install qemu rom symlinks so qemu doesn't have to) - ipxe-Skip-some-QEMU-ROMs-when-building-for-RHEL.patch [bz#1956931] - ipxe-spec-combine-BIOS-and-EFI-roms-using-util-catrom.pl.patch [bz#1957246] - Resolves: bz#1956931 (ipxe-roms-qemu list: Clean out old ROMs) - Resolves: bz#1957246 (boot vm from pxe failed) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to newer git snapshot, synced with qemu.git - Re-enable HTTPS support, with edk2 fix included (bz 1820836) - Workaound fatal GCC 9 compilation/link errors - Fix conditionals for perl BuildRequires - Fix Obsoletes: and changelog versioning - Add ARM 64 EFI artifacts [yselkowi] (bz 2059349) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - ipxe-Add-ping-command-support.patch [bz#1985658] - ipxe-Add-VLAN-tagging-support.patch [bz#1985658] - ipxe-netdevice-Strip-802.Q-VLAN-0-priority-tags.patch [bz#1985658] - ipxe-Provide-snponly.efi-rom.patch [bz#1985658] - ipxe-Build-hwcert-subpackage.patch [bz#1985658] - Resolves: bz#1985658 (carry forward rhel8 ipxe packaging changes) - ipxe-Disable-SHA-1.patch [bz#1935932] - ipxe-Replace-genisoimage-with-xorriso.patch [bz#1971981] - ipxe-spec-Drop-disabled-efi-ia32-build-infrastructure.patch [bz#1980138] - ipxe-spec-Generate-qemu-compatible-rom-filenames.patch [bz#1980138] - Resolves: bz#1935932 (ipxe implements and/or uses the deprecated SHA-1 algorithm by default () - Resolves: bz#1971981 (Please replace genisoimage with xorriso) - Resolves: bz#1980138 (install qemu rom symlinks so qemu doesn't have to) - ipxe-Skip-some-QEMU-ROMs-when-building-for-RHEL.patch [bz#1956931] - ipxe-spec-combine-BIOS-and-EFI-roms-using-util-catrom.pl.patch [bz#1957246] - Resolves: bz#1956931 (ipxe-roms-qemu list: Clean out old ROMs) - Resolves: bz#1957246 (boot vm from pxe failed) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to newer git snapshot, synced with qemu.git - Re-enable HTTPS support, with edk2 fix included (bz 1820836) - Workaound fatal GCC 9 compilation/link errors - Fix conditionals for perl BuildRequires - Fix Obsoletes: and changelog versioning - Add ARM 64 EFI artifacts [yselkowi] (bz 2059349) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - ipxe-Add-ping-command-support.patch [bz#1985658] - ipxe-Add-VLAN-tagging-support.patch [bz#1985658] - ipxe-netdevice-Strip-802.Q-VLAN-0-priority-tags.patch [bz#1985658] - ipxe-Provide-snponly.efi-rom.patch [bz#1985658] - ipxe-Build-hwcert-subpackage.patch [bz#1985658] - Resolves: bz#1985658 (carry forward rhel8 ipxe packaging changes) - ipxe-Disable-SHA-1.patch [bz#1935932] - ipxe-Replace-genisoimage-with-xorriso.patch [bz#1971981] - ipxe-spec-Drop-disabled-efi-ia32-build-infrastructure.patch [bz#1980138] - ipxe-spec-Generate-qemu-compatible-rom-filenames.patch [bz#1980138] - Resolves: bz#1935932 (ipxe implements and/or uses the deprecated SHA-1 algorithm by default () - Resolves: bz#1971981 (Please replace genisoimage with xorriso) - Resolves: bz#1980138 (install qemu rom symlinks so qemu doesn't have to) - ipxe-Skip-some-QEMU-ROMs-when-building-for-RHEL.patch [bz#1956931] - ipxe-spec-combine-BIOS-and-EFI-roms-using-util-catrom.pl.patch [bz#1957246] - Resolves: bz#1956931 (ipxe-roms-qemu list: Clean out old ROMs) - Resolves: bz#1957246 (boot vm from pxe failed) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to newer git snapshot, synced with qemu.git - Re-enable HTTPS support, with edk2 fix included (bz 1820836) - Workaound fatal GCC 9 compilation/link errors - Fix conditionals for perl BuildRequires - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild to pick up OpenSSL 3.0 Beta ABI (#1984097) - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add missing perl(lib) and perl(Symbol) requires (#1897247) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fixed ctrl+space problem Resolves: rhbz#1854822 - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 4.6.0 version (#1936377) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 4.5.0 version (#1837748) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 4.4 version (#1758138) - Simple rebuilt to have f32 and f31 dist-git in sync - Update to 4.3 version (#1733770) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 4.6.0 version (#1936377) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 4.5.0 version (#1837748) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 4.4 version (#1758138) - Simple rebuilt to have f32 and f31 dist-git in sync - Update to 4.3 version (#1733770) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add make to BuildRequires - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for Python 3.8 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Add noarch to ExclusiveArch - Disable building on i686 - Rebuild with regenerated Requires on Java - Reduce dependencies - Initial build - Rebuild to regenerate auto-requires - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Rebuilt for java-17-openjdk as system jdk - Add noarch to ExclusiveArch - Disable building on i686 - Rebuild with regenerated Requires on Java - Rebuild to regenerate auto-requires - Update javapackages test plan to f42 - Switch to new GitHub repository - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Rebuilt for java-21-openjdk as system jdk - bump of release for for java-21-openjdk as system jdk - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild to regenerate auto-Requires on java - Convert License tag to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Add noarch to ExclusiveArch - Disable building on i686 - Rebuild with regenerated Requires on Java - Set javac source and target to 1.8 - Add noarch to ExclusiveArch - Disable building on i686 - Fix patch usage - Rebuild with regenerated Requires on Java - Rebuild - Rebuild - Rebuild with regenerated Requires on Java - Rebuild to regenerate auto-requires - Rebuild to regenerate auto-requires - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Ensure CC env variable is set during build - Make javadoc subpackage noarch - Rebuilt for java-17-openjdk as system jdk - Update javapackages test plan to f42 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Rebuilt for java-21-openjdk as system jdk - bump of release for for java-21-openjdk as system jdk - Update to upstream version 2.4.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild to regenerate auto-Requires on java - Convert License tag to SPDX format - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild + disable JAS_DEC_DEFAULT_MAX_SAMPLES (RHEL-76762) + disable JAS_DEC_DEFAULT_MAX_SAMPLES (RHEL-76762) + disable JAS_DEC_DEFAULT_MAX_SAMPLES (RHEL-76762) - Change portablerhel - Bump release for PQC build - Related: RHEL-169446 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Bump rpmrelease for CentOS build - Related: RHEL-142687 - Related: RHEL-139534 - Related: RHEL-131588 - Related: RHEL-131600 - Related: RHEL-142875 - Related: RHEL-142697 - Update to 8u482-b08 (GA). - Update release notes for 8u482-b08. - Remove generated-configure.sh changes from JDK-8141590 & FIPS patch as we already autogenerate this - Turn on system FreeType as on later JDK versions and add to _privatelibs - Set bundled FreeType version to 2.13.2 following JDK-8316028 - Bump LCMS 2 version to 2.14.0 following JDK-8297088 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-142687 - Resolves: RHEL-139534 - Resolves: RHEL-131588 - Resolves: RHEL-131600 - Resolves: RHEL-142875 - Resolves: RHEL-142697 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118767 - Related: RHEL-119455 - Related: RHEL-118775 - Update to 8u472-b08 (GA). - Update release notes for 8u472-b08. - Drop local JDK-8339414 fix as this is now included upstream - Reset rpmrelease to 1 now there are no other RPM builds on RHEL 9 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118767 - Resolves: RHEL-119455 - Update get_bundle_versions.sh to match other scripts - * get_bundle_versions.sh: Add license - * get_bundle_versions.sh: Set compile-command in Emacs - * get_bundle_versions.sh: Use different error codes for different failures - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086) - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002) - Add OpenJDK 8u support to get_bundle_versions.sh - Print bundle updates and backouts at end of openjdk_news.sh output - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh - Add timezone data update check to openjdk_news.sh - Add duplicate check to openjdk_news.sh - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-119329 - Add script to obtain bundled library versions from OpenJDK sources - Related: RHEL-119329 - Change portablerhel - Bump release for PQC build - Related: RHEL-212095 - Related: RHEL-188852 - Related: RHEL-149784 - Related: RHEL-212316 - Related: RHEL-212318 - Related: RHEL-212329 - Related: RHEL-212330 - Related: RHEL-212327 - Related: RHEL-212328 - Update to 8u502-b07 (GA). - Update release notes for 8u502-b07. - Bump lcms2 version to 2.19.1 following JDK-8321489, JDK-8348110, JDK-8375065 & JDK-8383354 - Bump zlib version to 1.3.2 following JDK-8378631 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Add attempted patch for JDK-8385876 to fix -Wnonnull build failure with s390x Zero on CentOS 9 - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Explictly define supported architectures - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Update tagged versions to include 9.8.0-z & 9.9.0. - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Obsolete old RHEL releases (8.2.0-z, 9.0.0-z, 9.7.0-z) - Sync the copy of the portable specfile with the latest update - Sync portable naming with later JDKs, due to adoption of <compatiblename> by portable - Drop <pversion> which is a redundant alias for version now - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212095 - Resolves: RHEL-188852 - Resolves: RHEL-149784 - Resolves: RHEL-212316 - Resolves: RHEL-212318 - Related: RHEL-212327 - Resolves: RHEL-212329 - Resolves: RHEL-212330 - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Resolves: RHEL-212327 - Resolves: RHEL-212328 - Bump release for PQC build - Related: RHEL-169446 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Bump rpmrelease for CentOS build - Related: RHEL-142687 - Related: RHEL-139534 - Related: RHEL-131588 - Related: RHEL-131600 - Related: RHEL-142875 - Related: RHEL-142697 - Update to 8u482-b08 (GA). - Update release notes for 8u482-b08. - Remove generated-configure.sh changes from JDK-8141590 & FIPS patch as we already autogenerate this - Turn on system FreeType as on later JDK versions and add to _privatelibs - Set bundled FreeType version to 2.13.2 following JDK-8316028 - Bump LCMS 2 version to 2.14.0 following JDK-8297088 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-142687 - Resolves: RHEL-139534 - Resolves: RHEL-131588 - Resolves: RHEL-131600 - Resolves: RHEL-142875 - Resolves: RHEL-142697 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118767 - Related: RHEL-119455 - Related: RHEL-118775 - Change portablerhel - Add CVEs for August 2026 release - Bump release for PQC build - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Related: RHEL-235603 - Update to 8u504-b01 (GA). - Update release notes for 8u504-b01. - Bump FreeType version to 2.14.3 following JDK-8385390 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235603 - Add CVEs to NEWS file - Related: RHEL-188852 - Bump release for PQC build - Related: RHEL-212095 - Related: RHEL-188852 - Related: RHEL-149784 - Related: RHEL-212316 - Related: RHEL-212318 - Related: RHEL-212329 - Related: RHEL-212330 - Related: RHEL-212327 - Related: RHEL-212328 - Update to 8u502-b07 (GA). - Update release notes for 8u502-b07. - Bump lcms2 version to 2.19.1 following JDK-8321489, JDK-8348110, JDK-8375065 & JDK-8383354 - Bump zlib version to 1.3.2 following JDK-8378631 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Add attempted patch for JDK-8385876 to fix -Wnonnull build failure with s390x Zero on CentOS 9 - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Explictly define supported architectures - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Update tagged versions to include 9.8.0-z & 9.9.0. - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Obsolete old RHEL releases (8.2.0-z, 9.0.0-z, 9.7.0-z) - Sync the copy of the portable specfile with the latest update - Sync portable naming with later JDKs, due to adoption of <compatiblename> by portable - Drop <pversion> which is a redundant alias for version now - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212095 - Resolves: RHEL-188852 - Resolves: RHEL-149784 - Resolves: RHEL-212316 - Resolves: RHEL-212318 - Related: RHEL-212327 - Resolves: RHEL-212329 - Resolves: RHEL-212330 - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Resolves: RHEL-212327 - Resolves: RHEL-212328 - Bump release for PQC build - Related: RHEL-169446 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Change portablerhel - Bump release for PQC build - Related: RHEL-169446 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Bump rpmrelease for CentOS build - Related: RHEL-142687 - Related: RHEL-139534 - Related: RHEL-131588 - Related: RHEL-131600 - Related: RHEL-142875 - Related: RHEL-142697 - Update to 8u482-b08 (GA). - Update release notes for 8u482-b08. - Remove generated-configure.sh changes from JDK-8141590 & FIPS patch as we already autogenerate this - Turn on system FreeType as on later JDK versions and add to _privatelibs - Set bundled FreeType version to 2.13.2 following JDK-8316028 - Bump LCMS 2 version to 2.14.0 following JDK-8297088 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-142687 - Resolves: RHEL-139534 - Resolves: RHEL-131588 - Resolves: RHEL-131600 - Resolves: RHEL-142875 - Resolves: RHEL-142697 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118767 - Related: RHEL-119455 - Related: RHEL-118775 - Update to 8u472-b08 (GA). - Update release notes for 8u472-b08. - Drop local JDK-8339414 fix as this is now included upstream - Reset rpmrelease to 1 now there are no other RPM builds on RHEL 9 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118767 - Resolves: RHEL-119455 - Update get_bundle_versions.sh to match other scripts - * get_bundle_versions.sh: Add license - * get_bundle_versions.sh: Set compile-command in Emacs - * get_bundle_versions.sh: Use different error codes for different failures - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086) - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002) - Add OpenJDK 8u support to get_bundle_versions.sh - Print bundle updates and backouts at end of openjdk_news.sh output - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh - Add timezone data update check to openjdk_news.sh - Add duplicate check to openjdk_news.sh - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-119329 - Add script to obtain bundled library versions from OpenJDK sources - Related: RHEL-119329 - Change portablerhel - Bump release for PQC build - Related: RHEL-212095 - Related: RHEL-188852 - Related: RHEL-149784 - Related: RHEL-212316 - Related: RHEL-212318 - Related: RHEL-212329 - Related: RHEL-212330 - Related: RHEL-212327 - Related: RHEL-212328 - Update to 8u502-b07 (GA). - Update release notes for 8u502-b07. - Bump lcms2 version to 2.19.1 following JDK-8321489, JDK-8348110, JDK-8375065 & JDK-8383354 - Bump zlib version to 1.3.2 following JDK-8378631 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Add attempted patch for JDK-8385876 to fix -Wnonnull build failure with s390x Zero on CentOS 9 - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Explictly define supported architectures - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Update tagged versions to include 9.8.0-z & 9.9.0. - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Obsolete old RHEL releases (8.2.0-z, 9.0.0-z, 9.7.0-z) - Sync the copy of the portable specfile with the latest update - Sync portable naming with later JDKs, due to adoption of <compatiblename> by portable - Drop <pversion> which is a redundant alias for version now - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212095 - Resolves: RHEL-188852 - Resolves: RHEL-149784 - Resolves: RHEL-212316 - Resolves: RHEL-212318 - Related: RHEL-212327 - Resolves: RHEL-212329 - Resolves: RHEL-212330 - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Resolves: RHEL-212327 - Resolves: RHEL-212328 - Bump release for PQC build - Related: RHEL-169446 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Bump rpmrelease for CentOS build - Related: RHEL-142687 - Related: RHEL-139534 - Related: RHEL-131588 - Related: RHEL-131600 - Related: RHEL-142875 - Related: RHEL-142697 - Update to 8u482-b08 (GA). - Update release notes for 8u482-b08. - Remove generated-configure.sh changes from JDK-8141590 & FIPS patch as we already autogenerate this - Turn on system FreeType as on later JDK versions and add to _privatelibs - Set bundled FreeType version to 2.13.2 following JDK-8316028 - Bump LCMS 2 version to 2.14.0 following JDK-8297088 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-142687 - Resolves: RHEL-139534 - Resolves: RHEL-131588 - Resolves: RHEL-131600 - Resolves: RHEL-142875 - Resolves: RHEL-142697 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118767 - Related: RHEL-119455 - Related: RHEL-118775 - Change portablerhel - Add CVEs for August 2026 release - Bump release for PQC build - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Related: RHEL-235603 - Update to 8u504-b01 (GA). - Update release notes for 8u504-b01. - Bump FreeType version to 2.14.3 following JDK-8385390 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235603 - Add CVEs to NEWS file - Related: RHEL-188852 - Bump release for PQC build - Related: RHEL-212095 - Related: RHEL-188852 - Related: RHEL-149784 - Related: RHEL-212316 - Related: RHEL-212318 - Related: RHEL-212329 - Related: RHEL-212330 - Related: RHEL-212327 - Related: RHEL-212328 - Update to 8u502-b07 (GA). - Update release notes for 8u502-b07. - Bump lcms2 version to 2.19.1 following JDK-8321489, JDK-8348110, JDK-8375065 & JDK-8383354 - Bump zlib version to 1.3.2 following JDK-8378631 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Add attempted patch for JDK-8385876 to fix -Wnonnull build failure with s390x Zero on CentOS 9 - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Explictly define supported architectures - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Update tagged versions to include 9.8.0-z & 9.9.0. - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Obsolete old RHEL releases (8.2.0-z, 9.0.0-z, 9.7.0-z) - Sync the copy of the portable specfile with the latest update - Sync portable naming with later JDKs, due to adoption of <compatiblename> by portable - Drop <pversion> which is a redundant alias for version now - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212095 - Resolves: RHEL-188852 - Resolves: RHEL-149784 - Resolves: RHEL-212316 - Resolves: RHEL-212318 - Related: RHEL-212327 - Resolves: RHEL-212329 - Resolves: RHEL-212330 - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Resolves: RHEL-212327 - Resolves: RHEL-212328 - Bump release for PQC build - Related: RHEL-169446 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Change portablerhel - Bump release for PQC build - Related: RHEL-169446 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Bump rpmrelease for CentOS build - Related: RHEL-142687 - Related: RHEL-139534 - Related: RHEL-131588 - Related: RHEL-131600 - Related: RHEL-142875 - Related: RHEL-142697 - Update to 8u482-b08 (GA). - Update release notes for 8u482-b08. - Remove generated-configure.sh changes from JDK-8141590 & FIPS patch as we already autogenerate this - Turn on system FreeType as on later JDK versions and add to _privatelibs - Set bundled FreeType version to 2.13.2 following JDK-8316028 - Bump LCMS 2 version to 2.14.0 following JDK-8297088 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-142687 - Resolves: RHEL-139534 - Resolves: RHEL-131588 - Resolves: RHEL-131600 - Resolves: RHEL-142875 - Resolves: RHEL-142697 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118767 - Related: RHEL-119455 - Related: RHEL-118775 - Update to 8u472-b08 (GA). - Update release notes for 8u472-b08. - Drop local JDK-8339414 fix as this is now included upstream - Reset rpmrelease to 1 now there are no other RPM builds on RHEL 9 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118767 - Resolves: RHEL-119455 - Update get_bundle_versions.sh to match other scripts - * get_bundle_versions.sh: Add license - * get_bundle_versions.sh: Set compile-command in Emacs - * get_bundle_versions.sh: Use different error codes for different failures - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086) - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002) - Add OpenJDK 8u support to get_bundle_versions.sh - Print bundle updates and backouts at end of openjdk_news.sh output - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh - Add timezone data update check to openjdk_news.sh - Add duplicate check to openjdk_news.sh - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-119329 - Add script to obtain bundled library versions from OpenJDK sources - Related: RHEL-119329 - Change portablerhel - Bump release for PQC build - Related: RHEL-212095 - Related: RHEL-188852 - Related: RHEL-149784 - Related: RHEL-212316 - Related: RHEL-212318 - Related: RHEL-212329 - Related: RHEL-212330 - Related: RHEL-212327 - Related: RHEL-212328 - Update to 8u502-b07 (GA). - Update release notes for 8u502-b07. - Bump lcms2 version to 2.19.1 following JDK-8321489, JDK-8348110, JDK-8375065 & JDK-8383354 - Bump zlib version to 1.3.2 following JDK-8378631 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Add attempted patch for JDK-8385876 to fix -Wnonnull build failure with s390x Zero on CentOS 9 - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Explictly define supported architectures - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Update tagged versions to include 9.8.0-z & 9.9.0. - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Obsolete old RHEL releases (8.2.0-z, 9.0.0-z, 9.7.0-z) - Sync the copy of the portable specfile with the latest update - Sync portable naming with later JDKs, due to adoption of <compatiblename> by portable - Drop <pversion> which is a redundant alias for version now - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212095 - Resolves: RHEL-188852 - Resolves: RHEL-149784 - Resolves: RHEL-212316 - Resolves: RHEL-212318 - Related: RHEL-212327 - Resolves: RHEL-212329 - Resolves: RHEL-212330 - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Resolves: RHEL-212327 - Resolves: RHEL-212328 - Bump release for PQC build - Related: RHEL-169446 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Bump rpmrelease for CentOS build - Related: RHEL-142687 - Related: RHEL-139534 - Related: RHEL-131588 - Related: RHEL-131600 - Related: RHEL-142875 - Related: RHEL-142697 - Update to 8u482-b08 (GA). - Update release notes for 8u482-b08. - Remove generated-configure.sh changes from JDK-8141590 & FIPS patch as we already autogenerate this - Turn on system FreeType as on later JDK versions and add to _privatelibs - Set bundled FreeType version to 2.13.2 following JDK-8316028 - Bump LCMS 2 version to 2.14.0 following JDK-8297088 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-142687 - Resolves: RHEL-139534 - Resolves: RHEL-131588 - Resolves: RHEL-131600 - Resolves: RHEL-142875 - Resolves: RHEL-142697 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118767 - Related: RHEL-119455 - Related: RHEL-118775 - Change portablerhel - Add CVEs for August 2026 release - Bump release for PQC build - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Related: RHEL-235603 - Update to 8u504-b01 (GA). - Update release notes for 8u504-b01. - Bump FreeType version to 2.14.3 following JDK-8385390 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235603 - Add CVEs to NEWS file - Related: RHEL-188852 - Bump release for PQC build - Related: RHEL-212095 - Related: RHEL-188852 - Related: RHEL-149784 - Related: RHEL-212316 - Related: RHEL-212318 - Related: RHEL-212329 - Related: RHEL-212330 - Related: RHEL-212327 - Related: RHEL-212328 - Update to 8u502-b07 (GA). - Update release notes for 8u502-b07. - Bump lcms2 version to 2.19.1 following JDK-8321489, JDK-8348110, JDK-8375065 & JDK-8383354 - Bump zlib version to 1.3.2 following JDK-8378631 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Add attempted patch for JDK-8385876 to fix -Wnonnull build failure with s390x Zero on CentOS 9 - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Explictly define supported architectures - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Update tagged versions to include 9.8.0-z & 9.9.0. - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Obsolete old RHEL releases (8.2.0-z, 9.0.0-z, 9.7.0-z) - Sync the copy of the portable specfile with the latest update - Sync portable naming with later JDKs, due to adoption of <compatiblename> by portable - Drop <pversion> which is a redundant alias for version now - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212095 - Resolves: RHEL-188852 - Resolves: RHEL-149784 - Resolves: RHEL-212316 - Resolves: RHEL-212318 - Related: RHEL-212327 - Resolves: RHEL-212329 - Resolves: RHEL-212330 - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Resolves: RHEL-212327 - Resolves: RHEL-212328 - Bump release for PQC build - Related: RHEL-169446 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Change portablerhel - Bump release for PQC build - Related: RHEL-169446 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Bump rpmrelease for CentOS build - Related: RHEL-142687 - Related: RHEL-139534 - Related: RHEL-131588 - Related: RHEL-131600 - Related: RHEL-142875 - Related: RHEL-142697 - Update to 8u482-b08 (GA). - Update release notes for 8u482-b08. - Remove generated-configure.sh changes from JDK-8141590 & FIPS patch as we already autogenerate this - Turn on system FreeType as on later JDK versions and add to _privatelibs - Set bundled FreeType version to 2.13.2 following JDK-8316028 - Bump LCMS 2 version to 2.14.0 following JDK-8297088 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-142687 - Resolves: RHEL-139534 - Resolves: RHEL-131588 - Resolves: RHEL-131600 - Resolves: RHEL-142875 - Resolves: RHEL-142697 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118767 - Related: RHEL-119455 - Related: RHEL-118775 - Update to 8u472-b08 (GA). - Update release notes for 8u472-b08. - Drop local JDK-8339414 fix as this is now included upstream - Reset rpmrelease to 1 now there are no other RPM builds on RHEL 9 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118767 - Resolves: RHEL-119455 - Update get_bundle_versions.sh to match other scripts - * get_bundle_versions.sh: Add license - * get_bundle_versions.sh: Set compile-command in Emacs - * get_bundle_versions.sh: Use different error codes for different failures - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086) - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002) - Add OpenJDK 8u support to get_bundle_versions.sh - Print bundle updates and backouts at end of openjdk_news.sh output - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh - Add timezone data update check to openjdk_news.sh - Add duplicate check to openjdk_news.sh - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-119329 - Add script to obtain bundled library versions from OpenJDK sources - Related: RHEL-119329 - Change portablerhel - Bump release for PQC build - Related: RHEL-212095 - Related: RHEL-188852 - Related: RHEL-149784 - Related: RHEL-212316 - Related: RHEL-212318 - Related: RHEL-212329 - Related: RHEL-212330 - Related: RHEL-212327 - Related: RHEL-212328 - Update to 8u502-b07 (GA). - Update release notes for 8u502-b07. - Bump lcms2 version to 2.19.1 following JDK-8321489, JDK-8348110, JDK-8375065 & JDK-8383354 - Bump zlib version to 1.3.2 following JDK-8378631 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Add attempted patch for JDK-8385876 to fix -Wnonnull build failure with s390x Zero on CentOS 9 - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Explictly define supported architectures - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Update tagged versions to include 9.8.0-z & 9.9.0. - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Obsolete old RHEL releases (8.2.0-z, 9.0.0-z, 9.7.0-z) - Sync the copy of the portable specfile with the latest update - Sync portable naming with later JDKs, due to adoption of <compatiblename> by portable - Drop <pversion> which is a redundant alias for version now - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212095 - Resolves: RHEL-188852 - Resolves: RHEL-149784 - Resolves: RHEL-212316 - Resolves: RHEL-212318 - Related: RHEL-212327 - Resolves: RHEL-212329 - Resolves: RHEL-212330 - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Resolves: RHEL-212327 - Resolves: RHEL-212328 - Bump release for PQC build - Related: RHEL-169446 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Bump rpmrelease for CentOS build - Related: RHEL-142687 - Related: RHEL-139534 - Related: RHEL-131588 - Related: RHEL-131600 - Related: RHEL-142875 - Related: RHEL-142697 - Update to 8u482-b08 (GA). - Update release notes for 8u482-b08. - Remove generated-configure.sh changes from JDK-8141590 & FIPS patch as we already autogenerate this - Turn on system FreeType as on later JDK versions and add to _privatelibs - Set bundled FreeType version to 2.13.2 following JDK-8316028 - Bump LCMS 2 version to 2.14.0 following JDK-8297088 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-142687 - Resolves: RHEL-139534 - Resolves: RHEL-131588 - Resolves: RHEL-131600 - Resolves: RHEL-142875 - Resolves: RHEL-142697 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118767 - Related: RHEL-119455 - Related: RHEL-118775 - Change portablerhel - Add CVEs for August 2026 release - Bump release for PQC build - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Related: RHEL-235603 - Update to 8u504-b01 (GA). - Update release notes for 8u504-b01. - Bump FreeType version to 2.14.3 following JDK-8385390 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235603 - Add CVEs to NEWS file - Related: RHEL-188852 - Bump release for PQC build - Related: RHEL-212095 - Related: RHEL-188852 - Related: RHEL-149784 - Related: RHEL-212316 - Related: RHEL-212318 - Related: RHEL-212329 - Related: RHEL-212330 - Related: RHEL-212327 - Related: RHEL-212328 - Update to 8u502-b07 (GA). - Update release notes for 8u502-b07. - Bump lcms2 version to 2.19.1 following JDK-8321489, JDK-8348110, JDK-8375065 & JDK-8383354 - Bump zlib version to 1.3.2 following JDK-8378631 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Add attempted patch for JDK-8385876 to fix -Wnonnull build failure with s390x Zero on CentOS 9 - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Explictly define supported architectures - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Update tagged versions to include 9.8.0-z & 9.9.0. - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Obsolete old RHEL releases (8.2.0-z, 9.0.0-z, 9.7.0-z) - Sync the copy of the portable specfile with the latest update - Sync portable naming with later JDKs, due to adoption of <compatiblename> by portable - Drop <pversion> which is a redundant alias for version now - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212095 - Resolves: RHEL-188852 - Resolves: RHEL-149784 - Resolves: RHEL-212316 - Resolves: RHEL-212318 - Related: RHEL-212327 - Resolves: RHEL-212329 - Resolves: RHEL-212330 - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Resolves: RHEL-212327 - Resolves: RHEL-212328 - Bump release for PQC build - Related: RHEL-169446 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Change portablerhel - Bump release for PQC build - Related: RHEL-169446 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Bump rpmrelease for CentOS build - Related: RHEL-142687 - Related: RHEL-139534 - Related: RHEL-131588 - Related: RHEL-131600 - Related: RHEL-142875 - Related: RHEL-142697 - Update to 8u482-b08 (GA). - Update release notes for 8u482-b08. - Remove generated-configure.sh changes from JDK-8141590 & FIPS patch as we already autogenerate this - Turn on system FreeType as on later JDK versions and add to _privatelibs - Set bundled FreeType version to 2.13.2 following JDK-8316028 - Bump LCMS 2 version to 2.14.0 following JDK-8297088 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-142687 - Resolves: RHEL-139534 - Resolves: RHEL-131588 - Resolves: RHEL-131600 - Resolves: RHEL-142875 - Resolves: RHEL-142697 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118767 - Related: RHEL-119455 - Related: RHEL-118775 - Update to 8u472-b08 (GA). - Update release notes for 8u472-b08. - Drop local JDK-8339414 fix as this is now included upstream - Reset rpmrelease to 1 now there are no other RPM builds on RHEL 9 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118767 - Resolves: RHEL-119455 - Update get_bundle_versions.sh to match other scripts - * get_bundle_versions.sh: Add license - * get_bundle_versions.sh: Set compile-command in Emacs - * get_bundle_versions.sh: Use different error codes for different failures - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086) - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002) - Add OpenJDK 8u support to get_bundle_versions.sh - Print bundle updates and backouts at end of openjdk_news.sh output - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh - Add timezone data update check to openjdk_news.sh - Add duplicate check to openjdk_news.sh - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-119329 - Add script to obtain bundled library versions from OpenJDK sources - Related: RHEL-119329 - Change portablerhel - Bump release for PQC build - Related: RHEL-212095 - Related: RHEL-188852 - Related: RHEL-149784 - Related: RHEL-212316 - Related: RHEL-212318 - Related: RHEL-212329 - Related: RHEL-212330 - Related: RHEL-212327 - Related: RHEL-212328 - Update to 8u502-b07 (GA). - Update release notes for 8u502-b07. - Bump lcms2 version to 2.19.1 following JDK-8321489, JDK-8348110, JDK-8375065 & JDK-8383354 - Bump zlib version to 1.3.2 following JDK-8378631 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Add attempted patch for JDK-8385876 to fix -Wnonnull build failure with s390x Zero on CentOS 9 - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Explictly define supported architectures - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Update tagged versions to include 9.8.0-z & 9.9.0. - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Obsolete old RHEL releases (8.2.0-z, 9.0.0-z, 9.7.0-z) - Sync the copy of the portable specfile with the latest update - Sync portable naming with later JDKs, due to adoption of <compatiblename> by portable - Drop <pversion> which is a redundant alias for version now - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212095 - Resolves: RHEL-188852 - Resolves: RHEL-149784 - Resolves: RHEL-212316 - Resolves: RHEL-212318 - Related: RHEL-212327 - Resolves: RHEL-212329 - Resolves: RHEL-212330 - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Resolves: RHEL-212327 - Resolves: RHEL-212328 - Bump release for PQC build - Related: RHEL-169446 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Bump rpmrelease for CentOS build - Related: RHEL-142687 - Related: RHEL-139534 - Related: RHEL-131588 - Related: RHEL-131600 - Related: RHEL-142875 - Related: RHEL-142697 - Update to 8u482-b08 (GA). - Update release notes for 8u482-b08. - Remove generated-configure.sh changes from JDK-8141590 & FIPS patch as we already autogenerate this - Turn on system FreeType as on later JDK versions and add to _privatelibs - Set bundled FreeType version to 2.13.2 following JDK-8316028 - Bump LCMS 2 version to 2.14.0 following JDK-8297088 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-142687 - Resolves: RHEL-139534 - Resolves: RHEL-131588 - Resolves: RHEL-131600 - Resolves: RHEL-142875 - Resolves: RHEL-142697 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118767 - Related: RHEL-119455 - Related: RHEL-118775 - Change portablerhel - Add CVEs for August 2026 release - Bump release for PQC build - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Related: RHEL-235603 - Update to 8u504-b01 (GA). - Update release notes for 8u504-b01. - Bump FreeType version to 2.14.3 following JDK-8385390 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235603 - Add CVEs to NEWS file - Related: RHEL-188852 - Bump release for PQC build - Related: RHEL-212095 - Related: RHEL-188852 - Related: RHEL-149784 - Related: RHEL-212316 - Related: RHEL-212318 - Related: RHEL-212329 - Related: RHEL-212330 - Related: RHEL-212327 - Related: RHEL-212328 - Update to 8u502-b07 (GA). - Update release notes for 8u502-b07. - Bump lcms2 version to 2.19.1 following JDK-8321489, JDK-8348110, JDK-8375065 & JDK-8383354 - Bump zlib version to 1.3.2 following JDK-8378631 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Add attempted patch for JDK-8385876 to fix -Wnonnull build failure with s390x Zero on CentOS 9 - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Explictly define supported architectures - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Update tagged versions to include 9.8.0-z & 9.9.0. - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Obsolete old RHEL releases (8.2.0-z, 9.0.0-z, 9.7.0-z) - Sync the copy of the portable specfile with the latest update - Sync portable naming with later JDKs, due to adoption of <compatiblename> by portable - Drop <pversion> which is a redundant alias for version now - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212095 - Resolves: RHEL-188852 - Resolves: RHEL-149784 - Resolves: RHEL-212316 - Resolves: RHEL-212318 - Related: RHEL-212327 - Resolves: RHEL-212329 - Resolves: RHEL-212330 - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Resolves: RHEL-212327 - Resolves: RHEL-212328 - Bump release for PQC build - Related: RHEL-169446 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Change portablerhel - Bump release for PQC build - Related: RHEL-169446 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Bump rpmrelease for CentOS build - Related: RHEL-142687 - Related: RHEL-139534 - Related: RHEL-131588 - Related: RHEL-131600 - Related: RHEL-142875 - Related: RHEL-142697 - Update to 8u482-b08 (GA). - Update release notes for 8u482-b08. - Remove generated-configure.sh changes from JDK-8141590 & FIPS patch as we already autogenerate this - Turn on system FreeType as on later JDK versions and add to _privatelibs - Set bundled FreeType version to 2.13.2 following JDK-8316028 - Bump LCMS 2 version to 2.14.0 following JDK-8297088 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-142687 - Resolves: RHEL-139534 - Resolves: RHEL-131588 - Resolves: RHEL-131600 - Resolves: RHEL-142875 - Resolves: RHEL-142697 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118767 - Related: RHEL-119455 - Related: RHEL-118775 - Update to 8u472-b08 (GA). - Update release notes for 8u472-b08. - Drop local JDK-8339414 fix as this is now included upstream - Reset rpmrelease to 1 now there are no other RPM builds on RHEL 9 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118767 - Resolves: RHEL-119455 - Update get_bundle_versions.sh to match other scripts - * get_bundle_versions.sh: Add license - * get_bundle_versions.sh: Set compile-command in Emacs - * get_bundle_versions.sh: Use different error codes for different failures - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086) - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002) - Add OpenJDK 8u support to get_bundle_versions.sh - Print bundle updates and backouts at end of openjdk_news.sh output - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh - Add timezone data update check to openjdk_news.sh - Add duplicate check to openjdk_news.sh - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-119329 - Add script to obtain bundled library versions from OpenJDK sources - Related: RHEL-119329 - Change portablerhel - Bump release for PQC build - Related: RHEL-212095 - Related: RHEL-188852 - Related: RHEL-149784 - Related: RHEL-212316 - Related: RHEL-212318 - Related: RHEL-212329 - Related: RHEL-212330 - Related: RHEL-212327 - Related: RHEL-212328 - Update to 8u502-b07 (GA). - Update release notes for 8u502-b07. - Bump lcms2 version to 2.19.1 following JDK-8321489, JDK-8348110, JDK-8375065 & JDK-8383354 - Bump zlib version to 1.3.2 following JDK-8378631 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Add attempted patch for JDK-8385876 to fix -Wnonnull build failure with s390x Zero on CentOS 9 - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Explictly define supported architectures - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Update tagged versions to include 9.8.0-z & 9.9.0. - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Obsolete old RHEL releases (8.2.0-z, 9.0.0-z, 9.7.0-z) - Sync the copy of the portable specfile with the latest update - Sync portable naming with later JDKs, due to adoption of <compatiblename> by portable - Drop <pversion> which is a redundant alias for version now - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212095 - Resolves: RHEL-188852 - Resolves: RHEL-149784 - Resolves: RHEL-212316 - Resolves: RHEL-212318 - Related: RHEL-212327 - Resolves: RHEL-212329 - Resolves: RHEL-212330 - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Resolves: RHEL-212327 - Resolves: RHEL-212328 - Bump release for PQC build - Related: RHEL-169446 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Bump rpmrelease for CentOS build - Related: RHEL-142687 - Related: RHEL-139534 - Related: RHEL-131588 - Related: RHEL-131600 - Related: RHEL-142875 - Related: RHEL-142697 - Update to 8u482-b08 (GA). - Update release notes for 8u482-b08. - Remove generated-configure.sh changes from JDK-8141590 & FIPS patch as we already autogenerate this - Turn on system FreeType as on later JDK versions and add to _privatelibs - Set bundled FreeType version to 2.13.2 following JDK-8316028 - Bump LCMS 2 version to 2.14.0 following JDK-8297088 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-142687 - Resolves: RHEL-139534 - Resolves: RHEL-131588 - Resolves: RHEL-131600 - Resolves: RHEL-142875 - Resolves: RHEL-142697 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118767 - Related: RHEL-119455 - Related: RHEL-118775 - Change portablerhel - Add CVEs for August 2026 release - Bump release for PQC build - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Related: RHEL-235603 - Update to 8u504-b01 (GA). - Update release notes for 8u504-b01. - Bump FreeType version to 2.14.3 following JDK-8385390 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235603 - Add CVEs to NEWS file - Related: RHEL-188852 - Bump release for PQC build - Related: RHEL-212095 - Related: RHEL-188852 - Related: RHEL-149784 - Related: RHEL-212316 - Related: RHEL-212318 - Related: RHEL-212329 - Related: RHEL-212330 - Related: RHEL-212327 - Related: RHEL-212328 - Update to 8u502-b07 (GA). - Update release notes for 8u502-b07. - Bump lcms2 version to 2.19.1 following JDK-8321489, JDK-8348110, JDK-8375065 & JDK-8383354 - Bump zlib version to 1.3.2 following JDK-8378631 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Add attempted patch for JDK-8385876 to fix -Wnonnull build failure with s390x Zero on CentOS 9 - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Explictly define supported architectures - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Update tagged versions to include 9.8.0-z & 9.9.0. - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Obsolete old RHEL releases (8.2.0-z, 9.0.0-z, 9.7.0-z) - Sync the copy of the portable specfile with the latest update - Sync portable naming with later JDKs, due to adoption of <compatiblename> by portable - Drop <pversion> which is a redundant alias for version now - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212095 - Resolves: RHEL-188852 - Resolves: RHEL-149784 - Resolves: RHEL-212316 - Resolves: RHEL-212318 - Related: RHEL-212327 - Resolves: RHEL-212329 - Resolves: RHEL-212330 - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Resolves: RHEL-212327 - Resolves: RHEL-212328 - Bump release for PQC build - Related: RHEL-169446 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Change portablerhel - Bump release for PQC build - Related: RHEL-169446 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Bump rpmrelease for CentOS build - Related: RHEL-142687 - Related: RHEL-139534 - Related: RHEL-131588 - Related: RHEL-131600 - Related: RHEL-142875 - Related: RHEL-142697 - Update to 8u482-b08 (GA). - Update release notes for 8u482-b08. - Remove generated-configure.sh changes from JDK-8141590 & FIPS patch as we already autogenerate this - Turn on system FreeType as on later JDK versions and add to _privatelibs - Set bundled FreeType version to 2.13.2 following JDK-8316028 - Bump LCMS 2 version to 2.14.0 following JDK-8297088 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-142687 - Resolves: RHEL-139534 - Resolves: RHEL-131588 - Resolves: RHEL-131600 - Resolves: RHEL-142875 - Resolves: RHEL-142697 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118767 - Related: RHEL-119455 - Related: RHEL-118775 - Update to 8u472-b08 (GA). - Update release notes for 8u472-b08. - Drop local JDK-8339414 fix as this is now included upstream - Reset rpmrelease to 1 now there are no other RPM builds on RHEL 9 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118767 - Resolves: RHEL-119455 - Update get_bundle_versions.sh to match other scripts - * get_bundle_versions.sh: Add license - * get_bundle_versions.sh: Set compile-command in Emacs - * get_bundle_versions.sh: Use different error codes for different failures - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086) - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002) - Add OpenJDK 8u support to get_bundle_versions.sh - Print bundle updates and backouts at end of openjdk_news.sh output - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh - Add timezone data update check to openjdk_news.sh - Add duplicate check to openjdk_news.sh - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-119329 - Add script to obtain bundled library versions from OpenJDK sources - Related: RHEL-119329 - Change portablerhel - Bump release for PQC build - Related: RHEL-212095 - Related: RHEL-188852 - Related: RHEL-149784 - Related: RHEL-212316 - Related: RHEL-212318 - Related: RHEL-212329 - Related: RHEL-212330 - Related: RHEL-212327 - Related: RHEL-212328 - Update to 8u502-b07 (GA). - Update release notes for 8u502-b07. - Bump lcms2 version to 2.19.1 following JDK-8321489, JDK-8348110, JDK-8375065 & JDK-8383354 - Bump zlib version to 1.3.2 following JDK-8378631 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Add attempted patch for JDK-8385876 to fix -Wnonnull build failure with s390x Zero on CentOS 9 - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Explictly define supported architectures - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Update tagged versions to include 9.8.0-z & 9.9.0. - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Obsolete old RHEL releases (8.2.0-z, 9.0.0-z, 9.7.0-z) - Sync the copy of the portable specfile with the latest update - Sync portable naming with later JDKs, due to adoption of <compatiblename> by portable - Drop <pversion> which is a redundant alias for version now - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212095 - Resolves: RHEL-188852 - Resolves: RHEL-149784 - Resolves: RHEL-212316 - Resolves: RHEL-212318 - Related: RHEL-212327 - Resolves: RHEL-212329 - Resolves: RHEL-212330 - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Resolves: RHEL-212327 - Resolves: RHEL-212328 - Bump release for PQC build - Related: RHEL-169446 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Bump rpmrelease for CentOS build - Related: RHEL-142687 - Related: RHEL-139534 - Related: RHEL-131588 - Related: RHEL-131600 - Related: RHEL-142875 - Related: RHEL-142697 - Update to 8u482-b08 (GA). - Update release notes for 8u482-b08. - Remove generated-configure.sh changes from JDK-8141590 & FIPS patch as we already autogenerate this - Turn on system FreeType as on later JDK versions and add to _privatelibs - Set bundled FreeType version to 2.13.2 following JDK-8316028 - Bump LCMS 2 version to 2.14.0 following JDK-8297088 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-142687 - Resolves: RHEL-139534 - Resolves: RHEL-131588 - Resolves: RHEL-131600 - Resolves: RHEL-142875 - Resolves: RHEL-142697 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118767 - Related: RHEL-119455 - Related: RHEL-118775 - Change portablerhel - Add CVEs for August 2026 release - Bump release for PQC build - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Related: RHEL-235603 - Update to 8u504-b01 (GA). - Update release notes for 8u504-b01. - Bump FreeType version to 2.14.3 following JDK-8385390 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235603 - Add CVEs to NEWS file - Related: RHEL-188852 - Bump release for PQC build - Related: RHEL-212095 - Related: RHEL-188852 - Related: RHEL-149784 - Related: RHEL-212316 - Related: RHEL-212318 - Related: RHEL-212329 - Related: RHEL-212330 - Related: RHEL-212327 - Related: RHEL-212328 - Update to 8u502-b07 (GA). - Update release notes for 8u502-b07. - Bump lcms2 version to 2.19.1 following JDK-8321489, JDK-8348110, JDK-8375065 & JDK-8383354 - Bump zlib version to 1.3.2 following JDK-8378631 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Add attempted patch for JDK-8385876 to fix -Wnonnull build failure with s390x Zero on CentOS 9 - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Explictly define supported architectures - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Update tagged versions to include 9.8.0-z & 9.9.0. - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Obsolete old RHEL releases (8.2.0-z, 9.0.0-z, 9.7.0-z) - Sync the copy of the portable specfile with the latest update - Sync portable naming with later JDKs, due to adoption of <compatiblename> by portable - Drop <pversion> which is a redundant alias for version now - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212095 - Resolves: RHEL-188852 - Resolves: RHEL-149784 - Resolves: RHEL-212316 - Resolves: RHEL-212318 - Related: RHEL-212327 - Resolves: RHEL-212329 - Resolves: RHEL-212330 - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Resolves: RHEL-212327 - Resolves: RHEL-212328 - Bump release for PQC build - Related: RHEL-169446 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Adapted to newest copy-jdk-configs to fix issue with rpm 4.17 - Disable copy-jdk-configs for Flatpak builds - Removed copy-jdk-configs backward compatibility to fix when both rpm 4.16 and 4.17 are in transaction - Resolves: RHEL-73880 - See-Also: RHEL-73881 - See-Also: RHEL-73882 - See-Also: RHEL-73873 - Make java-11-openjdk the default JDK only on RHEL x86_32 - Drop system timezone data dependency from base RHEL 11u builds - Resolves: RHEL-70599 - See-Also: RHEL-70600 - See-Also: RHEL-70601 - Resolves: RHEL-71242 - See-Also: RHEL-71243 - See-Also: RHEL-71244 - Make java-11-openjdk NOT the default JDK in rhel-9.2.0.z, rhel-9.4.z, rhel-9.5.z - Resolves: RHEL-63042 - See-Also: RHEL-63043 - See-Also: RHEL-63044 - Update to jdk-11.0.25+9 (GA) - Update release notes to 11.0.25+9 - Switch to GA mode for release - Related: RHEL-58775 - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. ** - Update to jdk-11.0.25+8 (EA) - Update release notes to 11.0.25+8 - Related: RHEL-58775 - RHJDKBP-875 - Added gating.yaml and/or rpminspect.yaml - RHJDKBP-874 - Removed - Related: RHEL-58775 - Update to jdk-11.0.25+7 (EA) - Update release notes to 11.0.25+7 - Related: RHEL-58775 - Limit Java only tests to one 'jdk_test_arch' - Related: RHEL-58775 - Resolves: RHEL-59730 - Update to jdk-11.0.25+6 (EA) - Update release notes to 11.0.25+6 - Switch to EA mode - Bump giflib version to 5.2.2 following JDK-8328999 - Bump libpng version to 1.6.43 following JDK-8329004 - Related: RHEL-58775 - Update to jdk-11.0.24+8 (GA) - Update release notes to 11.0.24+8 - Adjusted DTLS & RPATH NEWS entries to match OpenJDK 17 & 21 release notes - Switch to GA mode for release - Fix Provides to reflect up to date component versions - Add zlib build required or bundled version (1.3.1), depending on system_libs setting - Resolves: RHEL-45202 - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. ** - Adapted to newest copy-jdk-configs to fix issue with rpm 4.17 - Disable copy-jdk-configs for Flatpak builds - Removed copy-jdk-configs backward compatibility to fix when both rpm 4.16 and 4.17 are in transaction - Resolves: RHEL-73880 - See-Also: RHEL-73881 - See-Also: RHEL-73882 - See-Also: RHEL-73873 - Make java-11-openjdk the default JDK only on RHEL x86_32 - Drop system timezone data dependency from base RHEL 11u builds - Resolves: RHEL-70599 - See-Also: RHEL-70600 - See-Also: RHEL-70601 - Resolves: RHEL-71242 - See-Also: RHEL-71243 - See-Also: RHEL-71244 - Make java-11-openjdk NOT the default JDK in rhel-9.2.0.z, rhel-9.4.z, rhel-9.5.z - Resolves: RHEL-63042 - See-Also: RHEL-63043 - See-Also: RHEL-63044 - Update to jdk-11.0.25+9 (GA) - Update release notes to 11.0.25+9 - Switch to GA mode for release - Related: RHEL-58775 - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. ** - Update to jdk-11.0.25+8 (EA) - Update release notes to 11.0.25+8 - Related: RHEL-58775 - RHJDKBP-875 - Added gating.yaml and/or rpminspect.yaml - RHJDKBP-874 - Removed - Related: RHEL-58775 - Update to jdk-11.0.25+7 (EA) - Update release notes to 11.0.25+7 - Related: RHEL-58775 - Limit Java only tests to one 'jdk_test_arch' - Related: RHEL-58775 - Resolves: RHEL-59730 - Update to jdk-11.0.25+6 (EA) - Update release notes to 11.0.25+6 - Switch to EA mode - Bump giflib version to 5.2.2 following JDK-8328999 - Bump libpng version to 1.6.43 following JDK-8329004 - Related: RHEL-58775 - Update to jdk-11.0.24+8 (GA) - Update release notes to 11.0.24+8 - Adjusted DTLS & RPATH NEWS entries to match OpenJDK 17 & 21 release notes - Switch to GA mode for release - Fix Provides to reflect up to date component versions - Add zlib build required or bundled version (1.3.1), depending on system_libs setting - Resolves: RHEL-45202 - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. ** - Adapted to newest copy-jdk-configs to fix issue with rpm 4.17 - Disable copy-jdk-configs for Flatpak builds - Removed copy-jdk-configs backward compatibility to fix when both rpm 4.16 and 4.17 are in transaction - Resolves: RHEL-73880 - See-Also: RHEL-73881 - See-Also: RHEL-73882 - See-Also: RHEL-73873 - Make java-11-openjdk the default JDK only on RHEL x86_32 - Drop system timezone data dependency from base RHEL 11u builds - Resolves: RHEL-70599 - See-Also: RHEL-70600 - See-Also: RHEL-70601 - Resolves: RHEL-71242 - See-Also: RHEL-71243 - See-Also: RHEL-71244 - Make java-11-openjdk NOT the default JDK in rhel-9.2.0.z, rhel-9.4.z, rhel-9.5.z - Resolves: RHEL-63042 - See-Also: RHEL-63043 - See-Also: RHEL-63044 - Update to jdk-11.0.25+9 (GA) - Update release notes to 11.0.25+9 - Switch to GA mode for release - Related: RHEL-58775 - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. ** - Update to jdk-11.0.25+8 (EA) - Update release notes to 11.0.25+8 - Related: RHEL-58775 - RHJDKBP-875 - Added gating.yaml and/or rpminspect.yaml - RHJDKBP-874 - Removed - Related: RHEL-58775 - Update to jdk-11.0.25+7 (EA) - Update release notes to 11.0.25+7 - Related: RHEL-58775 - Limit Java only tests to one 'jdk_test_arch' - Related: RHEL-58775 - Resolves: RHEL-59730 - Update to jdk-11.0.25+6 (EA) - Update release notes to 11.0.25+6 - Switch to EA mode - Bump giflib version to 5.2.2 following JDK-8328999 - Bump libpng version to 1.6.43 following JDK-8329004 - Related: RHEL-58775 - Update to jdk-11.0.24+8 (GA) - Update release notes to 11.0.24+8 - Adjusted DTLS & RPATH NEWS entries to match OpenJDK 17 & 21 release notes - Switch to GA mode for release - Fix Provides to reflect up to date component versions - Add zlib build required or bundled version (1.3.1), depending on system_libs setting - Resolves: RHEL-45202 - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. ** - Adapted to newest copy-jdk-configs to fix issue with rpm 4.17 - Disable copy-jdk-configs for Flatpak builds - Removed copy-jdk-configs backward compatibility to fix when both rpm 4.16 and 4.17 are in transaction - Resolves: RHEL-73880 - See-Also: RHEL-73881 - See-Also: RHEL-73882 - See-Also: RHEL-73873 - Make java-11-openjdk the default JDK only on RHEL x86_32 - Drop system timezone data dependency from base RHEL 11u builds - Resolves: RHEL-70599 - See-Also: RHEL-70600 - See-Also: RHEL-70601 - Resolves: RHEL-71242 - See-Also: RHEL-71243 - See-Also: RHEL-71244 - Make java-11-openjdk NOT the default JDK in rhel-9.2.0.z, rhel-9.4.z, rhel-9.5.z - Resolves: RHEL-63042 - See-Also: RHEL-63043 - See-Also: RHEL-63044 - Update to jdk-11.0.25+9 (GA) - Update release notes to 11.0.25+9 - Switch to GA mode for release - Related: RHEL-58775 - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. ** - Update to jdk-11.0.25+8 (EA) - Update release notes to 11.0.25+8 - Related: RHEL-58775 - RHJDKBP-875 - Added gating.yaml and/or rpminspect.yaml - RHJDKBP-874 - Removed - Related: RHEL-58775 - Update to jdk-11.0.25+7 (EA) - Update release notes to 11.0.25+7 - Related: RHEL-58775 - Limit Java only tests to one 'jdk_test_arch' - Related: RHEL-58775 - Resolves: RHEL-59730 - Update to jdk-11.0.25+6 (EA) - Update release notes to 11.0.25+6 - Switch to EA mode - Bump giflib version to 5.2.2 following JDK-8328999 - Bump libpng version to 1.6.43 following JDK-8329004 - Related: RHEL-58775 - Update to jdk-11.0.24+8 (GA) - Update release notes to 11.0.24+8 - Adjusted DTLS & RPATH NEWS entries to match OpenJDK 17 & 21 release notes - Switch to GA mode for release - Fix Provides to reflect up to date component versions - Add zlib build required or bundled version (1.3.1), depending on system_libs setting - Resolves: RHEL-45202 - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. ** - Adapted to newest copy-jdk-configs to fix issue with rpm 4.17 - Disable copy-jdk-configs for Flatpak builds - Removed copy-jdk-configs backward compatibility to fix when both rpm 4.16 and 4.17 are in transaction - Resolves: RHEL-73880 - See-Also: RHEL-73881 - See-Also: RHEL-73882 - See-Also: RHEL-73873 - Make java-11-openjdk the default JDK only on RHEL x86_32 - Drop system timezone data dependency from base RHEL 11u builds - Resolves: RHEL-70599 - See-Also: RHEL-70600 - See-Also: RHEL-70601 - Resolves: RHEL-71242 - See-Also: RHEL-71243 - See-Also: RHEL-71244 - Make java-11-openjdk NOT the default JDK in rhel-9.2.0.z, rhel-9.4.z, rhel-9.5.z - Resolves: RHEL-63042 - See-Also: RHEL-63043 - See-Also: RHEL-63044 - Update to jdk-11.0.25+9 (GA) - Update release notes to 11.0.25+9 - Switch to GA mode for release - Related: RHEL-58775 - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. ** - Update to jdk-11.0.25+8 (EA) - Update release notes to 11.0.25+8 - Related: RHEL-58775 - RHJDKBP-875 - Added gating.yaml and/or rpminspect.yaml - RHJDKBP-874 - Removed - Related: RHEL-58775 - Update to jdk-11.0.25+7 (EA) - Update release notes to 11.0.25+7 - Related: RHEL-58775 - Limit Java only tests to one 'jdk_test_arch' - Related: RHEL-58775 - Resolves: RHEL-59730 - Update to jdk-11.0.25+6 (EA) - Update release notes to 11.0.25+6 - Switch to EA mode - Bump giflib version to 5.2.2 following JDK-8328999 - Bump libpng version to 1.6.43 following JDK-8329004 - Related: RHEL-58775 - Update to jdk-11.0.24+8 (GA) - Update release notes to 11.0.24+8 - Adjusted DTLS & RPATH NEWS entries to match OpenJDK 17 & 21 release notes - Switch to GA mode for release - Fix Provides to reflect up to date component versions - Add zlib build required or bundled version (1.3.1), depending on system_libs setting - Resolves: RHEL-45202 - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. ** - Adapted to newest copy-jdk-configs to fix issue with rpm 4.17 - Disable copy-jdk-configs for Flatpak builds - Removed copy-jdk-configs backward compatibility to fix when both rpm 4.16 and 4.17 are in transaction - Resolves: RHEL-73880 - See-Also: RHEL-73881 - See-Also: RHEL-73882 - See-Also: RHEL-73873 - Make java-11-openjdk the default JDK only on RHEL x86_32 - Drop system timezone data dependency from base RHEL 11u builds - Resolves: RHEL-70599 - See-Also: RHEL-70600 - See-Also: RHEL-70601 - Resolves: RHEL-71242 - See-Also: RHEL-71243 - See-Also: RHEL-71244 - Make java-11-openjdk NOT the default JDK in rhel-9.2.0.z, rhel-9.4.z, rhel-9.5.z - Resolves: RHEL-63042 - See-Also: RHEL-63043 - See-Also: RHEL-63044 - Update to jdk-11.0.25+9 (GA) - Update release notes to 11.0.25+9 - Switch to GA mode for release - Related: RHEL-58775 - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. ** - Update to jdk-11.0.25+8 (EA) - Update release notes to 11.0.25+8 - Related: RHEL-58775 - RHJDKBP-875 - Added gating.yaml and/or rpminspect.yaml - RHJDKBP-874 - Removed - Related: RHEL-58775 - Update to jdk-11.0.25+7 (EA) - Update release notes to 11.0.25+7 - Related: RHEL-58775 - Limit Java only tests to one 'jdk_test_arch' - Related: RHEL-58775 - Resolves: RHEL-59730 - Update to jdk-11.0.25+6 (EA) - Update release notes to 11.0.25+6 - Switch to EA mode - Bump giflib version to 5.2.2 following JDK-8328999 - Bump libpng version to 1.6.43 following JDK-8329004 - Related: RHEL-58775 - Update to jdk-11.0.24+8 (GA) - Update release notes to 11.0.24+8 - Adjusted DTLS & RPATH NEWS entries to match OpenJDK 17 & 21 release notes - Switch to GA mode for release - Fix Provides to reflect up to date component versions - Add zlib build required or bundled version (1.3.1), depending on system_libs setting - Resolves: RHEL-45202 - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. ** - Adapted to newest copy-jdk-configs to fix issue with rpm 4.17 - Disable copy-jdk-configs for Flatpak builds - Removed copy-jdk-configs backward compatibility to fix when both rpm 4.16 and 4.17 are in transaction - Resolves: RHEL-73880 - See-Also: RHEL-73881 - See-Also: RHEL-73882 - See-Also: RHEL-73873 - Make java-11-openjdk the default JDK only on RHEL x86_32 - Drop system timezone data dependency from base RHEL 11u builds - Resolves: RHEL-70599 - See-Also: RHEL-70600 - See-Also: RHEL-70601 - Resolves: RHEL-71242 - See-Also: RHEL-71243 - See-Also: RHEL-71244 - Make java-11-openjdk NOT the default JDK in rhel-9.2.0.z, rhel-9.4.z, rhel-9.5.z - Resolves: RHEL-63042 - See-Also: RHEL-63043 - See-Also: RHEL-63044 - Update to jdk-11.0.25+9 (GA) - Update release notes to 11.0.25+9 - Switch to GA mode for release - Related: RHEL-58775 - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. ** - Update to jdk-11.0.25+8 (EA) - Update release notes to 11.0.25+8 - Related: RHEL-58775 - RHJDKBP-875 - Added gating.yaml and/or rpminspect.yaml - RHJDKBP-874 - Removed - Related: RHEL-58775 - Update to jdk-11.0.25+7 (EA) - Update release notes to 11.0.25+7 - Related: RHEL-58775 - Limit Java only tests to one 'jdk_test_arch' - Related: RHEL-58775 - Resolves: RHEL-59730 - Update to jdk-11.0.25+6 (EA) - Update release notes to 11.0.25+6 - Switch to EA mode - Bump giflib version to 5.2.2 following JDK-8328999 - Bump libpng version to 1.6.43 following JDK-8329004 - Related: RHEL-58775 - Update to jdk-11.0.24+8 (GA) - Update release notes to 11.0.24+8 - Adjusted DTLS & RPATH NEWS entries to match OpenJDK 17 & 21 release notes - Switch to GA mode for release - Fix Provides to reflect up to date component versions - Add zlib build required or bundled version (1.3.1), depending on system_libs setting - Resolves: RHEL-45202 - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. ** - Adapted to newest copy-jdk-configs to fix issue with rpm 4.17 - Disable copy-jdk-configs for Flatpak builds - Removed copy-jdk-configs backward compatibility to fix when both rpm 4.16 and 4.17 are in transaction - Resolves: RHEL-73880 - See-Also: RHEL-73881 - See-Also: RHEL-73882 - See-Also: RHEL-73873 - Make java-11-openjdk the default JDK only on RHEL x86_32 - Drop system timezone data dependency from base RHEL 11u builds - Resolves: RHEL-70599 - See-Also: RHEL-70600 - See-Also: RHEL-70601 - Resolves: RHEL-71242 - See-Also: RHEL-71243 - See-Also: RHEL-71244 - Make java-11-openjdk NOT the default JDK in rhel-9.2.0.z, rhel-9.4.z, rhel-9.5.z - Resolves: RHEL-63042 - See-Also: RHEL-63043 - See-Also: RHEL-63044 - Update to jdk-11.0.25+9 (GA) - Update release notes to 11.0.25+9 - Switch to GA mode for release - Related: RHEL-58775 - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. ** - Update to jdk-11.0.25+8 (EA) - Update release notes to 11.0.25+8 - Related: RHEL-58775 - RHJDKBP-875 - Added gating.yaml and/or rpminspect.yaml - RHJDKBP-874 - Removed - Related: RHEL-58775 - Update to jdk-11.0.25+7 (EA) - Update release notes to 11.0.25+7 - Related: RHEL-58775 - Limit Java only tests to one 'jdk_test_arch' - Related: RHEL-58775 - Resolves: RHEL-59730 - Update to jdk-11.0.25+6 (EA) - Update release notes to 11.0.25+6 - Switch to EA mode - Bump giflib version to 5.2.2 following JDK-8328999 - Bump libpng version to 1.6.43 following JDK-8329004 - Related: RHEL-58775 - Update to jdk-11.0.24+8 (GA) - Update release notes to 11.0.24+8 - Adjusted DTLS & RPATH NEWS entries to match OpenJDK 17 & 21 release notes - Switch to GA mode for release - Fix Provides to reflect up to date component versions - Add zlib build required or bundled version (1.3.1), depending on system_libs setting - Resolves: RHEL-45202 - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. ** - Adapted to newest copy-jdk-configs to fix issue with rpm 4.17 - Disable copy-jdk-configs for Flatpak builds - Removed copy-jdk-configs backward compatibility to fix when both rpm 4.16 and 4.17 are in transaction - Resolves: RHEL-73880 - See-Also: RHEL-73881 - See-Also: RHEL-73882 - See-Also: RHEL-73873 - Make java-11-openjdk the default JDK only on RHEL x86_32 - Drop system timezone data dependency from base RHEL 11u builds - Resolves: RHEL-70599 - See-Also: RHEL-70600 - See-Also: RHEL-70601 - Resolves: RHEL-71242 - See-Also: RHEL-71243 - See-Also: RHEL-71244 - Make java-11-openjdk NOT the default JDK in rhel-9.2.0.z, rhel-9.4.z, rhel-9.5.z - Resolves: RHEL-63042 - See-Also: RHEL-63043 - See-Also: RHEL-63044 - Update to jdk-11.0.25+9 (GA) - Update release notes to 11.0.25+9 - Switch to GA mode for release - Related: RHEL-58775 - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. ** - Update to jdk-11.0.25+8 (EA) - Update release notes to 11.0.25+8 - Related: RHEL-58775 - RHJDKBP-875 - Added gating.yaml and/or rpminspect.yaml - RHJDKBP-874 - Removed - Related: RHEL-58775 - Update to jdk-11.0.25+7 (EA) - Update release notes to 11.0.25+7 - Related: RHEL-58775 - Limit Java only tests to one 'jdk_test_arch' - Related: RHEL-58775 - Resolves: RHEL-59730 - Update to jdk-11.0.25+6 (EA) - Update release notes to 11.0.25+6 - Switch to EA mode - Bump giflib version to 5.2.2 following JDK-8328999 - Bump libpng version to 1.6.43 following JDK-8329004 - Related: RHEL-58775 - Update to jdk-11.0.24+8 (GA) - Update release notes to 11.0.24+8 - Adjusted DTLS & RPATH NEWS entries to match OpenJDK 17 & 21 release notes - Switch to GA mode for release - Fix Provides to reflect up to date component versions - Add zlib build required or bundled version (1.3.1), depending on system_libs setting - Resolves: RHEL-45202 - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. ** - Change portablesiffix - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Add test to ensure blocked.certs is valid (OPENJDK-4362) - Restore NEWS file so portable can be rebuilt - Resolves: RHEL-149327 - Set rpmrelease to 2 - Sync java-17-openjdk-portable.specfile from openjdk-portable-centos-9 - Set fipsver to e1780dd5d39 - Resolves: RHEL-122136 - Update to jdk-17.0.18+8 (GA) - Add to .gitignore openjdk-17.0.18+8.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set buildver to 8 - Set is_ga to 1 - Update sources to openjdk-17.0.18+8.tar.xz - Resolves: RHEL-139552 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Update to jdk-17.0.18+7 (EA) - Add to .gitignore openjdk-17.0.18+7-ea.tar.xz - Set updatever to 18 - Set buildver to 7 - Set is_ga to 0 - Update sources to openjdk-17.0.18+7-ea.tar.xz - Set bundled libpng version to 1.6.51 - Resolves: RHEL-131590 - Resolves: RHEL-131601 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Update to jdk-17.0.17+10 (GA) - Add to .gitignore openjdk-17.0.17+10.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set updatever to 17 - Set buildver to 10 - Set rpmrelease to 1, remove 'must start at 2' comment - Set bundled harfbuzz version to 11.2.0 - Update sources to openjdk-17.0.17+10.tar.xz - Resolves: RHEL-119458 - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Update to jdk-17.0.16+8 - Add to .gitignore openjdk-17.0.16+8.tar.xz - Set updatever to 16 - Set buildver to 8 - Set rpmrelease to 2 - Update sources to openjdk-17.0.16+8.tar.xz - Resolves: RHEL-101788 - Resolves: RHEL-101795 - Resolves: RHEL-101796 - Resolves: RHEL-101797 - Resolves: RHEL-102283 - Resolves: RHEL-102286 - Resolves: RHEL-102285 - Resolves: RHEL-102284 - Require tzdata-java 2025b at runtime and for build - Set bundled freetype provide version to 2.13.3 - Set bundled harfbuzz provide version to 10.4.0 - Set bundled lcms2 provide version to 2.17.0 - Set bundled libpng provide version to 1.6.47 - Recommend pipewire - Related: RHEL-102667 - Resolves: RHEL-102669 - Resolves: RHEL-102670 - Resolves: RHEL-102672 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Change portablesiffix - Set rpmrelease to 2 for PQC signing - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Change portablesiffix - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20.1+1 (GA) - Add to .gitignore openjdk-17.0.20.1+1.tar.xz - Set patchver to 1 - Set buildver to 1 - Set rpmrelease to 1 - Update sources to openjdk-17.0.20.1+1.tar.xz - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235614 - Update NEWS for jdk-17.0.20.1+1 (GA) - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Add test to ensure blocked.certs is valid (OPENJDK-4362) - Restore NEWS file so portable can be rebuilt - Resolves: RHEL-149327 - Set rpmrelease to 2 - Sync java-17-openjdk-portable.specfile from openjdk-portable-centos-9 - Set fipsver to e1780dd5d39 - Resolves: RHEL-122136 - Update to jdk-17.0.18+8 (GA) - Add to .gitignore openjdk-17.0.18+8.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set buildver to 8 - Set is_ga to 1 - Update sources to openjdk-17.0.18+8.tar.xz - Resolves: RHEL-139552 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Update to jdk-17.0.18+7 (EA) - Add to .gitignore openjdk-17.0.18+7-ea.tar.xz - Set updatever to 18 - Set buildver to 7 - Set is_ga to 0 - Update sources to openjdk-17.0.18+7-ea.tar.xz - Set bundled libpng version to 1.6.51 - Resolves: RHEL-131590 - Resolves: RHEL-131601 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Update to jdk-17.0.17+10 (GA) - Add to .gitignore openjdk-17.0.17+10.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set updatever to 17 - Set buildver to 10 - Set rpmrelease to 1, remove 'must start at 2' comment - Set bundled harfbuzz version to 11.2.0 - Update sources to openjdk-17.0.17+10.tar.xz - Resolves: RHEL-119458 - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Update to jdk-17.0.16+8 - Add to .gitignore openjdk-17.0.16+8.tar.xz - Set updatever to 16 - Set buildver to 8 - Set rpmrelease to 2 - Update sources to openjdk-17.0.16+8.tar.xz - Resolves: RHEL-101788 - Resolves: RHEL-101795 - Resolves: RHEL-101796 - Resolves: RHEL-101797 - Resolves: RHEL-102283 - Resolves: RHEL-102286 - Resolves: RHEL-102285 - Resolves: RHEL-102284 - Require tzdata-java 2025b at runtime and for build - Set bundled freetype provide version to 2.13.3 - Set bundled harfbuzz provide version to 10.4.0 - Set bundled lcms2 provide version to 2.17.0 - Set bundled libpng provide version to 1.6.47 - Recommend pipewire - Related: RHEL-102667 - Resolves: RHEL-102669 - Resolves: RHEL-102670 - Resolves: RHEL-102672 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Change portablesiffix - Set rpmrelease to 2 for PQC signing - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Change portablesiffix - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20.1+1 (GA) - Add to .gitignore openjdk-17.0.20.1+1.tar.xz - Set patchver to 1 - Set buildver to 1 - Set rpmrelease to 1 - Update sources to openjdk-17.0.20.1+1.tar.xz - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235614 - Update NEWS for jdk-17.0.20.1+1 (GA) - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Add test to ensure blocked.certs is valid (OPENJDK-4362) - Restore NEWS file so portable can be rebuilt - Resolves: RHEL-149327 - Set rpmrelease to 2 - Sync java-17-openjdk-portable.specfile from openjdk-portable-centos-9 - Set fipsver to e1780dd5d39 - Resolves: RHEL-122136 - Update to jdk-17.0.18+8 (GA) - Add to .gitignore openjdk-17.0.18+8.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set buildver to 8 - Set is_ga to 1 - Update sources to openjdk-17.0.18+8.tar.xz - Resolves: RHEL-139552 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Update to jdk-17.0.18+7 (EA) - Add to .gitignore openjdk-17.0.18+7-ea.tar.xz - Set updatever to 18 - Set buildver to 7 - Set is_ga to 0 - Update sources to openjdk-17.0.18+7-ea.tar.xz - Set bundled libpng version to 1.6.51 - Resolves: RHEL-131590 - Resolves: RHEL-131601 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Update to jdk-17.0.17+10 (GA) - Add to .gitignore openjdk-17.0.17+10.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set updatever to 17 - Set buildver to 10 - Set rpmrelease to 1, remove 'must start at 2' comment - Set bundled harfbuzz version to 11.2.0 - Update sources to openjdk-17.0.17+10.tar.xz - Resolves: RHEL-119458 - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Update to jdk-17.0.16+8 - Add to .gitignore openjdk-17.0.16+8.tar.xz - Set updatever to 16 - Set buildver to 8 - Set rpmrelease to 2 - Update sources to openjdk-17.0.16+8.tar.xz - Resolves: RHEL-101788 - Resolves: RHEL-101795 - Resolves: RHEL-101796 - Resolves: RHEL-101797 - Resolves: RHEL-102283 - Resolves: RHEL-102286 - Resolves: RHEL-102285 - Resolves: RHEL-102284 - Require tzdata-java 2025b at runtime and for build - Set bundled freetype provide version to 2.13.3 - Set bundled harfbuzz provide version to 10.4.0 - Set bundled lcms2 provide version to 2.17.0 - Set bundled libpng provide version to 1.6.47 - Recommend pipewire - Related: RHEL-102667 - Resolves: RHEL-102669 - Resolves: RHEL-102670 - Resolves: RHEL-102672 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Change portablesiffix - Set rpmrelease to 2 for PQC signing - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Change portablesiffix - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20.1+1 (GA) - Add to .gitignore openjdk-17.0.20.1+1.tar.xz - Set patchver to 1 - Set buildver to 1 - Set rpmrelease to 1 - Update sources to openjdk-17.0.20.1+1.tar.xz - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235614 - Update NEWS for jdk-17.0.20.1+1 (GA) - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Add test to ensure blocked.certs is valid (OPENJDK-4362) - Restore NEWS file so portable can be rebuilt - Resolves: RHEL-149327 - Set rpmrelease to 2 - Sync java-17-openjdk-portable.specfile from openjdk-portable-centos-9 - Set fipsver to e1780dd5d39 - Resolves: RHEL-122136 - Update to jdk-17.0.18+8 (GA) - Add to .gitignore openjdk-17.0.18+8.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set buildver to 8 - Set is_ga to 1 - Update sources to openjdk-17.0.18+8.tar.xz - Resolves: RHEL-139552 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Update to jdk-17.0.18+7 (EA) - Add to .gitignore openjdk-17.0.18+7-ea.tar.xz - Set updatever to 18 - Set buildver to 7 - Set is_ga to 0 - Update sources to openjdk-17.0.18+7-ea.tar.xz - Set bundled libpng version to 1.6.51 - Resolves: RHEL-131590 - Resolves: RHEL-131601 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Update to jdk-17.0.17+10 (GA) - Add to .gitignore openjdk-17.0.17+10.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set updatever to 17 - Set buildver to 10 - Set rpmrelease to 1, remove 'must start at 2' comment - Set bundled harfbuzz version to 11.2.0 - Update sources to openjdk-17.0.17+10.tar.xz - Resolves: RHEL-119458 - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Update to jdk-17.0.16+8 - Add to .gitignore openjdk-17.0.16+8.tar.xz - Set updatever to 16 - Set buildver to 8 - Set rpmrelease to 2 - Update sources to openjdk-17.0.16+8.tar.xz - Resolves: RHEL-101788 - Resolves: RHEL-101795 - Resolves: RHEL-101796 - Resolves: RHEL-101797 - Resolves: RHEL-102283 - Resolves: RHEL-102286 - Resolves: RHEL-102285 - Resolves: RHEL-102284 - Require tzdata-java 2025b at runtime and for build - Set bundled freetype provide version to 2.13.3 - Set bundled harfbuzz provide version to 10.4.0 - Set bundled lcms2 provide version to 2.17.0 - Set bundled libpng provide version to 1.6.47 - Recommend pipewire - Related: RHEL-102667 - Resolves: RHEL-102669 - Resolves: RHEL-102670 - Resolves: RHEL-102672 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Change portablesiffix - Set rpmrelease to 2 for PQC signing - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Change portablesiffix - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20.1+1 (GA) - Add to .gitignore openjdk-17.0.20.1+1.tar.xz - Set patchver to 1 - Set buildver to 1 - Set rpmrelease to 1 - Update sources to openjdk-17.0.20.1+1.tar.xz - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235614 - Update NEWS for jdk-17.0.20.1+1 (GA) - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Add test to ensure blocked.certs is valid (OPENJDK-4362) - Restore NEWS file so portable can be rebuilt - Resolves: RHEL-149327 - Set rpmrelease to 2 - Sync java-17-openjdk-portable.specfile from openjdk-portable-centos-9 - Set fipsver to e1780dd5d39 - Resolves: RHEL-122136 - Update to jdk-17.0.18+8 (GA) - Add to .gitignore openjdk-17.0.18+8.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set buildver to 8 - Set is_ga to 1 - Update sources to openjdk-17.0.18+8.tar.xz - Resolves: RHEL-139552 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Update to jdk-17.0.18+7 (EA) - Add to .gitignore openjdk-17.0.18+7-ea.tar.xz - Set updatever to 18 - Set buildver to 7 - Set is_ga to 0 - Update sources to openjdk-17.0.18+7-ea.tar.xz - Set bundled libpng version to 1.6.51 - Resolves: RHEL-131590 - Resolves: RHEL-131601 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Update to jdk-17.0.17+10 (GA) - Add to .gitignore openjdk-17.0.17+10.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set updatever to 17 - Set buildver to 10 - Set rpmrelease to 1, remove 'must start at 2' comment - Set bundled harfbuzz version to 11.2.0 - Update sources to openjdk-17.0.17+10.tar.xz - Resolves: RHEL-119458 - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Update to jdk-17.0.16+8 - Add to .gitignore openjdk-17.0.16+8.tar.xz - Set updatever to 16 - Set buildver to 8 - Set rpmrelease to 2 - Update sources to openjdk-17.0.16+8.tar.xz - Resolves: RHEL-101788 - Resolves: RHEL-101795 - Resolves: RHEL-101796 - Resolves: RHEL-101797 - Resolves: RHEL-102283 - Resolves: RHEL-102286 - Resolves: RHEL-102285 - Resolves: RHEL-102284 - Require tzdata-java 2025b at runtime and for build - Set bundled freetype provide version to 2.13.3 - Set bundled harfbuzz provide version to 10.4.0 - Set bundled lcms2 provide version to 2.17.0 - Set bundled libpng provide version to 1.6.47 - Recommend pipewire - Related: RHEL-102667 - Resolves: RHEL-102669 - Resolves: RHEL-102670 - Resolves: RHEL-102672 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Change portablesiffix - Set rpmrelease to 2 for PQC signing - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Change portablesiffix - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20.1+1 (GA) - Add to .gitignore openjdk-17.0.20.1+1.tar.xz - Set patchver to 1 - Set buildver to 1 - Set rpmrelease to 1 - Update sources to openjdk-17.0.20.1+1.tar.xz - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235614 - Update NEWS for jdk-17.0.20.1+1 (GA) - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Add test to ensure blocked.certs is valid (OPENJDK-4362) - Restore NEWS file so portable can be rebuilt - Resolves: RHEL-149327 - Set rpmrelease to 2 - Sync java-17-openjdk-portable.specfile from openjdk-portable-centos-9 - Set fipsver to e1780dd5d39 - Resolves: RHEL-122136 - Update to jdk-17.0.18+8 (GA) - Add to .gitignore openjdk-17.0.18+8.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set buildver to 8 - Set is_ga to 1 - Update sources to openjdk-17.0.18+8.tar.xz - Resolves: RHEL-139552 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Update to jdk-17.0.18+7 (EA) - Add to .gitignore openjdk-17.0.18+7-ea.tar.xz - Set updatever to 18 - Set buildver to 7 - Set is_ga to 0 - Update sources to openjdk-17.0.18+7-ea.tar.xz - Set bundled libpng version to 1.6.51 - Resolves: RHEL-131590 - Resolves: RHEL-131601 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Update to jdk-17.0.17+10 (GA) - Add to .gitignore openjdk-17.0.17+10.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set updatever to 17 - Set buildver to 10 - Set rpmrelease to 1, remove 'must start at 2' comment - Set bundled harfbuzz version to 11.2.0 - Update sources to openjdk-17.0.17+10.tar.xz - Resolves: RHEL-119458 - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Update to jdk-17.0.16+8 - Add to .gitignore openjdk-17.0.16+8.tar.xz - Set updatever to 16 - Set buildver to 8 - Set rpmrelease to 2 - Update sources to openjdk-17.0.16+8.tar.xz - Resolves: RHEL-101788 - Resolves: RHEL-101795 - Resolves: RHEL-101796 - Resolves: RHEL-101797 - Resolves: RHEL-102283 - Resolves: RHEL-102286 - Resolves: RHEL-102285 - Resolves: RHEL-102284 - Require tzdata-java 2025b at runtime and for build - Set bundled freetype provide version to 2.13.3 - Set bundled harfbuzz provide version to 10.4.0 - Set bundled lcms2 provide version to 2.17.0 - Set bundled libpng provide version to 1.6.47 - Recommend pipewire - Related: RHEL-102667 - Resolves: RHEL-102669 - Resolves: RHEL-102670 - Resolves: RHEL-102672 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Change portablesiffix - Set rpmrelease to 2 for PQC signing - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Change portablesiffix - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20.1+1 (GA) - Add to .gitignore openjdk-17.0.20.1+1.tar.xz - Set patchver to 1 - Set buildver to 1 - Set rpmrelease to 1 - Update sources to openjdk-17.0.20.1+1.tar.xz - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235614 - Update NEWS for jdk-17.0.20.1+1 (GA) - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Add test to ensure blocked.certs is valid (OPENJDK-4362) - Restore NEWS file so portable can be rebuilt - Resolves: RHEL-149327 - Set rpmrelease to 2 - Sync java-17-openjdk-portable.specfile from openjdk-portable-centos-9 - Set fipsver to e1780dd5d39 - Resolves: RHEL-122136 - Update to jdk-17.0.18+8 (GA) - Add to .gitignore openjdk-17.0.18+8.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set buildver to 8 - Set is_ga to 1 - Update sources to openjdk-17.0.18+8.tar.xz - Resolves: RHEL-139552 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Update to jdk-17.0.18+7 (EA) - Add to .gitignore openjdk-17.0.18+7-ea.tar.xz - Set updatever to 18 - Set buildver to 7 - Set is_ga to 0 - Update sources to openjdk-17.0.18+7-ea.tar.xz - Set bundled libpng version to 1.6.51 - Resolves: RHEL-131590 - Resolves: RHEL-131601 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Update to jdk-17.0.17+10 (GA) - Add to .gitignore openjdk-17.0.17+10.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set updatever to 17 - Set buildver to 10 - Set rpmrelease to 1, remove 'must start at 2' comment - Set bundled harfbuzz version to 11.2.0 - Update sources to openjdk-17.0.17+10.tar.xz - Resolves: RHEL-119458 - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Update to jdk-17.0.16+8 - Add to .gitignore openjdk-17.0.16+8.tar.xz - Set updatever to 16 - Set buildver to 8 - Set rpmrelease to 2 - Update sources to openjdk-17.0.16+8.tar.xz - Resolves: RHEL-101788 - Resolves: RHEL-101795 - Resolves: RHEL-101796 - Resolves: RHEL-101797 - Resolves: RHEL-102283 - Resolves: RHEL-102286 - Resolves: RHEL-102285 - Resolves: RHEL-102284 - Require tzdata-java 2025b at runtime and for build - Set bundled freetype provide version to 2.13.3 - Set bundled harfbuzz provide version to 10.4.0 - Set bundled lcms2 provide version to 2.17.0 - Set bundled libpng provide version to 1.6.47 - Recommend pipewire - Related: RHEL-102667 - Resolves: RHEL-102669 - Resolves: RHEL-102670 - Resolves: RHEL-102672 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Change portablesiffix - Set rpmrelease to 2 for PQC signing - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Change portablesiffix - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20.1+1 (GA) - Add to .gitignore openjdk-17.0.20.1+1.tar.xz - Set patchver to 1 - Set buildver to 1 - Set rpmrelease to 1 - Update sources to openjdk-17.0.20.1+1.tar.xz - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235614 - Update NEWS for jdk-17.0.20.1+1 (GA) - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Add test to ensure blocked.certs is valid (OPENJDK-4362) - Restore NEWS file so portable can be rebuilt - Resolves: RHEL-149327 - Set rpmrelease to 2 - Sync java-17-openjdk-portable.specfile from openjdk-portable-centos-9 - Set fipsver to e1780dd5d39 - Resolves: RHEL-122136 - Update to jdk-17.0.18+8 (GA) - Add to .gitignore openjdk-17.0.18+8.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set buildver to 8 - Set is_ga to 1 - Update sources to openjdk-17.0.18+8.tar.xz - Resolves: RHEL-139552 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Update to jdk-17.0.18+7 (EA) - Add to .gitignore openjdk-17.0.18+7-ea.tar.xz - Set updatever to 18 - Set buildver to 7 - Set is_ga to 0 - Update sources to openjdk-17.0.18+7-ea.tar.xz - Set bundled libpng version to 1.6.51 - Resolves: RHEL-131590 - Resolves: RHEL-131601 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Update to jdk-17.0.17+10 (GA) - Add to .gitignore openjdk-17.0.17+10.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set updatever to 17 - Set buildver to 10 - Set rpmrelease to 1, remove 'must start at 2' comment - Set bundled harfbuzz version to 11.2.0 - Update sources to openjdk-17.0.17+10.tar.xz - Resolves: RHEL-119458 - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Update to jdk-17.0.16+8 - Add to .gitignore openjdk-17.0.16+8.tar.xz - Set updatever to 16 - Set buildver to 8 - Set rpmrelease to 2 - Update sources to openjdk-17.0.16+8.tar.xz - Resolves: RHEL-101788 - Resolves: RHEL-101795 - Resolves: RHEL-101796 - Resolves: RHEL-101797 - Resolves: RHEL-102283 - Resolves: RHEL-102286 - Resolves: RHEL-102285 - Resolves: RHEL-102284 - Require tzdata-java 2025b at runtime and for build - Set bundled freetype provide version to 2.13.3 - Set bundled harfbuzz provide version to 10.4.0 - Set bundled lcms2 provide version to 2.17.0 - Set bundled libpng provide version to 1.6.47 - Recommend pipewire - Related: RHEL-102667 - Resolves: RHEL-102669 - Resolves: RHEL-102670 - Resolves: RHEL-102672 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Change portablesiffix - Set rpmrelease to 2 for PQC signing - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Change portablesiffix - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20.1+1 (GA) - Add to .gitignore openjdk-17.0.20.1+1.tar.xz - Set patchver to 1 - Set buildver to 1 - Set rpmrelease to 1 - Update sources to openjdk-17.0.20.1+1.tar.xz - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235614 - Update NEWS for jdk-17.0.20.1+1 (GA) - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Add test to ensure blocked.certs is valid (OPENJDK-4362) - Restore NEWS file so portable can be rebuilt - Resolves: RHEL-149327 - Set rpmrelease to 2 - Sync java-17-openjdk-portable.specfile from openjdk-portable-centos-9 - Set fipsver to e1780dd5d39 - Resolves: RHEL-122136 - Update to jdk-17.0.18+8 (GA) - Add to .gitignore openjdk-17.0.18+8.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set buildver to 8 - Set is_ga to 1 - Update sources to openjdk-17.0.18+8.tar.xz - Resolves: RHEL-139552 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Update to jdk-17.0.18+7 (EA) - Add to .gitignore openjdk-17.0.18+7-ea.tar.xz - Set updatever to 18 - Set buildver to 7 - Set is_ga to 0 - Update sources to openjdk-17.0.18+7-ea.tar.xz - Set bundled libpng version to 1.6.51 - Resolves: RHEL-131590 - Resolves: RHEL-131601 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Update to jdk-17.0.17+10 (GA) - Add to .gitignore openjdk-17.0.17+10.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set updatever to 17 - Set buildver to 10 - Set rpmrelease to 1, remove 'must start at 2' comment - Set bundled harfbuzz version to 11.2.0 - Update sources to openjdk-17.0.17+10.tar.xz - Resolves: RHEL-119458 - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Update to jdk-17.0.16+8 - Add to .gitignore openjdk-17.0.16+8.tar.xz - Set updatever to 16 - Set buildver to 8 - Set rpmrelease to 2 - Update sources to openjdk-17.0.16+8.tar.xz - Resolves: RHEL-101788 - Resolves: RHEL-101795 - Resolves: RHEL-101796 - Resolves: RHEL-101797 - Resolves: RHEL-102283 - Resolves: RHEL-102286 - Resolves: RHEL-102285 - Resolves: RHEL-102284 - Require tzdata-java 2025b at runtime and for build - Set bundled freetype provide version to 2.13.3 - Set bundled harfbuzz provide version to 10.4.0 - Set bundled lcms2 provide version to 2.17.0 - Set bundled libpng provide version to 1.6.47 - Recommend pipewire - Related: RHEL-102667 - Resolves: RHEL-102669 - Resolves: RHEL-102670 - Resolves: RHEL-102672 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Change portablesiffix - Set rpmrelease to 2 for PQC signing - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Change portablesiffix - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20.1+1 (GA) - Add to .gitignore openjdk-17.0.20.1+1.tar.xz - Set patchver to 1 - Set buildver to 1 - Set rpmrelease to 1 - Update sources to openjdk-17.0.20.1+1.tar.xz - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235614 - Update NEWS for jdk-17.0.20.1+1 (GA) - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Set rpmrelease to 2 for PQC signing - Set portablesuffix to el8 - Bump release for PQC build - Related: RHEL-169609 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Update to jdk-21.0.8+9 (GA) - Update release notes to 21.0.8+9 - Switch to GA mode - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Resolves: RHEL-102289 - Recommend PipeWire on RHEL 9 and later for java.awt.Robot screenshots under Wayland - Resolves: RHEL-102677 - Update to jdk-21.0.8+8 (EA) - Update release notes to 21.0.8+8 - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-101798 - Set portablesuffix to el8 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Bump release for PQC build - Related: RHEL-169609 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Set portablesuffix to el8 - Bump release for PQC build - Related: RHEL-235625 - Update to jdk-21.0.12.1+1 (GA) - Update release notes to 21.0.12.1+1 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235625 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188866 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Bump release for PQC build - Related: RHEL-169609 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Set portablesuffix to el8 - Bump release for PQC build - Related: RHEL-169609 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Update to jdk-21.0.8+9 (GA) - Update release notes to 21.0.8+9 - Switch to GA mode - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Resolves: RHEL-102289 - Recommend PipeWire on RHEL 9 and later for java.awt.Robot screenshots under Wayland - Resolves: RHEL-102677 - Update to jdk-21.0.8+8 (EA) - Update release notes to 21.0.8+8 - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-101798 - Set portablesuffix to el8 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Bump release for PQC build - Related: RHEL-169609 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Set portablesuffix to el8 - Bump release for PQC build - Related: RHEL-235625 - Update to jdk-21.0.12.1+1 (GA) - Update release notes to 21.0.12.1+1 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235625 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188866 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Bump release for PQC build - Related: RHEL-169609 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Set portablesuffix to el8 - Bump release for PQC build - Related: RHEL-169609 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Update to jdk-21.0.8+9 (GA) - Update release notes to 21.0.8+9 - Switch to GA mode - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Resolves: RHEL-102289 - Recommend PipeWire on RHEL 9 and later for java.awt.Robot screenshots under Wayland - Resolves: RHEL-102677 - Update to jdk-21.0.8+8 (EA) - Update release notes to 21.0.8+8 - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-101798 - Set portablesuffix to el8 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Bump release for PQC build - Related: RHEL-169609 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Set portablesuffix to el8 - Bump release for PQC build - Related: RHEL-235625 - Update to jdk-21.0.12.1+1 (GA) - Update release notes to 21.0.12.1+1 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235625 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188866 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Bump release for PQC build - Related: RHEL-169609 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Set portablesuffix to el8 - Bump release for PQC build - Related: RHEL-169609 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Update to jdk-21.0.8+9 (GA) - Update release notes to 21.0.8+9 - Switch to GA mode - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Resolves: RHEL-102289 - Recommend PipeWire on RHEL 9 and later for java.awt.Robot screenshots under Wayland - Resolves: RHEL-102677 - Update to jdk-21.0.8+8 (EA) - Update release notes to 21.0.8+8 - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-101798 - Set portablesuffix to el8 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Bump release for PQC build - Related: RHEL-169609 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Set portablesuffix to el8 - Bump release for PQC build - Related: RHEL-235625 - Update to jdk-21.0.12.1+1 (GA) - Update release notes to 21.0.12.1+1 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235625 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188866 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Bump release for PQC build - Related: RHEL-169609 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Set portablesuffix to el8 - Bump release for PQC build - Related: RHEL-169609 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Update to jdk-21.0.8+9 (GA) - Update release notes to 21.0.8+9 - Switch to GA mode - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Resolves: RHEL-102289 - Recommend PipeWire on RHEL 9 and later for java.awt.Robot screenshots under Wayland - Resolves: RHEL-102677 - Update to jdk-21.0.8+8 (EA) - Update release notes to 21.0.8+8 - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-101798 - Set portablesuffix to el8 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Bump release for PQC build - Related: RHEL-169609 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Set portablesuffix to el8 - Bump release for PQC build - Related: RHEL-235625 - Update to jdk-21.0.12.1+1 (GA) - Update release notes to 21.0.12.1+1 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235625 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188866 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Bump release for PQC build - Related: RHEL-169609 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Set portablesuffix to el8 - Bump release for PQC build - Related: RHEL-169609 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Update to jdk-21.0.8+9 (GA) - Update release notes to 21.0.8+9 - Switch to GA mode - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Resolves: RHEL-102289 - Recommend PipeWire on RHEL 9 and later for java.awt.Robot screenshots under Wayland - Resolves: RHEL-102677 - Update to jdk-21.0.8+8 (EA) - Update release notes to 21.0.8+8 - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-101798 - Set portablesuffix to el8 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Bump release for PQC build - Related: RHEL-169609 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Set portablesuffix to el8 - Bump release for PQC build - Related: RHEL-235625 - Update to jdk-21.0.12.1+1 (GA) - Update release notes to 21.0.12.1+1 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235625 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188866 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Bump release for PQC build - Related: RHEL-169609 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Set portablesuffix to el8 - Bump release for PQC build - Related: RHEL-169609 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Update to jdk-21.0.8+9 (GA) - Update release notes to 21.0.8+9 - Switch to GA mode - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Resolves: RHEL-102289 - Recommend PipeWire on RHEL 9 and later for java.awt.Robot screenshots under Wayland - Resolves: RHEL-102677 - Update to jdk-21.0.8+8 (EA) - Update release notes to 21.0.8+8 - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-101798 - Set portablesuffix to el8 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Bump release for PQC build - Related: RHEL-169609 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Set portablesuffix to el8 - Bump release for PQC build - Related: RHEL-235625 - Update to jdk-21.0.12.1+1 (GA) - Update release notes to 21.0.12.1+1 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235625 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188866 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Bump release for PQC build - Related: RHEL-169609 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Set portablesuffix to el8 - Bump release for PQC build - Related: RHEL-169609 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Update to jdk-21.0.8+9 (GA) - Update release notes to 21.0.8+9 - Switch to GA mode - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Resolves: RHEL-102289 - Recommend PipeWire on RHEL 9 and later for java.awt.Robot screenshots under Wayland - Resolves: RHEL-102677 - Update to jdk-21.0.8+8 (EA) - Update release notes to 21.0.8+8 - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-101798 - Set portablesuffix to el8 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Bump release for PQC build - Related: RHEL-169609 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Set portablesuffix to el8 - Bump release for PQC build - Related: RHEL-235625 - Update to jdk-21.0.12.1+1 (GA) - Update release notes to 21.0.12.1+1 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235625 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188866 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Bump release for PQC build - Related: RHEL-169609 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Set portablesuffix to el8 - Bump release for PQC build - Related: RHEL-169609 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Update to jdk-21.0.8+9 (GA) - Update release notes to 21.0.8+9 - Switch to GA mode - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Resolves: RHEL-102289 - Recommend PipeWire on RHEL 9 and later for java.awt.Robot screenshots under Wayland - Resolves: RHEL-102677 - Update to jdk-21.0.8+8 (EA) - Update release notes to 21.0.8+8 - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-101798 - Set portablesuffix to el8 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Bump release for PQC build - Related: RHEL-169609 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Set portablesuffix to el8 - Bump release for PQC build - Related: RHEL-235625 - Update to jdk-21.0.12.1+1 (GA) - Update release notes to 21.0.12.1+1 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235625 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188866 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Bump release for PQC build - Related: RHEL-169609 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Use el9 portable packages - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Incorporate new FIPS patch for 25u - Drop static libjvm.a following adjusted build target for portable build - Remove redundant (and now outdated) build targets, jdkimage and static_libs_image - Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-133743 - Resolves: RHEL-133737 - Related: RHEL-131898 - Add java-25-openjdk-crypto-adapter subpackage - Update library setting in create-redhat-properties-files.bash - Remove /usr/lib/jvm/java-25-openjdk/conf/security/redhat/fips.properties - Resolves: RHEL-132520 - Resolves: RHEL-132523 - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS - Patch the nssadapter build to recognise LDFLAGS - Resolves: RHEL-131898 - Use el9 portable packages - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Use el9 portable packages - Update to jdk-25.0.4.1+1 (GA) - Update release notes to 25.0.4.1+1 - Report pkgos value during build - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235632 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188880 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Use el9 portable packages - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Incorporate new FIPS patch for 25u - Drop static libjvm.a following adjusted build target for portable build - Remove redundant (and now outdated) build targets, jdkimage and static_libs_image - Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-133743 - Resolves: RHEL-133737 - Related: RHEL-131898 - Add java-25-openjdk-crypto-adapter subpackage - Update library setting in create-redhat-properties-files.bash - Remove /usr/lib/jvm/java-25-openjdk/conf/security/redhat/fips.properties - Resolves: RHEL-132520 - Resolves: RHEL-132523 - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS - Patch the nssadapter build to recognise LDFLAGS - Resolves: RHEL-131898 - Use el9 portable packages - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Use el9 portable packages - Update to jdk-25.0.4.1+1 (GA) - Update release notes to 25.0.4.1+1 - Report pkgos value during build - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235632 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188880 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Use el9 portable packages - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Incorporate new FIPS patch for 25u - Drop static libjvm.a following adjusted build target for portable build - Remove redundant (and now outdated) build targets, jdkimage and static_libs_image - Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-133743 - Resolves: RHEL-133737 - Related: RHEL-131898 - Add java-25-openjdk-crypto-adapter subpackage - Update library setting in create-redhat-properties-files.bash - Remove /usr/lib/jvm/java-25-openjdk/conf/security/redhat/fips.properties - Resolves: RHEL-132520 - Resolves: RHEL-132523 - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS - Patch the nssadapter build to recognise LDFLAGS - Resolves: RHEL-131898 - Use el9 portable packages - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Use el9 portable packages - Update to jdk-25.0.4.1+1 (GA) - Update release notes to 25.0.4.1+1 - Report pkgos value during build - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235632 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188880 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Use el9 portable packages - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Incorporate new FIPS patch for 25u - Drop static libjvm.a following adjusted build target for portable build - Remove redundant (and now outdated) build targets, jdkimage and static_libs_image - Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-133743 - Resolves: RHEL-133737 - Related: RHEL-131898 - Add java-25-openjdk-crypto-adapter subpackage - Update library setting in create-redhat-properties-files.bash - Remove /usr/lib/jvm/java-25-openjdk/conf/security/redhat/fips.properties - Resolves: RHEL-132520 - Resolves: RHEL-132523 - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS - Patch the nssadapter build to recognise LDFLAGS - Resolves: RHEL-131898 - Use el9 portable packages - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Use el9 portable packages - Update to jdk-25.0.4.1+1 (GA) - Update release notes to 25.0.4.1+1 - Report pkgos value during build - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235632 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188880 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Use el9 portable packages - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Incorporate new FIPS patch for 25u - Drop static libjvm.a following adjusted build target for portable build - Remove redundant (and now outdated) build targets, jdkimage and static_libs_image - Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-133743 - Resolves: RHEL-133737 - Related: RHEL-131898 - Add java-25-openjdk-crypto-adapter subpackage - Update library setting in create-redhat-properties-files.bash - Remove /usr/lib/jvm/java-25-openjdk/conf/security/redhat/fips.properties - Resolves: RHEL-132520 - Resolves: RHEL-132523 - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS - Patch the nssadapter build to recognise LDFLAGS - Resolves: RHEL-131898 - Use el9 portable packages - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Use el9 portable packages - Update to jdk-25.0.4.1+1 (GA) - Update release notes to 25.0.4.1+1 - Report pkgos value during build - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235632 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188880 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Use el9 portable packages - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Incorporate new FIPS patch for 25u - Drop static libjvm.a following adjusted build target for portable build - Remove redundant (and now outdated) build targets, jdkimage and static_libs_image - Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-133743 - Resolves: RHEL-133737 - Related: RHEL-131898 - Add java-25-openjdk-crypto-adapter subpackage - Update library setting in create-redhat-properties-files.bash - Remove /usr/lib/jvm/java-25-openjdk/conf/security/redhat/fips.properties - Resolves: RHEL-132520 - Resolves: RHEL-132523 - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS - Patch the nssadapter build to recognise LDFLAGS - Resolves: RHEL-131898 - Use el9 portable packages - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Use el9 portable packages - Update to jdk-25.0.4.1+1 (GA) - Update release notes to 25.0.4.1+1 - Report pkgos value during build - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235632 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188880 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Use el9 portable packages - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Incorporate new FIPS patch for 25u - Drop static libjvm.a following adjusted build target for portable build - Remove redundant (and now outdated) build targets, jdkimage and static_libs_image - Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-133743 - Resolves: RHEL-133737 - Related: RHEL-131898 - Add java-25-openjdk-crypto-adapter subpackage - Update library setting in create-redhat-properties-files.bash - Remove /usr/lib/jvm/java-25-openjdk/conf/security/redhat/fips.properties - Resolves: RHEL-132520 - Resolves: RHEL-132523 - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS - Patch the nssadapter build to recognise LDFLAGS - Resolves: RHEL-131898 - Use el9 portable packages - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Use el9 portable packages - Update to jdk-25.0.4.1+1 (GA) - Update release notes to 25.0.4.1+1 - Report pkgos value during build - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235632 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188880 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Use el9 portable packages - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Incorporate new FIPS patch for 25u - Drop static libjvm.a following adjusted build target for portable build - Remove redundant (and now outdated) build targets, jdkimage and static_libs_image - Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-133743 - Resolves: RHEL-133737 - Related: RHEL-131898 - Add java-25-openjdk-crypto-adapter subpackage - Update library setting in create-redhat-properties-files.bash - Remove /usr/lib/jvm/java-25-openjdk/conf/security/redhat/fips.properties - Resolves: RHEL-132520 - Resolves: RHEL-132523 - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS - Patch the nssadapter build to recognise LDFLAGS - Resolves: RHEL-131898 - Use el9 portable packages - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Use el9 portable packages - Update to jdk-25.0.4.1+1 (GA) - Update release notes to 25.0.4.1+1 - Report pkgos value during build - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235632 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188880 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Use el9 portable packages - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Incorporate new FIPS patch for 25u - Drop static libjvm.a following adjusted build target for portable build - Remove redundant (and now outdated) build targets, jdkimage and static_libs_image - Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-133743 - Resolves: RHEL-133737 - Related: RHEL-131898 - Add java-25-openjdk-crypto-adapter subpackage - Update library setting in create-redhat-properties-files.bash - Remove /usr/lib/jvm/java-25-openjdk/conf/security/redhat/fips.properties - Resolves: RHEL-132520 - Resolves: RHEL-132523 - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS - Patch the nssadapter build to recognise LDFLAGS - Resolves: RHEL-131898 - Use el9 portable packages - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Use el9 portable packages - Update to jdk-25.0.4.1+1 (GA) - Update release notes to 25.0.4.1+1 - Report pkgos value during build - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235632 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188880 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Use el9 portable packages - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Incorporate new FIPS patch for 25u - Drop static libjvm.a following adjusted build target for portable build - Remove redundant (and now outdated) build targets, jdkimage and static_libs_image - Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-133743 - Resolves: RHEL-133737 - Related: RHEL-131898 - Add java-25-openjdk-crypto-adapter subpackage - Update library setting in create-redhat-properties-files.bash - Remove /usr/lib/jvm/java-25-openjdk/conf/security/redhat/fips.properties - Resolves: RHEL-132520 - Resolves: RHEL-132523 - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS - Patch the nssadapter build to recognise LDFLAGS - Resolves: RHEL-131898 - Use el9 portable packages - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Use el9 portable packages - Update to jdk-25.0.4.1+1 (GA) - Update release notes to 25.0.4.1+1 - Report pkgos value during build - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235632 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188880 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update to upstream version 6.4.0 - Rebuild - Rebuild - Use Java 11 build tool bindings for package builds - Drop generated Requires on various Java versions - Related: RHEL-62409 - Include java-21-headless in generated auto-requires - Related: RHEL-62409 - Make OpenJDK 17 the default JRE/JDK - Related: RHEL-62403 - Add generated Requires on multiple versions of java-headless - Related: rhbz#2164437 - Update to upstream version 6.4.0 - Rebuild - Rebuild - Use Java 11 build tool bindings for package builds - Drop generated Requires on various Java versions - Related: RHEL-62409 - Include java-21-headless in generated auto-requires - Related: RHEL-62409 - Make OpenJDK 17 the default JRE/JDK - Related: RHEL-62403 - Add generated Requires on multiple versions of java-headless - Related: rhbz#2164437 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Initial package renamed from glassfish-jaxb-api. - Initial build - Update to upstream version 4.0.2 - Update licenses - Initial build - Update to upstream version 4.0.2 - Update licenses - Initial build - Initial build - Reduce dependencies, reorganize subpackages - Initial build - Reduce dependencies, reorganize subpackages - Initial build - Update to upstream version 4.0.2 - Update licenses - Initial build - Update to upstream version 4.0.2 - Update licenses - Initial build - Update to upstream version 4.0.2 - Update licenses - Initial build - Update to upstream version 4.0.2 - Update licenses - Initial build - Update to upstream version 4.0.2 - Update licenses - Initial build - Update to upstream version 4.0.2 - Update licenses - Initial build - Rebuilt for RHEL-9.2.0 - Resolves: #2121499 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - make is no longer in buildroot by default - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - make is no longer in buildroot by default - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fix JDK11 build by adding dependency for javax.xml.bind. - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Drop log4j and jboss-logmanager dependencies - Drop jboss-logging-javadoc - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Switch from log4j 1.2 compat package to log4j 1.2 API shim. - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to version 3.4.1. - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Drop jboss-logmanager dependency - Drop jboss-logging-tools-javadoc - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Update to version 2.2.1. - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt as part of revival process - BZ#1758293 - Add noarch to ExclusiveArch - Disable building on i686 - Rebuild with regenerated Requires on Java - Rebuild to regenerate auto-requires - Rebuild to regenerate auto-requires - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Rebuilt for java-17-openjdk as system jdk - Update javapackages test plan to f42 - Rebuild to regenerate auto-requires - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update to upstream version 1.7.36 - Rebuilt for java-21-openjdk as system jdk - bump of release for for java-21-openjdk as system jdk - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild to regenerate auto-Requires on java - Convert License tag to SPDX format - Build with default JDK 17 - Build with OpenJDK 8 - Remove dependency on javaparser and exec-maven-plugin - Disable tests - Update to 3.3.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Update to version 3.2.0. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to latest upstream version - Obsolete sub-packages that cannot be built on JDK 11 - Patch for javaparser API changes - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Bug 1981014 - jdeparser: FTBFS due to access to internal class sun.reflect.Reflection - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Force Java 8 as sun.reflect.Reflection is removed in Java 11. - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuild as part of revival process - BZ#1758686 - Update Java source/target to 1.8 - Fix unexpected permissions of regular files - Add noarch to ExclusiveArch - Disable building on i686 - Rebuild with regenerated Requires on Java - Bump release number to make RHEL 9.1 build later than RHEL 9 Beta & RHEL 9 GA builds - Resolves: rhbz#2071920 - Added gating yaml - Resolves: rhbz#1989529 - Rebase to upstream release, 1.21.0.0.0. - Resolves: rhbz#1972029 - Store the upstream version (currently "1.0-SNAPSHOT") and snapshot info completely in the Version field rather than using Release. - Resolves: rhbz#1972029 - Update to latest upstream version with renamed package and consistent use of "jigawatts" - Drop library patch which is no longer needed. - Resolves: rhbz#1972029 - Rewrite to use autotools build system, avoiding need for Maven dependencies missing in RHEL 9. - This also ensures use of the standard build flags and installs the jar in the expected location. - Resolves: rhbz#1972029 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - criu-devel moved to BR - now requires criu-libs - enabled debuginfo generation - excluded i686 build as criu is 64b only - .so file moved out of jar. Required teo patches: - added and applied patch0 output_loc.patch - added and applied patch1 load_library.patch - on aarch64 workarounded missing lib64 on /usr/LD_LIBRARY_PATH - initial build - added requires of criu-devel - Bump release number to make RHEL 9.1 build later than RHEL 9 Beta & RHEL 9 GA builds - Resolves: rhbz#2071920 - Added gating yaml - Resolves: rhbz#1989529 - Rebase to upstream release, 1.21.0.0.0. - Resolves: rhbz#1972029 - Store the upstream version (currently "1.0-SNAPSHOT") and snapshot info completely in the Version field rather than using Release. - Resolves: rhbz#1972029 - Update to latest upstream version with renamed package and consistent use of "jigawatts" - Drop library patch which is no longer needed. - Resolves: rhbz#1972029 - Rewrite to use autotools build system, avoiding need for Maven dependencies missing in RHEL 9. - This also ensures use of the standard build flags and installs the jar in the expected location. - Resolves: rhbz#1972029 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - criu-devel moved to BR - now requires criu-libs - enabled debuginfo generation - excluded i686 build as criu is 64b only - .so file moved out of jar. Required teo patches: - added and applied patch0 output_loc.patch - added and applied patch1 load_library.patch - on aarch64 workarounded missing lib64 on /usr/LD_LIBRARY_PATH - initial build - added requires of criu-devel - Add junit to BR - Set correct compat. value also to ant parameters - Resolves: rhbz#2162040 - Fix compatibility with Java 8 - Resolves: rhbz#2162040 - Rebuilt for libffi 3.4.2 SONAME transition. Related: rhbz#1891914 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Build without reflections optional dependency (#1954987) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Set correct compat. value also to ant parameters - Resolves: rhbz#2162040 - Fix compatibility with Java 8 - Resolves: rhbz#2162040 - Rebuilt for libffi 3.4.2 SONAME transition. Related: rhbz#1891914 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Build without reflections optional dependency (#1954987) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update fontconfig DTD id in conf file - Convert to new fonts packaging guidelines - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebase jose-14 upstream version Resolves: #RHEL-38079 - update to 4.0.7 tagged upstream community sources, see CHANGELOG - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - change webpack hash function to sha256 - remove unused cryptographic implementations - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - initial version - Add noarch to ExclusiveArch - Disable building on i686 - Rebuild with regenerated Requires on Java - Update to 1.6.6 - Update to 1.6.4 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 1.6.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.6.0 - Update to 1.5.2 - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add noarch to ExclusiveArch - Disable building on i686 - Rebuild with regenerated Requires on Java - Rebuild to regenerate auto-requires - Update javapackages test plan to f42 - Use xpath macros instead of sed - Replace CC-BY-2.5 annotations with Apache-2.0 ones - Resolves: rhbz#2301569 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Rebuilt for java-21-openjdk as system jdk - bump of release for for java-21-openjdk as system jdk - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild to regenerate auto-Requires on java - Convert License tag to SPDX format - Rebuild to regenerate auto-requires - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Rebuilt for java-17-openjdk as system jdk - Add noarch to ExclusiveArch - Disable building on i686 - Rebuild with regenerated Requires on Java - Rebuild to regenerate auto-requires - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Add base and extra subpackage web fonts for Design Team - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 7.210 - Minor conditional tweaks for ELN - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Add noarch to ExclusiveArch - Disable building on i686 - Fix patch usage - Rebuild with regenerated Requires on Java - Add noarch to ExclusiveArch - Disable building on i686 - Rebuild with regenerated Requires on Java - Add noarch to ExclusiveArch - Disable building on i686 - Fix patch usage - Rebuild with regenerated Requires on Java - Fix annocheck failures - Fix osci tier0 test reference - Fix ET_DYN vmlinux namespace support - Resolves: rhbz#2038913 - Resolves: rhbz#2045976 - Resolves: rhbz#2038892 - Add support for ET_EXEC - Add support for DW_TAG_restrict_type - Resolves: rhbz#1761409 - Add support for symbol namespaces - Resolves: rhbz#1761409 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Workaround "multiple definition of `yyin'" - Resolves https://bugzilla.redhat.com/show_bug.cgi?id=1799559 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for CI Related: rhbz#2032140 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Drop gtk2 dependency completely. - Make anthy build conditionally for Fedora release only. Resolves: rhbz#1939777 - Fix build fail without anthy-devel. - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Migrate kasumi GUI to GTK3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for CI Related: rhbz#2032140 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Drop gtk2 dependency completely. - Make anthy build conditionally for Fedora release only. Resolves: rhbz#1939777 - Fix build fail without anthy-devel. - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Migrate kasumi GUI to GTK3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Feature: Set up crypttab - Handle the case where systemd isn't installed (RHEL-86873) - Disable kdump.service explicitly if users request to (RHEL-41082) - fix "Keepalived claims that blackhole route doesn't have interface and can't be tracked" Resolves: RHEL-40520 - lvs: if lost misc check child register checker again Resolves: RHEL-81939 - Better validation of ipsetnames for CVE-2024-41184 Resolves: RHEL-49558 - Fix keepalived.conf installation (#2215308) - Update to 2.2.8 (#2215308) - Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable backports (SOURCES/1100-1196) - Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto authencesn/algif) - Keep the smb cifs.spnego ahead-fix (retained as 1197) - RHEL changelog for 687.6.1..687.10.1 follows: - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163} - RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128} - usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607} - can: raw: fix ro->uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401} - powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125] - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742] - Revert "lpfc: don't use file->f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742] - drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822] - drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853] - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404] - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402} - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741} - smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988] - ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378] - RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966] - net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207] - ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095] - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766} - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766} - rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075} - Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable backports (SOURCES/1198-1252) - RHEL changelog for 687.11.1..687.12.1 follows: - dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110} - Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020} - crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914] - proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653} - proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653} - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470] - mm/page_alloc: clear page->private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303} - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158} - redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927] - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859] - ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829] - ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829] - ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179] - ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257] - dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442] - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378] - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684} - cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701] - ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701] - ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701] - ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701] - drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179] - nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089} - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724} - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183} - i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312] - ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182] - ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185] - Revert "mm: pcp: increase pcp->free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464] - netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392} - Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269) - RHEL changelog for 687.13.1 follows: - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243} - s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472] - s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472] - s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472] - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745] - nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745] - Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786} - crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167] - crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167] - smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613} - mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778] - mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778] - mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778] - mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778] - mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778] - mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778] - mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778] - mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778] - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.18.1..687.19.1 follows: - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176} - init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183] - update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183] - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183] - work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183] - compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183] - powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183] - sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776] - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189} - sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273] - netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273] - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993] - iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993] - iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993] - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993] - iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993] - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057] - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057] - IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057] - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057] - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057] - net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057] - net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057] - net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057] - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057] - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057] - net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057] - net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057] - net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057] - net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057] - net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057] - net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057] - net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057] - net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057] - net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057] - net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057] - net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057] - mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057] - net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057] - net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057] - net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057] - net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057] - net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057] - net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057] - net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057] - net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057] - net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057] - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057] - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057] - mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057] - net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057] - net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057] - net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057] - net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057] - net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057] - net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057] - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057] - net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057] - net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057] - net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057] - net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057] - net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057] - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057] - net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057] - net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057] - net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057] - net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057] - net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057] - net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057] - net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057] - net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057] - net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057] - net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057] - eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057] - net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057] - net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057] - net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057] - net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057] - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057] - RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057] - net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057] - net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057] - net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057] - net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057] - net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057] - net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057] - net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057] - net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057] - net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057] - net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057] - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057] - net: Fix typos (Kamal Heib) [RHEL-169057] - net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057] - net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057] - net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057] - net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057] - net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057] - net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057] - net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057] - net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057] - net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057] - net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057] - net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057] - eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Kamal Heib) [RHEL-169057] - net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057] - net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057] - net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057] - net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057] - net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057] - net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057] - net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057] - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057] - net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057] - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057] - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057] - net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057] - net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057] - net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057] - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057] - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444] - ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444] - ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444] - ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488} - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329} - Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312) - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.19.1..687.20.1 follows: - crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540] - crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540] - crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540] - crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540] - tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198} - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739} - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760] - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760] - scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886] - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411} - Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.18.1..687.19.1 follows: - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176} - init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183] - update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183] - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183] - work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183] - compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183] - powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183] - sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776] - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189} - sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273] - netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273] - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993] - iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993] - iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993] - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993] - iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993] - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057] - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057] - IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057] - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057] - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057] - net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057] - net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057] - net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057] - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057] - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057] - net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057] - net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057] - net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057] - net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057] - net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057] - net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057] - net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057] - net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057] - net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057] - net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057] - net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057] - mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057] - net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057] - net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057] - net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057] - net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057] - net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057] - net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057] - net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057] - net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057] - net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057] - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057] - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057] - mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057] - net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057] - net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057] - net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057] - net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057] - net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057] - net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057] - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057] - net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057] - net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057] - net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057] - net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057] - net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057] - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057] - net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057] - net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057] - net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057] - net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057] - net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057] - net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057] - net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057] - net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057] - net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057] - net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057] - eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057] - net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057] - net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057] - net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057] - net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057] - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057] - RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057] - net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057] - net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057] - net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057] - net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057] - net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057] - net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057] - net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057] - net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057] - net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057] - net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057] - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057] - net: Fix typos (Kamal Heib) [RHEL-169057] - net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057] - net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057] - net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057] - net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057] - net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057] - net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057] - net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057] - net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057] - net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057] - net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057] - net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057] - eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Kamal Heib) [RHEL-169057] - net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057] - net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057] - net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057] - net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057] - net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057] - net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057] - net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057] - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057] - net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057] - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057] - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057] - net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057] - net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057] - net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057] - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057] - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444] - ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444] - ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444] - ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488} - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329} - Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312) - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735) - Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll ep_remove use-after-free CVE-2026-46242 (1712) - RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux ahead-patch (1312) is retained and RHEL's duplicate copy omitted - CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263) - RHEL changelog for 687.21.1..687.22.1 follows: - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041] - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116} - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263} - KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316} - netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227} - nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966] - Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755) - The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by RHEL's eventpoll series carrying the same fix and is dropped - Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738) - RHEL changelog for 687.23.1 follows: - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1756, 1757) are superseded by RHEL's copies and dropped - RHEL changelog for 687.25.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770) - RHEL changelog for 687.26.1 follows: - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1756, 1757) are superseded by RHEL's copies and dropped - RHEL changelog for 687.25.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041] - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116} - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619] - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619] - Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762] - Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762] - Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762] - Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762] - Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762] - Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762] - Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762] - Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762] - nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489] - pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489] - net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508] - cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548] - spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129] - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431) - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619] - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619] - Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762] - Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762] - Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762] - Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762] - Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762] - Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762] - Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762] - Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762] - nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489] - net: skbuff: propagate shared-frag marker through frag-transfer helpers (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300 "Fragnesia") - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431) - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (Mohammadfaiz Bawa) [RHEL-243814] {CVE-2026-72288} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275058] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275076] {CVE-2026-93228} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270929] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270929] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271453] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268122] {CVE-2026-74705} - net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CKI Backport Bot) [RHEL-270908] {CVE-2026-81003} - wifi: cfg80211: use wiphy work for socket owner autodisconnect (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-263788] {CVE-2026-68409} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (Jose Ignacio Tornos Martinez) [RHEL-259560] {CVE-2026-64030} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261686] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260511] {CVE-2026-68140} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261293] {CVE-2026-72320} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256448] {CVE-2026-74641} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-237219] {CVE-2026-68377} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229654] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226490] {CVE-2026-53011} - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net: always dissect GSO packets in __virtio_net_hdr_to_skb() (Davide Caratti) [RHEL-284987] - ipv4: validate checksum_start before completing checksum (CKI Backport Bot) [RHEL-284987] {CVE-2026-99999} - smb: client: reject a tree connect response whose byte count is too small (Alisher Mazhirinov) [RHEL-271284] {CVE-2026-89631} - exec: Cleanup POSIX timers right after de_thread() (Luiz Capitulino) [RHEL-282063] {CVE-2026-98260} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271871] {CVE-2026-93817} - smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (Frank Sorenson) [RHEL-271487] {CVE-2026-89633} - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270747] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256697] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256697] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256697] - bridge: mcast: Fix a possible use-after-free when removing a bridge port (Jakub Ramaseuski) [RHEL-232528] {CVE-2026-64032} - net: bridge: Flush multicast groups when snooping is disabled (Jakub Ramaseuski) [RHEL-232528] - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Antoine Tenart) [RHEL-231693] {CVE-2026-64024} - ipv4: fib: free fib_alias with kfree_rcu() on insert error path (Jamie Bainbridge) [RHEL-233131] {CVE-2026-64572} - inet: frags: strip GSO state from fragments before reassembly (Jamie Bainbridge) [RHEL-254224] {CVE-2026-80590} - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Jamie Bainbridge) [RHEL-225452] {CVE-2026-64114} - usb: typec: ucsi: validate connector number in ucsi_connector_change() (Desnes Nunes) [RHEL-259429] {CVE-2026-63958} - usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO (Desnes Nunes) [RHEL-259429] - usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (Desnes Nunes) [RHEL-259429] {CVE-2026-63962} - usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (Desnes Nunes) [RHEL-259429] {CVE-2026-63963} - usb: typec: altmodes/displayport: validate count before reading Status Update VDO (Desnes Nunes) [RHEL-259429] {CVE-2026-63961} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63899} - Bluetooth: hci_sync: Fix advertising data UAFs (CKI Backport Bot) [RHEL-254674] {CVE-2026-74509} - openvswitch: vport: fix self-deadlock on release of tunnel ports (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222958] {CVE-2026-52935} - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (Mohammadfaiz Bawa) [RHEL-243814] {CVE-2026-72288} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275058] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275076] {CVE-2026-93228} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270929] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270929] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271453] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268122] {CVE-2026-74705} - net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CKI Backport Bot) [RHEL-270908] {CVE-2026-81003} - wifi: cfg80211: use wiphy work for socket owner autodisconnect (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-263788] {CVE-2026-68409} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (Jose Ignacio Tornos Martinez) [RHEL-259560] {CVE-2026-64030} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261686] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260511] {CVE-2026-68140} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261293] {CVE-2026-72320} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256448] {CVE-2026-74641} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-237219] {CVE-2026-68377} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229654] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226490] {CVE-2026-53011} - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: skbuff: propagate shared-frag marker in skb_zerocopy() - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - xfs: bounds-check buffer log item's dirty bitmap (Pavel Reichl) [RHEL-253366] {CVE-2026-80536} - ovl: check access to copy_file_range source with src mounter creds (Miklos Szeredi) [RHEL-238870] {CVE-2026-68448} - ALSA: seq: close a re-opened queue timer in the destructor (CKI Backport Bot) [RHEL-263709] {CVE-2026-68202} - calipso: unlock rcu before returning -EAFNOSUPPORT (CKI Backport Bot) [RHEL-257685] {CVE-2025-38147} - calipso: Don't call calipso functions for AF_INET sk. (CKI Backport Bot) [RHEL-257685] {CVE-2025-38147} - netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (CKI Backport Bot) [RHEL-257666] {CVE-2025-22063} - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (CKI Backport Bot) [RHEL-255258] {CVE-2026-80530} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252811] {CVE-2026-68299} - ALSA: hda/cs35l41: Fix firmware load work teardown (CKI Backport Bot) [RHEL-234099] {CVE-2026-64481} - rtla: Fix segfault on multiple SIGINTs (Tomas Glozar) [RHEL-193029] - net: always dissect GSO packets in __virtio_net_hdr_to_skb() (Davide Caratti) [RHEL-284987] - ipv4: validate checksum_start before completing checksum (CKI Backport Bot) [RHEL-284987] {CVE-2026-99999} - smb: client: reject a tree connect response whose byte count is too small (Alisher Mazhirinov) [RHEL-271284] {CVE-2026-89631} - exec: Cleanup POSIX timers right after de_thread() (Luiz Capitulino) [RHEL-282063] {CVE-2026-98260} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271871] {CVE-2026-93817} - smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (Frank Sorenson) [RHEL-271487] {CVE-2026-89633} - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270747] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256697] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256697] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256697] - bridge: mcast: Fix a possible use-after-free when removing a bridge port (Jakub Ramaseuski) [RHEL-232528] {CVE-2026-64032} - net: bridge: Flush multicast groups when snooping is disabled (Jakub Ramaseuski) [RHEL-232528] - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Antoine Tenart) [RHEL-231693] {CVE-2026-64024} - ipv4: fib: free fib_alias with kfree_rcu() on insert error path (Jamie Bainbridge) [RHEL-233131] {CVE-2026-64572} - inet: frags: strip GSO state from fragments before reassembly (Jamie Bainbridge) [RHEL-254224] {CVE-2026-80590} - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Jamie Bainbridge) [RHEL-225452] {CVE-2026-64114} - usb: typec: ucsi: validate connector number in ucsi_connector_change() (Desnes Nunes) [RHEL-259429] {CVE-2026-63958} - usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO (Desnes Nunes) [RHEL-259429] - usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (Desnes Nunes) [RHEL-259429] {CVE-2026-63962} - usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (Desnes Nunes) [RHEL-259429] {CVE-2026-63963} - usb: typec: altmodes/displayport: validate count before reading Status Update VDO (Desnes Nunes) [RHEL-259429] {CVE-2026-63961} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63899} - Bluetooth: hci_sync: Fix advertising data UAFs (CKI Backport Bot) [RHEL-254674] {CVE-2026-74509} - openvswitch: vport: fix self-deadlock on release of tunnel ports (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222958] {CVE-2026-52935} - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (Mohammadfaiz Bawa) [RHEL-243814] {CVE-2026-72288} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275058] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275076] {CVE-2026-93228} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270929] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270929] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271453] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268122] {CVE-2026-74705} - net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CKI Backport Bot) [RHEL-270908] {CVE-2026-81003} - wifi: cfg80211: use wiphy work for socket owner autodisconnect (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-263788] {CVE-2026-68409} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (Jose Ignacio Tornos Martinez) [RHEL-259560] {CVE-2026-64030} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261686] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260511] {CVE-2026-68140} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261293] {CVE-2026-72320} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256448] {CVE-2026-74641} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-237219] {CVE-2026-68377} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229654] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226490] {CVE-2026-53011} - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - net: skbuff: propagate shared-frag marker in skb_zerocopy() - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - netfilter: flowtable: hold reference on ct until flow is released (CKI Backport Bot) [RHEL-280075] {CVE-2026-98320} - vfio/pci: clear vdev->msi_perm after freeing it on init failure (Rodolfo Vick) [RHEL-270901] {CVE-2026-89777} - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278089] {CVE-2026-93262} - KEYS: encrypted: fix integer overflow of datablob_len (Bruno Meneguele) [RHEL-279504] {CVE-2026-98222} - KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (CKI Backport Bot) [RHEL-277620] {CVE-2026-74515} - smb: client: guard against tailsz underflow in wdata_send_pages() (Paulo Alcantara) [RHEL-257205] - smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-257205] - smb: client: fix rlist race and missing initialization (Paulo Alcantara) [RHEL-257205] {CVE-2026-98174} - smb: client: cancel reconnect work in clean_demultiplex_info() (Paulo Alcantara) [RHEL-257205] {CVE-2026-98175} - smb/client: send lease break ACKs thru correct session for multiuser mounts (Paulo Alcantara) [RHEL-257205] - smb: client: fix cifsFileInfo reference leak in deferred close (Paulo Alcantara) [RHEL-257205] {CVE-2026-97558} - smb: client: avoid leaking refcount when cifs_sb_tlink() fails (Paulo Alcantara) [RHEL-257205] {CVE-2026-97556} - smb: client: avoid leaking refcount in cifs_queue_oplock_break() (Paulo Alcantara) [RHEL-257205] {CVE-2026-97557} - smb: client: fix data corruption with concurrent writes and O_TRUNC (Paulo Alcantara) [RHEL-257205] - cifs: don't update i_size in cifs_do_truncate without a cached handle (Paulo Alcantara) [RHEL-257205] - smb: client: invalidate fscache for fallocate range operations (Paulo Alcantara) [RHEL-257205] {CVE-2026-98124} - smb: client: fix stale page cache in insert/collapse range (Paulo Alcantara) [RHEL-257205] {CVE-2026-98125} - smb: client: fix integer truncation in collapse range (Paulo Alcantara) [RHEL-257205] - smb: client: fix data corruption in emulated insert range (Paulo Alcantara) [RHEL-257205] - smb/client: mark file sparse before emulating insert range (Paulo Alcantara) [RHEL-257205] - smb/client: validate new EOF for zero range (Paulo Alcantara) [RHEL-257205] {CVE-2026-98126} - smb/client: validate new EOF for insert range (Paulo Alcantara) [RHEL-257205] {CVE-2026-98127} - cifs: add revalidation on FSCTL failure in smb2_duplicate_extents() (Paulo Alcantara) [RHEL-257205] - cifs: fix loff_t underflow in cifs_remap_file_range() when len == 0 (Paulo Alcantara) [RHEL-257205] {CVE-2026-89640} - cifs: call pagecache_isize_extended() in cifs_setsize() when extending (Paulo Alcantara) [RHEL-257205] {CVE-2026-89642} - cifs: clear tcon after cifsFileInfo_put() in cifs_file_set_size() (Paulo Alcantara) [RHEL-257205] {CVE-2026-89641} - smb/client: decode reparse metadata using its payload type (Paulo Alcantara) [RHEL-257205] - smb/client: preserve open info type across compound queries (Paulo Alcantara) [RHEL-257205] - smb/client: mark missing nlink values as unknown (Paulo Alcantara) [RHEL-257205] - smb/client: fix nlink of an overwritten open file (Paulo Alcantara) [RHEL-257205] - cifs: remove dead size-update blocks in cifs_setattr_unix/nounix (Paulo Alcantara) [RHEL-257205] - cifs: remove redundant size-update block in cifs_remap_file_range() (Paulo Alcantara) [RHEL-257205] - cifs: add cifs_resize_file_locked() to guard fscache_resize_cookie() under i_rwsem (Paulo Alcantara) [RHEL-257205] - cifs: use cifs_invalidate_cache() in cifs_do_truncate() for O_TRUNC (Paulo Alcantara) [RHEL-257205] {CVE-2026-89639} - cifs: add fscache_resize_cookie() to cifs_setsize() (Paulo Alcantara) [RHEL-257205] - smb: client: simplify cifs_fscache_get_super_cookie() (Paulo Alcantara) [RHEL-257205] - smb/client: flush dirty data before punching a hole (Paulo Alcantara) [RHEL-257205] {CVE-2026-93794} - smb/client: refresh allocation after EOF-extending fallocate (Paulo Alcantara) [RHEL-257205] - smb/client: emulate small EOF-extending mode 0 fallocate ranges (Paulo Alcantara) [RHEL-257205] - smb/client: reduce fallocate zero buffer allocation (Paulo Alcantara) [RHEL-257205] - smb/client: refresh allocation size after duplicate extents (Paulo Alcantara) [RHEL-257205] - smb: client: use kvzalloc() for megabyte buffer in simple fallocate (Paulo Alcantara) [RHEL-257205] - smb/client: fix incorrect nlink returned by fstat() (Paulo Alcantara) [RHEL-257205] - smb/client: zero-initialize stack-allocated cifs_open_info_data (Paulo Alcantara) [RHEL-257205] {CVE-2026-93801} - smb/client: pass cifs_open_info_data to SMB2_open() (Paulo Alcantara) [RHEL-257205] - smb/client: use stack-allocated smb2_file_all_info in smb3_query_mf_symlink() (Paulo Alcantara) [RHEL-257205] - smb: client: refactor cifs_revalidate_mapping() to use clear_and_wake_up_bit() (Paulo Alcantara) [RHEL-257205] - smb/client: do not account EOF extension as allocation (Paulo Alcantara) [RHEL-257205] - smb/client: preserve errors from smb2_set_sparse() (Paulo Alcantara) [RHEL-257205] - smb/client: name the default fallocate mode (Paulo Alcantara) [RHEL-257205] - smb/client: update i_blocks after contiguous writes (Paulo Alcantara) [RHEL-257205] - smb: client: fix races in cifsd thread creation (Paulo Alcantara) [RHEL-257205] {CVE-2026-93829} - cifs: invalidate cfid on unlink/rename/rmdir (Paulo Alcantara) [RHEL-257205] - cifs: abort open_cached_dir if we don't request leases (Paulo Alcantara) [RHEL-257205] - cifs: change_conf needs to be called for session setup (Paulo Alcantara) [RHEL-257205] - smb: client: fix generic/694 due to wrong ->i_blocks (Paulo Alcantara) [RHEL-257205] - smb: client: fix open handle lookup in cifs_open() (Paulo Alcantara) [RHEL-257205] - smb: client: fix in-place encryption corruption in SMB2_write() (Paulo Alcantara) [RHEL-257205] {CVE-2026-43362} - smb: client: fix atomic open with O_DIRECT & O_SYNC (Paulo Alcantara) [RHEL-257205] - cifs: Scripted clean up fs/smb/client/cifsglob.h (Paulo Alcantara) [RHEL-257205] - cifs: Scripted clean up fs/smb/client/fscache.h (Paulo Alcantara) [RHEL-257205] - cifs: Scripted clean up fs/smb/client/cifsfs.h (Paulo Alcantara) [RHEL-257205] - cifs: Scripted clean up fs/smb/client/cifsproto.h (Paulo Alcantara) [RHEL-257205] - udp: Deal with race between UDP socket address change and rehash (Jamie Bainbridge) [RHEL-257635] {CVE-2024-57974} - smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (CKI Backport Bot) [RHEL-271257] {CVE-2026-89638} - net/handshake: Drain pending requests at net namespace exit (Xin Long) [RHEL-232134] {CVE-2026-63978} - net/handshake: Use spin_lock_bh for hn_lock (Xin Long) [RHEL-232134] - net/handshake: hand off the pinned file reference to accept_doit (Xin Long) [RHEL-230363] {CVE-2026-63979} - net/handshake: Take a long-lived file reference at submit (Xin Long) [RHEL-234159] {CVE-2026-64523} - fuse: re-lock request before replacing page cache folio (Miklos Szeredi) [RHEL-226093] {CVE-2026-53388} - fuse: release pipe buf after last use (Miklos Szeredi) [RHEL-226093] {CVE-2026-53388} - fuse: fix page stealing (Miklos Szeredi) [RHEL-226093] {CVE-2026-53388} - ipvs: reload ip header after head reallocation (Phil Sutter) [RHEL-263800] {CVE-2026-68476} - selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() (CKI Backport Bot) [RHEL-243225] {CVE-2026-72242} - usb: usbfs: fix use-after-free of usb_device in usbdev_release() (CKI Backport Bot) [RHEL-258557] {CVE-2026-80824} - fuse: re-lock request before returning from fuse_ref_folio() (CKI Backport Bot) [RHEL-234250] {CVE-2026-64266} - xfs: bounds-check buffer log item's dirty bitmap (Pavel Reichl) [RHEL-253366] {CVE-2026-80536} - ovl: check access to copy_file_range source with src mounter creds (Miklos Szeredi) [RHEL-238870] {CVE-2026-68448} - ALSA: seq: close a re-opened queue timer in the destructor (CKI Backport Bot) [RHEL-263709] {CVE-2026-68202} - calipso: unlock rcu before returning -EAFNOSUPPORT (CKI Backport Bot) [RHEL-257685] {CVE-2025-38147} - calipso: Don't call calipso functions for AF_INET sk. (CKI Backport Bot) [RHEL-257685] {CVE-2025-38147} - netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (CKI Backport Bot) [RHEL-257666] {CVE-2025-22063} - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (CKI Backport Bot) [RHEL-255258] {CVE-2026-80530} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252811] {CVE-2026-68299} - ALSA: hda/cs35l41: Fix firmware load work teardown (CKI Backport Bot) [RHEL-234099] {CVE-2026-64481} - rtla: Fix segfault on multiple SIGINTs (Tomas Glozar) [RHEL-193029] - net: always dissect GSO packets in __virtio_net_hdr_to_skb() (Davide Caratti) [RHEL-284987] - ipv4: validate checksum_start before completing checksum (CKI Backport Bot) [RHEL-284987] {CVE-2026-99999} - smb: client: reject a tree connect response whose byte count is too small (Alisher Mazhirinov) [RHEL-271284] {CVE-2026-89631} - exec: Cleanup POSIX timers right after de_thread() (Luiz Capitulino) [RHEL-282063] {CVE-2026-98260} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271871] {CVE-2026-93817} - smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (Frank Sorenson) [RHEL-271487] {CVE-2026-89633} - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270747] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256697] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256697] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256697] - bridge: mcast: Fix a possible use-after-free when removing a bridge port (Jakub Ramaseuski) [RHEL-232528] {CVE-2026-64032} - net: bridge: Flush multicast groups when snooping is disabled (Jakub Ramaseuski) [RHEL-232528] - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Antoine Tenart) [RHEL-231693] {CVE-2026-64024} - ipv4: fib: free fib_alias with kfree_rcu() on insert error path (Jamie Bainbridge) [RHEL-233131] {CVE-2026-64572} - inet: frags: strip GSO state from fragments before reassembly (Jamie Bainbridge) [RHEL-254224] {CVE-2026-80590} - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Jamie Bainbridge) [RHEL-225452] {CVE-2026-64114} - usb: typec: ucsi: validate connector number in ucsi_connector_change() (Desnes Nunes) [RHEL-259429] {CVE-2026-63958} - usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO (Desnes Nunes) [RHEL-259429] - usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (Desnes Nunes) [RHEL-259429] {CVE-2026-63962} - usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (Desnes Nunes) [RHEL-259429] {CVE-2026-63963} - usb: typec: altmodes/displayport: validate count before reading Status Update VDO (Desnes Nunes) [RHEL-259429] {CVE-2026-63961} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63899} - Bluetooth: hci_sync: Fix advertising data UAFs (CKI Backport Bot) [RHEL-254674] {CVE-2026-74509} - openvswitch: vport: fix self-deadlock on release of tunnel ports (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222958] {CVE-2026-52935} - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (Mohammadfaiz Bawa) [RHEL-243814] {CVE-2026-72288} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275058] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275076] {CVE-2026-93228} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270929] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270929] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271453] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268122] {CVE-2026-74705} - net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CKI Backport Bot) [RHEL-270908] {CVE-2026-81003} - wifi: cfg80211: use wiphy work for socket owner autodisconnect (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-263788] {CVE-2026-68409} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (Jose Ignacio Tornos Martinez) [RHEL-259560] {CVE-2026-64030} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261686] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260511] {CVE-2026-68140} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261293] {CVE-2026-72320} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256448] {CVE-2026-74641} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-237219] {CVE-2026-68377} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229654] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226490] {CVE-2026-53011} - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable backports (SOURCES/1100-1196) - Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto authencesn/algif) - Keep the smb cifs.spnego ahead-fix (retained as 1197) - RHEL changelog for 687.6.1..687.10.1 follows: - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163} - RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128} - usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607} - can: raw: fix ro->uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401} - powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125] - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742] - Revert "lpfc: don't use file->f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742] - drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822] - drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853] - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404] - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402} - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741} - smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988] - ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378] - RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966] - net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207] - ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095] - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766} - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766} - rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075} - Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable backports (SOURCES/1198-1252) - RHEL changelog for 687.11.1..687.12.1 follows: - dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110} - Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020} - crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914] - proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653} - proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653} - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470] - mm/page_alloc: clear page->private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303} - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158} - redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927] - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859] - ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829] - ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829] - ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179] - ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257] - dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442] - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378] - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684} - cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701] - ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701] - ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701] - ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701] - drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179] - nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089} - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724} - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183} - i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312] - ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182] - ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185] - Revert "mm: pcp: increase pcp->free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464] - netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392} - Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269) - RHEL changelog for 687.13.1 follows: - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243} - s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472] - s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472] - s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472] - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745] - nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745] - Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786} - crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167] - crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167] - smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613} - mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778] - mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778] - mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778] - mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778] - mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778] - mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778] - mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778] - mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778] - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.18.1..687.19.1 follows: - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176} - init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183] - update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183] - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183] - work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183] - compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183] - powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183] - sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776] - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189} - sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273] - netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273] - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993] - iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993] - iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993] - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993] - iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993] - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057] - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057] - IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057] - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057] - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057] - net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057] - net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057] - net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057] - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057] - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057] - net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057] - net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057] - net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057] - net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057] - net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057] - net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057] - net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057] - net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057] - net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057] - net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057] - net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057] - mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057] - net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057] - net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057] - net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057] - net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057] - net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057] - net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057] - net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057] - net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057] - net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057] - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057] - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057] - mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057] - net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057] - net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057] - net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057] - net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057] - net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057] - net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057] - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057] - net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057] - net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057] - net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057] - net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057] - net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057] - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057] - net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057] - net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057] - net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057] - net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057] - net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057] - net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057] - net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057] - net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057] - net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057] - net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057] - eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057] - net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057] - net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057] - net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057] - net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057] - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057] - RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057] - net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057] - net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057] - net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057] - net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057] - net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057] - net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057] - net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057] - net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057] - net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057] - net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057] - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057] - net: Fix typos (Kamal Heib) [RHEL-169057] - net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057] - net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057] - net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057] - net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057] - net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057] - net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057] - net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057] - net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057] - net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057] - net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057] - net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057] - eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Kamal Heib) [RHEL-169057] - net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057] - net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057] - net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057] - net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057] - net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057] - net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057] - net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057] - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057] - net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057] - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057] - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057] - net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057] - net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057] - net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057] - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057] - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444] - ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444] - ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444] - ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488} - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329} - Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312) - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.19.1..687.20.1 follows: - crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540] - crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540] - crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540] - crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540] - tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198} - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739} - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760] - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760] - scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886] - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411} - Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.18.1..687.19.1 follows: - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176} - init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183] - update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183] - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183] - work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183] - compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183] - powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183] - sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776] - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189} - sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273] - netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273] - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993] - iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993] - iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993] - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993] - iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993] - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057] - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057] - IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057] - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057] - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057] - net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057] - net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057] - net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057] - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057] - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057] - net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057] - net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057] - net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057] - net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057] - net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057] - net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057] - net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057] - net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057] - net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057] - net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057] - net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057] - mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057] - net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057] - net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057] - net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057] - net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057] - net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057] - net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057] - net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057] - net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057] - net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057] - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057] - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057] - mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057] - net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057] - net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057] - net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057] - net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057] - net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057] - net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057] - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057] - net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057] - net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057] - net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057] - net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057] - net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057] - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057] - net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057] - net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057] - net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057] - net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057] - net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057] - net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057] - net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057] - net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057] - net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057] - net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057] - eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057] - net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057] - net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057] - net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057] - net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057] - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057] - RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057] - net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057] - net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057] - net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057] - net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057] - net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057] - net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057] - net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057] - net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057] - net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057] - net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057] - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057] - net: Fix typos (Kamal Heib) [RHEL-169057] - net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057] - net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057] - net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057] - net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057] - net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057] - net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057] - net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057] - net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057] - net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057] - net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057] - net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057] - eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Kamal Heib) [RHEL-169057] - net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057] - net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057] - net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057] - net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057] - net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057] - net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057] - net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057] - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057] - net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057] - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057] - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057] - net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057] - net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057] - net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057] - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057] - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444] - ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444] - ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444] - ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488} - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329} - Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312) - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735) - Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll ep_remove use-after-free CVE-2026-46242 (1712) - RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux ahead-patch (1312) is retained and RHEL's duplicate copy omitted - CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263) - RHEL changelog for 687.21.1..687.22.1 follows: - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041] - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116} - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263} - KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316} - netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227} - nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966] - Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755) - The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by RHEL's eventpoll series carrying the same fix and is dropped - Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738) - RHEL changelog for 687.23.1 follows: - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1756, 1757) are superseded by RHEL's copies and dropped - RHEL changelog for 687.25.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770) - RHEL changelog for 687.26.1 follows: - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1756, 1757) are superseded by RHEL's copies and dropped - RHEL changelog for 687.25.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041] - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116} - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619] - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619] - Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762] - Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762] - Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762] - Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762] - Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762] - Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762] - Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762] - Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762] - nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489] - pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489] - net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508] - cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548] - spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129] - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431) - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619] - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619] - Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762] - Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762] - Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762] - Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762] - Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762] - Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762] - Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762] - Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762] - nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489] - net: skbuff: propagate shared-frag marker through frag-transfer helpers (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300 "Fragnesia") - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431) - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (Mohammadfaiz Bawa) [RHEL-243814] {CVE-2026-72288} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275058] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275076] {CVE-2026-93228} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270929] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270929] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271453] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268122] {CVE-2026-74705} - net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CKI Backport Bot) [RHEL-270908] {CVE-2026-81003} - wifi: cfg80211: use wiphy work for socket owner autodisconnect (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-263788] {CVE-2026-68409} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (Jose Ignacio Tornos Martinez) [RHEL-259560] {CVE-2026-64030} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261686] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260511] {CVE-2026-68140} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261293] {CVE-2026-72320} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256448] {CVE-2026-74641} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-237219] {CVE-2026-68377} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229654] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226490] {CVE-2026-53011} - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net: always dissect GSO packets in __virtio_net_hdr_to_skb() (Davide Caratti) [RHEL-284987] - ipv4: validate checksum_start before completing checksum (CKI Backport Bot) [RHEL-284987] {CVE-2026-99999} - smb: client: reject a tree connect response whose byte count is too small (Alisher Mazhirinov) [RHEL-271284] {CVE-2026-89631} - exec: Cleanup POSIX timers right after de_thread() (Luiz Capitulino) [RHEL-282063] {CVE-2026-98260} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271871] {CVE-2026-93817} - smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (Frank Sorenson) [RHEL-271487] {CVE-2026-89633} - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270747] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256697] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256697] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256697] - bridge: mcast: Fix a possible use-after-free when removing a bridge port (Jakub Ramaseuski) [RHEL-232528] {CVE-2026-64032} - net: bridge: Flush multicast groups when snooping is disabled (Jakub Ramaseuski) [RHEL-232528] - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Antoine Tenart) [RHEL-231693] {CVE-2026-64024} - ipv4: fib: free fib_alias with kfree_rcu() on insert error path (Jamie Bainbridge) [RHEL-233131] {CVE-2026-64572} - inet: frags: strip GSO state from fragments before reassembly (Jamie Bainbridge) [RHEL-254224] {CVE-2026-80590} - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Jamie Bainbridge) [RHEL-225452] {CVE-2026-64114} - usb: typec: ucsi: validate connector number in ucsi_connector_change() (Desnes Nunes) [RHEL-259429] {CVE-2026-63958} - usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO (Desnes Nunes) [RHEL-259429] - usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (Desnes Nunes) [RHEL-259429] {CVE-2026-63962} - usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (Desnes Nunes) [RHEL-259429] {CVE-2026-63963} - usb: typec: altmodes/displayport: validate count before reading Status Update VDO (Desnes Nunes) [RHEL-259429] {CVE-2026-63961} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63899} - Bluetooth: hci_sync: Fix advertising data UAFs (CKI Backport Bot) [RHEL-254674] {CVE-2026-74509} - openvswitch: vport: fix self-deadlock on release of tunnel ports (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222958] {CVE-2026-52935} - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (Mohammadfaiz Bawa) [RHEL-243814] {CVE-2026-72288} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275058] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275076] {CVE-2026-93228} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270929] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270929] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271453] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268122] {CVE-2026-74705} - net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CKI Backport Bot) [RHEL-270908] {CVE-2026-81003} - wifi: cfg80211: use wiphy work for socket owner autodisconnect (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-263788] {CVE-2026-68409} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (Jose Ignacio Tornos Martinez) [RHEL-259560] {CVE-2026-64030} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261686] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260511] {CVE-2026-68140} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261293] {CVE-2026-72320} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256448] {CVE-2026-74641} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-237219] {CVE-2026-68377} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229654] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226490] {CVE-2026-53011} - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: skbuff: propagate shared-frag marker in skb_zerocopy() - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - xfs: bounds-check buffer log item's dirty bitmap (Pavel Reichl) [RHEL-253366] {CVE-2026-80536} - ovl: check access to copy_file_range source with src mounter creds (Miklos Szeredi) [RHEL-238870] {CVE-2026-68448} - ALSA: seq: close a re-opened queue timer in the destructor (CKI Backport Bot) [RHEL-263709] {CVE-2026-68202} - calipso: unlock rcu before returning -EAFNOSUPPORT (CKI Backport Bot) [RHEL-257685] {CVE-2025-38147} - calipso: Don't call calipso functions for AF_INET sk. (CKI Backport Bot) [RHEL-257685] {CVE-2025-38147} - netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (CKI Backport Bot) [RHEL-257666] {CVE-2025-22063} - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (CKI Backport Bot) [RHEL-255258] {CVE-2026-80530} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252811] {CVE-2026-68299} - ALSA: hda/cs35l41: Fix firmware load work teardown (CKI Backport Bot) [RHEL-234099] {CVE-2026-64481} - rtla: Fix segfault on multiple SIGINTs (Tomas Glozar) [RHEL-193029] - net: always dissect GSO packets in __virtio_net_hdr_to_skb() (Davide Caratti) [RHEL-284987] - ipv4: validate checksum_start before completing checksum (CKI Backport Bot) [RHEL-284987] {CVE-2026-99999} - smb: client: reject a tree connect response whose byte count is too small (Alisher Mazhirinov) [RHEL-271284] {CVE-2026-89631} - exec: Cleanup POSIX timers right after de_thread() (Luiz Capitulino) [RHEL-282063] {CVE-2026-98260} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271871] {CVE-2026-93817} - smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (Frank Sorenson) [RHEL-271487] {CVE-2026-89633} - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270747] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256697] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256697] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256697] - bridge: mcast: Fix a possible use-after-free when removing a bridge port (Jakub Ramaseuski) [RHEL-232528] {CVE-2026-64032} - net: bridge: Flush multicast groups when snooping is disabled (Jakub Ramaseuski) [RHEL-232528] - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Antoine Tenart) [RHEL-231693] {CVE-2026-64024} - ipv4: fib: free fib_alias with kfree_rcu() on insert error path (Jamie Bainbridge) [RHEL-233131] {CVE-2026-64572} - inet: frags: strip GSO state from fragments before reassembly (Jamie Bainbridge) [RHEL-254224] {CVE-2026-80590} - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Jamie Bainbridge) [RHEL-225452] {CVE-2026-64114} - usb: typec: ucsi: validate connector number in ucsi_connector_change() (Desnes Nunes) [RHEL-259429] {CVE-2026-63958} - usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO (Desnes Nunes) [RHEL-259429] - usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (Desnes Nunes) [RHEL-259429] {CVE-2026-63962} - usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (Desnes Nunes) [RHEL-259429] {CVE-2026-63963} - usb: typec: altmodes/displayport: validate count before reading Status Update VDO (Desnes Nunes) [RHEL-259429] {CVE-2026-63961} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63899} - Bluetooth: hci_sync: Fix advertising data UAFs (CKI Backport Bot) [RHEL-254674] {CVE-2026-74509} - openvswitch: vport: fix self-deadlock on release of tunnel ports (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222958] {CVE-2026-52935} - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (Mohammadfaiz Bawa) [RHEL-243814] {CVE-2026-72288} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275058] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275076] {CVE-2026-93228} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270929] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270929] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271453] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268122] {CVE-2026-74705} - net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CKI Backport Bot) [RHEL-270908] {CVE-2026-81003} - wifi: cfg80211: use wiphy work for socket owner autodisconnect (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-263788] {CVE-2026-68409} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (Jose Ignacio Tornos Martinez) [RHEL-259560] {CVE-2026-64030} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261686] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260511] {CVE-2026-68140} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261293] {CVE-2026-72320} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256448] {CVE-2026-74641} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-237219] {CVE-2026-68377} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229654] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226490] {CVE-2026-53011} - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - net: skbuff: propagate shared-frag marker in skb_zerocopy() - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - netfilter: flowtable: hold reference on ct until flow is released (CKI Backport Bot) [RHEL-280075] {CVE-2026-98320} - vfio/pci: clear vdev->msi_perm after freeing it on init failure (Rodolfo Vick) [RHEL-270901] {CVE-2026-89777} - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278089] {CVE-2026-93262} - KEYS: encrypted: fix integer overflow of datablob_len (Bruno Meneguele) [RHEL-279504] {CVE-2026-98222} - KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (CKI Backport Bot) [RHEL-277620] {CVE-2026-74515} - smb: client: guard against tailsz underflow in wdata_send_pages() (Paulo Alcantara) [RHEL-257205] - smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-257205] - smb: client: fix rlist race and missing initialization (Paulo Alcantara) [RHEL-257205] {CVE-2026-98174} - smb: client: cancel reconnect work in clean_demultiplex_info() (Paulo Alcantara) [RHEL-257205] {CVE-2026-98175} - smb/client: send lease break ACKs thru correct session for multiuser mounts (Paulo Alcantara) [RHEL-257205] - smb: client: fix cifsFileInfo reference leak in deferred close (Paulo Alcantara) [RHEL-257205] {CVE-2026-97558} - smb: client: avoid leaking refcount when cifs_sb_tlink() fails (Paulo Alcantara) [RHEL-257205] {CVE-2026-97556} - smb: client: avoid leaking refcount in cifs_queue_oplock_break() (Paulo Alcantara) [RHEL-257205] {CVE-2026-97557} - smb: client: fix data corruption with concurrent writes and O_TRUNC (Paulo Alcantara) [RHEL-257205] - cifs: don't update i_size in cifs_do_truncate without a cached handle (Paulo Alcantara) [RHEL-257205] - smb: client: invalidate fscache for fallocate range operations (Paulo Alcantara) [RHEL-257205] {CVE-2026-98124} - smb: client: fix stale page cache in insert/collapse range (Paulo Alcantara) [RHEL-257205] {CVE-2026-98125} - smb: client: fix integer truncation in collapse range (Paulo Alcantara) [RHEL-257205] - smb: client: fix data corruption in emulated insert range (Paulo Alcantara) [RHEL-257205] - smb/client: mark file sparse before emulating insert range (Paulo Alcantara) [RHEL-257205] - smb/client: validate new EOF for zero range (Paulo Alcantara) [RHEL-257205] {CVE-2026-98126} - smb/client: validate new EOF for insert range (Paulo Alcantara) [RHEL-257205] {CVE-2026-98127} - cifs: add revalidation on FSCTL failure in smb2_duplicate_extents() (Paulo Alcantara) [RHEL-257205] - cifs: fix loff_t underflow in cifs_remap_file_range() when len == 0 (Paulo Alcantara) [RHEL-257205] {CVE-2026-89640} - cifs: call pagecache_isize_extended() in cifs_setsize() when extending (Paulo Alcantara) [RHEL-257205] {CVE-2026-89642} - cifs: clear tcon after cifsFileInfo_put() in cifs_file_set_size() (Paulo Alcantara) [RHEL-257205] {CVE-2026-89641} - smb/client: decode reparse metadata using its payload type (Paulo Alcantara) [RHEL-257205] - smb/client: preserve open info type across compound queries (Paulo Alcantara) [RHEL-257205] - smb/client: mark missing nlink values as unknown (Paulo Alcantara) [RHEL-257205] - smb/client: fix nlink of an overwritten open file (Paulo Alcantara) [RHEL-257205] - cifs: remove dead size-update blocks in cifs_setattr_unix/nounix (Paulo Alcantara) [RHEL-257205] - cifs: remove redundant size-update block in cifs_remap_file_range() (Paulo Alcantara) [RHEL-257205] - cifs: add cifs_resize_file_locked() to guard fscache_resize_cookie() under i_rwsem (Paulo Alcantara) [RHEL-257205] - cifs: use cifs_invalidate_cache() in cifs_do_truncate() for O_TRUNC (Paulo Alcantara) [RHEL-257205] {CVE-2026-89639} - cifs: add fscache_resize_cookie() to cifs_setsize() (Paulo Alcantara) [RHEL-257205] - smb: client: simplify cifs_fscache_get_super_cookie() (Paulo Alcantara) [RHEL-257205] - smb/client: flush dirty data before punching a hole (Paulo Alcantara) [RHEL-257205] {CVE-2026-93794} - smb/client: refresh allocation after EOF-extending fallocate (Paulo Alcantara) [RHEL-257205] - smb/client: emulate small EOF-extending mode 0 fallocate ranges (Paulo Alcantara) [RHEL-257205] - smb/client: reduce fallocate zero buffer allocation (Paulo Alcantara) [RHEL-257205] - smb/client: refresh allocation size after duplicate extents (Paulo Alcantara) [RHEL-257205] - smb: client: use kvzalloc() for megabyte buffer in simple fallocate (Paulo Alcantara) [RHEL-257205] - smb/client: fix incorrect nlink returned by fstat() (Paulo Alcantara) [RHEL-257205] - smb/client: zero-initialize stack-allocated cifs_open_info_data (Paulo Alcantara) [RHEL-257205] {CVE-2026-93801} - smb/client: pass cifs_open_info_data to SMB2_open() (Paulo Alcantara) [RHEL-257205] - smb/client: use stack-allocated smb2_file_all_info in smb3_query_mf_symlink() (Paulo Alcantara) [RHEL-257205] - smb: client: refactor cifs_revalidate_mapping() to use clear_and_wake_up_bit() (Paulo Alcantara) [RHEL-257205] - smb/client: do not account EOF extension as allocation (Paulo Alcantara) [RHEL-257205] - smb/client: preserve errors from smb2_set_sparse() (Paulo Alcantara) [RHEL-257205] - smb/client: name the default fallocate mode (Paulo Alcantara) [RHEL-257205] - smb/client: update i_blocks after contiguous writes (Paulo Alcantara) [RHEL-257205] - smb: client: fix races in cifsd thread creation (Paulo Alcantara) [RHEL-257205] {CVE-2026-93829} - cifs: invalidate cfid on unlink/rename/rmdir (Paulo Alcantara) [RHEL-257205] - cifs: abort open_cached_dir if we don't request leases (Paulo Alcantara) [RHEL-257205] - cifs: change_conf needs to be called for session setup (Paulo Alcantara) [RHEL-257205] - smb: client: fix generic/694 due to wrong ->i_blocks (Paulo Alcantara) [RHEL-257205] - smb: client: fix open handle lookup in cifs_open() (Paulo Alcantara) [RHEL-257205] - smb: client: fix in-place encryption corruption in SMB2_write() (Paulo Alcantara) [RHEL-257205] {CVE-2026-43362} - smb: client: fix atomic open with O_DIRECT & O_SYNC (Paulo Alcantara) [RHEL-257205] - cifs: Scripted clean up fs/smb/client/cifsglob.h (Paulo Alcantara) [RHEL-257205] - cifs: Scripted clean up fs/smb/client/fscache.h (Paulo Alcantara) [RHEL-257205] - cifs: Scripted clean up fs/smb/client/cifsfs.h (Paulo Alcantara) [RHEL-257205] - cifs: Scripted clean up fs/smb/client/cifsproto.h (Paulo Alcantara) [RHEL-257205] - udp: Deal with race between UDP socket address change and rehash (Jamie Bainbridge) [RHEL-257635] {CVE-2024-57974} - smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (CKI Backport Bot) [RHEL-271257] {CVE-2026-89638} - net/handshake: Drain pending requests at net namespace exit (Xin Long) [RHEL-232134] {CVE-2026-63978} - net/handshake: Use spin_lock_bh for hn_lock (Xin Long) [RHEL-232134] - net/handshake: hand off the pinned file reference to accept_doit (Xin Long) [RHEL-230363] {CVE-2026-63979} - net/handshake: Take a long-lived file reference at submit (Xin Long) [RHEL-234159] {CVE-2026-64523} - fuse: re-lock request before replacing page cache folio (Miklos Szeredi) [RHEL-226093] {CVE-2026-53388} - fuse: release pipe buf after last use (Miklos Szeredi) [RHEL-226093] {CVE-2026-53388} - fuse: fix page stealing (Miklos Szeredi) [RHEL-226093] {CVE-2026-53388} - ipvs: reload ip header after head reallocation (Phil Sutter) [RHEL-263800] {CVE-2026-68476} - selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() (CKI Backport Bot) [RHEL-243225] {CVE-2026-72242} - usb: usbfs: fix use-after-free of usb_device in usbdev_release() (CKI Backport Bot) [RHEL-258557] {CVE-2026-80824} - fuse: re-lock request before returning from fuse_ref_folio() (CKI Backport Bot) [RHEL-234250] {CVE-2026-64266} - xfs: bounds-check buffer log item's dirty bitmap (Pavel Reichl) [RHEL-253366] {CVE-2026-80536} - ovl: check access to copy_file_range source with src mounter creds (Miklos Szeredi) [RHEL-238870] {CVE-2026-68448} - ALSA: seq: close a re-opened queue timer in the destructor (CKI Backport Bot) [RHEL-263709] {CVE-2026-68202} - calipso: unlock rcu before returning -EAFNOSUPPORT (CKI Backport Bot) [RHEL-257685] {CVE-2025-38147} - calipso: Don't call calipso functions for AF_INET sk. (CKI Backport Bot) [RHEL-257685] {CVE-2025-38147} - netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (CKI Backport Bot) [RHEL-257666] {CVE-2025-22063} - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (CKI Backport Bot) [RHEL-255258] {CVE-2026-80530} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252811] {CVE-2026-68299} - ALSA: hda/cs35l41: Fix firmware load work teardown (CKI Backport Bot) [RHEL-234099] {CVE-2026-64481} - rtla: Fix segfault on multiple SIGINTs (Tomas Glozar) [RHEL-193029] - net: always dissect GSO packets in __virtio_net_hdr_to_skb() (Davide Caratti) [RHEL-284987] - ipv4: validate checksum_start before completing checksum (CKI Backport Bot) [RHEL-284987] {CVE-2026-99999} - smb: client: reject a tree connect response whose byte count is too small (Alisher Mazhirinov) [RHEL-271284] {CVE-2026-89631} - exec: Cleanup POSIX timers right after de_thread() (Luiz Capitulino) [RHEL-282063] {CVE-2026-98260} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271871] {CVE-2026-93817} - smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (Frank Sorenson) [RHEL-271487] {CVE-2026-89633} - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270747] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256697] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256697] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256697] - bridge: mcast: Fix a possible use-after-free when removing a bridge port (Jakub Ramaseuski) [RHEL-232528] {CVE-2026-64032} - net: bridge: Flush multicast groups when snooping is disabled (Jakub Ramaseuski) [RHEL-232528] - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Antoine Tenart) [RHEL-231693] {CVE-2026-64024} - ipv4: fib: free fib_alias with kfree_rcu() on insert error path (Jamie Bainbridge) [RHEL-233131] {CVE-2026-64572} - inet: frags: strip GSO state from fragments before reassembly (Jamie Bainbridge) [RHEL-254224] {CVE-2026-80590} - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Jamie Bainbridge) [RHEL-225452] {CVE-2026-64114} - usb: typec: ucsi: validate connector number in ucsi_connector_change() (Desnes Nunes) [RHEL-259429] {CVE-2026-63958} - usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO (Desnes Nunes) [RHEL-259429] - usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (Desnes Nunes) [RHEL-259429] {CVE-2026-63962} - usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (Desnes Nunes) [RHEL-259429] {CVE-2026-63963} - usb: typec: altmodes/displayport: validate count before reading Status Update VDO (Desnes Nunes) [RHEL-259429] {CVE-2026-63961} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63899} - Bluetooth: hci_sync: Fix advertising data UAFs (CKI Backport Bot) [RHEL-254674] {CVE-2026-74509} - openvswitch: vport: fix self-deadlock on release of tunnel ports (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222958] {CVE-2026-52935} - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (Mohammadfaiz Bawa) [RHEL-243814] {CVE-2026-72288} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275058] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275076] {CVE-2026-93228} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270929] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270929] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271453] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268122] {CVE-2026-74705} - net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CKI Backport Bot) [RHEL-270908] {CVE-2026-81003} - wifi: cfg80211: use wiphy work for socket owner autodisconnect (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-263788] {CVE-2026-68409} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (Jose Ignacio Tornos Martinez) [RHEL-259560] {CVE-2026-64030} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261686] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260511] {CVE-2026-68140} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261293] {CVE-2026-72320} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256448] {CVE-2026-74641} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-237219] {CVE-2026-68377} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229654] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226490] {CVE-2026-53011} - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable backports (SOURCES/1100-1196) - Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto authencesn/algif) - Keep the smb cifs.spnego ahead-fix (retained as 1197) - RHEL changelog for 687.6.1..687.10.1 follows: - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163} - RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128} - usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607} - can: raw: fix ro->uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401} - powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125] - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742] - Revert "lpfc: don't use file->f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742] - drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822] - drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853] - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404] - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402} - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741} - smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988] - ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378] - RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966] - net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207] - ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095] - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766} - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766} - rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075} - Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable backports (SOURCES/1198-1252) - RHEL changelog for 687.11.1..687.12.1 follows: - dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110} - Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020} - crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914] - proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653} - proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653} - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470] - mm/page_alloc: clear page->private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303} - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158} - redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927] - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859] - ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829] - ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829] - ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179] - ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257] - dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442] - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378] - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684} - cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701] - ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701] - ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701] - ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701] - drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179] - nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089} - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724} - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183} - i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312] - ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182] - ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185] - Revert "mm: pcp: increase pcp->free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464] - netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392} - Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269) - RHEL changelog for 687.13.1 follows: - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243} - s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472] - s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472] - s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472] - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745] - nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745] - Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786} - crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167] - crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167] - smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613} - mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778] - mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778] - mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778] - mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778] - mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778] - mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778] - mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778] - mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778] - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.18.1..687.19.1 follows: - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176} - init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183] - update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183] - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183] - work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183] - compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183] - powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183] - sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776] - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189} - sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273] - netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273] - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993] - iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993] - iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993] - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993] - iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993] - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057] - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057] - IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057] - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057] - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057] - net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057] - net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057] - net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057] - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057] - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057] - net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057] - net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057] - net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057] - net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057] - net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057] - net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057] - net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057] - net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057] - net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057] - net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057] - net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057] - mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057] - net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057] - net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057] - net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057] - net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057] - net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057] - net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057] - net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057] - net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057] - net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057] - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057] - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057] - mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057] - net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057] - net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057] - net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057] - net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057] - net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057] - net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057] - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057] - net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057] - net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057] - net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057] - net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057] - net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057] - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057] - net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057] - net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057] - net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057] - net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057] - net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057] - net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057] - net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057] - net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057] - net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057] - net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057] - eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057] - net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057] - net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057] - net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057] - net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057] - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057] - RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057] - net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057] - net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057] - net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057] - net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057] - net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057] - net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057] - net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057] - net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057] - net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057] - net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057] - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057] - net: Fix typos (Kamal Heib) [RHEL-169057] - net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057] - net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057] - net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057] - net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057] - net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057] - net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057] - net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057] - net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057] - net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057] - net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057] - net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057] - eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Kamal Heib) [RHEL-169057] - net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057] - net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057] - net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057] - net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057] - net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057] - net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057] - net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057] - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057] - net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057] - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057] - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057] - net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057] - net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057] - net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057] - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057] - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444] - ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444] - ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444] - ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488} - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329} - Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312) - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.19.1..687.20.1 follows: - crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540] - crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540] - crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540] - crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540] - tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198} - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739} - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760] - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760] - scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886] - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411} - Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.18.1..687.19.1 follows: - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176} - init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183] - update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183] - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183] - work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183] - compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183] - powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183] - sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776] - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189} - sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273] - netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273] - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993] - iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993] - iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993] - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993] - iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993] - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057] - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057] - IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057] - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057] - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057] - net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057] - net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057] - net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057] - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057] - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057] - net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057] - net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057] - net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057] - net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057] - net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057] - net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057] - net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057] - net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057] - net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057] - net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057] - net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057] - mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057] - net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057] - net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057] - net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057] - net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057] - net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057] - net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057] - net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057] - net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057] - net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057] - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057] - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057] - mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057] - net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057] - net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057] - net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057] - net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057] - net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057] - net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057] - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057] - net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057] - net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057] - net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057] - net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057] - net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057] - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057] - net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057] - net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057] - net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057] - net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057] - net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057] - net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057] - net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057] - net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057] - net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057] - net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057] - eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057] - net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057] - net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057] - net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057] - net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057] - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057] - RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057] - net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057] - net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057] - net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057] - net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057] - net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057] - net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057] - net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057] - net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057] - net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057] - net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057] - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057] - net: Fix typos (Kamal Heib) [RHEL-169057] - net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057] - net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057] - net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057] - net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057] - net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057] - net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057] - net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057] - net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057] - net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057] - net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057] - net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057] - eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Kamal Heib) [RHEL-169057] - net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057] - net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057] - net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057] - net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057] - net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057] - net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057] - net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057] - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057] - net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057] - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057] - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057] - net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057] - net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057] - net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057] - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057] - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444] - ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444] - ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444] - ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488} - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329} - Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312) - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735) - Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll ep_remove use-after-free CVE-2026-46242 (1712) - RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux ahead-patch (1312) is retained and RHEL's duplicate copy omitted - CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263) - RHEL changelog for 687.21.1..687.22.1 follows: - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041] - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116} - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263} - KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316} - netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227} - nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966] - Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755) - The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by RHEL's eventpoll series carrying the same fix and is dropped - Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738) - RHEL changelog for 687.23.1 follows: - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1756, 1757) are superseded by RHEL's copies and dropped - RHEL changelog for 687.25.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770) - RHEL changelog for 687.26.1 follows: - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1756, 1757) are superseded by RHEL's copies and dropped - RHEL changelog for 687.25.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041] - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116} - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619] - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619] - Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762] - Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762] - Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762] - Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762] - Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762] - Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762] - Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762] - Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762] - nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489] - pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489] - net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508] - cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548] - spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129] - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431) - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619] - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619] - Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762] - Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762] - Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762] - Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762] - Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762] - Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762] - Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762] - Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762] - nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489] - net: skbuff: propagate shared-frag marker through frag-transfer helpers (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300 "Fragnesia") - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431) - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (Mohammadfaiz Bawa) [RHEL-243814] {CVE-2026-72288} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275058] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275076] {CVE-2026-93228} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270929] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270929] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271453] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268122] {CVE-2026-74705} - net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CKI Backport Bot) [RHEL-270908] {CVE-2026-81003} - wifi: cfg80211: use wiphy work for socket owner autodisconnect (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-263788] {CVE-2026-68409} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (Jose Ignacio Tornos Martinez) [RHEL-259560] {CVE-2026-64030} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261686] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260511] {CVE-2026-68140} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261293] {CVE-2026-72320} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256448] {CVE-2026-74641} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-237219] {CVE-2026-68377} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229654] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226490] {CVE-2026-53011} - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net: always dissect GSO packets in __virtio_net_hdr_to_skb() (Davide Caratti) [RHEL-284987] - ipv4: validate checksum_start before completing checksum (CKI Backport Bot) [RHEL-284987] {CVE-2026-99999} - smb: client: reject a tree connect response whose byte count is too small (Alisher Mazhirinov) [RHEL-271284] {CVE-2026-89631} - exec: Cleanup POSIX timers right after de_thread() (Luiz Capitulino) [RHEL-282063] {CVE-2026-98260} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271871] {CVE-2026-93817} - smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (Frank Sorenson) [RHEL-271487] {CVE-2026-89633} - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270747] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256697] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256697] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256697] - bridge: mcast: Fix a possible use-after-free when removing a bridge port (Jakub Ramaseuski) [RHEL-232528] {CVE-2026-64032} - net: bridge: Flush multicast groups when snooping is disabled (Jakub Ramaseuski) [RHEL-232528] - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Antoine Tenart) [RHEL-231693] {CVE-2026-64024} - ipv4: fib: free fib_alias with kfree_rcu() on insert error path (Jamie Bainbridge) [RHEL-233131] {CVE-2026-64572} - inet: frags: strip GSO state from fragments before reassembly (Jamie Bainbridge) [RHEL-254224] {CVE-2026-80590} - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Jamie Bainbridge) [RHEL-225452] {CVE-2026-64114} - usb: typec: ucsi: validate connector number in ucsi_connector_change() (Desnes Nunes) [RHEL-259429] {CVE-2026-63958} - usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO (Desnes Nunes) [RHEL-259429] - usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (Desnes Nunes) [RHEL-259429] {CVE-2026-63962} - usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (Desnes Nunes) [RHEL-259429] {CVE-2026-63963} - usb: typec: altmodes/displayport: validate count before reading Status Update VDO (Desnes Nunes) [RHEL-259429] {CVE-2026-63961} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63899} - Bluetooth: hci_sync: Fix advertising data UAFs (CKI Backport Bot) [RHEL-254674] {CVE-2026-74509} - openvswitch: vport: fix self-deadlock on release of tunnel ports (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222958] {CVE-2026-52935} - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (Mohammadfaiz Bawa) [RHEL-243814] {CVE-2026-72288} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275058] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275076] {CVE-2026-93228} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270929] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270929] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271453] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268122] {CVE-2026-74705} - net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CKI Backport Bot) [RHEL-270908] {CVE-2026-81003} - wifi: cfg80211: use wiphy work for socket owner autodisconnect (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-263788] {CVE-2026-68409} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (Jose Ignacio Tornos Martinez) [RHEL-259560] {CVE-2026-64030} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261686] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260511] {CVE-2026-68140} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261293] {CVE-2026-72320} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256448] {CVE-2026-74641} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-237219] {CVE-2026-68377} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229654] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226490] {CVE-2026-53011} - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: skbuff: propagate shared-frag marker in skb_zerocopy() - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - xfs: bounds-check buffer log item's dirty bitmap (Pavel Reichl) [RHEL-253366] {CVE-2026-80536} - ovl: check access to copy_file_range source with src mounter creds (Miklos Szeredi) [RHEL-238870] {CVE-2026-68448} - ALSA: seq: close a re-opened queue timer in the destructor (CKI Backport Bot) [RHEL-263709] {CVE-2026-68202} - calipso: unlock rcu before returning -EAFNOSUPPORT (CKI Backport Bot) [RHEL-257685] {CVE-2025-38147} - calipso: Don't call calipso functions for AF_INET sk. (CKI Backport Bot) [RHEL-257685] {CVE-2025-38147} - netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (CKI Backport Bot) [RHEL-257666] {CVE-2025-22063} - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (CKI Backport Bot) [RHEL-255258] {CVE-2026-80530} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252811] {CVE-2026-68299} - ALSA: hda/cs35l41: Fix firmware load work teardown (CKI Backport Bot) [RHEL-234099] {CVE-2026-64481} - rtla: Fix segfault on multiple SIGINTs (Tomas Glozar) [RHEL-193029] - net: always dissect GSO packets in __virtio_net_hdr_to_skb() (Davide Caratti) [RHEL-284987] - ipv4: validate checksum_start before completing checksum (CKI Backport Bot) [RHEL-284987] {CVE-2026-99999} - smb: client: reject a tree connect response whose byte count is too small (Alisher Mazhirinov) [RHEL-271284] {CVE-2026-89631} - exec: Cleanup POSIX timers right after de_thread() (Luiz Capitulino) [RHEL-282063] {CVE-2026-98260} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271871] {CVE-2026-93817} - smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (Frank Sorenson) [RHEL-271487] {CVE-2026-89633} - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270747] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256697] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256697] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256697] - bridge: mcast: Fix a possible use-after-free when removing a bridge port (Jakub Ramaseuski) [RHEL-232528] {CVE-2026-64032} - net: bridge: Flush multicast groups when snooping is disabled (Jakub Ramaseuski) [RHEL-232528] - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Antoine Tenart) [RHEL-231693] {CVE-2026-64024} - ipv4: fib: free fib_alias with kfree_rcu() on insert error path (Jamie Bainbridge) [RHEL-233131] {CVE-2026-64572} - inet: frags: strip GSO state from fragments before reassembly (Jamie Bainbridge) [RHEL-254224] {CVE-2026-80590} - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Jamie Bainbridge) [RHEL-225452] {CVE-2026-64114} - usb: typec: ucsi: validate connector number in ucsi_connector_change() (Desnes Nunes) [RHEL-259429] {CVE-2026-63958} - usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO (Desnes Nunes) [RHEL-259429] - usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (Desnes Nunes) [RHEL-259429] {CVE-2026-63962} - usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (Desnes Nunes) [RHEL-259429] {CVE-2026-63963} - usb: typec: altmodes/displayport: validate count before reading Status Update VDO (Desnes Nunes) [RHEL-259429] {CVE-2026-63961} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63899} - Bluetooth: hci_sync: Fix advertising data UAFs (CKI Backport Bot) [RHEL-254674] {CVE-2026-74509} - openvswitch: vport: fix self-deadlock on release of tunnel ports (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222958] {CVE-2026-52935} - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (Mohammadfaiz Bawa) [RHEL-243814] {CVE-2026-72288} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275058] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275076] {CVE-2026-93228} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270929] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270929] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271453] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268122] {CVE-2026-74705} - net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CKI Backport Bot) [RHEL-270908] {CVE-2026-81003} - wifi: cfg80211: use wiphy work for socket owner autodisconnect (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-263788] {CVE-2026-68409} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (Jose Ignacio Tornos Martinez) [RHEL-259560] {CVE-2026-64030} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261686] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260511] {CVE-2026-68140} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261293] {CVE-2026-72320} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256448] {CVE-2026-74641} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-237219] {CVE-2026-68377} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229654] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226490] {CVE-2026-53011} - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - net: skbuff: propagate shared-frag marker in skb_zerocopy() - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - netfilter: flowtable: hold reference on ct until flow is released (CKI Backport Bot) [RHEL-280075] {CVE-2026-98320} - vfio/pci: clear vdev->msi_perm after freeing it on init failure (Rodolfo Vick) [RHEL-270901] {CVE-2026-89777} - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278089] {CVE-2026-93262} - KEYS: encrypted: fix integer overflow of datablob_len (Bruno Meneguele) [RHEL-279504] {CVE-2026-98222} - KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (CKI Backport Bot) [RHEL-277620] {CVE-2026-74515} - smb: client: guard against tailsz underflow in wdata_send_pages() (Paulo Alcantara) [RHEL-257205] - smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-257205] - smb: client: fix rlist race and missing initialization (Paulo Alcantara) [RHEL-257205] {CVE-2026-98174} - smb: client: cancel reconnect work in clean_demultiplex_info() (Paulo Alcantara) [RHEL-257205] {CVE-2026-98175} - smb/client: send lease break ACKs thru correct session for multiuser mounts (Paulo Alcantara) [RHEL-257205] - smb: client: fix cifsFileInfo reference leak in deferred close (Paulo Alcantara) [RHEL-257205] {CVE-2026-97558} - smb: client: avoid leaking refcount when cifs_sb_tlink() fails (Paulo Alcantara) [RHEL-257205] {CVE-2026-97556} - smb: client: avoid leaking refcount in cifs_queue_oplock_break() (Paulo Alcantara) [RHEL-257205] {CVE-2026-97557} - smb: client: fix data corruption with concurrent writes and O_TRUNC (Paulo Alcantara) [RHEL-257205] - cifs: don't update i_size in cifs_do_truncate without a cached handle (Paulo Alcantara) [RHEL-257205] - smb: client: invalidate fscache for fallocate range operations (Paulo Alcantara) [RHEL-257205] {CVE-2026-98124} - smb: client: fix stale page cache in insert/collapse range (Paulo Alcantara) [RHEL-257205] {CVE-2026-98125} - smb: client: fix integer truncation in collapse range (Paulo Alcantara) [RHEL-257205] - smb: client: fix data corruption in emulated insert range (Paulo Alcantara) [RHEL-257205] - smb/client: mark file sparse before emulating insert range (Paulo Alcantara) [RHEL-257205] - smb/client: validate new EOF for zero range (Paulo Alcantara) [RHEL-257205] {CVE-2026-98126} - smb/client: validate new EOF for insert range (Paulo Alcantara) [RHEL-257205] {CVE-2026-98127} - cifs: add revalidation on FSCTL failure in smb2_duplicate_extents() (Paulo Alcantara) [RHEL-257205] - cifs: fix loff_t underflow in cifs_remap_file_range() when len == 0 (Paulo Alcantara) [RHEL-257205] {CVE-2026-89640} - cifs: call pagecache_isize_extended() in cifs_setsize() when extending (Paulo Alcantara) [RHEL-257205] {CVE-2026-89642} - cifs: clear tcon after cifsFileInfo_put() in cifs_file_set_size() (Paulo Alcantara) [RHEL-257205] {CVE-2026-89641} - smb/client: decode reparse metadata using its payload type (Paulo Alcantara) [RHEL-257205] - smb/client: preserve open info type across compound queries (Paulo Alcantara) [RHEL-257205] - smb/client: mark missing nlink values as unknown (Paulo Alcantara) [RHEL-257205] - smb/client: fix nlink of an overwritten open file (Paulo Alcantara) [RHEL-257205] - cifs: remove dead size-update blocks in cifs_setattr_unix/nounix (Paulo Alcantara) [RHEL-257205] - cifs: remove redundant size-update block in cifs_remap_file_range() (Paulo Alcantara) [RHEL-257205] - cifs: add cifs_resize_file_locked() to guard fscache_resize_cookie() under i_rwsem (Paulo Alcantara) [RHEL-257205] - cifs: use cifs_invalidate_cache() in cifs_do_truncate() for O_TRUNC (Paulo Alcantara) [RHEL-257205] {CVE-2026-89639} - cifs: add fscache_resize_cookie() to cifs_setsize() (Paulo Alcantara) [RHEL-257205] - smb: client: simplify cifs_fscache_get_super_cookie() (Paulo Alcantara) [RHEL-257205] - smb/client: flush dirty data before punching a hole (Paulo Alcantara) [RHEL-257205] {CVE-2026-93794} - smb/client: refresh allocation after EOF-extending fallocate (Paulo Alcantara) [RHEL-257205] - smb/client: emulate small EOF-extending mode 0 fallocate ranges (Paulo Alcantara) [RHEL-257205] - smb/client: reduce fallocate zero buffer allocation (Paulo Alcantara) [RHEL-257205] - smb/client: refresh allocation size after duplicate extents (Paulo Alcantara) [RHEL-257205] - smb: client: use kvzalloc() for megabyte buffer in simple fallocate (Paulo Alcantara) [RHEL-257205] - smb/client: fix incorrect nlink returned by fstat() (Paulo Alcantara) [RHEL-257205] - smb/client: zero-initialize stack-allocated cifs_open_info_data (Paulo Alcantara) [RHEL-257205] {CVE-2026-93801} - smb/client: pass cifs_open_info_data to SMB2_open() (Paulo Alcantara) [RHEL-257205] - smb/client: use stack-allocated smb2_file_all_info in smb3_query_mf_symlink() (Paulo Alcantara) [RHEL-257205] - smb: client: refactor cifs_revalidate_mapping() to use clear_and_wake_up_bit() (Paulo Alcantara) [RHEL-257205] - smb/client: do not account EOF extension as allocation (Paulo Alcantara) [RHEL-257205] - smb/client: preserve errors from smb2_set_sparse() (Paulo Alcantara) [RHEL-257205] - smb/client: name the default fallocate mode (Paulo Alcantara) [RHEL-257205] - smb/client: update i_blocks after contiguous writes (Paulo Alcantara) [RHEL-257205] - smb: client: fix races in cifsd thread creation (Paulo Alcantara) [RHEL-257205] {CVE-2026-93829} - cifs: invalidate cfid on unlink/rename/rmdir (Paulo Alcantara) [RHEL-257205] - cifs: abort open_cached_dir if we don't request leases (Paulo Alcantara) [RHEL-257205] - cifs: change_conf needs to be called for session setup (Paulo Alcantara) [RHEL-257205] - smb: client: fix generic/694 due to wrong ->i_blocks (Paulo Alcantara) [RHEL-257205] - smb: client: fix open handle lookup in cifs_open() (Paulo Alcantara) [RHEL-257205] - smb: client: fix in-place encryption corruption in SMB2_write() (Paulo Alcantara) [RHEL-257205] {CVE-2026-43362} - smb: client: fix atomic open with O_DIRECT & O_SYNC (Paulo Alcantara) [RHEL-257205] - cifs: Scripted clean up fs/smb/client/cifsglob.h (Paulo Alcantara) [RHEL-257205] - cifs: Scripted clean up fs/smb/client/fscache.h (Paulo Alcantara) [RHEL-257205] - cifs: Scripted clean up fs/smb/client/cifsfs.h (Paulo Alcantara) [RHEL-257205] - cifs: Scripted clean up fs/smb/client/cifsproto.h (Paulo Alcantara) [RHEL-257205] - udp: Deal with race between UDP socket address change and rehash (Jamie Bainbridge) [RHEL-257635] {CVE-2024-57974} - smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (CKI Backport Bot) [RHEL-271257] {CVE-2026-89638} - net/handshake: Drain pending requests at net namespace exit (Xin Long) [RHEL-232134] {CVE-2026-63978} - net/handshake: Use spin_lock_bh for hn_lock (Xin Long) [RHEL-232134] - net/handshake: hand off the pinned file reference to accept_doit (Xin Long) [RHEL-230363] {CVE-2026-63979} - net/handshake: Take a long-lived file reference at submit (Xin Long) [RHEL-234159] {CVE-2026-64523} - fuse: re-lock request before replacing page cache folio (Miklos Szeredi) [RHEL-226093] {CVE-2026-53388} - fuse: release pipe buf after last use (Miklos Szeredi) [RHEL-226093] {CVE-2026-53388} - fuse: fix page stealing (Miklos Szeredi) [RHEL-226093] {CVE-2026-53388} - ipvs: reload ip header after head reallocation (Phil Sutter) [RHEL-263800] {CVE-2026-68476} - selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() (CKI Backport Bot) [RHEL-243225] {CVE-2026-72242} - usb: usbfs: fix use-after-free of usb_device in usbdev_release() (CKI Backport Bot) [RHEL-258557] {CVE-2026-80824} - fuse: re-lock request before returning from fuse_ref_folio() (CKI Backport Bot) [RHEL-234250] {CVE-2026-64266} - xfs: bounds-check buffer log item's dirty bitmap (Pavel Reichl) [RHEL-253366] {CVE-2026-80536} - ovl: check access to copy_file_range source with src mounter creds (Miklos Szeredi) [RHEL-238870] {CVE-2026-68448} - ALSA: seq: close a re-opened queue timer in the destructor (CKI Backport Bot) [RHEL-263709] {CVE-2026-68202} - calipso: unlock rcu before returning -EAFNOSUPPORT (CKI Backport Bot) [RHEL-257685] {CVE-2025-38147} - calipso: Don't call calipso functions for AF_INET sk. (CKI Backport Bot) [RHEL-257685] {CVE-2025-38147} - netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (CKI Backport Bot) [RHEL-257666] {CVE-2025-22063} - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (CKI Backport Bot) [RHEL-255258] {CVE-2026-80530} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252811] {CVE-2026-68299} - ALSA: hda/cs35l41: Fix firmware load work teardown (CKI Backport Bot) [RHEL-234099] {CVE-2026-64481} - rtla: Fix segfault on multiple SIGINTs (Tomas Glozar) [RHEL-193029] - net: always dissect GSO packets in __virtio_net_hdr_to_skb() (Davide Caratti) [RHEL-284987] - ipv4: validate checksum_start before completing checksum (CKI Backport Bot) [RHEL-284987] {CVE-2026-99999} - smb: client: reject a tree connect response whose byte count is too small (Alisher Mazhirinov) [RHEL-271284] {CVE-2026-89631} - exec: Cleanup POSIX timers right after de_thread() (Luiz Capitulino) [RHEL-282063] {CVE-2026-98260} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271871] {CVE-2026-93817} - smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (Frank Sorenson) [RHEL-271487] {CVE-2026-89633} - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270747] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256697] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256697] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256697] - bridge: mcast: Fix a possible use-after-free when removing a bridge port (Jakub Ramaseuski) [RHEL-232528] {CVE-2026-64032} - net: bridge: Flush multicast groups when snooping is disabled (Jakub Ramaseuski) [RHEL-232528] - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Antoine Tenart) [RHEL-231693] {CVE-2026-64024} - ipv4: fib: free fib_alias with kfree_rcu() on insert error path (Jamie Bainbridge) [RHEL-233131] {CVE-2026-64572} - inet: frags: strip GSO state from fragments before reassembly (Jamie Bainbridge) [RHEL-254224] {CVE-2026-80590} - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Jamie Bainbridge) [RHEL-225452] {CVE-2026-64114} - usb: typec: ucsi: validate connector number in ucsi_connector_change() (Desnes Nunes) [RHEL-259429] {CVE-2026-63958} - usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO (Desnes Nunes) [RHEL-259429] - usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (Desnes Nunes) [RHEL-259429] {CVE-2026-63962} - usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (Desnes Nunes) [RHEL-259429] {CVE-2026-63963} - usb: typec: altmodes/displayport: validate count before reading Status Update VDO (Desnes Nunes) [RHEL-259429] {CVE-2026-63961} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63899} - Bluetooth: hci_sync: Fix advertising data UAFs (CKI Backport Bot) [RHEL-254674] {CVE-2026-74509} - openvswitch: vport: fix self-deadlock on release of tunnel ports (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222958] {CVE-2026-52935} - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (Mohammadfaiz Bawa) [RHEL-243814] {CVE-2026-72288} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275058] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275076] {CVE-2026-93228} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270929] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270929] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271453] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268122] {CVE-2026-74705} - net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CKI Backport Bot) [RHEL-270908] {CVE-2026-81003} - wifi: cfg80211: use wiphy work for socket owner autodisconnect (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-263788] {CVE-2026-68409} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (Jose Ignacio Tornos Martinez) [RHEL-259560] {CVE-2026-64030} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261686] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260511] {CVE-2026-68140} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261293] {CVE-2026-72320} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256448] {CVE-2026-74641} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-237219] {CVE-2026-68377} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229654] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226490] {CVE-2026-53011} - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable backports (SOURCES/1100-1196) - Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto authencesn/algif) - Keep the smb cifs.spnego ahead-fix (retained as 1197) - RHEL changelog for 687.6.1..687.10.1 follows: - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163} - RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128} - usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607} - can: raw: fix ro->uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401} - powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125] - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742] - Revert "lpfc: don't use file->f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742] - drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822] - drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853] - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404] - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402} - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741} - smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988] - ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378] - RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966] - net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207] - ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095] - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766} - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766} - rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075} - Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable backports (SOURCES/1198-1252) - RHEL changelog for 687.11.1..687.12.1 follows: - dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110} - Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020} - crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914] - proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653} - proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653} - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470] - mm/page_alloc: clear page->private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303} - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158} - redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927] - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859] - ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829] - ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829] - ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179] - ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257] - dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442] - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378] - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684} - cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701] - ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701] - ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701] - ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701] - drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179] - nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089} - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724} - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183} - i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312] - ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182] - ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185] - Revert "mm: pcp: increase pcp->free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464] - netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392} - Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269) - RHEL changelog for 687.13.1 follows: - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243} - s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472] - s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472] - s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472] - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745] - nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745] - Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786} - crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167] - crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167] - smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613} - mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778] - mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778] - mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778] - mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778] - mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778] - mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778] - mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778] - mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778] - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.18.1..687.19.1 follows: - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176} - init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183] - update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183] - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183] - work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183] - compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183] - powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183] - sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776] - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189} - sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273] - netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273] - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993] - iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993] - iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993] - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993] - iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993] - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057] - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057] - IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057] - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057] - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057] - net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057] - net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057] - net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057] - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057] - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057] - net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057] - net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057] - net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057] - net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057] - net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057] - net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057] - net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057] - net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057] - net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057] - net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057] - net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057] - mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057] - net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057] - net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057] - net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057] - net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057] - net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057] - net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057] - net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057] - net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057] - net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057] - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057] - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057] - mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057] - net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057] - net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057] - net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057] - net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057] - net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057] - net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057] - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057] - net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057] - net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057] - net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057] - net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057] - net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057] - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057] - net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057] - net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057] - net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057] - net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057] - net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057] - net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057] - net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057] - net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057] - net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057] - net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057] - eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057] - net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057] - net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057] - net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057] - net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057] - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057] - RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057] - net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057] - net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057] - net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057] - net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057] - net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057] - net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057] - net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057] - net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057] - net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057] - net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057] - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057] - net: Fix typos (Kamal Heib) [RHEL-169057] - net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057] - net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057] - net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057] - net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057] - net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057] - net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057] - net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057] - net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057] - net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057] - net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057] - net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057] - eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Kamal Heib) [RHEL-169057] - net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057] - net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057] - net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057] - net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057] - net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057] - net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057] - net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057] - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057] - net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057] - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057] - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057] - net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057] - net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057] - net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057] - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057] - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444] - ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444] - ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444] - ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488} - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329} - Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312) - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.19.1..687.20.1 follows: - crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540] - crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540] - crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540] - crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540] - tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198} - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739} - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760] - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760] - scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886] - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411} - Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.18.1..687.19.1 follows: - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176} - init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183] - update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183] - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183] - work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183] - compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183] - powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183] - sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776] - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189} - sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273] - netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273] - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993] - iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993] - iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993] - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993] - iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993] - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057] - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057] - IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057] - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057] - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057] - net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057] - net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057] - net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057] - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057] - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057] - net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057] - net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057] - net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057] - net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057] - net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057] - net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057] - net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057] - net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057] - net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057] - net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057] - net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057] - mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057] - net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057] - net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057] - net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057] - net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057] - net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057] - net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057] - net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057] - net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057] - net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057] - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057] - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057] - mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057] - net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057] - net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057] - net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057] - net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057] - net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057] - net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057] - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057] - net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057] - net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057] - net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057] - net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057] - net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057] - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057] - net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057] - net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057] - net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057] - net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057] - net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057] - net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057] - net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057] - net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057] - net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057] - net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057] - eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057] - net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057] - net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057] - net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057] - net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057] - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057] - RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057] - net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057] - net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057] - net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057] - net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057] - net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057] - net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057] - net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057] - net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057] - net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057] - net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057] - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057] - net: Fix typos (Kamal Heib) [RHEL-169057] - net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057] - net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057] - net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057] - net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057] - net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057] - net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057] - net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057] - net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057] - net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057] - net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057] - net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057] - eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Kamal Heib) [RHEL-169057] - net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057] - net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057] - net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057] - net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057] - net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057] - net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057] - net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057] - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057] - net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057] - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057] - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057] - net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057] - net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057] - net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057] - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057] - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444] - ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444] - ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444] - ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488} - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329} - Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312) - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735) - Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll ep_remove use-after-free CVE-2026-46242 (1712) - RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux ahead-patch (1312) is retained and RHEL's duplicate copy omitted - CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263) - RHEL changelog for 687.21.1..687.22.1 follows: - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041] - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116} - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263} - KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316} - netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227} - nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966] - Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755) - The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by RHEL's eventpoll series carrying the same fix and is dropped - Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738) - RHEL changelog for 687.23.1 follows: - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1756, 1757) are superseded by RHEL's copies and dropped - RHEL changelog for 687.25.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770) - RHEL changelog for 687.26.1 follows: - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1756, 1757) are superseded by RHEL's copies and dropped - RHEL changelog for 687.25.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041] - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116} - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619] - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619] - Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762] - Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762] - Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762] - Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762] - Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762] - Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762] - Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762] - Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762] - nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489] - pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489] - net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508] - cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548] - spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129] - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431) - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619] - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619] - Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762] - Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762] - Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762] - Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762] - Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762] - Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762] - Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762] - Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762] - nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489] - net: skbuff: propagate shared-frag marker through frag-transfer helpers (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300 "Fragnesia") - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431) - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (Mohammadfaiz Bawa) [RHEL-243814] {CVE-2026-72288} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275058] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275076] {CVE-2026-93228} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270929] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270929] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271453] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268122] {CVE-2026-74705} - net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CKI Backport Bot) [RHEL-270908] {CVE-2026-81003} - wifi: cfg80211: use wiphy work for socket owner autodisconnect (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-263788] {CVE-2026-68409} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (Jose Ignacio Tornos Martinez) [RHEL-259560] {CVE-2026-64030} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261686] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260511] {CVE-2026-68140} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261293] {CVE-2026-72320} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256448] {CVE-2026-74641} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-237219] {CVE-2026-68377} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229654] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226490] {CVE-2026-53011} - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net: always dissect GSO packets in __virtio_net_hdr_to_skb() (Davide Caratti) [RHEL-284987] - ipv4: validate checksum_start before completing checksum (CKI Backport Bot) [RHEL-284987] {CVE-2026-99999} - smb: client: reject a tree connect response whose byte count is too small (Alisher Mazhirinov) [RHEL-271284] {CVE-2026-89631} - exec: Cleanup POSIX timers right after de_thread() (Luiz Capitulino) [RHEL-282063] {CVE-2026-98260} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271871] {CVE-2026-93817} - smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (Frank Sorenson) [RHEL-271487] {CVE-2026-89633} - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270747] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256697] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256697] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256697] - bridge: mcast: Fix a possible use-after-free when removing a bridge port (Jakub Ramaseuski) [RHEL-232528] {CVE-2026-64032} - net: bridge: Flush multicast groups when snooping is disabled (Jakub Ramaseuski) [RHEL-232528] - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Antoine Tenart) [RHEL-231693] {CVE-2026-64024} - ipv4: fib: free fib_alias with kfree_rcu() on insert error path (Jamie Bainbridge) [RHEL-233131] {CVE-2026-64572} - inet: frags: strip GSO state from fragments before reassembly (Jamie Bainbridge) [RHEL-254224] {CVE-2026-80590} - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Jamie Bainbridge) [RHEL-225452] {CVE-2026-64114} - usb: typec: ucsi: validate connector number in ucsi_connector_change() (Desnes Nunes) [RHEL-259429] {CVE-2026-63958} - usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO (Desnes Nunes) [RHEL-259429] - usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (Desnes Nunes) [RHEL-259429] {CVE-2026-63962} - usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (Desnes Nunes) [RHEL-259429] {CVE-2026-63963} - usb: typec: altmodes/displayport: validate count before reading Status Update VDO (Desnes Nunes) [RHEL-259429] {CVE-2026-63961} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63899} - Bluetooth: hci_sync: Fix advertising data UAFs (CKI Backport Bot) [RHEL-254674] {CVE-2026-74509} - openvswitch: vport: fix self-deadlock on release of tunnel ports (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222958] {CVE-2026-52935} - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (Mohammadfaiz Bawa) [RHEL-243814] {CVE-2026-72288} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275058] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275076] {CVE-2026-93228} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270929] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270929] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271453] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268122] {CVE-2026-74705} - net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CKI Backport Bot) [RHEL-270908] {CVE-2026-81003} - wifi: cfg80211: use wiphy work for socket owner autodisconnect (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-263788] {CVE-2026-68409} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (Jose Ignacio Tornos Martinez) [RHEL-259560] {CVE-2026-64030} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261686] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260511] {CVE-2026-68140} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261293] {CVE-2026-72320} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256448] {CVE-2026-74641} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-237219] {CVE-2026-68377} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229654] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226490] {CVE-2026-53011} - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: skbuff: propagate shared-frag marker in skb_zerocopy() - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - xfs: bounds-check buffer log item's dirty bitmap (Pavel Reichl) [RHEL-253366] {CVE-2026-80536} - ovl: check access to copy_file_range source with src mounter creds (Miklos Szeredi) [RHEL-238870] {CVE-2026-68448} - ALSA: seq: close a re-opened queue timer in the destructor (CKI Backport Bot) [RHEL-263709] {CVE-2026-68202} - calipso: unlock rcu before returning -EAFNOSUPPORT (CKI Backport Bot) [RHEL-257685] {CVE-2025-38147} - calipso: Don't call calipso functions for AF_INET sk. (CKI Backport Bot) [RHEL-257685] {CVE-2025-38147} - netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (CKI Backport Bot) [RHEL-257666] {CVE-2025-22063} - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (CKI Backport Bot) [RHEL-255258] {CVE-2026-80530} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252811] {CVE-2026-68299} - ALSA: hda/cs35l41: Fix firmware load work teardown (CKI Backport Bot) [RHEL-234099] {CVE-2026-64481} - rtla: Fix segfault on multiple SIGINTs (Tomas Glozar) [RHEL-193029] - net: always dissect GSO packets in __virtio_net_hdr_to_skb() (Davide Caratti) [RHEL-284987] - ipv4: validate checksum_start before completing checksum (CKI Backport Bot) [RHEL-284987] {CVE-2026-99999} - smb: client: reject a tree connect response whose byte count is too small (Alisher Mazhirinov) [RHEL-271284] {CVE-2026-89631} - exec: Cleanup POSIX timers right after de_thread() (Luiz Capitulino) [RHEL-282063] {CVE-2026-98260} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271871] {CVE-2026-93817} - smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (Frank Sorenson) [RHEL-271487] {CVE-2026-89633} - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270747] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256697] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256697] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256697] - bridge: mcast: Fix a possible use-after-free when removing a bridge port (Jakub Ramaseuski) [RHEL-232528] {CVE-2026-64032} - net: bridge: Flush multicast groups when snooping is disabled (Jakub Ramaseuski) [RHEL-232528] - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Antoine Tenart) [RHEL-231693] {CVE-2026-64024} - ipv4: fib: free fib_alias with kfree_rcu() on insert error path (Jamie Bainbridge) [RHEL-233131] {CVE-2026-64572} - inet: frags: strip GSO state from fragments before reassembly (Jamie Bainbridge) [RHEL-254224] {CVE-2026-80590} - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Jamie Bainbridge) [RHEL-225452] {CVE-2026-64114} - usb: typec: ucsi: validate connector number in ucsi_connector_change() (Desnes Nunes) [RHEL-259429] {CVE-2026-63958} - usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO (Desnes Nunes) [RHEL-259429] - usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (Desnes Nunes) [RHEL-259429] {CVE-2026-63962} - usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (Desnes Nunes) [RHEL-259429] {CVE-2026-63963} - usb: typec: altmodes/displayport: validate count before reading Status Update VDO (Desnes Nunes) [RHEL-259429] {CVE-2026-63961} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63899} - Bluetooth: hci_sync: Fix advertising data UAFs (CKI Backport Bot) [RHEL-254674] {CVE-2026-74509} - openvswitch: vport: fix self-deadlock on release of tunnel ports (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222958] {CVE-2026-52935} - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (Mohammadfaiz Bawa) [RHEL-243814] {CVE-2026-72288} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275058] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275076] {CVE-2026-93228} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270929] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270929] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271453] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268122] {CVE-2026-74705} - net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CKI Backport Bot) [RHEL-270908] {CVE-2026-81003} - wifi: cfg80211: use wiphy work for socket owner autodisconnect (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-263788] {CVE-2026-68409} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (Jose Ignacio Tornos Martinez) [RHEL-259560] {CVE-2026-64030} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261686] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260511] {CVE-2026-68140} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261293] {CVE-2026-72320} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256448] {CVE-2026-74641} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-237219] {CVE-2026-68377} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229654] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226490] {CVE-2026-53011} - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - net: skbuff: propagate shared-frag marker in skb_zerocopy() - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - netfilter: flowtable: hold reference on ct until flow is released (CKI Backport Bot) [RHEL-280075] {CVE-2026-98320} - vfio/pci: clear vdev->msi_perm after freeing it on init failure (Rodolfo Vick) [RHEL-270901] {CVE-2026-89777} - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278089] {CVE-2026-93262} - KEYS: encrypted: fix integer overflow of datablob_len (Bruno Meneguele) [RHEL-279504] {CVE-2026-98222} - KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (CKI Backport Bot) [RHEL-277620] {CVE-2026-74515} - smb: client: guard against tailsz underflow in wdata_send_pages() (Paulo Alcantara) [RHEL-257205] - smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-257205] - smb: client: fix rlist race and missing initialization (Paulo Alcantara) [RHEL-257205] {CVE-2026-98174} - smb: client: cancel reconnect work in clean_demultiplex_info() (Paulo Alcantara) [RHEL-257205] {CVE-2026-98175} - smb/client: send lease break ACKs thru correct session for multiuser mounts (Paulo Alcantara) [RHEL-257205] - smb: client: fix cifsFileInfo reference leak in deferred close (Paulo Alcantara) [RHEL-257205] {CVE-2026-97558} - smb: client: avoid leaking refcount when cifs_sb_tlink() fails (Paulo Alcantara) [RHEL-257205] {CVE-2026-97556} - smb: client: avoid leaking refcount in cifs_queue_oplock_break() (Paulo Alcantara) [RHEL-257205] {CVE-2026-97557} - smb: client: fix data corruption with concurrent writes and O_TRUNC (Paulo Alcantara) [RHEL-257205] - cifs: don't update i_size in cifs_do_truncate without a cached handle (Paulo Alcantara) [RHEL-257205] - smb: client: invalidate fscache for fallocate range operations (Paulo Alcantara) [RHEL-257205] {CVE-2026-98124} - smb: client: fix stale page cache in insert/collapse range (Paulo Alcantara) [RHEL-257205] {CVE-2026-98125} - smb: client: fix integer truncation in collapse range (Paulo Alcantara) [RHEL-257205] - smb: client: fix data corruption in emulated insert range (Paulo Alcantara) [RHEL-257205] - smb/client: mark file sparse before emulating insert range (Paulo Alcantara) [RHEL-257205] - smb/client: validate new EOF for zero range (Paulo Alcantara) [RHEL-257205] {CVE-2026-98126} - smb/client: validate new EOF for insert range (Paulo Alcantara) [RHEL-257205] {CVE-2026-98127} - cifs: add revalidation on FSCTL failure in smb2_duplicate_extents() (Paulo Alcantara) [RHEL-257205] - cifs: fix loff_t underflow in cifs_remap_file_range() when len == 0 (Paulo Alcantara) [RHEL-257205] {CVE-2026-89640} - cifs: call pagecache_isize_extended() in cifs_setsize() when extending (Paulo Alcantara) [RHEL-257205] {CVE-2026-89642} - cifs: clear tcon after cifsFileInfo_put() in cifs_file_set_size() (Paulo Alcantara) [RHEL-257205] {CVE-2026-89641} - smb/client: decode reparse metadata using its payload type (Paulo Alcantara) [RHEL-257205] - smb/client: preserve open info type across compound queries (Paulo Alcantara) [RHEL-257205] - smb/client: mark missing nlink values as unknown (Paulo Alcantara) [RHEL-257205] - smb/client: fix nlink of an overwritten open file (Paulo Alcantara) [RHEL-257205] - cifs: remove dead size-update blocks in cifs_setattr_unix/nounix (Paulo Alcantara) [RHEL-257205] - cifs: remove redundant size-update block in cifs_remap_file_range() (Paulo Alcantara) [RHEL-257205] - cifs: add cifs_resize_file_locked() to guard fscache_resize_cookie() under i_rwsem (Paulo Alcantara) [RHEL-257205] - cifs: use cifs_invalidate_cache() in cifs_do_truncate() for O_TRUNC (Paulo Alcantara) [RHEL-257205] {CVE-2026-89639} - cifs: add fscache_resize_cookie() to cifs_setsize() (Paulo Alcantara) [RHEL-257205] - smb: client: simplify cifs_fscache_get_super_cookie() (Paulo Alcantara) [RHEL-257205] - smb/client: flush dirty data before punching a hole (Paulo Alcantara) [RHEL-257205] {CVE-2026-93794} - smb/client: refresh allocation after EOF-extending fallocate (Paulo Alcantara) [RHEL-257205] - smb/client: emulate small EOF-extending mode 0 fallocate ranges (Paulo Alcantara) [RHEL-257205] - smb/client: reduce fallocate zero buffer allocation (Paulo Alcantara) [RHEL-257205] - smb/client: refresh allocation size after duplicate extents (Paulo Alcantara) [RHEL-257205] - smb: client: use kvzalloc() for megabyte buffer in simple fallocate (Paulo Alcantara) [RHEL-257205] - smb/client: fix incorrect nlink returned by fstat() (Paulo Alcantara) [RHEL-257205] - smb/client: zero-initialize stack-allocated cifs_open_info_data (Paulo Alcantara) [RHEL-257205] {CVE-2026-93801} - smb/client: pass cifs_open_info_data to SMB2_open() (Paulo Alcantara) [RHEL-257205] - smb/client: use stack-allocated smb2_file_all_info in smb3_query_mf_symlink() (Paulo Alcantara) [RHEL-257205] - smb: client: refactor cifs_revalidate_mapping() to use clear_and_wake_up_bit() (Paulo Alcantara) [RHEL-257205] - smb/client: do not account EOF extension as allocation (Paulo Alcantara) [RHEL-257205] - smb/client: preserve errors from smb2_set_sparse() (Paulo Alcantara) [RHEL-257205] - smb/client: name the default fallocate mode (Paulo Alcantara) [RHEL-257205] - smb/client: update i_blocks after contiguous writes (Paulo Alcantara) [RHEL-257205] - smb: client: fix races in cifsd thread creation (Paulo Alcantara) [RHEL-257205] {CVE-2026-93829} - cifs: invalidate cfid on unlink/rename/rmdir (Paulo Alcantara) [RHEL-257205] - cifs: abort open_cached_dir if we don't request leases (Paulo Alcantara) [RHEL-257205] - cifs: change_conf needs to be called for session setup (Paulo Alcantara) [RHEL-257205] - smb: client: fix generic/694 due to wrong ->i_blocks (Paulo Alcantara) [RHEL-257205] - smb: client: fix open handle lookup in cifs_open() (Paulo Alcantara) [RHEL-257205] - smb: client: fix in-place encryption corruption in SMB2_write() (Paulo Alcantara) [RHEL-257205] {CVE-2026-43362} - smb: client: fix atomic open with O_DIRECT & O_SYNC (Paulo Alcantara) [RHEL-257205] - cifs: Scripted clean up fs/smb/client/cifsglob.h (Paulo Alcantara) [RHEL-257205] - cifs: Scripted clean up fs/smb/client/fscache.h (Paulo Alcantara) [RHEL-257205] - cifs: Scripted clean up fs/smb/client/cifsfs.h (Paulo Alcantara) [RHEL-257205] - cifs: Scripted clean up fs/smb/client/cifsproto.h (Paulo Alcantara) [RHEL-257205] - udp: Deal with race between UDP socket address change and rehash (Jamie Bainbridge) [RHEL-257635] {CVE-2024-57974} - smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (CKI Backport Bot) [RHEL-271257] {CVE-2026-89638} - net/handshake: Drain pending requests at net namespace exit (Xin Long) [RHEL-232134] {CVE-2026-63978} - net/handshake: Use spin_lock_bh for hn_lock (Xin Long) [RHEL-232134] - net/handshake: hand off the pinned file reference to accept_doit (Xin Long) [RHEL-230363] {CVE-2026-63979} - net/handshake: Take a long-lived file reference at submit (Xin Long) [RHEL-234159] {CVE-2026-64523} - fuse: re-lock request before replacing page cache folio (Miklos Szeredi) [RHEL-226093] {CVE-2026-53388} - fuse: release pipe buf after last use (Miklos Szeredi) [RHEL-226093] {CVE-2026-53388} - fuse: fix page stealing (Miklos Szeredi) [RHEL-226093] {CVE-2026-53388} - ipvs: reload ip header after head reallocation (Phil Sutter) [RHEL-263800] {CVE-2026-68476} - selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() (CKI Backport Bot) [RHEL-243225] {CVE-2026-72242} - usb: usbfs: fix use-after-free of usb_device in usbdev_release() (CKI Backport Bot) [RHEL-258557] {CVE-2026-80824} - fuse: re-lock request before returning from fuse_ref_folio() (CKI Backport Bot) [RHEL-234250] {CVE-2026-64266} - xfs: bounds-check buffer log item's dirty bitmap (Pavel Reichl) [RHEL-253366] {CVE-2026-80536} - ovl: check access to copy_file_range source with src mounter creds (Miklos Szeredi) [RHEL-238870] {CVE-2026-68448} - ALSA: seq: close a re-opened queue timer in the destructor (CKI Backport Bot) [RHEL-263709] {CVE-2026-68202} - calipso: unlock rcu before returning -EAFNOSUPPORT (CKI Backport Bot) [RHEL-257685] {CVE-2025-38147} - calipso: Don't call calipso functions for AF_INET sk. (CKI Backport Bot) [RHEL-257685] {CVE-2025-38147} - netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (CKI Backport Bot) [RHEL-257666] {CVE-2025-22063} - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (CKI Backport Bot) [RHEL-255258] {CVE-2026-80530} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252811] {CVE-2026-68299} - ALSA: hda/cs35l41: Fix firmware load work teardown (CKI Backport Bot) [RHEL-234099] {CVE-2026-64481} - rtla: Fix segfault on multiple SIGINTs (Tomas Glozar) [RHEL-193029] - net: always dissect GSO packets in __virtio_net_hdr_to_skb() (Davide Caratti) [RHEL-284987] - ipv4: validate checksum_start before completing checksum (CKI Backport Bot) [RHEL-284987] {CVE-2026-99999} - smb: client: reject a tree connect response whose byte count is too small (Alisher Mazhirinov) [RHEL-271284] {CVE-2026-89631} - exec: Cleanup POSIX timers right after de_thread() (Luiz Capitulino) [RHEL-282063] {CVE-2026-98260} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271871] {CVE-2026-93817} - smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (Frank Sorenson) [RHEL-271487] {CVE-2026-89633} - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270747] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256697] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256697] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256697] - bridge: mcast: Fix a possible use-after-free when removing a bridge port (Jakub Ramaseuski) [RHEL-232528] {CVE-2026-64032} - net: bridge: Flush multicast groups when snooping is disabled (Jakub Ramaseuski) [RHEL-232528] - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Antoine Tenart) [RHEL-231693] {CVE-2026-64024} - ipv4: fib: free fib_alias with kfree_rcu() on insert error path (Jamie Bainbridge) [RHEL-233131] {CVE-2026-64572} - inet: frags: strip GSO state from fragments before reassembly (Jamie Bainbridge) [RHEL-254224] {CVE-2026-80590} - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Jamie Bainbridge) [RHEL-225452] {CVE-2026-64114} - usb: typec: ucsi: validate connector number in ucsi_connector_change() (Desnes Nunes) [RHEL-259429] {CVE-2026-63958} - usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO (Desnes Nunes) [RHEL-259429] - usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (Desnes Nunes) [RHEL-259429] {CVE-2026-63962} - usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (Desnes Nunes) [RHEL-259429] {CVE-2026-63963} - usb: typec: altmodes/displayport: validate count before reading Status Update VDO (Desnes Nunes) [RHEL-259429] {CVE-2026-63961} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63899} - Bluetooth: hci_sync: Fix advertising data UAFs (CKI Backport Bot) [RHEL-254674] {CVE-2026-74509} - openvswitch: vport: fix self-deadlock on release of tunnel ports (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222958] {CVE-2026-52935} - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (Mohammadfaiz Bawa) [RHEL-243814] {CVE-2026-72288} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275058] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275076] {CVE-2026-93228} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270929] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270929] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271453] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268122] {CVE-2026-74705} - net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CKI Backport Bot) [RHEL-270908] {CVE-2026-81003} - wifi: cfg80211: use wiphy work for socket owner autodisconnect (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-263788] {CVE-2026-68409} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (Jose Ignacio Tornos Martinez) [RHEL-259560] {CVE-2026-64030} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261686] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260511] {CVE-2026-68140} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261293] {CVE-2026-72320} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256448] {CVE-2026-74641} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-237219] {CVE-2026-68377} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229654] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226490] {CVE-2026-53011} - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable backports (SOURCES/1100-1196) - Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto authencesn/algif) - Keep the smb cifs.spnego ahead-fix (retained as 1197) - RHEL changelog for 687.6.1..687.10.1 follows: - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163} - RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128} - usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607} - can: raw: fix ro->uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401} - powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125] - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742] - Revert "lpfc: don't use file->f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742] - drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822] - drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853] - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404] - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402} - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741} - smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988] - ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378] - RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966] - net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207] - ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095] - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766} - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766} - rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075} - Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable backports (SOURCES/1198-1252) - RHEL changelog for 687.11.1..687.12.1 follows: - dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110} - Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020} - crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914] - proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653} - proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653} - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470] - mm/page_alloc: clear page->private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303} - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158} - redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927] - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859] - ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829] - ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829] - ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179] - ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257] - dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442] - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378] - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684} - cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701] - ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701] - ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701] - ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701] - drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179] - nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089} - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724} - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183} - i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312] - ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182] - ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185] - Revert "mm: pcp: increase pcp->free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464] - netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392} - Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269) - RHEL changelog for 687.13.1 follows: - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243} - s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472] - s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472] - s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472] - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745] - nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745] - Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786} - crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167] - crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167] - smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613} - mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778] - mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778] - mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778] - mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778] - mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778] - mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778] - mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778] - mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778] - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.18.1..687.19.1 follows: - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176} - init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183] - update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183] - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183] - work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183] - compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183] - powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183] - sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776] - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189} - sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273] - netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273] - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993] - iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993] - iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993] - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993] - iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993] - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057] - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057] - IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057] - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057] - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057] - net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057] - net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057] - net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057] - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057] - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057] - net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057] - net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057] - net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057] - net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057] - net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057] - net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057] - net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057] - net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057] - net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057] - net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057] - net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057] - mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057] - net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057] - net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057] - net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057] - net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057] - net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057] - net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057] - net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057] - net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057] - net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057] - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057] - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057] - mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057] - net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057] - net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057] - net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057] - net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057] - net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057] - net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057] - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057] - net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057] - net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057] - net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057] - net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057] - net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057] - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057] - net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057] - net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057] - net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057] - net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057] - net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057] - net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057] - net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057] - net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057] - net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057] - net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057] - eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057] - net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057] - net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057] - net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057] - net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057] - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057] - RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057] - net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057] - net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057] - net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057] - net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057] - net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057] - net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057] - net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057] - net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057] - net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057] - net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057] - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057] - net: Fix typos (Kamal Heib) [RHEL-169057] - net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057] - net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057] - net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057] - net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057] - net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057] - net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057] - net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057] - net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057] - net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057] - net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057] - net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057] - eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Kamal Heib) [RHEL-169057] - net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057] - net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057] - net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057] - net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057] - net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057] - net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057] - net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057] - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057] - net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057] - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057] - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057] - net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057] - net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057] - net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057] - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057] - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444] - ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444] - ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444] - ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488} - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329} - Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312) - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.19.1..687.20.1 follows: - crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540] - crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540] - crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540] - crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540] - tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198} - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739} - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760] - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760] - scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886] - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411} - Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.18.1..687.19.1 follows: - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176} - init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183] - update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183] - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183] - work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183] - compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183] - powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183] - sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776] - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189} - sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273] - netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273] - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993] - iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993] - iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993] - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993] - iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993] - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057] - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057] - IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057] - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057] - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057] - net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057] - net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057] - net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057] - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057] - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057] - net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057] - net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057] - net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057] - net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057] - net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057] - net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057] - net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057] - net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057] - net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057] - net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057] - net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057] - mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057] - net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057] - net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057] - net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057] - net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057] - net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057] - net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057] - net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057] - net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057] - net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057] - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057] - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057] - mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057] - net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057] - net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057] - net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057] - net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057] - net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057] - net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057] - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057] - net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057] - net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057] - net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057] - net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057] - net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057] - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057] - net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057] - net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057] - net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057] - net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057] - net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057] - net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057] - net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057] - net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057] - net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057] - net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057] - eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057] - net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057] - net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057] - net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057] - net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057] - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057] - RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057] - net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057] - net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057] - net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057] - net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057] - net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057] - net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057] - net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057] - net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057] - net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057] - net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057] - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057] - net: Fix typos (Kamal Heib) [RHEL-169057] - net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057] - net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057] - net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057] - net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057] - net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057] - net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057] - net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057] - net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057] - net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057] - net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057] - net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057] - eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Kamal Heib) [RHEL-169057] - net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057] - net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057] - net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057] - net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057] - net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057] - net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057] - net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057] - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057] - net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057] - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057] - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057] - net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057] - net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057] - net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057] - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057] - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444] - ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444] - ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444] - ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488} - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329} - Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312) - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735) - Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll ep_remove use-after-free CVE-2026-46242 (1712) - RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux ahead-patch (1312) is retained and RHEL's duplicate copy omitted - CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263) - RHEL changelog for 687.21.1..687.22.1 follows: - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041] - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116} - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263} - KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316} - netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227} - nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966] - Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755) - The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by RHEL's eventpoll series carrying the same fix and is dropped - Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738) - RHEL changelog for 687.23.1 follows: - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1756, 1757) are superseded by RHEL's copies and dropped - RHEL changelog for 687.25.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770) - RHEL changelog for 687.26.1 follows: - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1756, 1757) are superseded by RHEL's copies and dropped - RHEL changelog for 687.25.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041] - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116} - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619] - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619] - Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762] - Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762] - Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762] - Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762] - Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762] - Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762] - Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762] - Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762] - nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489] - pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489] - net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508] - cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548] - spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129] - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431) - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619] - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619] - Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762] - Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762] - Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762] - Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762] - Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762] - Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762] - Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762] - Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762] - nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489] - net: skbuff: propagate shared-frag marker through frag-transfer helpers (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300 "Fragnesia") - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431) - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (Mohammadfaiz Bawa) [RHEL-243814] {CVE-2026-72288} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275058] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275076] {CVE-2026-93228} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270929] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270929] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271453] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268122] {CVE-2026-74705} - net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CKI Backport Bot) [RHEL-270908] {CVE-2026-81003} - wifi: cfg80211: use wiphy work for socket owner autodisconnect (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-263788] {CVE-2026-68409} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (Jose Ignacio Tornos Martinez) [RHEL-259560] {CVE-2026-64030} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261686] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260511] {CVE-2026-68140} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261293] {CVE-2026-72320} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256448] {CVE-2026-74641} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-237219] {CVE-2026-68377} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229654] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226490] {CVE-2026-53011} - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net: always dissect GSO packets in __virtio_net_hdr_to_skb() (Davide Caratti) [RHEL-284987] - ipv4: validate checksum_start before completing checksum (CKI Backport Bot) [RHEL-284987] {CVE-2026-99999} - smb: client: reject a tree connect response whose byte count is too small (Alisher Mazhirinov) [RHEL-271284] {CVE-2026-89631} - exec: Cleanup POSIX timers right after de_thread() (Luiz Capitulino) [RHEL-282063] {CVE-2026-98260} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271871] {CVE-2026-93817} - smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (Frank Sorenson) [RHEL-271487] {CVE-2026-89633} - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270747] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256697] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256697] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256697] - bridge: mcast: Fix a possible use-after-free when removing a bridge port (Jakub Ramaseuski) [RHEL-232528] {CVE-2026-64032} - net: bridge: Flush multicast groups when snooping is disabled (Jakub Ramaseuski) [RHEL-232528] - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Antoine Tenart) [RHEL-231693] {CVE-2026-64024} - ipv4: fib: free fib_alias with kfree_rcu() on insert error path (Jamie Bainbridge) [RHEL-233131] {CVE-2026-64572} - inet: frags: strip GSO state from fragments before reassembly (Jamie Bainbridge) [RHEL-254224] {CVE-2026-80590} - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Jamie Bainbridge) [RHEL-225452] {CVE-2026-64114} - usb: typec: ucsi: validate connector number in ucsi_connector_change() (Desnes Nunes) [RHEL-259429] {CVE-2026-63958} - usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO (Desnes Nunes) [RHEL-259429] - usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (Desnes Nunes) [RHEL-259429] {CVE-2026-63962} - usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (Desnes Nunes) [RHEL-259429] {CVE-2026-63963} - usb: typec: altmodes/displayport: validate count before reading Status Update VDO (Desnes Nunes) [RHEL-259429] {CVE-2026-63961} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63899} - Bluetooth: hci_sync: Fix advertising data UAFs (CKI Backport Bot) [RHEL-254674] {CVE-2026-74509} - openvswitch: vport: fix self-deadlock on release of tunnel ports (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222958] {CVE-2026-52935} - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (Mohammadfaiz Bawa) [RHEL-243814] {CVE-2026-72288} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275058] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275076] {CVE-2026-93228} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270929] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270929] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271453] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268122] {CVE-2026-74705} - net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CKI Backport Bot) [RHEL-270908] {CVE-2026-81003} - wifi: cfg80211: use wiphy work for socket owner autodisconnect (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-263788] {CVE-2026-68409} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (Jose Ignacio Tornos Martinez) [RHEL-259560] {CVE-2026-64030} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261686] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260511] {CVE-2026-68140} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261293] {CVE-2026-72320} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256448] {CVE-2026-74641} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-237219] {CVE-2026-68377} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229654] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226490] {CVE-2026-53011} - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: skbuff: propagate shared-frag marker in skb_zerocopy() - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - xfs: bounds-check buffer log item's dirty bitmap (Pavel Reichl) [RHEL-253366] {CVE-2026-80536} - ovl: check access to copy_file_range source with src mounter creds (Miklos Szeredi) [RHEL-238870] {CVE-2026-68448} - ALSA: seq: close a re-opened queue timer in the destructor (CKI Backport Bot) [RHEL-263709] {CVE-2026-68202} - calipso: unlock rcu before returning -EAFNOSUPPORT (CKI Backport Bot) [RHEL-257685] {CVE-2025-38147} - calipso: Don't call calipso functions for AF_INET sk. (CKI Backport Bot) [RHEL-257685] {CVE-2025-38147} - netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (CKI Backport Bot) [RHEL-257666] {CVE-2025-22063} - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (CKI Backport Bot) [RHEL-255258] {CVE-2026-80530} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252811] {CVE-2026-68299} - ALSA: hda/cs35l41: Fix firmware load work teardown (CKI Backport Bot) [RHEL-234099] {CVE-2026-64481} - rtla: Fix segfault on multiple SIGINTs (Tomas Glozar) [RHEL-193029] - net: always dissect GSO packets in __virtio_net_hdr_to_skb() (Davide Caratti) [RHEL-284987] - ipv4: validate checksum_start before completing checksum (CKI Backport Bot) [RHEL-284987] {CVE-2026-99999} - smb: client: reject a tree connect response whose byte count is too small (Alisher Mazhirinov) [RHEL-271284] {CVE-2026-89631} - exec: Cleanup POSIX timers right after de_thread() (Luiz Capitulino) [RHEL-282063] {CVE-2026-98260} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271871] {CVE-2026-93817} - smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (Frank Sorenson) [RHEL-271487] {CVE-2026-89633} - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270747] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256697] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256697] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256697] - bridge: mcast: Fix a possible use-after-free when removing a bridge port (Jakub Ramaseuski) [RHEL-232528] {CVE-2026-64032} - net: bridge: Flush multicast groups when snooping is disabled (Jakub Ramaseuski) [RHEL-232528] - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Antoine Tenart) [RHEL-231693] {CVE-2026-64024} - ipv4: fib: free fib_alias with kfree_rcu() on insert error path (Jamie Bainbridge) [RHEL-233131] {CVE-2026-64572} - inet: frags: strip GSO state from fragments before reassembly (Jamie Bainbridge) [RHEL-254224] {CVE-2026-80590} - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Jamie Bainbridge) [RHEL-225452] {CVE-2026-64114} - usb: typec: ucsi: validate connector number in ucsi_connector_change() (Desnes Nunes) [RHEL-259429] {CVE-2026-63958} - usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO (Desnes Nunes) [RHEL-259429] - usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (Desnes Nunes) [RHEL-259429] {CVE-2026-63962} - usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (Desnes Nunes) [RHEL-259429] {CVE-2026-63963} - usb: typec: altmodes/displayport: validate count before reading Status Update VDO (Desnes Nunes) [RHEL-259429] {CVE-2026-63961} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63899} - Bluetooth: hci_sync: Fix advertising data UAFs (CKI Backport Bot) [RHEL-254674] {CVE-2026-74509} - openvswitch: vport: fix self-deadlock on release of tunnel ports (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222958] {CVE-2026-52935} - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (Mohammadfaiz Bawa) [RHEL-243814] {CVE-2026-72288} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275058] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275076] {CVE-2026-93228} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270929] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270929] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271453] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268122] {CVE-2026-74705} - net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CKI Backport Bot) [RHEL-270908] {CVE-2026-81003} - wifi: cfg80211: use wiphy work for socket owner autodisconnect (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-263788] {CVE-2026-68409} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (Jose Ignacio Tornos Martinez) [RHEL-259560] {CVE-2026-64030} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261686] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260511] {CVE-2026-68140} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261293] {CVE-2026-72320} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256448] {CVE-2026-74641} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-237219] {CVE-2026-68377} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229654] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226490] {CVE-2026-53011} - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - net: skbuff: propagate shared-frag marker in skb_zerocopy() - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - netfilter: flowtable: hold reference on ct until flow is released (CKI Backport Bot) [RHEL-280075] {CVE-2026-98320} - vfio/pci: clear vdev->msi_perm after freeing it on init failure (Rodolfo Vick) [RHEL-270901] {CVE-2026-89777} - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278089] {CVE-2026-93262} - KEYS: encrypted: fix integer overflow of datablob_len (Bruno Meneguele) [RHEL-279504] {CVE-2026-98222} - KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (CKI Backport Bot) [RHEL-277620] {CVE-2026-74515} - smb: client: guard against tailsz underflow in wdata_send_pages() (Paulo Alcantara) [RHEL-257205] - smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-257205] - smb: client: fix rlist race and missing initialization (Paulo Alcantara) [RHEL-257205] {CVE-2026-98174} - smb: client: cancel reconnect work in clean_demultiplex_info() (Paulo Alcantara) [RHEL-257205] {CVE-2026-98175} - smb/client: send lease break ACKs thru correct session for multiuser mounts (Paulo Alcantara) [RHEL-257205] - smb: client: fix cifsFileInfo reference leak in deferred close (Paulo Alcantara) [RHEL-257205] {CVE-2026-97558} - smb: client: avoid leaking refcount when cifs_sb_tlink() fails (Paulo Alcantara) [RHEL-257205] {CVE-2026-97556} - smb: client: avoid leaking refcount in cifs_queue_oplock_break() (Paulo Alcantara) [RHEL-257205] {CVE-2026-97557} - smb: client: fix data corruption with concurrent writes and O_TRUNC (Paulo Alcantara) [RHEL-257205] - cifs: don't update i_size in cifs_do_truncate without a cached handle (Paulo Alcantara) [RHEL-257205] - smb: client: invalidate fscache for fallocate range operations (Paulo Alcantara) [RHEL-257205] {CVE-2026-98124} - smb: client: fix stale page cache in insert/collapse range (Paulo Alcantara) [RHEL-257205] {CVE-2026-98125} - smb: client: fix integer truncation in collapse range (Paulo Alcantara) [RHEL-257205] - smb: client: fix data corruption in emulated insert range (Paulo Alcantara) [RHEL-257205] - smb/client: mark file sparse before emulating insert range (Paulo Alcantara) [RHEL-257205] - smb/client: validate new EOF for zero range (Paulo Alcantara) [RHEL-257205] {CVE-2026-98126} - smb/client: validate new EOF for insert range (Paulo Alcantara) [RHEL-257205] {CVE-2026-98127} - cifs: add revalidation on FSCTL failure in smb2_duplicate_extents() (Paulo Alcantara) [RHEL-257205] - cifs: fix loff_t underflow in cifs_remap_file_range() when len == 0 (Paulo Alcantara) [RHEL-257205] {CVE-2026-89640} - cifs: call pagecache_isize_extended() in cifs_setsize() when extending (Paulo Alcantara) [RHEL-257205] {CVE-2026-89642} - cifs: clear tcon after cifsFileInfo_put() in cifs_file_set_size() (Paulo Alcantara) [RHEL-257205] {CVE-2026-89641} - smb/client: decode reparse metadata using its payload type (Paulo Alcantara) [RHEL-257205] - smb/client: preserve open info type across compound queries (Paulo Alcantara) [RHEL-257205] - smb/client: mark missing nlink values as unknown (Paulo Alcantara) [RHEL-257205] - smb/client: fix nlink of an overwritten open file (Paulo Alcantara) [RHEL-257205] - cifs: remove dead size-update blocks in cifs_setattr_unix/nounix (Paulo Alcantara) [RHEL-257205] - cifs: remove redundant size-update block in cifs_remap_file_range() (Paulo Alcantara) [RHEL-257205] - cifs: add cifs_resize_file_locked() to guard fscache_resize_cookie() under i_rwsem (Paulo Alcantara) [RHEL-257205] - cifs: use cifs_invalidate_cache() in cifs_do_truncate() for O_TRUNC (Paulo Alcantara) [RHEL-257205] {CVE-2026-89639} - cifs: add fscache_resize_cookie() to cifs_setsize() (Paulo Alcantara) [RHEL-257205] - smb: client: simplify cifs_fscache_get_super_cookie() (Paulo Alcantara) [RHEL-257205] - smb/client: flush dirty data before punching a hole (Paulo Alcantara) [RHEL-257205] {CVE-2026-93794} - smb/client: refresh allocation after EOF-extending fallocate (Paulo Alcantara) [RHEL-257205] - smb/client: emulate small EOF-extending mode 0 fallocate ranges (Paulo Alcantara) [RHEL-257205] - smb/client: reduce fallocate zero buffer allocation (Paulo Alcantara) [RHEL-257205] - smb/client: refresh allocation size after duplicate extents (Paulo Alcantara) [RHEL-257205] - smb: client: use kvzalloc() for megabyte buffer in simple fallocate (Paulo Alcantara) [RHEL-257205] - smb/client: fix incorrect nlink returned by fstat() (Paulo Alcantara) [RHEL-257205] - smb/client: zero-initialize stack-allocated cifs_open_info_data (Paulo Alcantara) [RHEL-257205] {CVE-2026-93801} - smb/client: pass cifs_open_info_data to SMB2_open() (Paulo Alcantara) [RHEL-257205] - smb/client: use stack-allocated smb2_file_all_info in smb3_query_mf_symlink() (Paulo Alcantara) [RHEL-257205] - smb: client: refactor cifs_revalidate_mapping() to use clear_and_wake_up_bit() (Paulo Alcantara) [RHEL-257205] - smb/client: do not account EOF extension as allocation (Paulo Alcantara) [RHEL-257205] - smb/client: preserve errors from smb2_set_sparse() (Paulo Alcantara) [RHEL-257205] - smb/client: name the default fallocate mode (Paulo Alcantara) [RHEL-257205] - smb/client: update i_blocks after contiguous writes (Paulo Alcantara) [RHEL-257205] - smb: client: fix races in cifsd thread creation (Paulo Alcantara) [RHEL-257205] {CVE-2026-93829} - cifs: invalidate cfid on unlink/rename/rmdir (Paulo Alcantara) [RHEL-257205] - cifs: abort open_cached_dir if we don't request leases (Paulo Alcantara) [RHEL-257205] - cifs: change_conf needs to be called for session setup (Paulo Alcantara) [RHEL-257205] - smb: client: fix generic/694 due to wrong ->i_blocks (Paulo Alcantara) [RHEL-257205] - smb: client: fix open handle lookup in cifs_open() (Paulo Alcantara) [RHEL-257205] - smb: client: fix in-place encryption corruption in SMB2_write() (Paulo Alcantara) [RHEL-257205] {CVE-2026-43362} - smb: client: fix atomic open with O_DIRECT & O_SYNC (Paulo Alcantara) [RHEL-257205] - cifs: Scripted clean up fs/smb/client/cifsglob.h (Paulo Alcantara) [RHEL-257205] - cifs: Scripted clean up fs/smb/client/fscache.h (Paulo Alcantara) [RHEL-257205] - cifs: Scripted clean up fs/smb/client/cifsfs.h (Paulo Alcantara) [RHEL-257205] - cifs: Scripted clean up fs/smb/client/cifsproto.h (Paulo Alcantara) [RHEL-257205] - udp: Deal with race between UDP socket address change and rehash (Jamie Bainbridge) [RHEL-257635] {CVE-2024-57974} - smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (CKI Backport Bot) [RHEL-271257] {CVE-2026-89638} - net/handshake: Drain pending requests at net namespace exit (Xin Long) [RHEL-232134] {CVE-2026-63978} - net/handshake: Use spin_lock_bh for hn_lock (Xin Long) [RHEL-232134] - net/handshake: hand off the pinned file reference to accept_doit (Xin Long) [RHEL-230363] {CVE-2026-63979} - net/handshake: Take a long-lived file reference at submit (Xin Long) [RHEL-234159] {CVE-2026-64523} - fuse: re-lock request before replacing page cache folio (Miklos Szeredi) [RHEL-226093] {CVE-2026-53388} - fuse: release pipe buf after last use (Miklos Szeredi) [RHEL-226093] {CVE-2026-53388} - fuse: fix page stealing (Miklos Szeredi) [RHEL-226093] {CVE-2026-53388} - ipvs: reload ip header after head reallocation (Phil Sutter) [RHEL-263800] {CVE-2026-68476} - selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() (CKI Backport Bot) [RHEL-243225] {CVE-2026-72242} - usb: usbfs: fix use-after-free of usb_device in usbdev_release() (CKI Backport Bot) [RHEL-258557] {CVE-2026-80824} - fuse: re-lock request before returning from fuse_ref_folio() (CKI Backport Bot) [RHEL-234250] {CVE-2026-64266} - xfs: bounds-check buffer log item's dirty bitmap (Pavel Reichl) [RHEL-253366] {CVE-2026-80536} - ovl: check access to copy_file_range source with src mounter creds (Miklos Szeredi) [RHEL-238870] {CVE-2026-68448} - ALSA: seq: close a re-opened queue timer in the destructor (CKI Backport Bot) [RHEL-263709] {CVE-2026-68202} - calipso: unlock rcu before returning -EAFNOSUPPORT (CKI Backport Bot) [RHEL-257685] {CVE-2025-38147} - calipso: Don't call calipso functions for AF_INET sk. (CKI Backport Bot) [RHEL-257685] {CVE-2025-38147} - netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (CKI Backport Bot) [RHEL-257666] {CVE-2025-22063} - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (CKI Backport Bot) [RHEL-255258] {CVE-2026-80530} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252811] {CVE-2026-68299} - ALSA: hda/cs35l41: Fix firmware load work teardown (CKI Backport Bot) [RHEL-234099] {CVE-2026-64481} - rtla: Fix segfault on multiple SIGINTs (Tomas Glozar) [RHEL-193029] - net: always dissect GSO packets in __virtio_net_hdr_to_skb() (Davide Caratti) [RHEL-284987] - ipv4: validate checksum_start before completing checksum (CKI Backport Bot) [RHEL-284987] {CVE-2026-99999} - smb: client: reject a tree connect response whose byte count is too small (Alisher Mazhirinov) [RHEL-271284] {CVE-2026-89631} - exec: Cleanup POSIX timers right after de_thread() (Luiz Capitulino) [RHEL-282063] {CVE-2026-98260} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271871] {CVE-2026-93817} - smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (Frank Sorenson) [RHEL-271487] {CVE-2026-89633} - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270747] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256697] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256697] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256697] - bridge: mcast: Fix a possible use-after-free when removing a bridge port (Jakub Ramaseuski) [RHEL-232528] {CVE-2026-64032} - net: bridge: Flush multicast groups when snooping is disabled (Jakub Ramaseuski) [RHEL-232528] - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Antoine Tenart) [RHEL-231693] {CVE-2026-64024} - ipv4: fib: free fib_alias with kfree_rcu() on insert error path (Jamie Bainbridge) [RHEL-233131] {CVE-2026-64572} - inet: frags: strip GSO state from fragments before reassembly (Jamie Bainbridge) [RHEL-254224] {CVE-2026-80590} - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Jamie Bainbridge) [RHEL-225452] {CVE-2026-64114} - usb: typec: ucsi: validate connector number in ucsi_connector_change() (Desnes Nunes) [RHEL-259429] {CVE-2026-63958} - usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO (Desnes Nunes) [RHEL-259429] - usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (Desnes Nunes) [RHEL-259429] {CVE-2026-63962} - usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (Desnes Nunes) [RHEL-259429] {CVE-2026-63963} - usb: typec: altmodes/displayport: validate count before reading Status Update VDO (Desnes Nunes) [RHEL-259429] {CVE-2026-63961} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63899} - Bluetooth: hci_sync: Fix advertising data UAFs (CKI Backport Bot) [RHEL-254674] {CVE-2026-74509} - openvswitch: vport: fix self-deadlock on release of tunnel ports (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222958] {CVE-2026-52935} - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (Mohammadfaiz Bawa) [RHEL-243814] {CVE-2026-72288} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275058] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275076] {CVE-2026-93228} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270929] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270929] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271453] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268122] {CVE-2026-74705} - net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CKI Backport Bot) [RHEL-270908] {CVE-2026-81003} - wifi: cfg80211: use wiphy work for socket owner autodisconnect (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-263788] {CVE-2026-68409} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (Jose Ignacio Tornos Martinez) [RHEL-259560] {CVE-2026-64030} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261686] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260511] {CVE-2026-68140} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261293] {CVE-2026-72320} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256448] {CVE-2026-74641} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-237219] {CVE-2026-68377} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229654] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226490] {CVE-2026-53011} - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable backports (SOURCES/1100-1196) - Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto authencesn/algif) - Keep the smb cifs.spnego ahead-fix (retained as 1197) - RHEL changelog for 687.6.1..687.10.1 follows: - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163} - RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128} - usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607} - can: raw: fix ro->uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401} - powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125] - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742] - Revert "lpfc: don't use file->f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742] - drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822] - drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853] - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404] - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402} - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741} - smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988] - ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378] - RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966] - net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207] - ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095] - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766} - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766} - rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075} - Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable backports (SOURCES/1198-1252) - RHEL changelog for 687.11.1..687.12.1 follows: - dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110} - Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020} - crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914] - proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653} - proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653} - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470] - mm/page_alloc: clear page->private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303} - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158} - redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927] - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859] - ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829] - ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829] - ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179] - ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257] - dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442] - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378] - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684} - cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701] - ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701] - ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701] - ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701] - drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179] - nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089} - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724} - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183} - i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312] - ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182] - ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185] - Revert "mm: pcp: increase pcp->free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464] - netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392} - Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269) - RHEL changelog for 687.13.1 follows: - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243} - s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472] - s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472] - s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472] - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745] - nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745] - Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786} - crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167] - crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167] - smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613} - mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778] - mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778] - mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778] - mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778] - mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778] - mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778] - mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778] - mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778] - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.18.1..687.19.1 follows: - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176} - init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183] - update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183] - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183] - work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183] - compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183] - powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183] - sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776] - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189} - sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273] - netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273] - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993] - iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993] - iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993] - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993] - iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993] - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057] - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057] - IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057] - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057] - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057] - net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057] - net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057] - net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057] - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057] - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057] - net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057] - net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057] - net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057] - net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057] - net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057] - net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057] - net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057] - net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057] - net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057] - net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057] - net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057] - mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057] - net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057] - net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057] - net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057] - net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057] - net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057] - net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057] - net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057] - net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057] - net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057] - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057] - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057] - mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057] - net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057] - net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057] - net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057] - net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057] - net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057] - net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057] - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057] - net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057] - net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057] - net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057] - net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057] - net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057] - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057] - net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057] - net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057] - net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057] - net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057] - net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057] - net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057] - net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057] - net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057] - net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057] - net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057] - eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057] - net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057] - net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057] - net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057] - net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057] - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057] - RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057] - net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057] - net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057] - net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057] - net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057] - net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057] - net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057] - net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057] - net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057] - net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057] - net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057] - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057] - net: Fix typos (Kamal Heib) [RHEL-169057] - net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057] - net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057] - net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057] - net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057] - net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057] - net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057] - net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057] - net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057] - net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057] - net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057] - net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057] - eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Kamal Heib) [RHEL-169057] - net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057] - net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057] - net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057] - net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057] - net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057] - net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057] - net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057] - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057] - net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057] - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057] - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057] - net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057] - net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057] - net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057] - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057] - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444] - ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444] - ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444] - ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488} - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329} - Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312) - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.19.1..687.20.1 follows: - crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540] - crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540] - crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540] - crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540] - tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198} - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739} - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760] - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760] - scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886] - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411} - Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.18.1..687.19.1 follows: - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176} - init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183] - update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183] - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183] - work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183] - compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183] - powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183] - sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776] - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189} - sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273] - netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273] - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993] - iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993] - iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993] - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993] - iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993] - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057] - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057] - IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057] - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057] - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057] - net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057] - net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057] - net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057] - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057] - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057] - net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057] - net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057] - net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057] - net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057] - net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057] - net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057] - net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057] - net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057] - net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057] - net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057] - net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057] - mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057] - net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057] - net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057] - net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057] - net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057] - net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057] - net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057] - net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057] - net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057] - net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057] - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057] - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057] - mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057] - net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057] - net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057] - net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057] - net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057] - net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057] - net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057] - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057] - net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057] - net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057] - net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057] - net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057] - net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057] - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057] - net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057] - net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057] - net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057] - net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057] - net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057] - net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057] - net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057] - net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057] - net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057] - net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057] - eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057] - net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057] - net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057] - net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057] - net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057] - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057] - RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057] - net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057] - net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057] - net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057] - net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057] - net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057] - net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057] - net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057] - net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057] - net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057] - net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057] - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057] - net: Fix typos (Kamal Heib) [RHEL-169057] - net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057] - net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057] - net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057] - net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057] - net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057] - net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057] - net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057] - net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057] - net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057] - net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057] - net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057] - eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Kamal Heib) [RHEL-169057] - net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057] - net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057] - net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057] - net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057] - net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057] - net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057] - net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057] - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057] - net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057] - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057] - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057] - net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057] - net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057] - net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057] - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057] - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444] - ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444] - ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444] - ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488} - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329} - Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312) - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735) - Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll ep_remove use-after-free CVE-2026-46242 (1712) - RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux ahead-patch (1312) is retained and RHEL's duplicate copy omitted - CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263) - RHEL changelog for 687.21.1..687.22.1 follows: - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041] - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116} - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263} - KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316} - netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227} - nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966] - Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755) - The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by RHEL's eventpoll series carrying the same fix and is dropped - Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738) - RHEL changelog for 687.23.1 follows: - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1756, 1757) are superseded by RHEL's copies and dropped - RHEL changelog for 687.25.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770) - RHEL changelog for 687.26.1 follows: - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1756, 1757) are superseded by RHEL's copies and dropped - RHEL changelog for 687.25.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041] - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116} - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619] - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619] - Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762] - Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762] - Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762] - Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762] - Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762] - Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762] - Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762] - Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762] - nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489] - pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489] - net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508] - cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548] - spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129] - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431) - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619] - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619] - Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762] - Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762] - Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762] - Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762] - Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762] - Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762] - Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762] - Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762] - nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489] - net: skbuff: propagate shared-frag marker through frag-transfer helpers (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300 "Fragnesia") - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431) - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (Mohammadfaiz Bawa) [RHEL-243814] {CVE-2026-72288} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275058] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275076] {CVE-2026-93228} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270929] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270929] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271453] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268122] {CVE-2026-74705} - net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CKI Backport Bot) [RHEL-270908] {CVE-2026-81003} - wifi: cfg80211: use wiphy work for socket owner autodisconnect (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-263788] {CVE-2026-68409} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (Jose Ignacio Tornos Martinez) [RHEL-259560] {CVE-2026-64030} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261686] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260511] {CVE-2026-68140} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261293] {CVE-2026-72320} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256448] {CVE-2026-74641} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-237219] {CVE-2026-68377} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229654] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226490] {CVE-2026-53011} - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net: always dissect GSO packets in __virtio_net_hdr_to_skb() (Davide Caratti) [RHEL-284987] - ipv4: validate checksum_start before completing checksum (CKI Backport Bot) [RHEL-284987] {CVE-2026-99999} - smb: client: reject a tree connect response whose byte count is too small (Alisher Mazhirinov) [RHEL-271284] {CVE-2026-89631} - exec: Cleanup POSIX timers right after de_thread() (Luiz Capitulino) [RHEL-282063] {CVE-2026-98260} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271871] {CVE-2026-93817} - smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (Frank Sorenson) [RHEL-271487] {CVE-2026-89633} - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270747] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256697] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256697] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256697] - bridge: mcast: Fix a possible use-after-free when removing a bridge port (Jakub Ramaseuski) [RHEL-232528] {CVE-2026-64032} - net: bridge: Flush multicast groups when snooping is disabled (Jakub Ramaseuski) [RHEL-232528] - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Antoine Tenart) [RHEL-231693] {CVE-2026-64024} - ipv4: fib: free fib_alias with kfree_rcu() on insert error path (Jamie Bainbridge) [RHEL-233131] {CVE-2026-64572} - inet: frags: strip GSO state from fragments before reassembly (Jamie Bainbridge) [RHEL-254224] {CVE-2026-80590} - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Jamie Bainbridge) [RHEL-225452] {CVE-2026-64114} - usb: typec: ucsi: validate connector number in ucsi_connector_change() (Desnes Nunes) [RHEL-259429] {CVE-2026-63958} - usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO (Desnes Nunes) [RHEL-259429] - usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (Desnes Nunes) [RHEL-259429] {CVE-2026-63962} - usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (Desnes Nunes) [RHEL-259429] {CVE-2026-63963} - usb: typec: altmodes/displayport: validate count before reading Status Update VDO (Desnes Nunes) [RHEL-259429] {CVE-2026-63961} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63899} - Bluetooth: hci_sync: Fix advertising data UAFs (CKI Backport Bot) [RHEL-254674] {CVE-2026-74509} - openvswitch: vport: fix self-deadlock on release of tunnel ports (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222958] {CVE-2026-52935} - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (Mohammadfaiz Bawa) [RHEL-243814] {CVE-2026-72288} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275058] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275076] {CVE-2026-93228} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270929] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270929] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271453] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268122] {CVE-2026-74705} - net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CKI Backport Bot) [RHEL-270908] {CVE-2026-81003} - wifi: cfg80211: use wiphy work for socket owner autodisconnect (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-263788] {CVE-2026-68409} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (Jose Ignacio Tornos Martinez) [RHEL-259560] {CVE-2026-64030} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261686] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260511] {CVE-2026-68140} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261293] {CVE-2026-72320} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256448] {CVE-2026-74641} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-237219] {CVE-2026-68377} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229654] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226490] {CVE-2026-53011} - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: skbuff: propagate shared-frag marker in skb_zerocopy() - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - xfs: bounds-check buffer log item's dirty bitmap (Pavel Reichl) [RHEL-253366] {CVE-2026-80536} - ovl: check access to copy_file_range source with src mounter creds (Miklos Szeredi) [RHEL-238870] {CVE-2026-68448} - ALSA: seq: close a re-opened queue timer in the destructor (CKI Backport Bot) [RHEL-263709] {CVE-2026-68202} - calipso: unlock rcu before returning -EAFNOSUPPORT (CKI Backport Bot) [RHEL-257685] {CVE-2025-38147} - calipso: Don't call calipso functions for AF_INET sk. (CKI Backport Bot) [RHEL-257685] {CVE-2025-38147} - netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (CKI Backport Bot) [RHEL-257666] {CVE-2025-22063} - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (CKI Backport Bot) [RHEL-255258] {CVE-2026-80530} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252811] {CVE-2026-68299} - ALSA: hda/cs35l41: Fix firmware load work teardown (CKI Backport Bot) [RHEL-234099] {CVE-2026-64481} - rtla: Fix segfault on multiple SIGINTs (Tomas Glozar) [RHEL-193029] - net: always dissect GSO packets in __virtio_net_hdr_to_skb() (Davide Caratti) [RHEL-284987] - ipv4: validate checksum_start before completing checksum (CKI Backport Bot) [RHEL-284987] {CVE-2026-99999} - smb: client: reject a tree connect response whose byte count is too small (Alisher Mazhirinov) [RHEL-271284] {CVE-2026-89631} - exec: Cleanup POSIX timers right after de_thread() (Luiz Capitulino) [RHEL-282063] {CVE-2026-98260} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271871] {CVE-2026-93817} - smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (Frank Sorenson) [RHEL-271487] {CVE-2026-89633} - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270747] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256697] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256697] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256697] - bridge: mcast: Fix a possible use-after-free when removing a bridge port (Jakub Ramaseuski) [RHEL-232528] {CVE-2026-64032} - net: bridge: Flush multicast groups when snooping is disabled (Jakub Ramaseuski) [RHEL-232528] - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Antoine Tenart) [RHEL-231693] {CVE-2026-64024} - ipv4: fib: free fib_alias with kfree_rcu() on insert error path (Jamie Bainbridge) [RHEL-233131] {CVE-2026-64572} - inet: frags: strip GSO state from fragments before reassembly (Jamie Bainbridge) [RHEL-254224] {CVE-2026-80590} - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Jamie Bainbridge) [RHEL-225452] {CVE-2026-64114} - usb: typec: ucsi: validate connector number in ucsi_connector_change() (Desnes Nunes) [RHEL-259429] {CVE-2026-63958} - usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO (Desnes Nunes) [RHEL-259429] - usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (Desnes Nunes) [RHEL-259429] {CVE-2026-63962} - usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (Desnes Nunes) [RHEL-259429] {CVE-2026-63963} - usb: typec: altmodes/displayport: validate count before reading Status Update VDO (Desnes Nunes) [RHEL-259429] {CVE-2026-63961} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63899} - Bluetooth: hci_sync: Fix advertising data UAFs (CKI Backport Bot) [RHEL-254674] {CVE-2026-74509} - openvswitch: vport: fix self-deadlock on release of tunnel ports (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222958] {CVE-2026-52935} - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (Mohammadfaiz Bawa) [RHEL-243814] {CVE-2026-72288} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275058] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275076] {CVE-2026-93228} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270929] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270929] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271453] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268122] {CVE-2026-74705} - net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CKI Backport Bot) [RHEL-270908] {CVE-2026-81003} - wifi: cfg80211: use wiphy work for socket owner autodisconnect (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-263788] {CVE-2026-68409} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (Jose Ignacio Tornos Martinez) [RHEL-259560] {CVE-2026-64030} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261686] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260511] {CVE-2026-68140} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261293] {CVE-2026-72320} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256448] {CVE-2026-74641} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-237219] {CVE-2026-68377} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229654] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226490] {CVE-2026-53011} - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - net: skbuff: propagate shared-frag marker in skb_zerocopy() - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - netfilter: flowtable: hold reference on ct until flow is released (CKI Backport Bot) [RHEL-280075] {CVE-2026-98320} - vfio/pci: clear vdev->msi_perm after freeing it on init failure (Rodolfo Vick) [RHEL-270901] {CVE-2026-89777} - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278089] {CVE-2026-93262} - KEYS: encrypted: fix integer overflow of datablob_len (Bruno Meneguele) [RHEL-279504] {CVE-2026-98222} - KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (CKI Backport Bot) [RHEL-277620] {CVE-2026-74515} - smb: client: guard against tailsz underflow in wdata_send_pages() (Paulo Alcantara) [RHEL-257205] - smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-257205] - smb: client: fix rlist race and missing initialization (Paulo Alcantara) [RHEL-257205] {CVE-2026-98174} - smb: client: cancel reconnect work in clean_demultiplex_info() (Paulo Alcantara) [RHEL-257205] {CVE-2026-98175} - smb/client: send lease break ACKs thru correct session for multiuser mounts (Paulo Alcantara) [RHEL-257205] - smb: client: fix cifsFileInfo reference leak in deferred close (Paulo Alcantara) [RHEL-257205] {CVE-2026-97558} - smb: client: avoid leaking refcount when cifs_sb_tlink() fails (Paulo Alcantara) [RHEL-257205] {CVE-2026-97556} - smb: client: avoid leaking refcount in cifs_queue_oplock_break() (Paulo Alcantara) [RHEL-257205] {CVE-2026-97557} - smb: client: fix data corruption with concurrent writes and O_TRUNC (Paulo Alcantara) [RHEL-257205] - cifs: don't update i_size in cifs_do_truncate without a cached handle (Paulo Alcantara) [RHEL-257205] - smb: client: invalidate fscache for fallocate range operations (Paulo Alcantara) [RHEL-257205] {CVE-2026-98124} - smb: client: fix stale page cache in insert/collapse range (Paulo Alcantara) [RHEL-257205] {CVE-2026-98125} - smb: client: fix integer truncation in collapse range (Paulo Alcantara) [RHEL-257205] - smb: client: fix data corruption in emulated insert range (Paulo Alcantara) [RHEL-257205] - smb/client: mark file sparse before emulating insert range (Paulo Alcantara) [RHEL-257205] - smb/client: validate new EOF for zero range (Paulo Alcantara) [RHEL-257205] {CVE-2026-98126} - smb/client: validate new EOF for insert range (Paulo Alcantara) [RHEL-257205] {CVE-2026-98127} - cifs: add revalidation on FSCTL failure in smb2_duplicate_extents() (Paulo Alcantara) [RHEL-257205] - cifs: fix loff_t underflow in cifs_remap_file_range() when len == 0 (Paulo Alcantara) [RHEL-257205] {CVE-2026-89640} - cifs: call pagecache_isize_extended() in cifs_setsize() when extending (Paulo Alcantara) [RHEL-257205] {CVE-2026-89642} - cifs: clear tcon after cifsFileInfo_put() in cifs_file_set_size() (Paulo Alcantara) [RHEL-257205] {CVE-2026-89641} - smb/client: decode reparse metadata using its payload type (Paulo Alcantara) [RHEL-257205] - smb/client: preserve open info type across compound queries (Paulo Alcantara) [RHEL-257205] - smb/client: mark missing nlink values as unknown (Paulo Alcantara) [RHEL-257205] - smb/client: fix nlink of an overwritten open file (Paulo Alcantara) [RHEL-257205] - cifs: remove dead size-update blocks in cifs_setattr_unix/nounix (Paulo Alcantara) [RHEL-257205] - cifs: remove redundant size-update block in cifs_remap_file_range() (Paulo Alcantara) [RHEL-257205] - cifs: add cifs_resize_file_locked() to guard fscache_resize_cookie() under i_rwsem (Paulo Alcantara) [RHEL-257205] - cifs: use cifs_invalidate_cache() in cifs_do_truncate() for O_TRUNC (Paulo Alcantara) [RHEL-257205] {CVE-2026-89639} - cifs: add fscache_resize_cookie() to cifs_setsize() (Paulo Alcantara) [RHEL-257205] - smb: client: simplify cifs_fscache_get_super_cookie() (Paulo Alcantara) [RHEL-257205] - smb/client: flush dirty data before punching a hole (Paulo Alcantara) [RHEL-257205] {CVE-2026-93794} - smb/client: refresh allocation after EOF-extending fallocate (Paulo Alcantara) [RHEL-257205] - smb/client: emulate small EOF-extending mode 0 fallocate ranges (Paulo Alcantara) [RHEL-257205] - smb/client: reduce fallocate zero buffer allocation (Paulo Alcantara) [RHEL-257205] - smb/client: refresh allocation size after duplicate extents (Paulo Alcantara) [RHEL-257205] - smb: client: use kvzalloc() for megabyte buffer in simple fallocate (Paulo Alcantara) [RHEL-257205] - smb/client: fix incorrect nlink returned by fstat() (Paulo Alcantara) [RHEL-257205] - smb/client: zero-initialize stack-allocated cifs_open_info_data (Paulo Alcantara) [RHEL-257205] {CVE-2026-93801} - smb/client: pass cifs_open_info_data to SMB2_open() (Paulo Alcantara) [RHEL-257205] - smb/client: use stack-allocated smb2_file_all_info in smb3_query_mf_symlink() (Paulo Alcantara) [RHEL-257205] - smb: client: refactor cifs_revalidate_mapping() to use clear_and_wake_up_bit() (Paulo Alcantara) [RHEL-257205] - smb/client: do not account EOF extension as allocation (Paulo Alcantara) [RHEL-257205] - smb/client: preserve errors from smb2_set_sparse() (Paulo Alcantara) [RHEL-257205] - smb/client: name the default fallocate mode (Paulo Alcantara) [RHEL-257205] - smb/client: update i_blocks after contiguous writes (Paulo Alcantara) [RHEL-257205] - smb: client: fix races in cifsd thread creation (Paulo Alcantara) [RHEL-257205] {CVE-2026-93829} - cifs: invalidate cfid on unlink/rename/rmdir (Paulo Alcantara) [RHEL-257205] - cifs: abort open_cached_dir if we don't request leases (Paulo Alcantara) [RHEL-257205] - cifs: change_conf needs to be called for session setup (Paulo Alcantara) [RHEL-257205] - smb: client: fix generic/694 due to wrong ->i_blocks (Paulo Alcantara) [RHEL-257205] - smb: client: fix open handle lookup in cifs_open() (Paulo Alcantara) [RHEL-257205] - smb: client: fix in-place encryption corruption in SMB2_write() (Paulo Alcantara) [RHEL-257205] {CVE-2026-43362} - smb: client: fix atomic open with O_DIRECT & O_SYNC (Paulo Alcantara) [RHEL-257205] - cifs: Scripted clean up fs/smb/client/cifsglob.h (Paulo Alcantara) [RHEL-257205] - cifs: Scripted clean up fs/smb/client/fscache.h (Paulo Alcantara) [RHEL-257205] - cifs: Scripted clean up fs/smb/client/cifsfs.h (Paulo Alcantara) [RHEL-257205] - cifs: Scripted clean up fs/smb/client/cifsproto.h (Paulo Alcantara) [RHEL-257205] - udp: Deal with race between UDP socket address change and rehash (Jamie Bainbridge) [RHEL-257635] {CVE-2024-57974} - smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (CKI Backport Bot) [RHEL-271257] {CVE-2026-89638} - net/handshake: Drain pending requests at net namespace exit (Xin Long) [RHEL-232134] {CVE-2026-63978} - net/handshake: Use spin_lock_bh for hn_lock (Xin Long) [RHEL-232134] - net/handshake: hand off the pinned file reference to accept_doit (Xin Long) [RHEL-230363] {CVE-2026-63979} - net/handshake: Take a long-lived file reference at submit (Xin Long) [RHEL-234159] {CVE-2026-64523} - fuse: re-lock request before replacing page cache folio (Miklos Szeredi) [RHEL-226093] {CVE-2026-53388} - fuse: release pipe buf after last use (Miklos Szeredi) [RHEL-226093] {CVE-2026-53388} - fuse: fix page stealing (Miklos Szeredi) [RHEL-226093] {CVE-2026-53388} - ipvs: reload ip header after head reallocation (Phil Sutter) [RHEL-263800] {CVE-2026-68476} - selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() (CKI Backport Bot) [RHEL-243225] {CVE-2026-72242} - usb: usbfs: fix use-after-free of usb_device in usbdev_release() (CKI Backport Bot) [RHEL-258557] {CVE-2026-80824} - fuse: re-lock request before returning from fuse_ref_folio() (CKI Backport Bot) [RHEL-234250] {CVE-2026-64266} - xfs: bounds-check buffer log item's dirty bitmap (Pavel Reichl) [RHEL-253366] {CVE-2026-80536} - ovl: check access to copy_file_range source with src mounter creds (Miklos Szeredi) [RHEL-238870] {CVE-2026-68448} - ALSA: seq: close a re-opened queue timer in the destructor (CKI Backport Bot) [RHEL-263709] {CVE-2026-68202} - calipso: unlock rcu before returning -EAFNOSUPPORT (CKI Backport Bot) [RHEL-257685] {CVE-2025-38147} - calipso: Don't call calipso functions for AF_INET sk. (CKI Backport Bot) [RHEL-257685] {CVE-2025-38147} - netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (CKI Backport Bot) [RHEL-257666] {CVE-2025-22063} - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (CKI Backport Bot) [RHEL-255258] {CVE-2026-80530} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252811] {CVE-2026-68299} - ALSA: hda/cs35l41: Fix firmware load work teardown (CKI Backport Bot) [RHEL-234099] {CVE-2026-64481} - rtla: Fix segfault on multiple SIGINTs (Tomas Glozar) [RHEL-193029] - net: always dissect GSO packets in __virtio_net_hdr_to_skb() (Davide Caratti) [RHEL-284987] - ipv4: validate checksum_start before completing checksum (CKI Backport Bot) [RHEL-284987] {CVE-2026-99999} - smb: client: reject a tree connect response whose byte count is too small (Alisher Mazhirinov) [RHEL-271284] {CVE-2026-89631} - exec: Cleanup POSIX timers right after de_thread() (Luiz Capitulino) [RHEL-282063] {CVE-2026-98260} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271871] {CVE-2026-93817} - smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (Frank Sorenson) [RHEL-271487] {CVE-2026-89633} - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270747] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256697] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256697] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256697] - bridge: mcast: Fix a possible use-after-free when removing a bridge port (Jakub Ramaseuski) [RHEL-232528] {CVE-2026-64032} - net: bridge: Flush multicast groups when snooping is disabled (Jakub Ramaseuski) [RHEL-232528] - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Antoine Tenart) [RHEL-231693] {CVE-2026-64024} - ipv4: fib: free fib_alias with kfree_rcu() on insert error path (Jamie Bainbridge) [RHEL-233131] {CVE-2026-64572} - inet: frags: strip GSO state from fragments before reassembly (Jamie Bainbridge) [RHEL-254224] {CVE-2026-80590} - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Jamie Bainbridge) [RHEL-225452] {CVE-2026-64114} - usb: typec: ucsi: validate connector number in ucsi_connector_change() (Desnes Nunes) [RHEL-259429] {CVE-2026-63958} - usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO (Desnes Nunes) [RHEL-259429] - usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (Desnes Nunes) [RHEL-259429] {CVE-2026-63962} - usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (Desnes Nunes) [RHEL-259429] {CVE-2026-63963} - usb: typec: altmodes/displayport: validate count before reading Status Update VDO (Desnes Nunes) [RHEL-259429] {CVE-2026-63961} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63899} - Bluetooth: hci_sync: Fix advertising data UAFs (CKI Backport Bot) [RHEL-254674] {CVE-2026-74509} - openvswitch: vport: fix self-deadlock on release of tunnel ports (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222958] {CVE-2026-52935} - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (Mohammadfaiz Bawa) [RHEL-243814] {CVE-2026-72288} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275058] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275076] {CVE-2026-93228} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270929] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270929] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271453] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268122] {CVE-2026-74705} - net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CKI Backport Bot) [RHEL-270908] {CVE-2026-81003} - wifi: cfg80211: use wiphy work for socket owner autodisconnect (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-263788] {CVE-2026-68409} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (Jose Ignacio Tornos Martinez) [RHEL-259560] {CVE-2026-64030} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261686] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260511] {CVE-2026-68140} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261293] {CVE-2026-72320} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256448] {CVE-2026-74641} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-237219] {CVE-2026-68377} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229654] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226490] {CVE-2026-53011} - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable backports (SOURCES/1100-1196) - Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto authencesn/algif) - Keep the smb cifs.spnego ahead-fix (retained as 1197) - RHEL changelog for 687.6.1..687.10.1 follows: - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163} - RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128} - usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607} - can: raw: fix ro->uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401} - powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125] - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742] - Revert "lpfc: don't use file->f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742] - drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822] - drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853] - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404] - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402} - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741} - smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988] - ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378] - RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966] - net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207] - ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095] - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766} - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766} - rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075} - Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable backports (SOURCES/1198-1252) - RHEL changelog for 687.11.1..687.12.1 follows: - dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110} - Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020} - crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914] - proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653} - proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653} - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470] - mm/page_alloc: clear page->private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303} - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158} - redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927] - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859] - ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829] - ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829] - ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179] - ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257] - dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442] - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378] - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684} - cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701] - ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701] - ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701] - ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701] - drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179] - nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089} - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724} - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183} - i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312] - ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182] - ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185] - Revert "mm: pcp: increase pcp->free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464] - netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392} - Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269) - RHEL changelog for 687.13.1 follows: - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243} - s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472] - s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472] - s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472] - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745] - nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745] - Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786} - crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167] - crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167] - smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613} - mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778] - mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778] - mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778] - mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778] - mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778] - mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778] - mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778] - mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778] - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.18.1..687.19.1 follows: - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176} - init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183] - update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183] - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183] - work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183] - compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183] - powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183] - sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776] - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189} - sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273] - netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273] - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993] - iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993] - iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993] - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993] - iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993] - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057] - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057] - IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057] - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057] - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057] - net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057] - net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057] - net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057] - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057] - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057] - net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057] - net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057] - net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057] - net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057] - net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057] - net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057] - net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057] - net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057] - net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057] - net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057] - net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057] - mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057] - net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057] - net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057] - net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057] - net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057] - net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057] - net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057] - net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057] - net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057] - net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057] - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057] - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057] - mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057] - net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057] - net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057] - net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057] - net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057] - net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057] - net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057] - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057] - net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057] - net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057] - net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057] - net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057] - net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057] - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057] - net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057] - net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057] - net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057] - net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057] - net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057] - net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057] - net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057] - net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057] - net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057] - net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057] - eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057] - net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057] - net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057] - net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057] - net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057] - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057] - RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057] - net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057] - net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057] - net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057] - net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057] - net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057] - net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057] - net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057] - net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057] - net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057] - net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057] - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057] - net: Fix typos (Kamal Heib) [RHEL-169057] - net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057] - net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057] - net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057] - net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057] - net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057] - net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057] - net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057] - net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057] - net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057] - net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057] - net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057] - eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Kamal Heib) [RHEL-169057] - net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057] - net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057] - net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057] - net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057] - net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057] - net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057] - net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057] - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057] - net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057] - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057] - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057] - net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057] - net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057] - net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057] - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057] - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444] - ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444] - ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444] - ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488} - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329} - Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312) - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.19.1..687.20.1 follows: - crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540] - crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540] - crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540] - crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540] - tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198} - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739} - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760] - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760] - scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886] - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411} - Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.18.1..687.19.1 follows: - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176} - init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183] - update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183] - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183] - work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183] - compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183] - powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183] - sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776] - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189} - sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273] - netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273] - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993] - iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993] - iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993] - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993] - iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993] - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057] - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057] - IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057] - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057] - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057] - net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057] - net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057] - net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057] - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057] - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057] - net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057] - net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057] - net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057] - net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057] - net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057] - net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057] - net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057] - net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057] - net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057] - net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057] - net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057] - mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057] - net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057] - net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057] - net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057] - net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057] - net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057] - net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057] - net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057] - net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057] - net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057] - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057] - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057] - mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057] - net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057] - net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057] - net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057] - net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057] - net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057] - net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057] - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057] - net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057] - net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057] - net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057] - net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057] - net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057] - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057] - net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057] - net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057] - net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057] - net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057] - net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057] - net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057] - net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057] - net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057] - net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057] - net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057] - eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057] - net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057] - net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057] - net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057] - net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057] - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057] - RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057] - net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057] - net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057] - net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057] - net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057] - net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057] - net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057] - net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057] - net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057] - net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057] - net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057] - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057] - net: Fix typos (Kamal Heib) [RHEL-169057] - net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057] - net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057] - net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057] - net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057] - net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057] - net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057] - net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057] - net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057] - net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057] - net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057] - net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057] - eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Kamal Heib) [RHEL-169057] - net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057] - net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057] - net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057] - net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057] - net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057] - net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057] - net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057] - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057] - net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057] - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057] - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057] - net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057] - net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057] - net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057] - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057] - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444] - ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444] - ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444] - ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488} - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329} - Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312) - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735) - Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll ep_remove use-after-free CVE-2026-46242 (1712) - RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux ahead-patch (1312) is retained and RHEL's duplicate copy omitted - CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263) - RHEL changelog for 687.21.1..687.22.1 follows: - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041] - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116} - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263} - KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316} - netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227} - nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966] - Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755) - The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by RHEL's eventpoll series carrying the same fix and is dropped - Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738) - RHEL changelog for 687.23.1 follows: - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1756, 1757) are superseded by RHEL's copies and dropped - RHEL changelog for 687.25.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770) - RHEL changelog for 687.26.1 follows: - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1756, 1757) are superseded by RHEL's copies and dropped - RHEL changelog for 687.25.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041] - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116} - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619] - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619] - Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762] - Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762] - Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762] - Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762] - Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762] - Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762] - Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762] - Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762] - nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489] - pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489] - net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508] - cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548] - spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129] - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431) - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619] - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619] - Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762] - Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762] - Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762] - Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762] - Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762] - Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762] - Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762] - Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762] - nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489] - net: skbuff: propagate shared-frag marker through frag-transfer helpers (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300 "Fragnesia") - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431) - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (Mohammadfaiz Bawa) [RHEL-243814] {CVE-2026-72288} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275058] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275076] {CVE-2026-93228} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270929] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270929] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271453] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268122] {CVE-2026-74705} - net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CKI Backport Bot) [RHEL-270908] {CVE-2026-81003} - wifi: cfg80211: use wiphy work for socket owner autodisconnect (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-263788] {CVE-2026-68409} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (Jose Ignacio Tornos Martinez) [RHEL-259560] {CVE-2026-64030} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261686] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260511] {CVE-2026-68140} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261293] {CVE-2026-72320} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256448] {CVE-2026-74641} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-237219] {CVE-2026-68377} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229654] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226490] {CVE-2026-53011} - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net: always dissect GSO packets in __virtio_net_hdr_to_skb() (Davide Caratti) [RHEL-284987] - ipv4: validate checksum_start before completing checksum (CKI Backport Bot) [RHEL-284987] {CVE-2026-99999} - smb: client: reject a tree connect response whose byte count is too small (Alisher Mazhirinov) [RHEL-271284] {CVE-2026-89631} - exec: Cleanup POSIX timers right after de_thread() (Luiz Capitulino) [RHEL-282063] {CVE-2026-98260} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271871] {CVE-2026-93817} - smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (Frank Sorenson) [RHEL-271487] {CVE-2026-89633} - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270747] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256697] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256697] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256697] - bridge: mcast: Fix a possible use-after-free when removing a bridge port (Jakub Ramaseuski) [RHEL-232528] {CVE-2026-64032} - net: bridge: Flush multicast groups when snooping is disabled (Jakub Ramaseuski) [RHEL-232528] - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Antoine Tenart) [RHEL-231693] {CVE-2026-64024} - ipv4: fib: free fib_alias with kfree_rcu() on insert error path (Jamie Bainbridge) [RHEL-233131] {CVE-2026-64572} - inet: frags: strip GSO state from fragments before reassembly (Jamie Bainbridge) [RHEL-254224] {CVE-2026-80590} - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Jamie Bainbridge) [RHEL-225452] {CVE-2026-64114} - usb: typec: ucsi: validate connector number in ucsi_connector_change() (Desnes Nunes) [RHEL-259429] {CVE-2026-63958} - usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO (Desnes Nunes) [RHEL-259429] - usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (Desnes Nunes) [RHEL-259429] {CVE-2026-63962} - usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (Desnes Nunes) [RHEL-259429] {CVE-2026-63963} - usb: typec: altmodes/displayport: validate count before reading Status Update VDO (Desnes Nunes) [RHEL-259429] {CVE-2026-63961} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63899} - Bluetooth: hci_sync: Fix advertising data UAFs (CKI Backport Bot) [RHEL-254674] {CVE-2026-74509} - openvswitch: vport: fix self-deadlock on release of tunnel ports (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222958] {CVE-2026-52935} - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (Mohammadfaiz Bawa) [RHEL-243814] {CVE-2026-72288} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275058] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275076] {CVE-2026-93228} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270929] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270929] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271453] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268122] {CVE-2026-74705} - net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CKI Backport Bot) [RHEL-270908] {CVE-2026-81003} - wifi: cfg80211: use wiphy work for socket owner autodisconnect (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-263788] {CVE-2026-68409} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (Jose Ignacio Tornos Martinez) [RHEL-259560] {CVE-2026-64030} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261686] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260511] {CVE-2026-68140} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261293] {CVE-2026-72320} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256448] {CVE-2026-74641} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-237219] {CVE-2026-68377} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229654] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226490] {CVE-2026-53011} - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: skbuff: propagate shared-frag marker in skb_zerocopy() - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - xfs: bounds-check buffer log item's dirty bitmap (Pavel Reichl) [RHEL-253366] {CVE-2026-80536} - ovl: check access to copy_file_range source with src mounter creds (Miklos Szeredi) [RHEL-238870] {CVE-2026-68448} - ALSA: seq: close a re-opened queue timer in the destructor (CKI Backport Bot) [RHEL-263709] {CVE-2026-68202} - calipso: unlock rcu before returning -EAFNOSUPPORT (CKI Backport Bot) [RHEL-257685] {CVE-2025-38147} - calipso: Don't call calipso functions for AF_INET sk. (CKI Backport Bot) [RHEL-257685] {CVE-2025-38147} - netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (CKI Backport Bot) [RHEL-257666] {CVE-2025-22063} - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (CKI Backport Bot) [RHEL-255258] {CVE-2026-80530} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252811] {CVE-2026-68299} - ALSA: hda/cs35l41: Fix firmware load work teardown (CKI Backport Bot) [RHEL-234099] {CVE-2026-64481} - rtla: Fix segfault on multiple SIGINTs (Tomas Glozar) [RHEL-193029] - net: always dissect GSO packets in __virtio_net_hdr_to_skb() (Davide Caratti) [RHEL-284987] - ipv4: validate checksum_start before completing checksum (CKI Backport Bot) [RHEL-284987] {CVE-2026-99999} - smb: client: reject a tree connect response whose byte count is too small (Alisher Mazhirinov) [RHEL-271284] {CVE-2026-89631} - exec: Cleanup POSIX timers right after de_thread() (Luiz Capitulino) [RHEL-282063] {CVE-2026-98260} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271871] {CVE-2026-93817} - smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (Frank Sorenson) [RHEL-271487] {CVE-2026-89633} - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270747] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256697] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256697] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256697] - bridge: mcast: Fix a possible use-after-free when removing a bridge port (Jakub Ramaseuski) [RHEL-232528] {CVE-2026-64032} - net: bridge: Flush multicast groups when snooping is disabled (Jakub Ramaseuski) [RHEL-232528] - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Antoine Tenart) [RHEL-231693] {CVE-2026-64024} - ipv4: fib: free fib_alias with kfree_rcu() on insert error path (Jamie Bainbridge) [RHEL-233131] {CVE-2026-64572} - inet: frags: strip GSO state from fragments before reassembly (Jamie Bainbridge) [RHEL-254224] {CVE-2026-80590} - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Jamie Bainbridge) [RHEL-225452] {CVE-2026-64114} - usb: typec: ucsi: validate connector number in ucsi_connector_change() (Desnes Nunes) [RHEL-259429] {CVE-2026-63958} - usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO (Desnes Nunes) [RHEL-259429] - usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (Desnes Nunes) [RHEL-259429] {CVE-2026-63962} - usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (Desnes Nunes) [RHEL-259429] {CVE-2026-63963} - usb: typec: altmodes/displayport: validate count before reading Status Update VDO (Desnes Nunes) [RHEL-259429] {CVE-2026-63961} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63899} - Bluetooth: hci_sync: Fix advertising data UAFs (CKI Backport Bot) [RHEL-254674] {CVE-2026-74509} - openvswitch: vport: fix self-deadlock on release of tunnel ports (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222958] {CVE-2026-52935} - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (Mohammadfaiz Bawa) [RHEL-243814] {CVE-2026-72288} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275058] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275076] {CVE-2026-93228} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270929] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270929] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271453] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268122] {CVE-2026-74705} - net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CKI Backport Bot) [RHEL-270908] {CVE-2026-81003} - wifi: cfg80211: use wiphy work for socket owner autodisconnect (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-263788] {CVE-2026-68409} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (Jose Ignacio Tornos Martinez) [RHEL-259560] {CVE-2026-64030} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261686] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260511] {CVE-2026-68140} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261293] {CVE-2026-72320} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256448] {CVE-2026-74641} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-237219] {CVE-2026-68377} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229654] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226490] {CVE-2026-53011} - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - net: skbuff: propagate shared-frag marker in skb_zerocopy() - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - netfilter: flowtable: hold reference on ct until flow is released (CKI Backport Bot) [RHEL-280075] {CVE-2026-98320} - vfio/pci: clear vdev->msi_perm after freeing it on init failure (Rodolfo Vick) [RHEL-270901] {CVE-2026-89777} - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278089] {CVE-2026-93262} - KEYS: encrypted: fix integer overflow of datablob_len (Bruno Meneguele) [RHEL-279504] {CVE-2026-98222} - KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (CKI Backport Bot) [RHEL-277620] {CVE-2026-74515} - smb: client: guard against tailsz underflow in wdata_send_pages() (Paulo Alcantara) [RHEL-257205] - smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-257205] - smb: client: fix rlist race and missing initialization (Paulo Alcantara) [RHEL-257205] {CVE-2026-98174} - smb: client: cancel reconnect work in clean_demultiplex_info() (Paulo Alcantara) [RHEL-257205] {CVE-2026-98175} - smb/client: send lease break ACKs thru correct session for multiuser mounts (Paulo Alcantara) [RHEL-257205] - smb: client: fix cifsFileInfo reference leak in deferred close (Paulo Alcantara) [RHEL-257205] {CVE-2026-97558} - smb: client: avoid leaking refcount when cifs_sb_tlink() fails (Paulo Alcantara) [RHEL-257205] {CVE-2026-97556} - smb: client: avoid leaking refcount in cifs_queue_oplock_break() (Paulo Alcantara) [RHEL-257205] {CVE-2026-97557} - smb: client: fix data corruption with concurrent writes and O_TRUNC (Paulo Alcantara) [RHEL-257205] - cifs: don't update i_size in cifs_do_truncate without a cached handle (Paulo Alcantara) [RHEL-257205] - smb: client: invalidate fscache for fallocate range operations (Paulo Alcantara) [RHEL-257205] {CVE-2026-98124} - smb: client: fix stale page cache in insert/collapse range (Paulo Alcantara) [RHEL-257205] {CVE-2026-98125} - smb: client: fix integer truncation in collapse range (Paulo Alcantara) [RHEL-257205] - smb: client: fix data corruption in emulated insert range (Paulo Alcantara) [RHEL-257205] - smb/client: mark file sparse before emulating insert range (Paulo Alcantara) [RHEL-257205] - smb/client: validate new EOF for zero range (Paulo Alcantara) [RHEL-257205] {CVE-2026-98126} - smb/client: validate new EOF for insert range (Paulo Alcantara) [RHEL-257205] {CVE-2026-98127} - cifs: add revalidation on FSCTL failure in smb2_duplicate_extents() (Paulo Alcantara) [RHEL-257205] - cifs: fix loff_t underflow in cifs_remap_file_range() when len == 0 (Paulo Alcantara) [RHEL-257205] {CVE-2026-89640} - cifs: call pagecache_isize_extended() in cifs_setsize() when extending (Paulo Alcantara) [RHEL-257205] {CVE-2026-89642} - cifs: clear tcon after cifsFileInfo_put() in cifs_file_set_size() (Paulo Alcantara) [RHEL-257205] {CVE-2026-89641} - smb/client: decode reparse metadata using its payload type (Paulo Alcantara) [RHEL-257205] - smb/client: preserve open info type across compound queries (Paulo Alcantara) [RHEL-257205] - smb/client: mark missing nlink values as unknown (Paulo Alcantara) [RHEL-257205] - smb/client: fix nlink of an overwritten open file (Paulo Alcantara) [RHEL-257205] - cifs: remove dead size-update blocks in cifs_setattr_unix/nounix (Paulo Alcantara) [RHEL-257205] - cifs: remove redundant size-update block in cifs_remap_file_range() (Paulo Alcantara) [RHEL-257205] - cifs: add cifs_resize_file_locked() to guard fscache_resize_cookie() under i_rwsem (Paulo Alcantara) [RHEL-257205] - cifs: use cifs_invalidate_cache() in cifs_do_truncate() for O_TRUNC (Paulo Alcantara) [RHEL-257205] {CVE-2026-89639} - cifs: add fscache_resize_cookie() to cifs_setsize() (Paulo Alcantara) [RHEL-257205] - smb: client: simplify cifs_fscache_get_super_cookie() (Paulo Alcantara) [RHEL-257205] - smb/client: flush dirty data before punching a hole (Paulo Alcantara) [RHEL-257205] {CVE-2026-93794} - smb/client: refresh allocation after EOF-extending fallocate (Paulo Alcantara) [RHEL-257205] - smb/client: emulate small EOF-extending mode 0 fallocate ranges (Paulo Alcantara) [RHEL-257205] - smb/client: reduce fallocate zero buffer allocation (Paulo Alcantara) [RHEL-257205] - smb/client: refresh allocation size after duplicate extents (Paulo Alcantara) [RHEL-257205] - smb: client: use kvzalloc() for megabyte buffer in simple fallocate (Paulo Alcantara) [RHEL-257205] - smb/client: fix incorrect nlink returned by fstat() (Paulo Alcantara) [RHEL-257205] - smb/client: zero-initialize stack-allocated cifs_open_info_data (Paulo Alcantara) [RHEL-257205] {CVE-2026-93801} - smb/client: pass cifs_open_info_data to SMB2_open() (Paulo Alcantara) [RHEL-257205] - smb/client: use stack-allocated smb2_file_all_info in smb3_query_mf_symlink() (Paulo Alcantara) [RHEL-257205] - smb: client: refactor cifs_revalidate_mapping() to use clear_and_wake_up_bit() (Paulo Alcantara) [RHEL-257205] - smb/client: do not account EOF extension as allocation (Paulo Alcantara) [RHEL-257205] - smb/client: preserve errors from smb2_set_sparse() (Paulo Alcantara) [RHEL-257205] - smb/client: name the default fallocate mode (Paulo Alcantara) [RHEL-257205] - smb/client: update i_blocks after contiguous writes (Paulo Alcantara) [RHEL-257205] - smb: client: fix races in cifsd thread creation (Paulo Alcantara) [RHEL-257205] {CVE-2026-93829} - cifs: invalidate cfid on unlink/rename/rmdir (Paulo Alcantara) [RHEL-257205] - cifs: abort open_cached_dir if we don't request leases (Paulo Alcantara) [RHEL-257205] - cifs: change_conf needs to be called for session setup (Paulo Alcantara) [RHEL-257205] - smb: client: fix generic/694 due to wrong ->i_blocks (Paulo Alcantara) [RHEL-257205] - smb: client: fix open handle lookup in cifs_open() (Paulo Alcantara) [RHEL-257205] - smb: client: fix in-place encryption corruption in SMB2_write() (Paulo Alcantara) [RHEL-257205] {CVE-2026-43362} - smb: client: fix atomic open with O_DIRECT & O_SYNC (Paulo Alcantara) [RHEL-257205] - cifs: Scripted clean up fs/smb/client/cifsglob.h (Paulo Alcantara) [RHEL-257205] - cifs: Scripted clean up fs/smb/client/fscache.h (Paulo Alcantara) [RHEL-257205] - cifs: Scripted clean up fs/smb/client/cifsfs.h (Paulo Alcantara) [RHEL-257205] - cifs: Scripted clean up fs/smb/client/cifsproto.h (Paulo Alcantara) [RHEL-257205] - udp: Deal with race between UDP socket address change and rehash (Jamie Bainbridge) [RHEL-257635] {CVE-2024-57974} - smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (CKI Backport Bot) [RHEL-271257] {CVE-2026-89638} - net/handshake: Drain pending requests at net namespace exit (Xin Long) [RHEL-232134] {CVE-2026-63978} - net/handshake: Use spin_lock_bh for hn_lock (Xin Long) [RHEL-232134] - net/handshake: hand off the pinned file reference to accept_doit (Xin Long) [RHEL-230363] {CVE-2026-63979} - net/handshake: Take a long-lived file reference at submit (Xin Long) [RHEL-234159] {CVE-2026-64523} - fuse: re-lock request before replacing page cache folio (Miklos Szeredi) [RHEL-226093] {CVE-2026-53388} - fuse: release pipe buf after last use (Miklos Szeredi) [RHEL-226093] {CVE-2026-53388} - fuse: fix page stealing (Miklos Szeredi) [RHEL-226093] {CVE-2026-53388} - ipvs: reload ip header after head reallocation (Phil Sutter) [RHEL-263800] {CVE-2026-68476} - selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() (CKI Backport Bot) [RHEL-243225] {CVE-2026-72242} - usb: usbfs: fix use-after-free of usb_device in usbdev_release() (CKI Backport Bot) [RHEL-258557] {CVE-2026-80824} - fuse: re-lock request before returning from fuse_ref_folio() (CKI Backport Bot) [RHEL-234250] {CVE-2026-64266} - xfs: bounds-check buffer log item's dirty bitmap (Pavel Reichl) [RHEL-253366] {CVE-2026-80536} - ovl: check access to copy_file_range source with src mounter creds (Miklos Szeredi) [RHEL-238870] {CVE-2026-68448} - ALSA: seq: close a re-opened queue timer in the destructor (CKI Backport Bot) [RHEL-263709] {CVE-2026-68202} - calipso: unlock rcu before returning -EAFNOSUPPORT (CKI Backport Bot) [RHEL-257685] {CVE-2025-38147} - calipso: Don't call calipso functions for AF_INET sk. (CKI Backport Bot) [RHEL-257685] {CVE-2025-38147} - netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (CKI Backport Bot) [RHEL-257666] {CVE-2025-22063} - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (CKI Backport Bot) [RHEL-255258] {CVE-2026-80530} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252811] {CVE-2026-68299} - ALSA: hda/cs35l41: Fix firmware load work teardown (CKI Backport Bot) [RHEL-234099] {CVE-2026-64481} - rtla: Fix segfault on multiple SIGINTs (Tomas Glozar) [RHEL-193029] - net: always dissect GSO packets in __virtio_net_hdr_to_skb() (Davide Caratti) [RHEL-284987] - ipv4: validate checksum_start before completing checksum (CKI Backport Bot) [RHEL-284987] {CVE-2026-99999} - smb: client: reject a tree connect response whose byte count is too small (Alisher Mazhirinov) [RHEL-271284] {CVE-2026-89631} - exec: Cleanup POSIX timers right after de_thread() (Luiz Capitulino) [RHEL-282063] {CVE-2026-98260} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271871] {CVE-2026-93817} - smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (Frank Sorenson) [RHEL-271487] {CVE-2026-89633} - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270747] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256697] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256697] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256697] - bridge: mcast: Fix a possible use-after-free when removing a bridge port (Jakub Ramaseuski) [RHEL-232528] {CVE-2026-64032} - net: bridge: Flush multicast groups when snooping is disabled (Jakub Ramaseuski) [RHEL-232528] - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Antoine Tenart) [RHEL-231693] {CVE-2026-64024} - ipv4: fib: free fib_alias with kfree_rcu() on insert error path (Jamie Bainbridge) [RHEL-233131] {CVE-2026-64572} - inet: frags: strip GSO state from fragments before reassembly (Jamie Bainbridge) [RHEL-254224] {CVE-2026-80590} - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Jamie Bainbridge) [RHEL-225452] {CVE-2026-64114} - usb: typec: ucsi: validate connector number in ucsi_connector_change() (Desnes Nunes) [RHEL-259429] {CVE-2026-63958} - usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO (Desnes Nunes) [RHEL-259429] - usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (Desnes Nunes) [RHEL-259429] {CVE-2026-63962} - usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (Desnes Nunes) [RHEL-259429] {CVE-2026-63963} - usb: typec: altmodes/displayport: validate count before reading Status Update VDO (Desnes Nunes) [RHEL-259429] {CVE-2026-63961} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63899} - Bluetooth: hci_sync: Fix advertising data UAFs (CKI Backport Bot) [RHEL-254674] {CVE-2026-74509} - openvswitch: vport: fix self-deadlock on release of tunnel ports (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222958] {CVE-2026-52935} - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (Mohammadfaiz Bawa) [RHEL-243814] {CVE-2026-72288} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275058] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275076] {CVE-2026-93228} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270929] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270929] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271453] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268122] {CVE-2026-74705} - net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CKI Backport Bot) [RHEL-270908] {CVE-2026-81003} - wifi: cfg80211: use wiphy work for socket owner autodisconnect (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-263788] {CVE-2026-68409} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (Jose Ignacio Tornos Martinez) [RHEL-259560] {CVE-2026-64030} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261686] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260511] {CVE-2026-68140} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261293] {CVE-2026-72320} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256448] {CVE-2026-74641} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-237219] {CVE-2026-68377} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229654] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226490] {CVE-2026-53011} - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable backports (SOURCES/1100-1196) - Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto authencesn/algif) - Keep the smb cifs.spnego ahead-fix (retained as 1197) - RHEL changelog for 687.6.1..687.10.1 follows: - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163} - RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128} - usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607} - can: raw: fix ro->uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401} - powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125] - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742] - Revert "lpfc: don't use file->f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742] - drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822] - drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853] - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404] - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402} - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741} - smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988] - ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378] - RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966] - net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207] - ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095] - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766} - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766} - rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075} - Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable backports (SOURCES/1198-1252) - RHEL changelog for 687.11.1..687.12.1 follows: - dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110} - Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020} - crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914] - proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653} - proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653} - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470] - mm/page_alloc: clear page->private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303} - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158} - redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927] - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859] - ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829] - ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829] - ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179] - ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257] - dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442] - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378] - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684} - cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701] - ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701] - ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701] - ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701] - drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179] - nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089} - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724} - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183} - i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312] - ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182] - ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185] - Revert "mm: pcp: increase pcp->free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464] - netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392} - Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269) - RHEL changelog for 687.13.1 follows: - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243} - s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472] - s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472] - s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472] - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745] - nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745] - Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786} - crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167] - crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167] - smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613} - mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778] - mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778] - mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778] - mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778] - mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778] - mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778] - mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778] - mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778] - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.18.1..687.19.1 follows: - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176} - init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183] - update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183] - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183] - work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183] - compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183] - powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183] - sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776] - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189} - sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273] - netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273] - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993] - iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993] - iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993] - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993] - iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993] - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057] - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057] - IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057] - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057] - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057] - net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057] - net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057] - net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057] - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057] - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057] - net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057] - net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057] - net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057] - net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057] - net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057] - net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057] - net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057] - net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057] - net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057] - net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057] - net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057] - mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057] - net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057] - net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057] - net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057] - net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057] - net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057] - net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057] - net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057] - net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057] - net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057] - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057] - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057] - mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057] - net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057] - net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057] - net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057] - net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057] - net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057] - net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057] - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057] - net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057] - net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057] - net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057] - net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057] - net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057] - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057] - net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057] - net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057] - net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057] - net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057] - net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057] - net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057] - net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057] - net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057] - net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057] - net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057] - eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057] - net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057] - net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057] - net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057] - net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057] - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057] - RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057] - net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057] - net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057] - net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057] - net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057] - net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057] - net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057] - net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057] - net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057] - net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057] - net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057] - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057] - net: Fix typos (Kamal Heib) [RHEL-169057] - net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057] - net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057] - net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057] - net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057] - net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057] - net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057] - net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057] - net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057] - net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057] - net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057] - net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057] - eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Kamal Heib) [RHEL-169057] - net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057] - net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057] - net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057] - net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057] - net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057] - net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057] - net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057] - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057] - net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057] - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057] - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057] - net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057] - net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057] - net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057] - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057] - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444] - ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444] - ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444] - ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488} - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329} - Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312) - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.19.1..687.20.1 follows: - crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540] - crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540] - crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540] - crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540] - tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198} - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739} - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760] - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760] - scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886] - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411} - Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.18.1..687.19.1 follows: - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176} - init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183] - update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183] - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183] - work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183] - compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183] - powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183] - sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776] - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189} - sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273] - netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273] - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993] - iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993] - iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993] - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993] - iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993] - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057] - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057] - IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057] - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057] - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057] - net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057] - net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057] - net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057] - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057] - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057] - net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057] - net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057] - net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057] - net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057] - net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057] - net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057] - net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057] - net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057] - net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057] - net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057] - net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057] - mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057] - net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057] - net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057] - net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057] - net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057] - net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057] - net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057] - net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057] - net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057] - net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057] - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057] - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057] - mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057] - net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057] - net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057] - net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057] - net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057] - net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057] - net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057] - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057] - net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057] - net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057] - net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057] - net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057] - net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057] - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057] - net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057] - net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057] - net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057] - net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057] - net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057] - net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057] - net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057] - net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057] - net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057] - net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057] - eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057] - net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057] - net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057] - net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057] - net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057] - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057] - RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057] - net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057] - net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057] - net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057] - net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057] - net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057] - net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057] - net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057] - net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057] - net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057] - net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057] - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057] - net: Fix typos (Kamal Heib) [RHEL-169057] - net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057] - net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057] - net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057] - net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057] - net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057] - net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057] - net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057] - net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057] - net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057] - net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057] - net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057] - eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Kamal Heib) [RHEL-169057] - net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057] - net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057] - net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057] - net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057] - net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057] - net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057] - net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057] - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057] - net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057] - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057] - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057] - net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057] - net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057] - net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057] - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057] - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444] - ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444] - ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444] - ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488} - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329} - Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312) - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735) - Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll ep_remove use-after-free CVE-2026-46242 (1712) - RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux ahead-patch (1312) is retained and RHEL's duplicate copy omitted - CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263) - RHEL changelog for 687.21.1..687.22.1 follows: - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041] - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116} - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263} - KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316} - netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227} - nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966] - Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755) - The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by RHEL's eventpoll series carrying the same fix and is dropped - Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738) - RHEL changelog for 687.23.1 follows: - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1756, 1757) are superseded by RHEL's copies and dropped - RHEL changelog for 687.25.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770) - RHEL changelog for 687.26.1 follows: - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1756, 1757) are superseded by RHEL's copies and dropped - RHEL changelog for 687.25.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041] - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116} - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619] - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619] - Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762] - Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762] - Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762] - Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762] - Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762] - Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762] - Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762] - Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762] - nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489] - pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489] - net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508] - cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548] - spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129] - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431) - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619] - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619] - Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762] - Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762] - Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762] - Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762] - Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762] - Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762] - Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762] - Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762] - nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489] - net: skbuff: propagate shared-frag marker through frag-transfer helpers (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300 "Fragnesia") - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431) - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (Mohammadfaiz Bawa) [RHEL-243814] {CVE-2026-72288} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275058] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275076] {CVE-2026-93228} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270929] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270929] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271453] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268122] {CVE-2026-74705} - net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CKI Backport Bot) [RHEL-270908] {CVE-2026-81003} - wifi: cfg80211: use wiphy work for socket owner autodisconnect (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-263788] {CVE-2026-68409} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (Jose Ignacio Tornos Martinez) [RHEL-259560] {CVE-2026-64030} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261686] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260511] {CVE-2026-68140} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261293] {CVE-2026-72320} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256448] {CVE-2026-74641} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-237219] {CVE-2026-68377} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229654] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226490] {CVE-2026-53011} - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net: always dissect GSO packets in __virtio_net_hdr_to_skb() (Davide Caratti) [RHEL-284987] - ipv4: validate checksum_start before completing checksum (CKI Backport Bot) [RHEL-284987] {CVE-2026-99999} - smb: client: reject a tree connect response whose byte count is too small (Alisher Mazhirinov) [RHEL-271284] {CVE-2026-89631} - exec: Cleanup POSIX timers right after de_thread() (Luiz Capitulino) [RHEL-282063] {CVE-2026-98260} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271871] {CVE-2026-93817} - smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (Frank Sorenson) [RHEL-271487] {CVE-2026-89633} - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270747] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256697] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256697] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256697] - bridge: mcast: Fix a possible use-after-free when removing a bridge port (Jakub Ramaseuski) [RHEL-232528] {CVE-2026-64032} - net: bridge: Flush multicast groups when snooping is disabled (Jakub Ramaseuski) [RHEL-232528] - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Antoine Tenart) [RHEL-231693] {CVE-2026-64024} - ipv4: fib: free fib_alias with kfree_rcu() on insert error path (Jamie Bainbridge) [RHEL-233131] {CVE-2026-64572} - inet: frags: strip GSO state from fragments before reassembly (Jamie Bainbridge) [RHEL-254224] {CVE-2026-80590} - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Jamie Bainbridge) [RHEL-225452] {CVE-2026-64114} - usb: typec: ucsi: validate connector number in ucsi_connector_change() (Desnes Nunes) [RHEL-259429] {CVE-2026-63958} - usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO (Desnes Nunes) [RHEL-259429] - usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (Desnes Nunes) [RHEL-259429] {CVE-2026-63962} - usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (Desnes Nunes) [RHEL-259429] {CVE-2026-63963} - usb: typec: altmodes/displayport: validate count before reading Status Update VDO (Desnes Nunes) [RHEL-259429] {CVE-2026-63961} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63899} - Bluetooth: hci_sync: Fix advertising data UAFs (CKI Backport Bot) [RHEL-254674] {CVE-2026-74509} - openvswitch: vport: fix self-deadlock on release of tunnel ports (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222958] {CVE-2026-52935} - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (Mohammadfaiz Bawa) [RHEL-243814] {CVE-2026-72288} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275058] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275076] {CVE-2026-93228} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270929] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270929] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271453] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268122] {CVE-2026-74705} - net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CKI Backport Bot) [RHEL-270908] {CVE-2026-81003} - wifi: cfg80211: use wiphy work for socket owner autodisconnect (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-263788] {CVE-2026-68409} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (Jose Ignacio Tornos Martinez) [RHEL-259560] {CVE-2026-64030} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261686] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260511] {CVE-2026-68140} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261293] {CVE-2026-72320} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256448] {CVE-2026-74641} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-237219] {CVE-2026-68377} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229654] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226490] {CVE-2026-53011} - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: skbuff: propagate shared-frag marker in skb_zerocopy() - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - xfs: bounds-check buffer log item's dirty bitmap (Pavel Reichl) [RHEL-253366] {CVE-2026-80536} - ovl: check access to copy_file_range source with src mounter creds (Miklos Szeredi) [RHEL-238870] {CVE-2026-68448} - ALSA: seq: close a re-opened queue timer in the destructor (CKI Backport Bot) [RHEL-263709] {CVE-2026-68202} - calipso: unlock rcu before returning -EAFNOSUPPORT (CKI Backport Bot) [RHEL-257685] {CVE-2025-38147} - calipso: Don't call calipso functions for AF_INET sk. (CKI Backport Bot) [RHEL-257685] {CVE-2025-38147} - netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (CKI Backport Bot) [RHEL-257666] {CVE-2025-22063} - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (CKI Backport Bot) [RHEL-255258] {CVE-2026-80530} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252811] {CVE-2026-68299} - ALSA: hda/cs35l41: Fix firmware load work teardown (CKI Backport Bot) [RHEL-234099] {CVE-2026-64481} - rtla: Fix segfault on multiple SIGINTs (Tomas Glozar) [RHEL-193029] - net: always dissect GSO packets in __virtio_net_hdr_to_skb() (Davide Caratti) [RHEL-284987] - ipv4: validate checksum_start before completing checksum (CKI Backport Bot) [RHEL-284987] {CVE-2026-99999} - smb: client: reject a tree connect response whose byte count is too small (Alisher Mazhirinov) [RHEL-271284] {CVE-2026-89631} - exec: Cleanup POSIX timers right after de_thread() (Luiz Capitulino) [RHEL-282063] {CVE-2026-98260} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271871] {CVE-2026-93817} - smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (Frank Sorenson) [RHEL-271487] {CVE-2026-89633} - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270747] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256697] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256697] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256697] - bridge: mcast: Fix a possible use-after-free when removing a bridge port (Jakub Ramaseuski) [RHEL-232528] {CVE-2026-64032} - net: bridge: Flush multicast groups when snooping is disabled (Jakub Ramaseuski) [RHEL-232528] - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Antoine Tenart) [RHEL-231693] {CVE-2026-64024} - ipv4: fib: free fib_alias with kfree_rcu() on insert error path (Jamie Bainbridge) [RHEL-233131] {CVE-2026-64572} - inet: frags: strip GSO state from fragments before reassembly (Jamie Bainbridge) [RHEL-254224] {CVE-2026-80590} - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Jamie Bainbridge) [RHEL-225452] {CVE-2026-64114} - usb: typec: ucsi: validate connector number in ucsi_connector_change() (Desnes Nunes) [RHEL-259429] {CVE-2026-63958} - usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO (Desnes Nunes) [RHEL-259429] - usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (Desnes Nunes) [RHEL-259429] {CVE-2026-63962} - usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (Desnes Nunes) [RHEL-259429] {CVE-2026-63963} - usb: typec: altmodes/displayport: validate count before reading Status Update VDO (Desnes Nunes) [RHEL-259429] {CVE-2026-63961} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63899} - Bluetooth: hci_sync: Fix advertising data UAFs (CKI Backport Bot) [RHEL-254674] {CVE-2026-74509} - openvswitch: vport: fix self-deadlock on release of tunnel ports (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222958] {CVE-2026-52935} - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (Mohammadfaiz Bawa) [RHEL-243814] {CVE-2026-72288} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275058] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275076] {CVE-2026-93228} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270929] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270929] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271453] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268122] {CVE-2026-74705} - net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CKI Backport Bot) [RHEL-270908] {CVE-2026-81003} - wifi: cfg80211: use wiphy work for socket owner autodisconnect (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-263788] {CVE-2026-68409} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (Jose Ignacio Tornos Martinez) [RHEL-259560] {CVE-2026-64030} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261686] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260511] {CVE-2026-68140} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261293] {CVE-2026-72320} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256448] {CVE-2026-74641} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-237219] {CVE-2026-68377} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229654] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226490] {CVE-2026-53011} - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - net: skbuff: propagate shared-frag marker in skb_zerocopy() - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - netfilter: flowtable: hold reference on ct until flow is released (CKI Backport Bot) [RHEL-280075] {CVE-2026-98320} - vfio/pci: clear vdev->msi_perm after freeing it on init failure (Rodolfo Vick) [RHEL-270901] {CVE-2026-89777} - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278089] {CVE-2026-93262} - KEYS: encrypted: fix integer overflow of datablob_len (Bruno Meneguele) [RHEL-279504] {CVE-2026-98222} - KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (CKI Backport Bot) [RHEL-277620] {CVE-2026-74515} - smb: client: guard against tailsz underflow in wdata_send_pages() (Paulo Alcantara) [RHEL-257205] - smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-257205] - smb: client: fix rlist race and missing initialization (Paulo Alcantara) [RHEL-257205] {CVE-2026-98174} - smb: client: cancel reconnect work in clean_demultiplex_info() (Paulo Alcantara) [RHEL-257205] {CVE-2026-98175} - smb/client: send lease break ACKs thru correct session for multiuser mounts (Paulo Alcantara) [RHEL-257205] - smb: client: fix cifsFileInfo reference leak in deferred close (Paulo Alcantara) [RHEL-257205] {CVE-2026-97558} - smb: client: avoid leaking refcount when cifs_sb_tlink() fails (Paulo Alcantara) [RHEL-257205] {CVE-2026-97556} - smb: client: avoid leaking refcount in cifs_queue_oplock_break() (Paulo Alcantara) [RHEL-257205] {CVE-2026-97557} - smb: client: fix data corruption with concurrent writes and O_TRUNC (Paulo Alcantara) [RHEL-257205] - cifs: don't update i_size in cifs_do_truncate without a cached handle (Paulo Alcantara) [RHEL-257205] - smb: client: invalidate fscache for fallocate range operations (Paulo Alcantara) [RHEL-257205] {CVE-2026-98124} - smb: client: fix stale page cache in insert/collapse range (Paulo Alcantara) [RHEL-257205] {CVE-2026-98125} - smb: client: fix integer truncation in collapse range (Paulo Alcantara) [RHEL-257205] - smb: client: fix data corruption in emulated insert range (Paulo Alcantara) [RHEL-257205] - smb/client: mark file sparse before emulating insert range (Paulo Alcantara) [RHEL-257205] - smb/client: validate new EOF for zero range (Paulo Alcantara) [RHEL-257205] {CVE-2026-98126} - smb/client: validate new EOF for insert range (Paulo Alcantara) [RHEL-257205] {CVE-2026-98127} - cifs: add revalidation on FSCTL failure in smb2_duplicate_extents() (Paulo Alcantara) [RHEL-257205] - cifs: fix loff_t underflow in cifs_remap_file_range() when len == 0 (Paulo Alcantara) [RHEL-257205] {CVE-2026-89640} - cifs: call pagecache_isize_extended() in cifs_setsize() when extending (Paulo Alcantara) [RHEL-257205] {CVE-2026-89642} - cifs: clear tcon after cifsFileInfo_put() in cifs_file_set_size() (Paulo Alcantara) [RHEL-257205] {CVE-2026-89641} - smb/client: decode reparse metadata using its payload type (Paulo Alcantara) [RHEL-257205] - smb/client: preserve open info type across compound queries (Paulo Alcantara) [RHEL-257205] - smb/client: mark missing nlink values as unknown (Paulo Alcantara) [RHEL-257205] - smb/client: fix nlink of an overwritten open file (Paulo Alcantara) [RHEL-257205] - cifs: remove dead size-update blocks in cifs_setattr_unix/nounix (Paulo Alcantara) [RHEL-257205] - cifs: remove redundant size-update block in cifs_remap_file_range() (Paulo Alcantara) [RHEL-257205] - cifs: add cifs_resize_file_locked() to guard fscache_resize_cookie() under i_rwsem (Paulo Alcantara) [RHEL-257205] - cifs: use cifs_invalidate_cache() in cifs_do_truncate() for O_TRUNC (Paulo Alcantara) [RHEL-257205] {CVE-2026-89639} - cifs: add fscache_resize_cookie() to cifs_setsize() (Paulo Alcantara) [RHEL-257205] - smb: client: simplify cifs_fscache_get_super_cookie() (Paulo Alcantara) [RHEL-257205] - smb/client: flush dirty data before punching a hole (Paulo Alcantara) [RHEL-257205] {CVE-2026-93794} - smb/client: refresh allocation after EOF-extending fallocate (Paulo Alcantara) [RHEL-257205] - smb/client: emulate small EOF-extending mode 0 fallocate ranges (Paulo Alcantara) [RHEL-257205] - smb/client: reduce fallocate zero buffer allocation (Paulo Alcantara) [RHEL-257205] - smb/client: refresh allocation size after duplicate extents (Paulo Alcantara) [RHEL-257205] - smb: client: use kvzalloc() for megabyte buffer in simple fallocate (Paulo Alcantara) [RHEL-257205] - smb/client: fix incorrect nlink returned by fstat() (Paulo Alcantara) [RHEL-257205] - smb/client: zero-initialize stack-allocated cifs_open_info_data (Paulo Alcantara) [RHEL-257205] {CVE-2026-93801} - smb/client: pass cifs_open_info_data to SMB2_open() (Paulo Alcantara) [RHEL-257205] - smb/client: use stack-allocated smb2_file_all_info in smb3_query_mf_symlink() (Paulo Alcantara) [RHEL-257205] - smb: client: refactor cifs_revalidate_mapping() to use clear_and_wake_up_bit() (Paulo Alcantara) [RHEL-257205] - smb/client: do not account EOF extension as allocation (Paulo Alcantara) [RHEL-257205] - smb/client: preserve errors from smb2_set_sparse() (Paulo Alcantara) [RHEL-257205] - smb/client: name the default fallocate mode (Paulo Alcantara) [RHEL-257205] - smb/client: update i_blocks after contiguous writes (Paulo Alcantara) [RHEL-257205] - smb: client: fix races in cifsd thread creation (Paulo Alcantara) [RHEL-257205] {CVE-2026-93829} - cifs: invalidate cfid on unlink/rename/rmdir (Paulo Alcantara) [RHEL-257205] - cifs: abort open_cached_dir if we don't request leases (Paulo Alcantara) [RHEL-257205] - cifs: change_conf needs to be called for session setup (Paulo Alcantara) [RHEL-257205] - smb: client: fix generic/694 due to wrong ->i_blocks (Paulo Alcantara) [RHEL-257205] - smb: client: fix open handle lookup in cifs_open() (Paulo Alcantara) [RHEL-257205] - smb: client: fix in-place encryption corruption in SMB2_write() (Paulo Alcantara) [RHEL-257205] {CVE-2026-43362} - smb: client: fix atomic open with O_DIRECT & O_SYNC (Paulo Alcantara) [RHEL-257205] - cifs: Scripted clean up fs/smb/client/cifsglob.h (Paulo Alcantara) [RHEL-257205] - cifs: Scripted clean up fs/smb/client/fscache.h (Paulo Alcantara) [RHEL-257205] - cifs: Scripted clean up fs/smb/client/cifsfs.h (Paulo Alcantara) [RHEL-257205] - cifs: Scripted clean up fs/smb/client/cifsproto.h (Paulo Alcantara) [RHEL-257205] - udp: Deal with race between UDP socket address change and rehash (Jamie Bainbridge) [RHEL-257635] {CVE-2024-57974} - smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (CKI Backport Bot) [RHEL-271257] {CVE-2026-89638} - net/handshake: Drain pending requests at net namespace exit (Xin Long) [RHEL-232134] {CVE-2026-63978} - net/handshake: Use spin_lock_bh for hn_lock (Xin Long) [RHEL-232134] - net/handshake: hand off the pinned file reference to accept_doit (Xin Long) [RHEL-230363] {CVE-2026-63979} - net/handshake: Take a long-lived file reference at submit (Xin Long) [RHEL-234159] {CVE-2026-64523} - fuse: re-lock request before replacing page cache folio (Miklos Szeredi) [RHEL-226093] {CVE-2026-53388} - fuse: release pipe buf after last use (Miklos Szeredi) [RHEL-226093] {CVE-2026-53388} - fuse: fix page stealing (Miklos Szeredi) [RHEL-226093] {CVE-2026-53388} - ipvs: reload ip header after head reallocation (Phil Sutter) [RHEL-263800] {CVE-2026-68476} - selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() (CKI Backport Bot) [RHEL-243225] {CVE-2026-72242} - usb: usbfs: fix use-after-free of usb_device in usbdev_release() (CKI Backport Bot) [RHEL-258557] {CVE-2026-80824} - fuse: re-lock request before returning from fuse_ref_folio() (CKI Backport Bot) [RHEL-234250] {CVE-2026-64266} - xfs: bounds-check buffer log item's dirty bitmap (Pavel Reichl) [RHEL-253366] {CVE-2026-80536} - ovl: check access to copy_file_range source with src mounter creds (Miklos Szeredi) [RHEL-238870] {CVE-2026-68448} - ALSA: seq: close a re-opened queue timer in the destructor (CKI Backport Bot) [RHEL-263709] {CVE-2026-68202} - calipso: unlock rcu before returning -EAFNOSUPPORT (CKI Backport Bot) [RHEL-257685] {CVE-2025-38147} - calipso: Don't call calipso functions for AF_INET sk. (CKI Backport Bot) [RHEL-257685] {CVE-2025-38147} - netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (CKI Backport Bot) [RHEL-257666] {CVE-2025-22063} - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (CKI Backport Bot) [RHEL-255258] {CVE-2026-80530} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252811] {CVE-2026-68299} - ALSA: hda/cs35l41: Fix firmware load work teardown (CKI Backport Bot) [RHEL-234099] {CVE-2026-64481} - rtla: Fix segfault on multiple SIGINTs (Tomas Glozar) [RHEL-193029] - net: always dissect GSO packets in __virtio_net_hdr_to_skb() (Davide Caratti) [RHEL-284987] - ipv4: validate checksum_start before completing checksum (CKI Backport Bot) [RHEL-284987] {CVE-2026-99999} - smb: client: reject a tree connect response whose byte count is too small (Alisher Mazhirinov) [RHEL-271284] {CVE-2026-89631} - exec: Cleanup POSIX timers right after de_thread() (Luiz Capitulino) [RHEL-282063] {CVE-2026-98260} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271871] {CVE-2026-93817} - smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (Frank Sorenson) [RHEL-271487] {CVE-2026-89633} - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270747] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256697] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256697] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256697] - bridge: mcast: Fix a possible use-after-free when removing a bridge port (Jakub Ramaseuski) [RHEL-232528] {CVE-2026-64032} - net: bridge: Flush multicast groups when snooping is disabled (Jakub Ramaseuski) [RHEL-232528] - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Antoine Tenart) [RHEL-231693] {CVE-2026-64024} - ipv4: fib: free fib_alias with kfree_rcu() on insert error path (Jamie Bainbridge) [RHEL-233131] {CVE-2026-64572} - inet: frags: strip GSO state from fragments before reassembly (Jamie Bainbridge) [RHEL-254224] {CVE-2026-80590} - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Jamie Bainbridge) [RHEL-225452] {CVE-2026-64114} - usb: typec: ucsi: validate connector number in ucsi_connector_change() (Desnes Nunes) [RHEL-259429] {CVE-2026-63958} - usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO (Desnes Nunes) [RHEL-259429] - usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (Desnes Nunes) [RHEL-259429] {CVE-2026-63962} - usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (Desnes Nunes) [RHEL-259429] {CVE-2026-63963} - usb: typec: altmodes/displayport: validate count before reading Status Update VDO (Desnes Nunes) [RHEL-259429] {CVE-2026-63961} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63899} - Bluetooth: hci_sync: Fix advertising data UAFs (CKI Backport Bot) [RHEL-254674] {CVE-2026-74509} - openvswitch: vport: fix self-deadlock on release of tunnel ports (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222958] {CVE-2026-52935} - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (Mohammadfaiz Bawa) [RHEL-243814] {CVE-2026-72288} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275058] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275076] {CVE-2026-93228} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270929] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270929] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271453] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268122] {CVE-2026-74705} - net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CKI Backport Bot) [RHEL-270908] {CVE-2026-81003} - wifi: cfg80211: use wiphy work for socket owner autodisconnect (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-263788] {CVE-2026-68409} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (Jose Ignacio Tornos Martinez) [RHEL-259560] {CVE-2026-64030} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261686] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260511] {CVE-2026-68140} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261293] {CVE-2026-72320} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256448] {CVE-2026-74641} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-237219] {CVE-2026-68377} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229654] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226490] {CVE-2026-53011} - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable backports (SOURCES/1100-1196) - Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto authencesn/algif) - Keep the smb cifs.spnego ahead-fix (retained as 1197) - RHEL changelog for 687.6.1..687.10.1 follows: - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163} - RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128} - usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607} - can: raw: fix ro->uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401} - powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125] - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742] - Revert "lpfc: don't use file->f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742] - drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822] - drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853] - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404] - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402} - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741} - smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988] - ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378] - RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966] - net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207] - ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095] - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766} - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766} - rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075} - Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable backports (SOURCES/1198-1252) - RHEL changelog for 687.11.1..687.12.1 follows: - dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110} - Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020} - crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914] - proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653} - proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653} - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470] - mm/page_alloc: clear page->private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303} - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158} - redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927] - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859] - ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829] - ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829] - ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179] - ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257] - dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442] - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378] - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684} - cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701] - ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701] - ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701] - ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701] - drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179] - nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089} - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724} - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183} - i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312] - ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182] - ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185] - Revert "mm: pcp: increase pcp->free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464] - netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392} - Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269) - RHEL changelog for 687.13.1 follows: - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243} - s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472] - s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472] - s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472] - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745] - nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745] - Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786} - crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167] - crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167] - smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613} - mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778] - mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778] - mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778] - mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778] - mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778] - mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778] - mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778] - mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778] - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.18.1..687.19.1 follows: - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176} - init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183] - update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183] - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183] - work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183] - compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183] - powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183] - sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776] - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189} - sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273] - netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273] - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993] - iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993] - iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993] - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993] - iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993] - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057] - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057] - IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057] - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057] - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057] - net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057] - net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057] - net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057] - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057] - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057] - net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057] - net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057] - net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057] - net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057] - net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057] - net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057] - net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057] - net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057] - net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057] - net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057] - net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057] - mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057] - net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057] - net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057] - net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057] - net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057] - net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057] - net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057] - net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057] - net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057] - net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057] - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057] - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057] - mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057] - net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057] - net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057] - net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057] - net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057] - net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057] - net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057] - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057] - net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057] - net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057] - net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057] - net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057] - net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057] - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057] - net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057] - net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057] - net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057] - net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057] - net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057] - net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057] - net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057] - net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057] - net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057] - net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057] - eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057] - net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057] - net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057] - net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057] - net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057] - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057] - RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057] - net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057] - net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057] - net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057] - net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057] - net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057] - net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057] - net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057] - net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057] - net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057] - net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057] - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057] - net: Fix typos (Kamal Heib) [RHEL-169057] - net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057] - net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057] - net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057] - net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057] - net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057] - net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057] - net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057] - net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057] - net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057] - net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057] - net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057] - eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Kamal Heib) [RHEL-169057] - net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057] - net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057] - net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057] - net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057] - net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057] - net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057] - net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057] - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057] - net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057] - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057] - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057] - net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057] - net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057] - net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057] - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057] - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444] - ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444] - ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444] - ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488} - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329} - Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312) - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.19.1..687.20.1 follows: - crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540] - crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540] - crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540] - crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540] - tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198} - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739} - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760] - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760] - scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886] - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411} - Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.18.1..687.19.1 follows: - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176} - init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183] - update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183] - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183] - work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183] - compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183] - powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183] - sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776] - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189} - sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273] - netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273] - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993] - iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993] - iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993] - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993] - iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993] - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057] - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057] - IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057] - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057] - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057] - net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057] - net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057] - net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057] - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057] - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057] - net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057] - net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057] - net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057] - net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057] - net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057] - net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057] - net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057] - net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057] - net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057] - net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057] - net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057] - mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057] - net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057] - net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057] - net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057] - net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057] - net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057] - net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057] - net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057] - net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057] - net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057] - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057] - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057] - mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057] - net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057] - net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057] - net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057] - net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057] - net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057] - net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057] - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057] - net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057] - net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057] - net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057] - net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057] - net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057] - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057] - net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057] - net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057] - net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057] - net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057] - net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057] - net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057] - net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057] - net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057] - net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057] - net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057] - eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057] - net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057] - net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057] - net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057] - net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057] - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057] - RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057] - net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057] - net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057] - net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057] - net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057] - net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057] - net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057] - net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057] - net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057] - net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057] - net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057] - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057] - net: Fix typos (Kamal Heib) [RHEL-169057] - net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057] - net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057] - net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057] - net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057] - net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057] - net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057] - net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057] - net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057] - net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057] - net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057] - net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057] - eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Kamal Heib) [RHEL-169057] - net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057] - net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057] - net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057] - net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057] - net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057] - net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057] - net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057] - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057] - net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057] - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057] - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057] - net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057] - net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057] - net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057] - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057] - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444] - ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444] - ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444] - ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488} - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329} - Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312) - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735) - Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll ep_remove use-after-free CVE-2026-46242 (1712) - RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux ahead-patch (1312) is retained and RHEL's duplicate copy omitted - CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263) - RHEL changelog for 687.21.1..687.22.1 follows: - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041] - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116} - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263} - KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316} - netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227} - nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966] - Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755) - The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by RHEL's eventpoll series carrying the same fix and is dropped - Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738) - RHEL changelog for 687.23.1 follows: - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1756, 1757) are superseded by RHEL's copies and dropped - RHEL changelog for 687.25.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770) - RHEL changelog for 687.26.1 follows: - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1756, 1757) are superseded by RHEL's copies and dropped - RHEL changelog for 687.25.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041] - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116} - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619] - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619] - Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762] - Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762] - Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762] - Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762] - Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762] - Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762] - Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762] - Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762] - nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489] - pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489] - net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508] - cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548] - spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129] - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431) - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619] - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619] - Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762] - Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762] - Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762] - Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762] - Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762] - Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762] - Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762] - Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762] - nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489] - net: skbuff: propagate shared-frag marker through frag-transfer helpers (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300 "Fragnesia") - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431) - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (Mohammadfaiz Bawa) [RHEL-243814] {CVE-2026-72288} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275058] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275076] {CVE-2026-93228} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270929] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270929] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271453] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268122] {CVE-2026-74705} - net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CKI Backport Bot) [RHEL-270908] {CVE-2026-81003} - wifi: cfg80211: use wiphy work for socket owner autodisconnect (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-263788] {CVE-2026-68409} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (Jose Ignacio Tornos Martinez) [RHEL-259560] {CVE-2026-64030} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261686] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260511] {CVE-2026-68140} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261293] {CVE-2026-72320} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256448] {CVE-2026-74641} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-237219] {CVE-2026-68377} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229654] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226490] {CVE-2026-53011} - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net: always dissect GSO packets in __virtio_net_hdr_to_skb() (Davide Caratti) [RHEL-284987] - ipv4: validate checksum_start before completing checksum (CKI Backport Bot) [RHEL-284987] {CVE-2026-99999} - smb: client: reject a tree connect response whose byte count is too small (Alisher Mazhirinov) [RHEL-271284] {CVE-2026-89631} - exec: Cleanup POSIX timers right after de_thread() (Luiz Capitulino) [RHEL-282063] {CVE-2026-98260} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271871] {CVE-2026-93817} - smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (Frank Sorenson) [RHEL-271487] {CVE-2026-89633} - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270747] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256697] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256697] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256697] - bridge: mcast: Fix a possible use-after-free when removing a bridge port (Jakub Ramaseuski) [RHEL-232528] {CVE-2026-64032} - net: bridge: Flush multicast groups when snooping is disabled (Jakub Ramaseuski) [RHEL-232528] - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Antoine Tenart) [RHEL-231693] {CVE-2026-64024} - ipv4: fib: free fib_alias with kfree_rcu() on insert error path (Jamie Bainbridge) [RHEL-233131] {CVE-2026-64572} - inet: frags: strip GSO state from fragments before reassembly (Jamie Bainbridge) [RHEL-254224] {CVE-2026-80590} - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Jamie Bainbridge) [RHEL-225452] {CVE-2026-64114} - usb: typec: ucsi: validate connector number in ucsi_connector_change() (Desnes Nunes) [RHEL-259429] {CVE-2026-63958} - usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO (Desnes Nunes) [RHEL-259429] - usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (Desnes Nunes) [RHEL-259429] {CVE-2026-63962} - usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (Desnes Nunes) [RHEL-259429] {CVE-2026-63963} - usb: typec: altmodes/displayport: validate count before reading Status Update VDO (Desnes Nunes) [RHEL-259429] {CVE-2026-63961} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63899} - Bluetooth: hci_sync: Fix advertising data UAFs (CKI Backport Bot) [RHEL-254674] {CVE-2026-74509} - openvswitch: vport: fix self-deadlock on release of tunnel ports (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222958] {CVE-2026-52935} - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (Mohammadfaiz Bawa) [RHEL-243814] {CVE-2026-72288} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275058] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275076] {CVE-2026-93228} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270929] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270929] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271453] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268122] {CVE-2026-74705} - net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CKI Backport Bot) [RHEL-270908] {CVE-2026-81003} - wifi: cfg80211: use wiphy work for socket owner autodisconnect (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-263788] {CVE-2026-68409} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (Jose Ignacio Tornos Martinez) [RHEL-259560] {CVE-2026-64030} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261686] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260511] {CVE-2026-68140} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261293] {CVE-2026-72320} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256448] {CVE-2026-74641} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-237219] {CVE-2026-68377} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229654] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226490] {CVE-2026-53011} - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: skbuff: propagate shared-frag marker in skb_zerocopy() - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - xfs: bounds-check buffer log item's dirty bitmap (Pavel Reichl) [RHEL-253366] {CVE-2026-80536} - ovl: check access to copy_file_range source with src mounter creds (Miklos Szeredi) [RHEL-238870] {CVE-2026-68448} - ALSA: seq: close a re-opened queue timer in the destructor (CKI Backport Bot) [RHEL-263709] {CVE-2026-68202} - calipso: unlock rcu before returning -EAFNOSUPPORT (CKI Backport Bot) [RHEL-257685] {CVE-2025-38147} - calipso: Don't call calipso functions for AF_INET sk. (CKI Backport Bot) [RHEL-257685] {CVE-2025-38147} - netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (CKI Backport Bot) [RHEL-257666] {CVE-2025-22063} - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (CKI Backport Bot) [RHEL-255258] {CVE-2026-80530} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252811] {CVE-2026-68299} - ALSA: hda/cs35l41: Fix firmware load work teardown (CKI Backport Bot) [RHEL-234099] {CVE-2026-64481} - rtla: Fix segfault on multiple SIGINTs (Tomas Glozar) [RHEL-193029] - net: always dissect GSO packets in __virtio_net_hdr_to_skb() (Davide Caratti) [RHEL-284987] - ipv4: validate checksum_start before completing checksum (CKI Backport Bot) [RHEL-284987] {CVE-2026-99999} - smb: client: reject a tree connect response whose byte count is too small (Alisher Mazhirinov) [RHEL-271284] {CVE-2026-89631} - exec: Cleanup POSIX timers right after de_thread() (Luiz Capitulino) [RHEL-282063] {CVE-2026-98260} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271871] {CVE-2026-93817} - smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (Frank Sorenson) [RHEL-271487] {CVE-2026-89633} - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270747] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256697] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256697] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256697] - bridge: mcast: Fix a possible use-after-free when removing a bridge port (Jakub Ramaseuski) [RHEL-232528] {CVE-2026-64032} - net: bridge: Flush multicast groups when snooping is disabled (Jakub Ramaseuski) [RHEL-232528] - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Antoine Tenart) [RHEL-231693] {CVE-2026-64024} - ipv4: fib: free fib_alias with kfree_rcu() on insert error path (Jamie Bainbridge) [RHEL-233131] {CVE-2026-64572} - inet: frags: strip GSO state from fragments before reassembly (Jamie Bainbridge) [RHEL-254224] {CVE-2026-80590} - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Jamie Bainbridge) [RHEL-225452] {CVE-2026-64114} - usb: typec: ucsi: validate connector number in ucsi_connector_change() (Desnes Nunes) [RHEL-259429] {CVE-2026-63958} - usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO (Desnes Nunes) [RHEL-259429] - usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (Desnes Nunes) [RHEL-259429] {CVE-2026-63962} - usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (Desnes Nunes) [RHEL-259429] {CVE-2026-63963} - usb: typec: altmodes/displayport: validate count before reading Status Update VDO (Desnes Nunes) [RHEL-259429] {CVE-2026-63961} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63899} - Bluetooth: hci_sync: Fix advertising data UAFs (CKI Backport Bot) [RHEL-254674] {CVE-2026-74509} - openvswitch: vport: fix self-deadlock on release of tunnel ports (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222958] {CVE-2026-52935} - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (Mohammadfaiz Bawa) [RHEL-243814] {CVE-2026-72288} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275058] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275076] {CVE-2026-93228} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270929] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270929] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271453] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268122] {CVE-2026-74705} - net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CKI Backport Bot) [RHEL-270908] {CVE-2026-81003} - wifi: cfg80211: use wiphy work for socket owner autodisconnect (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-263788] {CVE-2026-68409} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (Jose Ignacio Tornos Martinez) [RHEL-259560] {CVE-2026-64030} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261686] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260511] {CVE-2026-68140} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261293] {CVE-2026-72320} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256448] {CVE-2026-74641} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-237219] {CVE-2026-68377} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229654] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226490] {CVE-2026-53011} - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - net: skbuff: propagate shared-frag marker in skb_zerocopy() - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - netfilter: flowtable: hold reference on ct until flow is released (CKI Backport Bot) [RHEL-280075] {CVE-2026-98320} - vfio/pci: clear vdev->msi_perm after freeing it on init failure (Rodolfo Vick) [RHEL-270901] {CVE-2026-89777} - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278089] {CVE-2026-93262} - KEYS: encrypted: fix integer overflow of datablob_len (Bruno Meneguele) [RHEL-279504] {CVE-2026-98222} - KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (CKI Backport Bot) [RHEL-277620] {CVE-2026-74515} - smb: client: guard against tailsz underflow in wdata_send_pages() (Paulo Alcantara) [RHEL-257205] - smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-257205] - smb: client: fix rlist race and missing initialization (Paulo Alcantara) [RHEL-257205] {CVE-2026-98174} - smb: client: cancel reconnect work in clean_demultiplex_info() (Paulo Alcantara) [RHEL-257205] {CVE-2026-98175} - smb/client: send lease break ACKs thru correct session for multiuser mounts (Paulo Alcantara) [RHEL-257205] - smb: client: fix cifsFileInfo reference leak in deferred close (Paulo Alcantara) [RHEL-257205] {CVE-2026-97558} - smb: client: avoid leaking refcount when cifs_sb_tlink() fails (Paulo Alcantara) [RHEL-257205] {CVE-2026-97556} - smb: client: avoid leaking refcount in cifs_queue_oplock_break() (Paulo Alcantara) [RHEL-257205] {CVE-2026-97557} - smb: client: fix data corruption with concurrent writes and O_TRUNC (Paulo Alcantara) [RHEL-257205] - cifs: don't update i_size in cifs_do_truncate without a cached handle (Paulo Alcantara) [RHEL-257205] - smb: client: invalidate fscache for fallocate range operations (Paulo Alcantara) [RHEL-257205] {CVE-2026-98124} - smb: client: fix stale page cache in insert/collapse range (Paulo Alcantara) [RHEL-257205] {CVE-2026-98125} - smb: client: fix integer truncation in collapse range (Paulo Alcantara) [RHEL-257205] - smb: client: fix data corruption in emulated insert range (Paulo Alcantara) [RHEL-257205] - smb/client: mark file sparse before emulating insert range (Paulo Alcantara) [RHEL-257205] - smb/client: validate new EOF for zero range (Paulo Alcantara) [RHEL-257205] {CVE-2026-98126} - smb/client: validate new EOF for insert range (Paulo Alcantara) [RHEL-257205] {CVE-2026-98127} - cifs: add revalidation on FSCTL failure in smb2_duplicate_extents() (Paulo Alcantara) [RHEL-257205] - cifs: fix loff_t underflow in cifs_remap_file_range() when len == 0 (Paulo Alcantara) [RHEL-257205] {CVE-2026-89640} - cifs: call pagecache_isize_extended() in cifs_setsize() when extending (Paulo Alcantara) [RHEL-257205] {CVE-2026-89642} - cifs: clear tcon after cifsFileInfo_put() in cifs_file_set_size() (Paulo Alcantara) [RHEL-257205] {CVE-2026-89641} - smb/client: decode reparse metadata using its payload type (Paulo Alcantara) [RHEL-257205] - smb/client: preserve open info type across compound queries (Paulo Alcantara) [RHEL-257205] - smb/client: mark missing nlink values as unknown (Paulo Alcantara) [RHEL-257205] - smb/client: fix nlink of an overwritten open file (Paulo Alcantara) [RHEL-257205] - cifs: remove dead size-update blocks in cifs_setattr_unix/nounix (Paulo Alcantara) [RHEL-257205] - cifs: remove redundant size-update block in cifs_remap_file_range() (Paulo Alcantara) [RHEL-257205] - cifs: add cifs_resize_file_locked() to guard fscache_resize_cookie() under i_rwsem (Paulo Alcantara) [RHEL-257205] - cifs: use cifs_invalidate_cache() in cifs_do_truncate() for O_TRUNC (Paulo Alcantara) [RHEL-257205] {CVE-2026-89639} - cifs: add fscache_resize_cookie() to cifs_setsize() (Paulo Alcantara) [RHEL-257205] - smb: client: simplify cifs_fscache_get_super_cookie() (Paulo Alcantara) [RHEL-257205] - smb/client: flush dirty data before punching a hole (Paulo Alcantara) [RHEL-257205] {CVE-2026-93794} - smb/client: refresh allocation after EOF-extending fallocate (Paulo Alcantara) [RHEL-257205] - smb/client: emulate small EOF-extending mode 0 fallocate ranges (Paulo Alcantara) [RHEL-257205] - smb/client: reduce fallocate zero buffer allocation (Paulo Alcantara) [RHEL-257205] - smb/client: refresh allocation size after duplicate extents (Paulo Alcantara) [RHEL-257205] - smb: client: use kvzalloc() for megabyte buffer in simple fallocate (Paulo Alcantara) [RHEL-257205] - smb/client: fix incorrect nlink returned by fstat() (Paulo Alcantara) [RHEL-257205] - smb/client: zero-initialize stack-allocated cifs_open_info_data (Paulo Alcantara) [RHEL-257205] {CVE-2026-93801} - smb/client: pass cifs_open_info_data to SMB2_open() (Paulo Alcantara) [RHEL-257205] - smb/client: use stack-allocated smb2_file_all_info in smb3_query_mf_symlink() (Paulo Alcantara) [RHEL-257205] - smb: client: refactor cifs_revalidate_mapping() to use clear_and_wake_up_bit() (Paulo Alcantara) [RHEL-257205] - smb/client: do not account EOF extension as allocation (Paulo Alcantara) [RHEL-257205] - smb/client: preserve errors from smb2_set_sparse() (Paulo Alcantara) [RHEL-257205] - smb/client: name the default fallocate mode (Paulo Alcantara) [RHEL-257205] - smb/client: update i_blocks after contiguous writes (Paulo Alcantara) [RHEL-257205] - smb: client: fix races in cifsd thread creation (Paulo Alcantara) [RHEL-257205] {CVE-2026-93829} - cifs: invalidate cfid on unlink/rename/rmdir (Paulo Alcantara) [RHEL-257205] - cifs: abort open_cached_dir if we don't request leases (Paulo Alcantara) [RHEL-257205] - cifs: change_conf needs to be called for session setup (Paulo Alcantara) [RHEL-257205] - smb: client: fix generic/694 due to wrong ->i_blocks (Paulo Alcantara) [RHEL-257205] - smb: client: fix open handle lookup in cifs_open() (Paulo Alcantara) [RHEL-257205] - smb: client: fix in-place encryption corruption in SMB2_write() (Paulo Alcantara) [RHEL-257205] {CVE-2026-43362} - smb: client: fix atomic open with O_DIRECT & O_SYNC (Paulo Alcantara) [RHEL-257205] - cifs: Scripted clean up fs/smb/client/cifsglob.h (Paulo Alcantara) [RHEL-257205] - cifs: Scripted clean up fs/smb/client/fscache.h (Paulo Alcantara) [RHEL-257205] - cifs: Scripted clean up fs/smb/client/cifsfs.h (Paulo Alcantara) [RHEL-257205] - cifs: Scripted clean up fs/smb/client/cifsproto.h (Paulo Alcantara) [RHEL-257205] - udp: Deal with race between UDP socket address change and rehash (Jamie Bainbridge) [RHEL-257635] {CVE-2024-57974} - smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (CKI Backport Bot) [RHEL-271257] {CVE-2026-89638} - net/handshake: Drain pending requests at net namespace exit (Xin Long) [RHEL-232134] {CVE-2026-63978} - net/handshake: Use spin_lock_bh for hn_lock (Xin Long) [RHEL-232134] - net/handshake: hand off the pinned file reference to accept_doit (Xin Long) [RHEL-230363] {CVE-2026-63979} - net/handshake: Take a long-lived file reference at submit (Xin Long) [RHEL-234159] {CVE-2026-64523} - fuse: re-lock request before replacing page cache folio (Miklos Szeredi) [RHEL-226093] {CVE-2026-53388} - fuse: release pipe buf after last use (Miklos Szeredi) [RHEL-226093] {CVE-2026-53388} - fuse: fix page stealing (Miklos Szeredi) [RHEL-226093] {CVE-2026-53388} - ipvs: reload ip header after head reallocation (Phil Sutter) [RHEL-263800] {CVE-2026-68476} - selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() (CKI Backport Bot) [RHEL-243225] {CVE-2026-72242} - usb: usbfs: fix use-after-free of usb_device in usbdev_release() (CKI Backport Bot) [RHEL-258557] {CVE-2026-80824} - fuse: re-lock request before returning from fuse_ref_folio() (CKI Backport Bot) [RHEL-234250] {CVE-2026-64266} - xfs: bounds-check buffer log item's dirty bitmap (Pavel Reichl) [RHEL-253366] {CVE-2026-80536} - ovl: check access to copy_file_range source with src mounter creds (Miklos Szeredi) [RHEL-238870] {CVE-2026-68448} - ALSA: seq: close a re-opened queue timer in the destructor (CKI Backport Bot) [RHEL-263709] {CVE-2026-68202} - calipso: unlock rcu before returning -EAFNOSUPPORT (CKI Backport Bot) [RHEL-257685] {CVE-2025-38147} - calipso: Don't call calipso functions for AF_INET sk. (CKI Backport Bot) [RHEL-257685] {CVE-2025-38147} - netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (CKI Backport Bot) [RHEL-257666] {CVE-2025-22063} - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (CKI Backport Bot) [RHEL-255258] {CVE-2026-80530} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252811] {CVE-2026-68299} - ALSA: hda/cs35l41: Fix firmware load work teardown (CKI Backport Bot) [RHEL-234099] {CVE-2026-64481} - rtla: Fix segfault on multiple SIGINTs (Tomas Glozar) [RHEL-193029] - net: always dissect GSO packets in __virtio_net_hdr_to_skb() (Davide Caratti) [RHEL-284987] - ipv4: validate checksum_start before completing checksum (CKI Backport Bot) [RHEL-284987] {CVE-2026-99999} - smb: client: reject a tree connect response whose byte count is too small (Alisher Mazhirinov) [RHEL-271284] {CVE-2026-89631} - exec: Cleanup POSIX timers right after de_thread() (Luiz Capitulino) [RHEL-282063] {CVE-2026-98260} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271871] {CVE-2026-93817} - smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (Frank Sorenson) [RHEL-271487] {CVE-2026-89633} - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270747] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256697] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256697] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256697] - bridge: mcast: Fix a possible use-after-free when removing a bridge port (Jakub Ramaseuski) [RHEL-232528] {CVE-2026-64032} - net: bridge: Flush multicast groups when snooping is disabled (Jakub Ramaseuski) [RHEL-232528] - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Antoine Tenart) [RHEL-231693] {CVE-2026-64024} - ipv4: fib: free fib_alias with kfree_rcu() on insert error path (Jamie Bainbridge) [RHEL-233131] {CVE-2026-64572} - inet: frags: strip GSO state from fragments before reassembly (Jamie Bainbridge) [RHEL-254224] {CVE-2026-80590} - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Jamie Bainbridge) [RHEL-225452] {CVE-2026-64114} - usb: typec: ucsi: validate connector number in ucsi_connector_change() (Desnes Nunes) [RHEL-259429] {CVE-2026-63958} - usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO (Desnes Nunes) [RHEL-259429] - usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (Desnes Nunes) [RHEL-259429] {CVE-2026-63962} - usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (Desnes Nunes) [RHEL-259429] {CVE-2026-63963} - usb: typec: altmodes/displayport: validate count before reading Status Update VDO (Desnes Nunes) [RHEL-259429] {CVE-2026-63961} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63899} - Bluetooth: hci_sync: Fix advertising data UAFs (CKI Backport Bot) [RHEL-254674] {CVE-2026-74509} - openvswitch: vport: fix self-deadlock on release of tunnel ports (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222958] {CVE-2026-52935} - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (Mohammadfaiz Bawa) [RHEL-243814] {CVE-2026-72288} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275058] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275076] {CVE-2026-93228} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270929] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270929] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271453] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268122] {CVE-2026-74705} - net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CKI Backport Bot) [RHEL-270908] {CVE-2026-81003} - wifi: cfg80211: use wiphy work for socket owner autodisconnect (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-263788] {CVE-2026-68409} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (Jose Ignacio Tornos Martinez) [RHEL-259560] {CVE-2026-64030} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261686] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260511] {CVE-2026-68140} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261293] {CVE-2026-72320} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256448] {CVE-2026-74641} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-237219] {CVE-2026-68377} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229654] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226490] {CVE-2026-53011} - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable backports (SOURCES/1100-1196) - Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto authencesn/algif) - Keep the smb cifs.spnego ahead-fix (retained as 1197) - RHEL changelog for 687.6.1..687.10.1 follows: - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163} - RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128} - usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607} - can: raw: fix ro->uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401} - powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125] - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742] - Revert "lpfc: don't use file->f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742] - drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822] - drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853] - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404] - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402} - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741} - smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988] - ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378] - RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966] - net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207] - ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095] - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766} - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766} - rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075} - Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable backports (SOURCES/1198-1252) - RHEL changelog for 687.11.1..687.12.1 follows: - dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110} - Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020} - crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914] - proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653} - proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653} - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470] - mm/page_alloc: clear page->private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303} - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158} - redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927] - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859] - ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829] - ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829] - ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179] - ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257] - dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442] - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378] - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684} - cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701] - ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701] - ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701] - ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701] - drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179] - nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089} - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724} - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183} - i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312] - ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182] - ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185] - Revert "mm: pcp: increase pcp->free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464] - netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392} - Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269) - RHEL changelog for 687.13.1 follows: - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243} - s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472] - s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472] - s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472] - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745] - nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745] - Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786} - crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167] - crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167] - smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613} - mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778] - mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778] - mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778] - mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778] - mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778] - mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778] - mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778] - mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778] - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.18.1..687.19.1 follows: - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176} - init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183] - update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183] - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183] - work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183] - compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183] - powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183] - sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776] - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189} - sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273] - netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273] - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993] - iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993] - iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993] - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993] - iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993] - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057] - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057] - IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057] - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057] - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057] - net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057] - net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057] - net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057] - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057] - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057] - net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057] - net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057] - net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057] - net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057] - net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057] - net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057] - net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057] - net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057] - net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057] - net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057] - net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057] - mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057] - net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057] - net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057] - net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057] - net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057] - net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057] - net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057] - net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057] - net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057] - net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057] - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057] - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057] - mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057] - net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057] - net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057] - net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057] - net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057] - net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057] - net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057] - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057] - net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057] - net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057] - net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057] - net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057] - net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057] - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057] - net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057] - net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057] - net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057] - net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057] - net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057] - net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057] - net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057] - net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057] - net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057] - net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057] - eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057] - net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057] - net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057] - net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057] - net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057] - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057] - RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057] - net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057] - net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057] - net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057] - net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057] - net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057] - net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057] - net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057] - net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057] - net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057] - net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057] - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057] - net: Fix typos (Kamal Heib) [RHEL-169057] - net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057] - net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057] - net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057] - net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057] - net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057] - net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057] - net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057] - net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057] - net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057] - net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057] - net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057] - eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Kamal Heib) [RHEL-169057] - net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057] - net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057] - net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057] - net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057] - net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057] - net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057] - net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057] - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057] - net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057] - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057] - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057] - net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057] - net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057] - net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057] - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057] - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444] - ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444] - ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444] - ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488} - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329} - Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312) - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.19.1..687.20.1 follows: - crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540] - crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540] - crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540] - crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540] - tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198} - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739} - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760] - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760] - scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886] - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411} - Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.18.1..687.19.1 follows: - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176} - init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183] - update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183] - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183] - work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183] - compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183] - powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183] - sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776] - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189} - sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273] - netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273] - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993] - iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993] - iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993] - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993] - iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993] - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057] - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057] - IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057] - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057] - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057] - net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057] - net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057] - net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057] - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057] - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057] - net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057] - net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057] - net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057] - net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057] - net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057] - net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057] - net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057] - net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057] - net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057] - net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057] - net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057] - mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057] - net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057] - net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057] - net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057] - net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057] - net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057] - net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057] - net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057] - net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057] - net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057] - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057] - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057] - mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057] - net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057] - net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057] - net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057] - net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057] - net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057] - net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057] - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057] - net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057] - net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057] - net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057] - net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057] - net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057] - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057] - net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057] - net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057] - net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057] - net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057] - net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057] - net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057] - net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057] - net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057] - net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057] - net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057] - eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057] - net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057] - net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057] - net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057] - net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057] - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057] - RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057] - net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057] - net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057] - net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057] - net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057] - net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057] - net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057] - net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057] - net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057] - net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057] - net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057] - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057] - net: Fix typos (Kamal Heib) [RHEL-169057] - net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057] - net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057] - net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057] - net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057] - net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057] - net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057] - net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057] - net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057] - net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057] - net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057] - net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057] - eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Kamal Heib) [RHEL-169057] - net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057] - net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057] - net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057] - net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057] - net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057] - net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057] - net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057] - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057] - net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057] - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057] - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057] - net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057] - net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057] - net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057] - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057] - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444] - ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444] - ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444] - ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488} - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329} - Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312) - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735) - Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll ep_remove use-after-free CVE-2026-46242 (1712) - RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux ahead-patch (1312) is retained and RHEL's duplicate copy omitted - CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263) - RHEL changelog for 687.21.1..687.22.1 follows: - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041] - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116} - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263} - KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316} - netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227} - nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966] - Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755) - The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by RHEL's eventpoll series carrying the same fix and is dropped - Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738) - RHEL changelog for 687.23.1 follows: - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1756, 1757) are superseded by RHEL's copies and dropped - RHEL changelog for 687.25.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770) - RHEL changelog for 687.26.1 follows: - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1756, 1757) are superseded by RHEL's copies and dropped - RHEL changelog for 687.25.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041] - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116} - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619] - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619] - Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762] - Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762] - Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762] - Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762] - Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762] - Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762] - Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762] - Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762] - nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489] - pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489] - net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508] - cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548] - spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129] - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431) - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619] - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619] - Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762] - Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762] - Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762] - Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762] - Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762] - Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762] - Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762] - Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762] - nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489] - net: skbuff: propagate shared-frag marker through frag-transfer helpers (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300 "Fragnesia") - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431) - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (Mohammadfaiz Bawa) [RHEL-243814] {CVE-2026-72288} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275058] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275076] {CVE-2026-93228} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270929] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270929] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271453] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268122] {CVE-2026-74705} - net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CKI Backport Bot) [RHEL-270908] {CVE-2026-81003} - wifi: cfg80211: use wiphy work for socket owner autodisconnect (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-263788] {CVE-2026-68409} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (Jose Ignacio Tornos Martinez) [RHEL-259560] {CVE-2026-64030} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261686] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260511] {CVE-2026-68140} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261293] {CVE-2026-72320} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256448] {CVE-2026-74641} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-237219] {CVE-2026-68377} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229654] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226490] {CVE-2026-53011} - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net: always dissect GSO packets in __virtio_net_hdr_to_skb() (Davide Caratti) [RHEL-284987] - ipv4: validate checksum_start before completing checksum (CKI Backport Bot) [RHEL-284987] {CVE-2026-99999} - smb: client: reject a tree connect response whose byte count is too small (Alisher Mazhirinov) [RHEL-271284] {CVE-2026-89631} - exec: Cleanup POSIX timers right after de_thread() (Luiz Capitulino) [RHEL-282063] {CVE-2026-98260} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271871] {CVE-2026-93817} - smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (Frank Sorenson) [RHEL-271487] {CVE-2026-89633} - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270747] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256697] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256697] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256697] - bridge: mcast: Fix a possible use-after-free when removing a bridge port (Jakub Ramaseuski) [RHEL-232528] {CVE-2026-64032} - net: bridge: Flush multicast groups when snooping is disabled (Jakub Ramaseuski) [RHEL-232528] - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Antoine Tenart) [RHEL-231693] {CVE-2026-64024} - ipv4: fib: free fib_alias with kfree_rcu() on insert error path (Jamie Bainbridge) [RHEL-233131] {CVE-2026-64572} - inet: frags: strip GSO state from fragments before reassembly (Jamie Bainbridge) [RHEL-254224] {CVE-2026-80590} - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Jamie Bainbridge) [RHEL-225452] {CVE-2026-64114} - usb: typec: ucsi: validate connector number in ucsi_connector_change() (Desnes Nunes) [RHEL-259429] {CVE-2026-63958} - usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO (Desnes Nunes) [RHEL-259429] - usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (Desnes Nunes) [RHEL-259429] {CVE-2026-63962} - usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (Desnes Nunes) [RHEL-259429] {CVE-2026-63963} - usb: typec: altmodes/displayport: validate count before reading Status Update VDO (Desnes Nunes) [RHEL-259429] {CVE-2026-63961} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63899} - Bluetooth: hci_sync: Fix advertising data UAFs (CKI Backport Bot) [RHEL-254674] {CVE-2026-74509} - openvswitch: vport: fix self-deadlock on release of tunnel ports (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222958] {CVE-2026-52935} - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (Mohammadfaiz Bawa) [RHEL-243814] {CVE-2026-72288} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275058] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275076] {CVE-2026-93228} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270929] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270929] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271453] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268122] {CVE-2026-74705} - net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CKI Backport Bot) [RHEL-270908] {CVE-2026-81003} - wifi: cfg80211: use wiphy work for socket owner autodisconnect (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-263788] {CVE-2026-68409} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (Jose Ignacio Tornos Martinez) [RHEL-259560] {CVE-2026-64030} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261686] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260511] {CVE-2026-68140} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261293] {CVE-2026-72320} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256448] {CVE-2026-74641} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-237219] {CVE-2026-68377} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229654] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226490] {CVE-2026-53011} - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: skbuff: propagate shared-frag marker in skb_zerocopy() - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - xfs: bounds-check buffer log item's dirty bitmap (Pavel Reichl) [RHEL-253366] {CVE-2026-80536} - ovl: check access to copy_file_range source with src mounter creds (Miklos Szeredi) [RHEL-238870] {CVE-2026-68448} - ALSA: seq: close a re-opened queue timer in the destructor (CKI Backport Bot) [RHEL-263709] {CVE-2026-68202} - calipso: unlock rcu before returning -EAFNOSUPPORT (CKI Backport Bot) [RHEL-257685] {CVE-2025-38147} - calipso: Don't call calipso functions for AF_INET sk. (CKI Backport Bot) [RHEL-257685] {CVE-2025-38147} - netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (CKI Backport Bot) [RHEL-257666] {CVE-2025-22063} - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (CKI Backport Bot) [RHEL-255258] {CVE-2026-80530} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252811] {CVE-2026-68299} - ALSA: hda/cs35l41: Fix firmware load work teardown (CKI Backport Bot) [RHEL-234099] {CVE-2026-64481} - rtla: Fix segfault on multiple SIGINTs (Tomas Glozar) [RHEL-193029] - net: always dissect GSO packets in __virtio_net_hdr_to_skb() (Davide Caratti) [RHEL-284987] - ipv4: validate checksum_start before completing checksum (CKI Backport Bot) [RHEL-284987] {CVE-2026-99999} - smb: client: reject a tree connect response whose byte count is too small (Alisher Mazhirinov) [RHEL-271284] {CVE-2026-89631} - exec: Cleanup POSIX timers right after de_thread() (Luiz Capitulino) [RHEL-282063] {CVE-2026-98260} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271871] {CVE-2026-93817} - smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (Frank Sorenson) [RHEL-271487] {CVE-2026-89633} - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270747] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256697] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256697] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256697] - bridge: mcast: Fix a possible use-after-free when removing a bridge port (Jakub Ramaseuski) [RHEL-232528] {CVE-2026-64032} - net: bridge: Flush multicast groups when snooping is disabled (Jakub Ramaseuski) [RHEL-232528] - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Antoine Tenart) [RHEL-231693] {CVE-2026-64024} - ipv4: fib: free fib_alias with kfree_rcu() on insert error path (Jamie Bainbridge) [RHEL-233131] {CVE-2026-64572} - inet: frags: strip GSO state from fragments before reassembly (Jamie Bainbridge) [RHEL-254224] {CVE-2026-80590} - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Jamie Bainbridge) [RHEL-225452] {CVE-2026-64114} - usb: typec: ucsi: validate connector number in ucsi_connector_change() (Desnes Nunes) [RHEL-259429] {CVE-2026-63958} - usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO (Desnes Nunes) [RHEL-259429] - usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (Desnes Nunes) [RHEL-259429] {CVE-2026-63962} - usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (Desnes Nunes) [RHEL-259429] {CVE-2026-63963} - usb: typec: altmodes/displayport: validate count before reading Status Update VDO (Desnes Nunes) [RHEL-259429] {CVE-2026-63961} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63899} - Bluetooth: hci_sync: Fix advertising data UAFs (CKI Backport Bot) [RHEL-254674] {CVE-2026-74509} - openvswitch: vport: fix self-deadlock on release of tunnel ports (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222958] {CVE-2026-52935} - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (Mohammadfaiz Bawa) [RHEL-243814] {CVE-2026-72288} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275058] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275076] {CVE-2026-93228} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270929] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270929] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271453] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268122] {CVE-2026-74705} - net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CKI Backport Bot) [RHEL-270908] {CVE-2026-81003} - wifi: cfg80211: use wiphy work for socket owner autodisconnect (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-263788] {CVE-2026-68409} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (Jose Ignacio Tornos Martinez) [RHEL-259560] {CVE-2026-64030} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261686] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260511] {CVE-2026-68140} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261293] {CVE-2026-72320} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256448] {CVE-2026-74641} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-237219] {CVE-2026-68377} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229654] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226490] {CVE-2026-53011} - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - net: skbuff: propagate shared-frag marker in skb_zerocopy() - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - netfilter: flowtable: hold reference on ct until flow is released (CKI Backport Bot) [RHEL-280075] {CVE-2026-98320} - vfio/pci: clear vdev->msi_perm after freeing it on init failure (Rodolfo Vick) [RHEL-270901] {CVE-2026-89777} - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278089] {CVE-2026-93262} - KEYS: encrypted: fix integer overflow of datablob_len (Bruno Meneguele) [RHEL-279504] {CVE-2026-98222} - KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (CKI Backport Bot) [RHEL-277620] {CVE-2026-74515} - smb: client: guard against tailsz underflow in wdata_send_pages() (Paulo Alcantara) [RHEL-257205] - smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-257205] - smb: client: fix rlist race and missing initialization (Paulo Alcantara) [RHEL-257205] {CVE-2026-98174} - smb: client: cancel reconnect work in clean_demultiplex_info() (Paulo Alcantara) [RHEL-257205] {CVE-2026-98175} - smb/client: send lease break ACKs thru correct session for multiuser mounts (Paulo Alcantara) [RHEL-257205] - smb: client: fix cifsFileInfo reference leak in deferred close (Paulo Alcantara) [RHEL-257205] {CVE-2026-97558} - smb: client: avoid leaking refcount when cifs_sb_tlink() fails (Paulo Alcantara) [RHEL-257205] {CVE-2026-97556} - smb: client: avoid leaking refcount in cifs_queue_oplock_break() (Paulo Alcantara) [RHEL-257205] {CVE-2026-97557} - smb: client: fix data corruption with concurrent writes and O_TRUNC (Paulo Alcantara) [RHEL-257205] - cifs: don't update i_size in cifs_do_truncate without a cached handle (Paulo Alcantara) [RHEL-257205] - smb: client: invalidate fscache for fallocate range operations (Paulo Alcantara) [RHEL-257205] {CVE-2026-98124} - smb: client: fix stale page cache in insert/collapse range (Paulo Alcantara) [RHEL-257205] {CVE-2026-98125} - smb: client: fix integer truncation in collapse range (Paulo Alcantara) [RHEL-257205] - smb: client: fix data corruption in emulated insert range (Paulo Alcantara) [RHEL-257205] - smb/client: mark file sparse before emulating insert range (Paulo Alcantara) [RHEL-257205] - smb/client: validate new EOF for zero range (Paulo Alcantara) [RHEL-257205] {CVE-2026-98126} - smb/client: validate new EOF for insert range (Paulo Alcantara) [RHEL-257205] {CVE-2026-98127} - cifs: add revalidation on FSCTL failure in smb2_duplicate_extents() (Paulo Alcantara) [RHEL-257205] - cifs: fix loff_t underflow in cifs_remap_file_range() when len == 0 (Paulo Alcantara) [RHEL-257205] {CVE-2026-89640} - cifs: call pagecache_isize_extended() in cifs_setsize() when extending (Paulo Alcantara) [RHEL-257205] {CVE-2026-89642} - cifs: clear tcon after cifsFileInfo_put() in cifs_file_set_size() (Paulo Alcantara) [RHEL-257205] {CVE-2026-89641} - smb/client: decode reparse metadata using its payload type (Paulo Alcantara) [RHEL-257205] - smb/client: preserve open info type across compound queries (Paulo Alcantara) [RHEL-257205] - smb/client: mark missing nlink values as unknown (Paulo Alcantara) [RHEL-257205] - smb/client: fix nlink of an overwritten open file (Paulo Alcantara) [RHEL-257205] - cifs: remove dead size-update blocks in cifs_setattr_unix/nounix (Paulo Alcantara) [RHEL-257205] - cifs: remove redundant size-update block in cifs_remap_file_range() (Paulo Alcantara) [RHEL-257205] - cifs: add cifs_resize_file_locked() to guard fscache_resize_cookie() under i_rwsem (Paulo Alcantara) [RHEL-257205] - cifs: use cifs_invalidate_cache() in cifs_do_truncate() for O_TRUNC (Paulo Alcantara) [RHEL-257205] {CVE-2026-89639} - cifs: add fscache_resize_cookie() to cifs_setsize() (Paulo Alcantara) [RHEL-257205] - smb: client: simplify cifs_fscache_get_super_cookie() (Paulo Alcantara) [RHEL-257205] - smb/client: flush dirty data before punching a hole (Paulo Alcantara) [RHEL-257205] {CVE-2026-93794} - smb/client: refresh allocation after EOF-extending fallocate (Paulo Alcantara) [RHEL-257205] - smb/client: emulate small EOF-extending mode 0 fallocate ranges (Paulo Alcantara) [RHEL-257205] - smb/client: reduce fallocate zero buffer allocation (Paulo Alcantara) [RHEL-257205] - smb/client: refresh allocation size after duplicate extents (Paulo Alcantara) [RHEL-257205] - smb: client: use kvzalloc() for megabyte buffer in simple fallocate (Paulo Alcantara) [RHEL-257205] - smb/client: fix incorrect nlink returned by fstat() (Paulo Alcantara) [RHEL-257205] - smb/client: zero-initialize stack-allocated cifs_open_info_data (Paulo Alcantara) [RHEL-257205] {CVE-2026-93801} - smb/client: pass cifs_open_info_data to SMB2_open() (Paulo Alcantara) [RHEL-257205] - smb/client: use stack-allocated smb2_file_all_info in smb3_query_mf_symlink() (Paulo Alcantara) [RHEL-257205] - smb: client: refactor cifs_revalidate_mapping() to use clear_and_wake_up_bit() (Paulo Alcantara) [RHEL-257205] - smb/client: do not account EOF extension as allocation (Paulo Alcantara) [RHEL-257205] - smb/client: preserve errors from smb2_set_sparse() (Paulo Alcantara) [RHEL-257205] - smb/client: name the default fallocate mode (Paulo Alcantara) [RHEL-257205] - smb/client: update i_blocks after contiguous writes (Paulo Alcantara) [RHEL-257205] - smb: client: fix races in cifsd thread creation (Paulo Alcantara) [RHEL-257205] {CVE-2026-93829} - cifs: invalidate cfid on unlink/rename/rmdir (Paulo Alcantara) [RHEL-257205] - cifs: abort open_cached_dir if we don't request leases (Paulo Alcantara) [RHEL-257205] - cifs: change_conf needs to be called for session setup (Paulo Alcantara) [RHEL-257205] - smb: client: fix generic/694 due to wrong ->i_blocks (Paulo Alcantara) [RHEL-257205] - smb: client: fix open handle lookup in cifs_open() (Paulo Alcantara) [RHEL-257205] - smb: client: fix in-place encryption corruption in SMB2_write() (Paulo Alcantara) [RHEL-257205] {CVE-2026-43362} - smb: client: fix atomic open with O_DIRECT & O_SYNC (Paulo Alcantara) [RHEL-257205] - cifs: Scripted clean up fs/smb/client/cifsglob.h (Paulo Alcantara) [RHEL-257205] - cifs: Scripted clean up fs/smb/client/fscache.h (Paulo Alcantara) [RHEL-257205] - cifs: Scripted clean up fs/smb/client/cifsfs.h (Paulo Alcantara) [RHEL-257205] - cifs: Scripted clean up fs/smb/client/cifsproto.h (Paulo Alcantara) [RHEL-257205] - udp: Deal with race between UDP socket address change and rehash (Jamie Bainbridge) [RHEL-257635] {CVE-2024-57974} - smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (CKI Backport Bot) [RHEL-271257] {CVE-2026-89638} - net/handshake: Drain pending requests at net namespace exit (Xin Long) [RHEL-232134] {CVE-2026-63978} - net/handshake: Use spin_lock_bh for hn_lock (Xin Long) [RHEL-232134] - net/handshake: hand off the pinned file reference to accept_doit (Xin Long) [RHEL-230363] {CVE-2026-63979} - net/handshake: Take a long-lived file reference at submit (Xin Long) [RHEL-234159] {CVE-2026-64523} - fuse: re-lock request before replacing page cache folio (Miklos Szeredi) [RHEL-226093] {CVE-2026-53388} - fuse: release pipe buf after last use (Miklos Szeredi) [RHEL-226093] {CVE-2026-53388} - fuse: fix page stealing (Miklos Szeredi) [RHEL-226093] {CVE-2026-53388} - ipvs: reload ip header after head reallocation (Phil Sutter) [RHEL-263800] {CVE-2026-68476} - selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() (CKI Backport Bot) [RHEL-243225] {CVE-2026-72242} - usb: usbfs: fix use-after-free of usb_device in usbdev_release() (CKI Backport Bot) [RHEL-258557] {CVE-2026-80824} - fuse: re-lock request before returning from fuse_ref_folio() (CKI Backport Bot) [RHEL-234250] {CVE-2026-64266} - xfs: bounds-check buffer log item's dirty bitmap (Pavel Reichl) [RHEL-253366] {CVE-2026-80536} - ovl: check access to copy_file_range source with src mounter creds (Miklos Szeredi) [RHEL-238870] {CVE-2026-68448} - ALSA: seq: close a re-opened queue timer in the destructor (CKI Backport Bot) [RHEL-263709] {CVE-2026-68202} - calipso: unlock rcu before returning -EAFNOSUPPORT (CKI Backport Bot) [RHEL-257685] {CVE-2025-38147} - calipso: Don't call calipso functions for AF_INET sk. (CKI Backport Bot) [RHEL-257685] {CVE-2025-38147} - netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (CKI Backport Bot) [RHEL-257666] {CVE-2025-22063} - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (CKI Backport Bot) [RHEL-255258] {CVE-2026-80530} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252811] {CVE-2026-68299} - ALSA: hda/cs35l41: Fix firmware load work teardown (CKI Backport Bot) [RHEL-234099] {CVE-2026-64481} - rtla: Fix segfault on multiple SIGINTs (Tomas Glozar) [RHEL-193029] - net: always dissect GSO packets in __virtio_net_hdr_to_skb() (Davide Caratti) [RHEL-284987] - ipv4: validate checksum_start before completing checksum (CKI Backport Bot) [RHEL-284987] {CVE-2026-99999} - smb: client: reject a tree connect response whose byte count is too small (Alisher Mazhirinov) [RHEL-271284] {CVE-2026-89631} - exec: Cleanup POSIX timers right after de_thread() (Luiz Capitulino) [RHEL-282063] {CVE-2026-98260} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271871] {CVE-2026-93817} - smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (Frank Sorenson) [RHEL-271487] {CVE-2026-89633} - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270747] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256697] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256697] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256697] - bridge: mcast: Fix a possible use-after-free when removing a bridge port (Jakub Ramaseuski) [RHEL-232528] {CVE-2026-64032} - net: bridge: Flush multicast groups when snooping is disabled (Jakub Ramaseuski) [RHEL-232528] - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Antoine Tenart) [RHEL-231693] {CVE-2026-64024} - ipv4: fib: free fib_alias with kfree_rcu() on insert error path (Jamie Bainbridge) [RHEL-233131] {CVE-2026-64572} - inet: frags: strip GSO state from fragments before reassembly (Jamie Bainbridge) [RHEL-254224] {CVE-2026-80590} - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Jamie Bainbridge) [RHEL-225452] {CVE-2026-64114} - usb: typec: ucsi: validate connector number in ucsi_connector_change() (Desnes Nunes) [RHEL-259429] {CVE-2026-63958} - usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO (Desnes Nunes) [RHEL-259429] - usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (Desnes Nunes) [RHEL-259429] {CVE-2026-63962} - usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (Desnes Nunes) [RHEL-259429] {CVE-2026-63963} - usb: typec: altmodes/displayport: validate count before reading Status Update VDO (Desnes Nunes) [RHEL-259429] {CVE-2026-63961} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63899} - Bluetooth: hci_sync: Fix advertising data UAFs (CKI Backport Bot) [RHEL-254674] {CVE-2026-74509} - openvswitch: vport: fix self-deadlock on release of tunnel ports (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222958] {CVE-2026-52935} - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (Mohammadfaiz Bawa) [RHEL-243814] {CVE-2026-72288} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275058] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275076] {CVE-2026-93228} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270929] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270929] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271453] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268122] {CVE-2026-74705} - net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CKI Backport Bot) [RHEL-270908] {CVE-2026-81003} - wifi: cfg80211: use wiphy work for socket owner autodisconnect (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-263788] {CVE-2026-68409} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (Jose Ignacio Tornos Martinez) [RHEL-259560] {CVE-2026-64030} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261686] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260511] {CVE-2026-68140} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261293] {CVE-2026-72320} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256448] {CVE-2026-74641} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-237219] {CVE-2026-68377} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229654] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226490] {CVE-2026-53011} - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - macros.kmp: do not run `rpm -qa` Resolves: RHEL-57823 - macros.kmp: do not run `rpm -qa` Resolves: RHEL-57823 - Add html documentation and man page - Rebuild with latest json-c - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fix FTBFS - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebase to version 1.3 - Resolves: RHEL-3336 - khci won't work with Quarkus-based Keycloak due to missing /auth path - Fix registrar authentication bypass (CVE-2026-1709) Resolves: RHEL-145391 - Add support for TPM quotes using ECC keys Resolves: RHEL-118150 - Keylime: Registrar allows identity takeover via duplicate UUID registration Resolves: RHEL-130761 - Change ownership of /usr/share/keylime/tpm_cert_store to root Resolves: RHEL-106024 - Properly fix the malformed certificate workaround Resolves: RHEL-111244 - Fix for revocation notifier not closing TLS session correctly Resolves: RHEL-109656 - Support vendor_db: follow-up fix Related: RHEL-80455 - Support vendor_db as logged by newer shim versions Resolves: RHEL-80455 - Fix DB connection leaks Resolves: RHEL-108263 - Fix tmpfiles.d configuration related to the cert store Resolves: RHEL-104572 - Add API version negotiation to keylime_tenant Resolves: RHEL-154785 - Fix registrar authentication bypass (CVE-2026-1709) Resolves: RHEL-145391 - Add support for TPM quotes using ECC keys Resolves: RHEL-118150 - Keylime: Registrar allows identity takeover via duplicate UUID registration Resolves: RHEL-130761 - Change ownership of /usr/share/keylime/tpm_cert_store to root Resolves: RHEL-106024 - Properly fix the malformed certificate workaround Resolves: RHEL-111244 - Fix for revocation notifier not closing TLS session correctly Resolves: RHEL-109656 - Support vendor_db: follow-up fix Related: RHEL-80455 - Support vendor_db as logged by newer shim versions Resolves: RHEL-80455 - Fix DB connection leaks Resolves: RHEL-108263 - Enable attestation with TPM ECC keys Resolves: RHEL-118148 - Remove /usr/libexec/keylime/ Resolves: RHEL-145712 - Fix cargo_build macro usage - Update openssl crate to version 0.10.70 to fix CVE-2025-24898 - Fix registrar authentication bypass (CVE-2026-1709) Resolves: RHEL-145391 - Add support for TPM quotes using ECC keys Resolves: RHEL-118150 - Keylime: Registrar allows identity takeover via duplicate UUID registration Resolves: RHEL-130761 - Change ownership of /usr/share/keylime/tpm_cert_store to root Resolves: RHEL-106024 - Properly fix the malformed certificate workaround Resolves: RHEL-111244 - Fix for revocation notifier not closing TLS session correctly Resolves: RHEL-109656 - Support vendor_db: follow-up fix Related: RHEL-80455 - Support vendor_db as logged by newer shim versions Resolves: RHEL-80455 - Fix DB connection leaks Resolves: RHEL-108263 - Fix tmpfiles.d configuration related to the cert store Resolves: RHEL-104572 - Add API version negotiation to keylime_tenant Resolves: RHEL-154785 - Fix registrar authentication bypass (CVE-2026-1709) Resolves: RHEL-145391 - Add support for TPM quotes using ECC keys Resolves: RHEL-118150 - Keylime: Registrar allows identity takeover via duplicate UUID registration Resolves: RHEL-130761 - Change ownership of /usr/share/keylime/tpm_cert_store to root Resolves: RHEL-106024 - Properly fix the malformed certificate workaround Resolves: RHEL-111244 - Fix for revocation notifier not closing TLS session correctly Resolves: RHEL-109656 - Support vendor_db: follow-up fix Related: RHEL-80455 - Support vendor_db as logged by newer shim versions Resolves: RHEL-80455 - Fix DB connection leaks Resolves: RHEL-108263 - Fix registrar authentication bypass (CVE-2026-1709) Resolves: RHEL-145391 - Add support for TPM quotes using ECC keys Resolves: RHEL-118150 - Keylime: Registrar allows identity takeover via duplicate UUID registration Resolves: RHEL-130761 - Change ownership of /usr/share/keylime/tpm_cert_store to root Resolves: RHEL-106024 - Properly fix the malformed certificate workaround Resolves: RHEL-111244 - Fix for revocation notifier not closing TLS session correctly Resolves: RHEL-109656 - Support vendor_db: follow-up fix Related: RHEL-80455 - Support vendor_db as logged by newer shim versions Resolves: RHEL-80455 - Fix DB connection leaks Resolves: RHEL-108263 - Fix tmpfiles.d configuration related to the cert store Resolves: RHEL-104572 - Add API version negotiation to keylime_tenant Resolves: RHEL-154785 - Fix registrar authentication bypass (CVE-2026-1709) Resolves: RHEL-145391 - Add support for TPM quotes using ECC keys Resolves: RHEL-118150 - Keylime: Registrar allows identity takeover via duplicate UUID registration Resolves: RHEL-130761 - Change ownership of /usr/share/keylime/tpm_cert_store to root Resolves: RHEL-106024 - Properly fix the malformed certificate workaround Resolves: RHEL-111244 - Fix for revocation notifier not closing TLS session correctly Resolves: RHEL-109656 - Support vendor_db: follow-up fix Related: RHEL-80455 - Support vendor_db as logged by newer shim versions Resolves: RHEL-80455 - Fix DB connection leaks Resolves: RHEL-108263 - Fix registrar authentication bypass (CVE-2026-1709) Resolves: RHEL-145391 - Add support for TPM quotes using ECC keys Resolves: RHEL-118150 - Keylime: Registrar allows identity takeover via duplicate UUID registration Resolves: RHEL-130761 - Change ownership of /usr/share/keylime/tpm_cert_store to root Resolves: RHEL-106024 - Properly fix the malformed certificate workaround Resolves: RHEL-111244 - Fix for revocation notifier not closing TLS session correctly Resolves: RHEL-109656 - Support vendor_db: follow-up fix Related: RHEL-80455 - Support vendor_db as logged by newer shim versions Resolves: RHEL-80455 - Fix DB connection leaks Resolves: RHEL-108263 - Fix tmpfiles.d configuration related to the cert store Resolves: RHEL-104572 - Add API version negotiation to keylime_tenant Resolves: RHEL-154785 - Fix registrar authentication bypass (CVE-2026-1709) Resolves: RHEL-145391 - Add support for TPM quotes using ECC keys Resolves: RHEL-118150 - Keylime: Registrar allows identity takeover via duplicate UUID registration Resolves: RHEL-130761 - Change ownership of /usr/share/keylime/tpm_cert_store to root Resolves: RHEL-106024 - Properly fix the malformed certificate workaround Resolves: RHEL-111244 - Fix for revocation notifier not closing TLS session correctly Resolves: RHEL-109656 - Support vendor_db: follow-up fix Related: RHEL-80455 - Support vendor_db as logged by newer shim versions Resolves: RHEL-80455 - Fix DB connection leaks Resolves: RHEL-108263 - Fix registrar authentication bypass (CVE-2026-1709) Resolves: RHEL-145391 - Add support for TPM quotes using ECC keys Resolves: RHEL-118150 - Keylime: Registrar allows identity takeover via duplicate UUID registration Resolves: RHEL-130761 - Change ownership of /usr/share/keylime/tpm_cert_store to root Resolves: RHEL-106024 - Properly fix the malformed certificate workaround Resolves: RHEL-111244 - Fix for revocation notifier not closing TLS session correctly Resolves: RHEL-109656 - Support vendor_db: follow-up fix Related: RHEL-80455 - Support vendor_db as logged by newer shim versions Resolves: RHEL-80455 - Fix DB connection leaks Resolves: RHEL-108263 - Fix tmpfiles.d configuration related to the cert store Resolves: RHEL-104572 - Add API version negotiation to keylime_tenant Resolves: RHEL-154785 - Fix registrar authentication bypass (CVE-2026-1709) Resolves: RHEL-145391 - Add support for TPM quotes using ECC keys Resolves: RHEL-118150 - Keylime: Registrar allows identity takeover via duplicate UUID registration Resolves: RHEL-130761 - Change ownership of /usr/share/keylime/tpm_cert_store to root Resolves: RHEL-106024 - Properly fix the malformed certificate workaround Resolves: RHEL-111244 - Fix for revocation notifier not closing TLS session correctly Resolves: RHEL-109656 - Support vendor_db: follow-up fix Related: RHEL-80455 - Support vendor_db as logged by newer shim versions Resolves: RHEL-80455 - Fix DB connection leaks Resolves: RHEL-108263 - Fix registrar authentication bypass (CVE-2026-1709) Resolves: RHEL-145391 - Add support for TPM quotes using ECC keys Resolves: RHEL-118150 - Keylime: Registrar allows identity takeover via duplicate UUID registration Resolves: RHEL-130761 - Change ownership of /usr/share/keylime/tpm_cert_store to root Resolves: RHEL-106024 - Properly fix the malformed certificate workaround Resolves: RHEL-111244 - Fix for revocation notifier not closing TLS session correctly Resolves: RHEL-109656 - Support vendor_db: follow-up fix Related: RHEL-80455 - Support vendor_db as logged by newer shim versions Resolves: RHEL-80455 - Fix DB connection leaks Resolves: RHEL-108263 - Fix tmpfiles.d configuration related to the cert store Resolves: RHEL-104572 - Add API version negotiation to keylime_tenant Resolves: RHEL-154785 - Fix registrar authentication bypass (CVE-2026-1709) Resolves: RHEL-145391 - Add support for TPM quotes using ECC keys Resolves: RHEL-118150 - Keylime: Registrar allows identity takeover via duplicate UUID registration Resolves: RHEL-130761 - Change ownership of /usr/share/keylime/tpm_cert_store to root Resolves: RHEL-106024 - Properly fix the malformed certificate workaround Resolves: RHEL-111244 - Fix for revocation notifier not closing TLS session correctly Resolves: RHEL-109656 - Support vendor_db: follow-up fix Related: RHEL-80455 - Support vendor_db as logged by newer shim versions Resolves: RHEL-80455 - Fix DB connection leaks Resolves: RHEL-108263 - Update to upstream version 1.6.3 Related: rhbz#2119105 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.6.1 - Spec cleanups - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves:rhbz#1961996 - Fix the syntax for path_prefix in tests.yml - Resolves:rhbz#1961996 - Add gating tests - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Convert to new fonts packaging guidelines (rh#1828983) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves:rhbz#1961996 - Fix the syntax for path_prefix in tests.yml - Resolves:rhbz#1961996 - Add gating tests - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Convert to new fonts packaging guidelines (rh#1828983) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves:rhbz#1961996 - Fix the syntax for path_prefix in tests.yml - Resolves:rhbz#1961996 - Add gating tests - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Convert to new fonts packaging guidelines (rh#1828983) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves:rhbz#1961996 - Fix the syntax for path_prefix in tests.yml - Resolves:rhbz#1961996 - Add gating tests - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Convert to new fonts packaging guidelines (rh#1828983) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves:rhbz#1961996 - Fix the syntax for path_prefix in tests.yml - Resolves:rhbz#1961996 - Add gating tests - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Convert to new fonts packaging guidelines (rh#1828983) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves:rhbz#1961996 - Fix the syntax for path_prefix in tests.yml - Resolves:rhbz#1961996 - Add gating tests - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Convert to new fonts packaging guidelines (rh#1828983) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves:rhbz#1961996 - Fix the syntax for path_prefix in tests.yml - Resolves:rhbz#1961996 - Add gating tests - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Convert to new fonts packaging guidelines (rh#1828983) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves:rhbz#1961996 - Fix the syntax for path_prefix in tests.yml - Resolves:rhbz#1961996 - Add gating tests - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Convert to new fonts packaging guidelines (rh#1828983) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves:rhbz#1961996 - Fix the syntax for path_prefix in tests.yml - Resolves:rhbz#1961996 - Add gating tests - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Convert to new fonts packaging guidelines (rh#1828983) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves:rhbz#1961996 - Fix the syntax for path_prefix in tests.yml - Resolves:rhbz#1961996 - Add gating tests - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Convert to new fonts packaging guidelines (rh#1828983) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves:rhbz#1961996 - Fix the syntax for path_prefix in tests.yml - Resolves:rhbz#1961996 - Add gating tests - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Convert to new fonts packaging guidelines (rh#1828983) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves:rhbz#1961996 - Fix the syntax for path_prefix in tests.yml - Resolves:rhbz#1961996 - Add gating tests - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Convert to new fonts packaging guidelines (rh#1828983) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356) Resolves: RHEL-171590 RHEL-171596 - krad: packet ID fetched from uninitialized variable Resolves: RHEL-145355 - Create sub-package for xrealmauthz KDC plugin Resolves: RHEL-67468 - Improving kerberos ulog resize efficiency Resolves: RHEL-145359 - Do not block HMAC-MD4/5 in FIPS mode Resolves: RHEL-88704 - Don't issue RC4 session keys by default (CVE-2025-3576) Resolves: RHEL-88048 - Add PKINIT paChecksum2 from MS-PKCA v20230920 Resolves: RHEL-82647 - Add dedicated tests sub-package - Prevent overflow when calculating ulog block size (CVE-2025-24528) Resolves: RHEL-76759 - Support PKCS11 EC client certs in PKINIT Resolves: RHEL-74374 - kdb5_util: fix DB entry flags on modification Resolves: RHEL-56059 - Add ECDH support for PKINIT (RFC5349) Resolves: RHEL-4902 - libkrad: implement support for Message-Authenticator (CVE-2024-3596) Resolves: RHEL-55423 - Fix various issues detected by static analysis Resolves: RHEL-58216 - Remove RSA protocol for PKINIT Resolves: RHEL-15323 - CVE-2024-37370 CVE-2024-37371 Fix vulnerabilities in GSS message token handling Resolves: RHEL-45402 RHEL-45392 - Fix /dev/fd/1 memory fault and $0 for /dev/fd scripts Resolves: RHEL-146564 - Fix arbitrary command execution/code injection bugs Resolves: RHEL-99063 - Fix SIGPIPE subshell regression Resolves: RHEL-92646 - Fix recalling lines starting with whitespace Resolves: RHEL-74464 - Fix segfault upon SIGWINCH after 'stty -echo' Resolves: RHEL-91097 - Fix long multibyte characters paste issue via ssh Resolves: RHEL-87561 - Fix 'stty -echo' in scripts Resolves: RHEL-83043 - Fix segfault on starting ksh with no TERM env var Resolves: RHEL-83283 - Change p_job variable type from short to int Resolves: RHEL-64299 - Add forking workaround for block stdout redir Resolves: RHEL-55913 - Initial build [bz#1972158] - Resolves: bz#1972158 (Add ksmtuned component to RHEL 9) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Disable packaging of gtk+-based lame-mp3x (#1760961, #1760995 #c1) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Disable packaging of gtk+-based lame-mp3x (#1760961, #1760995 #c1) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - add subpackages for Hong Kong (zh_HK) - Revert previous ibus-unikey change for RHEL - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Add more entries to previous commit - Don't Recommends: packages in RHEL which are not available - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 0.0.54 - add list_common_languages derived from gnome-control-center by Sundeep ANAND <suanand@redhat.com> - Update to 0.0.53 - Capitalize the return values of language_name() and territory_name() (See: https://github.com/rhinstaller/anaconda/pull/2837). - Add more translations from CLDR - Get translation changes from CLDR - Update to 0.0.52 - add list_common_keyboards() to public api by Sundeep ANAND <suanand@redhat.com> - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Parse stuff in glibc locale names after @ which is not a script as a variant - Add ckb_IQ.UTF-8 locale - Add explicit requires to the devel subpackages - Note: the the cblas64 seems to be linked against the libblas (not the 64 version) - this is not a regression, however in the Fedora it uses libblas64 instead. - Resolves: RHEL-5768 - Spec file cleanup - Remove unused patches Related: RHEL-5770 - Fix soname of the 64-bit version libraries Resolves: RHEL-24851 - Add explicit requires to the devel subpackages Related: rhbz#2229142 - Rename manpages: some names conflict with the man-pages package Resolves: rhbz#2222868 - Fixing CVE-2025-47151 Resolves: RHEL-126685 CVE-2025-47151 lasso: Type confusion in Entr'ouvert Lasso - Rebuild to enable CI and gating. Resolves: rhbz#1989812 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to new upstream version. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to new upstream version. - Update to new upstream version. - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to new upstream version. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to new upstream version. - Update to new upstream version. - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fix digest calculation of sha256 (RHEL-20391) - Fix CVE-2026-10846: DNS response spoofing via missing address/port/TXID and question section validation (RHEL-210701) - Fix digest calculation of sha256 (RHEL-20391) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Make gnuplot build dependency optional, used only by tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.80.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 1.79.0 - Adding a timeout for TLS close - Resolves: RHEL-113471 - "cannot seek on data source" in TLS lftp sessions - Do not wait for server close-notify on TLS close - Resolves: RHEL-100406 - Improve fix for close of TLS connection - Resolves: RHEL-90997 - Ensure proper closing of TLS connection - Resolves: RHEL-90997 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add make to BuildRequires - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add make to BuildRequires - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add make to BuildRequires - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add make to BuildRequires - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebase to version 1.8.12 - Update license to MIT AND X11 (SPDX migration) - Change source format from .tar.bz2 to .tar.xz - Add libtool as BuildRequires - Remove CVE patches (now included upstream) - Add patch to lower autoconf requirement to 2.69 - Update dont-forward-keycode-0.patch for new codebase - Remove NEWS from %doc (file not present in 1.8.12) - Resolves: RHEL-111537 - Backport fixes for XIM input sometimes jumbled (RHEL-69791) - Backport NULL check to avoid a crash Resolves: https://issues.redhat.com/browse/RHEL-58298 - Rebase to version 1.8.12 - Update license to MIT AND X11 (SPDX migration) - Change source format from .tar.bz2 to .tar.xz - Add libtool as BuildRequires - Remove CVE patches (now included upstream) - Add patch to lower autoconf requirement to 2.69 - Update dont-forward-keycode-0.patch for new codebase - Remove NEWS from %doc (file not present in 1.8.12) - Resolves: RHEL-111537 - Backport fixes for XIM input sometimes jumbled (RHEL-69791) - Backport NULL check to avoid a crash Resolves: https://issues.redhat.com/browse/RHEL-58298 - Rebase to version 1.8.12 - Update license to MIT AND X11 (SPDX migration) - Change source format from .tar.bz2 to .tar.xz - Add libtool as BuildRequires - Remove CVE patches (now included upstream) - Add patch to lower autoconf requirement to 2.69 - Update dont-forward-keycode-0.patch for new codebase - Remove NEWS from %doc (file not present in 1.8.12) - Resolves: RHEL-111537 - Backport fixes for XIM input sometimes jumbled (RHEL-69791) - Backport NULL check to avoid a crash Resolves: https://issues.redhat.com/browse/RHEL-58298 - Rebase to version 1.8.12 - Update license to MIT AND X11 (SPDX migration) - Change source format from .tar.bz2 to .tar.xz - Add libtool as BuildRequires - Remove CVE patches (now included upstream) - Add patch to lower autoconf requirement to 2.69 - Update dont-forward-keycode-0.patch for new codebase - Remove NEWS from %doc (file not present in 1.8.12) - Resolves: RHEL-111537 - Backport fixes for XIM input sometimes jumbled (RHEL-69791) - Backport NULL check to avoid a crash Resolves: https://issues.redhat.com/browse/RHEL-58298 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - libXcomposite 0.4.5 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - libXcomposite 0.4.5 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - libXcursor 1.2.0 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - libXcursor 1.2.0 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - libXdamage 1.1.5 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - libXdamage 1.1.5 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - CVE fix for: CVE-2026-56001, CVE-2026-56002, CVE-2026-56003 Resolves: https://redhat.atlassian.net/browse/RHEL-191886 Resolves: https://redhat.atlassian.net/browse/RHEL-191933 Resolves: https://redhat.atlassian.net/browse/RHEL-191938 - CVE fix for: CVE-2026-59679 Resolves: https://redhat.atlassian.net/browse/RHEL-221957 - CVE fix for: CVE-2026-44950 Resolves: https://redhat.atlassian.net/browse/RHEL-222029 - CVE fix for: CVE-2026-56001, CVE-2026-56002, CVE-2026-56003 Resolves: https://redhat.atlassian.net/browse/RHEL-191886 Resolves: https://redhat.atlassian.net/browse/RHEL-191933 Resolves: https://redhat.atlassian.net/browse/RHEL-191938 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Drop hardening patches from previous version to keep ABI compatibility - CVE-2023-43786 libX11: stack exhaustion from infinite recursion in PutSubImage() - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to a heap overflow - CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer() - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap - Fix CVE-2022-46285: infinite loop on unclosed comments (#2160230) - Fix CVE-2022-44617: runaway loop with width of 0 (#2160232) - Fix CVE-2022-4883: compression depends on $PATH (#2160242) - Drop hardening patches from previous version to keep ABI compatibility - CVE-2023-43786 libX11: stack exhaustion from infinite recursion in PutSubImage() - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to a heap overflow - CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer() - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap - Fix CVE-2022-46285: infinite loop on unclosed comments (#2160230) - Fix CVE-2022-44617: runaway loop with width of 0 (#2160232) - Fix CVE-2022-4883: compression depends on $PATH (#2160242) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fix build with newer libX11 Resolves: https://redhat.atlassian.net/browse/RHEL-191382 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fix build with newer libX11 Resolves: https://redhat.atlassian.net/browse/RHEL-191382 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Backport upstream MR #1 to fix RHBZ #1888993 (metacity crash) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - libXt 1.2.0 - Work around a gcc10 issue - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - libXt 1.2.0 - Work around a gcc10 issue - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add make to BuildRequires - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add make to BuildRequires - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - new upstream release - preserve failed setfacl return code (RHEL-11833) - rebase to 2.4.0 to fix the following CVEs: - CVE-2026-54369 - Symlink traversal privilege escalation via libacl functions (RHEL-186111) - CVE-2026-54370 - TOCTOU Symlink Traversal via getfacl/setfacl (RHEL-186216) - Add gating configuration (needs a new build) - Initial RHEL packaging based on Fedora package with rpmautospec disabled, disabled documentation (no gi-docgen in RHEL 9) and downstream patch to be able to compile with glib2 2.68 (thanks to Milan Crha) - Resolves: RHEL-3234 - 1.4.2 Resolves: bz#2175754 - Bump build to build against correct Qt version Resolves: bz#2061416 - Rebuild (Qt 5.15.3) Resolves: bz#2061416 - 1.4.1 Resolves: bz#2023181 - 1.4.0 Resolves: bz#1968275 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Disable LTO - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fix building in C99 mode - Backport a patch from upstream to fix handling unknown tags in AppStream metadata - Resolves: #RHEL-34564 - Related: CVE-2026-14164 - Resolves: CVE-2026-14164 - Resolves: CVE-2026-4424 - Resolves: CVE-2026-5121 - Release bump - Resolves: CVE-2026-4111 - Resolves: CVE-2025-5914 - Resolves: CVE-2025-25724 - Resolves: CVE-2026-4424 - Resolves: CVE-2026-5121 - Release bump - Resolves: CVE-2026-4111 - Resolves: CVE-2025-5914 - Resolves: CVE-2025-25724 - Debrand for AlmaLinux - Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding branches and calls to gcov output, but not conditions (RHEL-105416). - Fix testsuite failures when run with -fstack-protector* (PR testsuite/70230, RHEL-116477) - Add cross compilers for ppc64le and s390x for non-production uses (RHEL-94764) - Adjust glibc32 build dependency (RHEL-105072) - Exception handling performance improvements (RHEL-105072) - libgcc: Use _dl_find_object to find DWARF data in unwinder - libgcc: Use lock-free data structures for run-time unwinder registration - Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-100148). - Sync libstdc++ pretty printers to latest GTS (RHEL-81975) - Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90239) - rs6000: Rework ELFv2 support for -fpatchable-function-entry (PR target/99888, RHEL-75806) - Always inline _M_extract_name (RHEL-150603) - update from releases/gcc-15 branch (RHEL-116513) - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185, ada/123289, ada/123302, ada/123306, ada/123371, ada/123589, analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764, c++/116952, c++/120446, c++/121854, c++/121966, c++/122048, c++/122070, c++/122550, c++/122668, c++/122752, c++/122772, c++/122834, c++/122922, c++/123331, c++/123597, debug/121964, diagnostics/120063, fortran/107406, libfortran/122936, libstdc++/120446, libstdc++/122812, libstdc++/122907, libstdc++/123147, middle-end/111817, middle-end/123107, middle-end/123392, middle-end/123703, rtl-optimization/121773, rtl-optimization/122215, rtl-optimization/123121, rtl-optimization/123523, target/117575, target/119130, target/120250, target/121192, target/121485, target/123022, target/123092, target/123155, target/123217, target/123460, target/123484, target/123489, target/123521, target/123607, target/123742, testsuite/123353, tree-optimization/122793, tree-optimization/122868, tree-optimization/123040, tree-optimization/123300, tree-optimization/123351, tree-optimization/123372, tree-optimization/123431, tree-optimization/123513, tree-optimization/123602, tree-optimization/123736, tree-optimization/123741 - Fix glibc32 build dependency (RHEL-113182) - ship libstdc++.modules.json (RHEL-97095) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-94866) - configure with --enable-host-pie --enable-host-bind-now (RHEL-95564) - re-enable annobin-plugin and offload-nvptx - update from releases/gcc-15 branch - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938, c++/119939, c++/119981, c++/119996, c++/120012, c++/120013, c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891, fortran/102900, fortran/119928, fortran/119986, fortran/120049, fortran/120107, fortran/120139, fortran/120163, fortran/120179, fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146, libfortran/120152, libfortran/120153, libfortran/120158, libfortran/120196, libstdc++/118260, libstdc++/119427, libstdc++/119714, libstdc++/120029, libstdc++/120114, libstdc++/120159, libstdc++/120187, libstdc++/120190, libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914, modula2/119915, modula2/120117, modula2/120188, preprocessor/116047, preprocessor/120061, target/119610, testsuite/119909, tree-optimization/111873, tree-optimization/119712, tree-optimization/120043, tree-optimization/120048, tree-optimization/120074, tree-optimization/120089, tree-optimization/120143, tree-optimization/120211 - update from releases/gcc-15 branch - GCC 15.1 release - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407 - Fix GTS version in package name. - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - new upstream release - new upstream release - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - add BR for perl(FileHandle) needed by %check - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - rebase to 2.6.0 to fix the following CVEs: - CVE-2026-54371 - Symlink Traversal Privilege Escalation via getfattr (RHEL-186121) - Use getaddrinfo instead of gethostbyname. (Keith Seitz) - Bumped NVR to release subpackage Related: rhbz#2058409 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Remove workaround for 1890813 now that binutils is fixed. - Workaround __openat_missing_mode compiler error. (Keith Seitz, RH BZ 1890813) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for Python 3.9 - fix RHEL-132706 - use sysusers.d for uuidd - fix RHEL-133956 - login-utils: fix setpwnam() buffer use [CVE-2025-14104] - fix RHEL-123527 - mount: improve --all documentation - fix RHEL-123531 - libblkid: use snprintf() instead of sprintf() - fix RHEL-123536 - libfdisk: (dos) fix off-by-one in maximum last sector calculation - fix RHEL-113638 - lscpu: update ARM identifiers - fix RHEL-108386 - libblkid: (jmicron_raid) backport checksum verification - fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing - fix RHEL-56983 - sulogin: fix POSIX locale use - fix RHEL-25559 - more: make sure we have data on stderr - fix RHEL-34165 - lsipc: fix semaphore USED counter - fix RHEL-25265 - libblkid: Check offset in LUKS2 header - fix RHEL-25559 - more: fix poll() use - lscpu: another tests update (RHEL-12783) - lscpu: update tests, follow max freq for scaling (RHEL-12783) - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1) - fix RHEL-21257 - logger sending process start time not current time with log messages - fix RHEL-16071 - issues in libblkid - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value - fix RHEL-14612 - Userspace mount options are not preserved for NFS - Update to 1.5.0 - Update to 1.3.0, which simplifies the license expression due to crate dependency changes. - Remove %setup -q /usr/bin/git init -q /usr/bin/git config user.name "rpm-build" /usr/bin/git config user.email "<rpm-build>" /usr/bin/git config gc.auto 0 /usr/bin/git add --force . /usr/bin/git commit -q --allow-empty -a\ --author "rpm-build <rpm-build>" -m "libblkio-1.5.0 base" - Import Fedora rpm 1.2.2-4 spec file with license updates (https://src.fedoraproject.org/rpms/libblkio/pull-request/1) - tests: Adjust sizes in generic FS resize test for VFAT resize Resolves: RHEL-124142 - lvm-dbus: Fix calling lvcreate with empty list of PVs Resolves: RHEL-113928 - Don't allow suid and dev set on fs resize Resolves: RHEL-96039 - crypto: Add a function to set persistent flags for LUKS Resolves: RHEL-82886 - nvme: Add bd_nvme_is_tech_avail to the API file Resolves: RHEL-59588 - tests: Remove unreliable nvme attribute checks Resolves: RHEL-16126 - lvm: Add support for starting and stopping VG locking Resolves: RHEL-15921 - nvme: HostID fixes for TP4126 Resolves: RHEL-1375 - nvme: Stack smashing fixes Resolves: RHEL-13127 Resolves: RHEL-8037 - tests: Adjust sizes in generic FS resize test for VFAT resize Resolves: RHEL-124142 - lvm-dbus: Fix calling lvcreate with empty list of PVs Resolves: RHEL-113928 - Don't allow suid and dev set on fs resize Resolves: RHEL-96039 - crypto: Add a function to set persistent flags for LUKS Resolves: RHEL-82886 - nvme: Add bd_nvme_is_tech_avail to the API file Resolves: RHEL-59588 - tests: Remove unreliable nvme attribute checks Resolves: RHEL-16126 - lvm: Add support for starting and stopping VG locking Resolves: RHEL-15921 - nvme: HostID fixes for TP4126 Resolves: RHEL-1375 - nvme: Stack smashing fixes Resolves: RHEL-13127 Resolves: RHEL-8037 - tests: Adjust sizes in generic FS resize test for VFAT resize Resolves: RHEL-124142 - lvm-dbus: Fix calling lvcreate with empty list of PVs Resolves: RHEL-113928 - Don't allow suid and dev set on fs resize Resolves: RHEL-96039 - crypto: Add a function to set persistent flags for LUKS Resolves: RHEL-82886 - nvme: Add bd_nvme_is_tech_avail to the API file Resolves: RHEL-59588 - tests: Remove unreliable nvme attribute checks Resolves: RHEL-16126 - lvm: Add support for starting and stopping VG locking Resolves: RHEL-15921 - nvme: HostID fixes for TP4126 Resolves: RHEL-1375 - nvme: Stack smashing fixes Resolves: RHEL-13127 Resolves: RHEL-8037 - tests: Adjust sizes in generic FS resize test for VFAT resize Resolves: RHEL-124142 - lvm-dbus: Fix calling lvcreate with empty list of PVs Resolves: RHEL-113928 - Don't allow suid and dev set on fs resize Resolves: RHEL-96039 - crypto: Add a function to set persistent flags for LUKS Resolves: RHEL-82886 - nvme: Add bd_nvme_is_tech_avail to the API file Resolves: RHEL-59588 - tests: Remove unreliable nvme attribute checks Resolves: RHEL-16126 - lvm: Add support for starting and stopping VG locking Resolves: RHEL-15921 - nvme: HostID fixes for TP4126 Resolves: RHEL-1375 - nvme: Stack smashing fixes Resolves: RHEL-13127 Resolves: RHEL-8037 - tests: Adjust sizes in generic FS resize test for VFAT resize Resolves: RHEL-124142 - lvm-dbus: Fix calling lvcreate with empty list of PVs Resolves: RHEL-113928 - Don't allow suid and dev set on fs resize Resolves: RHEL-96039 - crypto: Add a function to set persistent flags for LUKS Resolves: RHEL-82886 - nvme: Add bd_nvme_is_tech_avail to the API file Resolves: RHEL-59588 - tests: Remove unreliable nvme attribute checks Resolves: RHEL-16126 - lvm: Add support for starting and stopping VG locking Resolves: RHEL-15921 - nvme: HostID fixes for TP4126 Resolves: RHEL-1375 - nvme: Stack smashing fixes Resolves: RHEL-13127 Resolves: RHEL-8037 - tests: Adjust sizes in generic FS resize test for VFAT resize Resolves: RHEL-124142 - lvm-dbus: Fix calling lvcreate with empty list of PVs Resolves: RHEL-113928 - Don't allow suid and dev set on fs resize Resolves: RHEL-96039 - crypto: Add a function to set persistent flags for LUKS Resolves: RHEL-82886 - nvme: Add bd_nvme_is_tech_avail to the API file Resolves: RHEL-59588 - tests: Remove unreliable nvme attribute checks Resolves: RHEL-16126 - lvm: Add support for starting and stopping VG locking Resolves: RHEL-15921 - nvme: HostID fixes for TP4126 Resolves: RHEL-1375 - nvme: Stack smashing fixes Resolves: RHEL-13127 Resolves: RHEL-8037 - tests: Adjust sizes in generic FS resize test for VFAT resize Resolves: RHEL-124142 - lvm-dbus: Fix calling lvcreate with empty list of PVs Resolves: RHEL-113928 - Don't allow suid and dev set on fs resize Resolves: RHEL-96039 - crypto: Add a function to set persistent flags for LUKS Resolves: RHEL-82886 - nvme: Add bd_nvme_is_tech_avail to the API file Resolves: RHEL-59588 - tests: Remove unreliable nvme attribute checks Resolves: RHEL-16126 - lvm: Add support for starting and stopping VG locking Resolves: RHEL-15921 - nvme: HostID fixes for TP4126 Resolves: RHEL-1375 - nvme: Stack smashing fixes Resolves: RHEL-13127 Resolves: RHEL-8037 - tests: Adjust sizes in generic FS resize test for VFAT resize Resolves: RHEL-124142 - lvm-dbus: Fix calling lvcreate with empty list of PVs Resolves: RHEL-113928 - Don't allow suid and dev set on fs resize Resolves: RHEL-96039 - crypto: Add a function to set persistent flags for LUKS Resolves: RHEL-82886 - nvme: Add bd_nvme_is_tech_avail to the API file Resolves: RHEL-59588 - tests: Remove unreliable nvme attribute checks Resolves: RHEL-16126 - lvm: Add support for starting and stopping VG locking Resolves: RHEL-15921 - nvme: HostID fixes for TP4126 Resolves: RHEL-1375 - nvme: Stack smashing fixes Resolves: RHEL-13127 Resolves: RHEL-8037 - tests: Adjust sizes in generic FS resize test for VFAT resize Resolves: RHEL-124142 - lvm-dbus: Fix calling lvcreate with empty list of PVs Resolves: RHEL-113928 - Don't allow suid and dev set on fs resize Resolves: RHEL-96039 - crypto: Add a function to set persistent flags for LUKS Resolves: RHEL-82886 - nvme: Add bd_nvme_is_tech_avail to the API file Resolves: RHEL-59588 - tests: Remove unreliable nvme attribute checks Resolves: RHEL-16126 - lvm: Add support for starting and stopping VG locking Resolves: RHEL-15921 - nvme: HostID fixes for TP4126 Resolves: RHEL-1375 - nvme: Stack smashing fixes Resolves: RHEL-13127 Resolves: RHEL-8037 - tests: Adjust sizes in generic FS resize test for VFAT resize Resolves: RHEL-124142 - lvm-dbus: Fix calling lvcreate with empty list of PVs Resolves: RHEL-113928 - Don't allow suid and dev set on fs resize Resolves: RHEL-96039 - crypto: Add a function to set persistent flags for LUKS Resolves: RHEL-82886 - nvme: Add bd_nvme_is_tech_avail to the API file Resolves: RHEL-59588 - tests: Remove unreliable nvme attribute checks Resolves: RHEL-16126 - lvm: Add support for starting and stopping VG locking Resolves: RHEL-15921 - nvme: HostID fixes for TP4126 Resolves: RHEL-1375 - nvme: Stack smashing fixes Resolves: RHEL-13127 Resolves: RHEL-8037 - tests: Adjust sizes in generic FS resize test for VFAT resize Resolves: RHEL-124142 - lvm-dbus: Fix calling lvcreate with empty list of PVs Resolves: RHEL-113928 - Don't allow suid and dev set on fs resize Resolves: RHEL-96039 - crypto: Add a function to set persistent flags for LUKS Resolves: RHEL-82886 - nvme: Add bd_nvme_is_tech_avail to the API file Resolves: RHEL-59588 - tests: Remove unreliable nvme attribute checks Resolves: RHEL-16126 - lvm: Add support for starting and stopping VG locking Resolves: RHEL-15921 - nvme: HostID fixes for TP4126 Resolves: RHEL-1375 - nvme: Stack smashing fixes Resolves: RHEL-13127 Resolves: RHEL-8037 - tests: Adjust sizes in generic FS resize test for VFAT resize Resolves: RHEL-124142 - lvm-dbus: Fix calling lvcreate with empty list of PVs Resolves: RHEL-113928 - Don't allow suid and dev set on fs resize Resolves: RHEL-96039 - crypto: Add a function to set persistent flags for LUKS Resolves: RHEL-82886 - nvme: Add bd_nvme_is_tech_avail to the API file Resolves: RHEL-59588 - tests: Remove unreliable nvme attribute checks Resolves: RHEL-16126 - lvm: Add support for starting and stopping VG locking Resolves: RHEL-15921 - nvme: HostID fixes for TP4126 Resolves: RHEL-1375 - nvme: Stack smashing fixes Resolves: RHEL-13127 Resolves: RHEL-8037 - tests: Adjust sizes in generic FS resize test for VFAT resize Resolves: RHEL-124142 - lvm-dbus: Fix calling lvcreate with empty list of PVs Resolves: RHEL-113928 - Don't allow suid and dev set on fs resize Resolves: RHEL-96039 - crypto: Add a function to set persistent flags for LUKS Resolves: RHEL-82886 - nvme: Add bd_nvme_is_tech_avail to the API file Resolves: RHEL-59588 - tests: Remove unreliable nvme attribute checks Resolves: RHEL-16126 - lvm: Add support for starting and stopping VG locking Resolves: RHEL-15921 - nvme: HostID fixes for TP4126 Resolves: RHEL-1375 - nvme: Stack smashing fixes Resolves: RHEL-13127 Resolves: RHEL-8037 - tests: Adjust sizes in generic FS resize test for VFAT resize Resolves: RHEL-124142 - lvm-dbus: Fix calling lvcreate with empty list of PVs Resolves: RHEL-113928 - Don't allow suid and dev set on fs resize Resolves: RHEL-96039 - crypto: Add a function to set persistent flags for LUKS Resolves: RHEL-82886 - nvme: Add bd_nvme_is_tech_avail to the API file Resolves: RHEL-59588 - tests: Remove unreliable nvme attribute checks Resolves: RHEL-16126 - lvm: Add support for starting and stopping VG locking Resolves: RHEL-15921 - nvme: HostID fixes for TP4126 Resolves: RHEL-1375 - nvme: Stack smashing fixes Resolves: RHEL-13127 Resolves: RHEL-8037 - tests: Adjust sizes in generic FS resize test for VFAT resize Resolves: RHEL-124142 - lvm-dbus: Fix calling lvcreate with empty list of PVs Resolves: RHEL-113928 - Don't allow suid and dev set on fs resize Resolves: RHEL-96039 - crypto: Add a function to set persistent flags for LUKS Resolves: RHEL-82886 - nvme: Add bd_nvme_is_tech_avail to the API file Resolves: RHEL-59588 - tests: Remove unreliable nvme attribute checks Resolves: RHEL-16126 - lvm: Add support for starting and stopping VG locking Resolves: RHEL-15921 - nvme: HostID fixes for TP4126 Resolves: RHEL-1375 - nvme: Stack smashing fixes Resolves: RHEL-13127 Resolves: RHEL-8037 - tests: Adjust sizes in generic FS resize test for VFAT resize Resolves: RHEL-124142 - lvm-dbus: Fix calling lvcreate with empty list of PVs Resolves: RHEL-113928 - Don't allow suid and dev set on fs resize Resolves: RHEL-96039 - crypto: Add a function to set persistent flags for LUKS Resolves: RHEL-82886 - nvme: Add bd_nvme_is_tech_avail to the API file Resolves: RHEL-59588 - tests: Remove unreliable nvme attribute checks Resolves: RHEL-16126 - lvm: Add support for starting and stopping VG locking Resolves: RHEL-15921 - nvme: HostID fixes for TP4126 Resolves: RHEL-1375 - nvme: Stack smashing fixes Resolves: RHEL-13127 Resolves: RHEL-8037 - tests: Adjust sizes in generic FS resize test for VFAT resize Resolves: RHEL-124142 - lvm-dbus: Fix calling lvcreate with empty list of PVs Resolves: RHEL-113928 - Don't allow suid and dev set on fs resize Resolves: RHEL-96039 - crypto: Add a function to set persistent flags for LUKS Resolves: RHEL-82886 - nvme: Add bd_nvme_is_tech_avail to the API file Resolves: RHEL-59588 - tests: Remove unreliable nvme attribute checks Resolves: RHEL-16126 - lvm: Add support for starting and stopping VG locking Resolves: RHEL-15921 - nvme: HostID fixes for TP4126 Resolves: RHEL-1375 - nvme: Stack smashing fixes Resolves: RHEL-13127 Resolves: RHEL-8037 - Rebuild with LLVM 21 (RHEL-108343) - Rebase to version 0.35.0 (RHEL-79001) - Fix bpf-ksnoop (RHEL-96166) - Fix bpf-javagc (RHEL-78173) - Fix bpf-klockstat on aarch64 and ppc64le debug (RHEL-78619) - Remove macro in comment. - Rebase to version 0.34.0 (RHEL-78920) - Rebuild with LLVM 20 (RHEL-81773) - Fix biosnoop pattern option (RHEL-90848) - Fix bpf-klockstat on aarch64 and ppc64le (RHEL-78619) - Remove unsupported bpf-bcachefs* and bpf-zfs* tools (RHEL-78166) - Remove unsupported slaratetop tool (RHEL-78162) - Rebuild with libbpf 1.5.0 - Rebase to the latest version (RHEL-63883) - Fix gating tests of libbpf gating. - Explicitely disable blazesym support (RHEL-49640) - Fic bio* tools (RHEL-61615) - Rebuild with LLVM 18 (RHEL-28684) - Fix upgrades from non-alternativized versions/packages - Fix upgrades from non-alternativized versions/packages - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Translated using Weblate (Hebrew) (sh.yaron) - Added translation using Weblate (Hebrew) (sh.yaron) - Add support to ppc64le for debian build (74309971+gururajrkatti) - Translated using Weblate (Finnish) (ricky.tigg) - tools: Read input from stdin when not running in a tty (vtrefny) - travis: Print logs after failed tests (vtrefny) - tests: Run pylint and pycodestyle on bscalc (vtrefny) - bscalc: Add option to print only single "human readable" result (vtrefny) - travis: Add --nogpgcheck when using dnf on Fedora (vtrefny) - Translated using Weblate (Asturian) (fitoschido) - Update translation files (noreply) - Translated using Weblate (Spanish) (fitoschido) - Sync spec with downstream (vtrefny) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add Travis build status badge (vtrefny) - Add Travis CI config and Dockerfiles for running tests (vtrefny) - Add ansible playbook for installing test dependencies (vtrefny) - remove msgcat dependency (Aduskett) - Translated using Weblate (Bengali (India)) (akarshan.biswas) - Update translation files (noreply) - Added translation using Weblate (Bengali (India)) (akarshan.biswas) - Fix library version in pkgconfig file (vtrefny) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for Python 3.9 - Fix memory leak in bs_size_new_from_str (vtrefny) - Translated using Weblate (Turkish) (oguzersen) - add translation platform widget (jean-baptiste) - Update translation files (noreply) - Do not regenerate POT file during 'make release' (vtrefny) - Remove Zanata from our build and release processes (vtrefny) - Add PO files to git (vtrefny) - Sync spec with downstream (vtrefny) - Require the same version of python3-bytesize in libbytesize-tools (v.podzimek) - src/gettext: fix warning if gettext is already present (giulio.benetti) - Update README.md (vpodzime) - fix build on shells where test == fails (tbier) - Add POT file to git and do not rebuild it during every build (vtrefny) - Add -q option to disable warnings. Resolves: rhbz#2222172 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add -q option to disable warnings. Resolves: rhbz#2222172 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add -q option to disable warnings. Resolves: rhbz#2222172 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add -q option to disable warnings. Resolves: rhbz#2222172 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix TOCTOU race condition in cap_set_file() (CVE-2026-4878) Resolves: RHEL-169312 - Fix typos in the cap_from_text.3 man page Resolves: RHEL-1838 - Update apply-disable patch (#2045857) Resolves: rhbz#2045857 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Adjust syslog warning for bad use of capng_apply - Add syslog warning for bad use of capng_apply - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - New upstream bugfix release - Add temporary patch disabling bounding set error codes - New upstream bugfix release - New upstream feature release - Update apply-disable patch (#2045857) Resolves: rhbz#2045857 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Adjust syslog warning for bad use of capng_apply - Add syslog warning for bad use of capng_apply - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - New upstream bugfix release - Add temporary patch disabling bounding set error codes - New upstream bugfix release - New upstream feature release - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - updated to 2.1.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - updated to 10.2+2.0.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - new upstream release - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuild for ICU 67 - new upstream release - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuild for ICU 65 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for removed libstdc++ symbol (#1937698) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for Boost 1.75 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for Boost 1.73 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - ext2fs: make sure we have at least EXT2_FIRST_INO + 1 inodes - Fix: e2fsprogs: online resize fails - Related: RHEL-76095 - Bump release to perform build verification for gating changes - Related: RHEL-71250 - rebuild to incorporate libss-devel package - Related: RHEL-19059 - Change the xattr entry hash to use an unsighed char by default - Related: RHEL-10467 - openssl: fix libssh compatibility by preserving original SSL_CTX behavior (RHEL-134721) - openssl: fix libssh compatibility in crypto-policy patch (RHEL-134721) - http: fix crash in rate-limited upload (RHEL-131696) - openssl: respect system crypto policy for TLS max version (RHEL-128914) - rebuild for c9s (RHEL-125838) - cookie: don't treat the leading slash as trailing (CVE-2025-9086) Resolves: RHEL-121659 - revert several disabled tests related to openssl/valgrind (RHEL-99465) - noproxy: support proxies specified using cidr notation (RHEL-81412) - make up incomplete patch for host name wildcard checking (RHEL-5675) - eliminate use of obsolete patch syntax (RHEL-65791) - http2: make sure pause is done on HTTP (RHEL-85847) - provide common cleanup method for push headers (CVE-2024-2398) - fix missing %patch macros for Patch46 and Patch47 - fix HTTP Negotiate connection reuse auth bypass (CVE-2026-1965) - fix OAuth2 bearer token leak via redirect and netrc (CVE-2026-3783) - tests: disable flaky test 1206 on x86_64 (FTP PORT timeout under valgrind) - tests: disable flaky tests 3000, 3001 on i686 (stunnel startup race) - fix SSH host key mismatch on type difference (CVE-2026-9547) - fix TLS/STARTTLS connection reuse vulnerability (CVE-2026-8286) - openssl: fix libssh compatibility by preserving original SSL_CTX behavior (RHEL-134721) - openssl: fix libssh compatibility in crypto-policy patch (RHEL-134721) - http: fix crash in rate-limited upload (RHEL-131696) - openssl: respect system crypto policy for TLS max version (RHEL-128914) - rebuild for c9s (RHEL-125838) - cookie: don't treat the leading slash as trailing (CVE-2025-9086) Resolves: RHEL-121659 - add sasl service name to connection reuse checks (CVE-2026-8458) - detect proxy changes read from environment (CVE-2026-8927) - fix missing %patch macros for Patch46 and Patch47 - fix HTTP Negotiate connection reuse auth bypass (CVE-2026-1965) - fix OAuth2 bearer token leak via redirect and netrc (CVE-2026-3783) - tests: disable flaky test 1206 on x86_64 (FTP PORT timeout under valgrind) - tests: disable flaky tests 3000, 3001 on i686 (stunnel startup race) - fix SSH host key mismatch on type difference (CVE-2026-9547) - fix TLS/STARTTLS connection reuse vulnerability (CVE-2026-8286) - openssl: fix libssh compatibility by preserving original SSL_CTX behavior (RHEL-134721) - openssl: fix libssh compatibility in crypto-policy patch (RHEL-134721) - http: fix crash in rate-limited upload (RHEL-131696) - openssl: respect system crypto policy for TLS max version (RHEL-128914) - fix cookie injection via trailing dot super cookies (CVE-2026-8924) - fix digest auth state leak on origin or credential change (CVE-2026-11856) - add sasl service name to connection reuse checks (CVE-2026-8458) - detect proxy changes read from environment (CVE-2026-8927) - fix missing %patch macros for Patch46 and Patch47 - fix HTTP Negotiate connection reuse auth bypass (CVE-2026-1965) - fix OAuth2 bearer token leak via redirect and netrc (CVE-2026-3783) - tests: disable flaky test 1206 on x86_64 (FTP PORT timeout under valgrind) - tests: disable flaky tests 3000, 3001 on i686 (stunnel startup race) - fix SSH host key mismatch on type difference (CVE-2026-9547) - fix TLS/STARTTLS connection reuse vulnerability (CVE-2026-8286) - openssl: fix libssh compatibility by preserving original SSL_CTX behavior (RHEL-134721) - openssl: fix libssh compatibility in crypto-policy patch (RHEL-134721) - http: fix crash in rate-limited upload (RHEL-131696) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild the package - Resolves: #1973518 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 0.2.13 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Fixes FTBFS - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild the package - Resolves: #1973518 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 0.2.13 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Fixes FTBFS - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Ship libdazzle-devel in CRB Resolves: RHEL-126955 - Adress rpminspect issue - missing debuginfo for db_converter - Use a fixed path, /usr/lib64/libc.so.6 for 64-bit targets - Rebase db_converter tool to the latest version - Add db_converter into -utils subpackage - It allowes to convert BerkeleyDB database format to GDBM/LMDB format - Resolves: RHEL-35607 - Adress rpminspect issue - missing debuginfo for db_converter - Use a fixed path, /usr/lib64/libc.so.6 for 64-bit targets - Rebase db_converter tool to the latest version - Add db_converter into -utils subpackage - It allowes to convert BerkeleyDB database format to GDBM/LMDB format - Resolves: RHEL-35607 - Update to 0.1.1 Resolves: rhbz#2140414 - Version bump for rebuild - Version bump for resync - Initial Fedora packaging - Rebuild for CRB again, tpelka messed up Resolves: RHEL-120218 - Rebuild for CRB Resolves: RHEL-120218 - Update to 2.4.128-1 - Added amdgpu-slice.patch and amdgpu-fallback.patch - Update to 2.4.127 amdgpu-apu.patch: Read model name from /proc/cpuinfo for APUs - Revert upstream commit ffaa3ce144be ("2.4.122, Build Intel on all arches") libpciaccess is not available in RHEL 9 aarch64, ppc64le and s390x Resolves: https://issues.redhat.com/browse/RHEL-53869 - Update to 2.4.123 Resolves: https://issues.redhat.com/browse/RHEL-53869 - Update to 2.4.121 - Update to 2.4.120 - Fix findings from static application security testing (SAST) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - update to 6.1.0 (#1815805) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - rebuild for libdvdread ABI bump - update to 6.0.1 (#1761253) - use gpgverify macro - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - update to 6.1.1 (#1815806) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - track ABI to avoid accidental bumps - update to 6.0.2 (#1761254) - use new gpgverify macro - Rework the selection of functions to represent in BTF, for instance: - Skip functions that passes values thru the stack when those structs don't have expected alignment due to some attribute usage that then causes problems with BTF trampolines due to lack of expressiveness in BTF to signal such special cases. - Skip objects (compile units) without DWARF: don't stop a multi object encoding session just because one doesn't have any DWARF in it. - Fix BTF dedup by updating libbpf. - Fix the inference of the explicit alignment attribute of zero length arrays, like struct skb_ext->data[] in the Linux kernel. Important as BTF has no no explicit alignment attribute encoding. - Fix the inference of alignments after bitfields, such as in struct nft_rule_dp->data[] after ->handle:42, also in the Linux kernel. - Fix segfault with --show_reorg_steps option, e.g. pahole -R -S -C task_struct. - Add comparision of functions encoded in BTF between baseline 'master' branch and current branch, i.e. 'next'. - New release: 1.30 - Better detection of abort during DWARF loader thread processing - pahole now detects presence of libbpf APIs and BTF features using weak function declarations when built using a shared library libbpf - Type tags are emitted for BPF arena pointers with new BTF "attributes" feature - New release: 1.29 - Multithreading is now in the DWARF loader using a jobs queue and a pool of worker threads. - The BTF encoding now is always reproducible, and as fast/faster than before. - The memory consumption is reduced. - Support for multiple BTF_DECL_TAGs pointing to same tag. - Verify that pfunct prints btf_decl_tags read from BTF. - Don't print functions twice when using 'pfunct -f function_name'. - New release: 1.28 - Various improvements to reduce the memory footprint of pahole, notably when doing BTF encoding. - Show flexible arrays statistics - Add '--padding N' and '--padding_ge N' to show structs with paddings - Introduce --running_kernel_vmlinux to find a vmlinux that matches the build-id of the running kernel. - Don't stop pfunct output at the first function that matches a filter, show all of them - Allow encoding data about all global variables, not just per CPU ones - Handle .BTF_ids section endianness, fully supporting cross builds - Generate decl tags for bpf_fastcall for eligible kfuncs - Add "distilled_base" BTF feature to split BTF generation. - Use the ELF_C_READ_MMAP mode with libelf, reducing peak memory utilization - Allow overriding /sys/kernel/btf/vmlinux via the PAHOLE_VMLINUX_BTF_FILENAME env var - Allow setting the list of compile units via PAHOLE_LANG_EXCLUDE env var - Serialize access to elfutils dwarf_getlocation(). - Honour --lang_exclude when merging LTO built CUs. - Add the debuginfod client cache directory to the vmlinux search path. - Print the CU's language when a tag isn't supported. - Initial support for GNU_formal_parameter_pack, GNU_template_parameter_pack, template_value_param and template_type_param DWARF tags. - Improve the parameter parsing by checking DW_OP_[GNU_]entry_value - Introduce a tests/ directory with regression tests - Backport upstream bugfixes for clang builds Resolves: RHEL-54022 - Resolves: RHEL-30780 - New release: v1.26 - When expanding types using 'pahole -E' do it for union and struct typedefs and for enums too. - Print number of holes, bit holes and bit paddings in class member types. - Introduce --contains_enumerator=ENUMERATOR_NAME: - Fix pretty printing using DWARF, waiting for a CU with both class (-C) and a specified "type_enum". - Add support for DW_TAG_constant in the DWARF loader, first seen in Go DWARF. - Fix loading DW_TAG_subroutine_type generated by the Go compiler. - Fix loading of 32-bit signed enums from BTF. - Add 'pahole --btf_features' to allow consumers to specify an opt-in set of features they want to use in BTF encoding. - Parallelize loading BTF and DWARF, speeding up a bit btfdiff. - Do type expansion to cover "private" types and enumerations in btfdiff. - New release: v1.27 - Reproducible parallel builds: multiple runs with different number of loading/encoding threads produce the same result. - Inject kfunc decl tags into BTF from the BTF IDs ELF section in the Linux kernel vmlinux file. - Sanitize unsupported DWARF int type with greater-than-16 byte, as BTF doesn't support it. - Initial support for BTF_KIND_DECL_TAG in the BTF loader, adding support in pfunct output. - Fix hole discovery with inheritance in C++. - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebase to upstream release 13.5 - Add -j1 also into build section - Resolves: #1975438 - Disable parallel build - Resolves: #1975438 - Fix removing of readline callback handler (RHEL-133732) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - bump NVR to trigger CI - add gating test that uses acd-client.c. Related: rhbz#1973511 - drop tests dependency on libell-devel. Related: rhbz#1973511 - Avoid use of inet_ntoa(). Related: rhbz#1967524 - Update to 0.41. Related: rhbz#1967524 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 0.39 - Update to 0.38 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 0.36 - Update to 0.35 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.5.5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 1.5.4 - Rebuild for libglvnd 1.2, drop work-arounds - epoxy.pc: -Requires.private: gl egl (#1744320) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.5.5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 1.5.4 - Rebuild for libglvnd 1.2, drop work-arounds - epoxy.pc: -Requires.private: gl egl (#1744320) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Add a substitute config for ArialMT again. Resolves: RHEL-2273 - Add a substitute config for ArialMT again. Resolves: RHEL-2273 - Add a substitute config for ArialMT again. Resolves: RHEL-2273 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: rhbz#1973542 Add gating tests - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Require mkfontscale and mkfontdir directly, not xorg-x11-font-utils (#1933537) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Resolves:rh#1747737 packages with conflicts - Add a substitute config for ArialMT again. Resolves: RHEL-2273 - Add a substitute config for ArialMT again. Resolves: RHEL-2273 - Rebuild libestr to include devel package in the CRB resolves: rhbz#2071651 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebase to 0.1.11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - new upstream release - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - fix build with latest boost - add fix for contemporary glm - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - libevdev 1.11.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - libevdev 1.10.1 - libevdev 1.10.0 - libevdev 1.10 rc2 - libevdev 1.10 rc1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - libevdev 1.9.1 - this time with sources - Rework the patch from 2.1.12-7 to prevent ABI changes. - Related: RHEL-26128 - Patch duplicate file descriptor manipulation - Resolves: RHEL-26128 - Update to 2.1.13. - The following CVEs are fixed: - CVE-2026-63383 - CVE-2026-63384 - CVE-2026-63388 - CVE-2026-63387 - CVE-2026-63379 - CVE-2026-63381 - CVE-2026-63382 - CVE-2026-63385 - Rework the patch from 2.1.12-7 to prevent ABI changes. - Related: RHEL-26128 - Patch duplicate file descriptor manipulation - Resolves: RHEL-26128 - Update to 2.1.13. - The following CVEs are fixed: - CVE-2026-63383 - CVE-2026-63384 - CVE-2026-63388 - CVE-2026-63387 - CVE-2026-63379 - CVE-2026-63381 - CVE-2026-63382 - CVE-2026-63385 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Fix CVE-2020-0181, CVE-2020-0198, and CVE-2020-0452 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 0.6.22 - .spec cleanup - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fix integer underflow in MakerNote decoding (CVE-2026-40386) - Fix integer overflow in Nikon MakerNote handling (CVE-2026-40385) Resolves: RHEL-170253, RHEL-170234 - Ship libexttextcat-devel in CRB Resolves: RHEL-126949 - Rebuilt for RHEL-9.8 - Resolves: RHEL-97660, RHEL-97651, RHEL-90252 - bump release to rebuild in sidetag - Resolves: RHEL-97660, RHEL-97651, RHEL-90252 - Update to upstream 2.3.1 - Resolves: RHEL-97660, RHEL-97651, RHEL-90252 - Update to upstream 2.1.0 - Resolves: RHEL-73064 - Update to upstream 1.22.0 - Resolves: RHEL-46648 - Rebuild Resolves: rhbz#2227786 - Address CVE-2020-12762 Resolves: rhbz#2203172 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Gating rebuild [bz#1974188] - Resolves: bz#1974188 (Define tests, including gating tests, for dtc) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for Python 3.9 - Update to 1.6.0 - Upstream patch to fix gcc-10 build - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use __cc macro instead of hard-coding gcc - Use /etc/sysconfig/libffi-force-shared-memory-check-first to override selinux permissions check for shared memory access (#2152228) - Remove compat-libffi3.1 subpackage to complete SONAME transition. Related: rhbz#1891914 - Rebuilt for libffi 3.4.2 SONAME transition. Related: rhbz#1891914 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Drop pkgconf support for compat-libffi3.1. - Add temporary compat-libffi3.1 for library transition. - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Rebase to libffi 3.4.2. - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add make to BuildRequires - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Debrand for AlmaLinux - Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding branches and calls to gcov output, but not conditions (RHEL-105416). - Fix testsuite failures when run with -fstack-protector* (PR testsuite/70230, RHEL-116477) - Add cross compilers for ppc64le and s390x for non-production uses (RHEL-94764) - Adjust glibc32 build dependency (RHEL-105072) - Exception handling performance improvements (RHEL-105072) - libgcc: Use _dl_find_object to find DWARF data in unwinder - libgcc: Use lock-free data structures for run-time unwinder registration - Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-100148). - Sync libstdc++ pretty printers to latest GTS (RHEL-81975) - Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90239) - rs6000: Rework ELFv2 support for -fpatchable-function-entry (PR target/99888, RHEL-75806) - Debrand for AlmaLinux - Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding branches and calls to gcov output, but not conditions (RHEL-105416). - Fix testsuite failures when run with -fstack-protector* (PR testsuite/70230, RHEL-116477) - Add cross compilers for ppc64le and s390x for non-production uses (RHEL-94764) - Adjust glibc32 build dependency (RHEL-105072) - Exception handling performance improvements (RHEL-105072) - libgcc: Use _dl_find_object to find DWARF data in unwinder - libgcc: Use lock-free data structures for run-time unwinder registration - Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-100148). - Sync libstdc++ pretty printers to latest GTS (RHEL-81975) - Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90239) - rs6000: Rework ELFv2 support for -fpatchable-function-entry (PR target/99888, RHEL-75806) - Fix CVE-2024-2236 (RHEL-34579) - Provide FIPS indicators for MD and HMACs - Improve PCT tests for ECDSA and always run them after key is generated - Add missing guards for FIPS status in md_sign/verify function - Provider FIPS indicators for public key operation flags - Avoid usage of invalid arguments sizes for PBKDF2 in FIPS mode - Do not allow large salt lengths with RSA-PSS padding - Disable X9.31 key generation in FIPS mode - Update the FIPS integrity checking code to upstream version - Update cipher modes FIPS indicators for AES WRAP and GCM - Disable jitter entropy generator - Fix unneeded PBKDF2 passphrase length limitation in FIPS mode - Enforce HMAC key lengths in MD API in FIPS mode - Properly enforce KDF limits in FIPS mode (#2130275) - Fix memory leak in large digest test (#2129150) - Fix function name FIPS service indicator by disabling PK encryption and decryption (#2130275) - Skip RSA encryption/decryption selftest in FIPS mode (#2130275) - Fix SHA3 digests with large inputs (#2129150) - Fix FIPS RSA PCT (#2128455) - Fix RSA FIPS Keygen that non-deterministically fails (#2130275) - Get max 32B from getrandom in FIPS mode (#2130275) - Allow signature verification with smaller RSA keys (#2083846) - Allow short salt for KDF (#2114870) - Reseed the kernel DRBG by using GRND_RANDOM (#2118695) - Address FIPS review comments around selftests (#2118695) - Disable RSA-OAEP in FIPS mode (#2118695) - Bump version to fix wrong build target. - Fix CVE-2026-41989: Denial of Service and buffer overflow via crafted ECDH ciphertext - Fix CVE-2024-2236 (RHEL-34579) - Drop the unused BuildRequires on liboauth Resolves: #1996380 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 0.18.1 - Update to 0.18.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Remove uhttpmock-devel from BuildRequires on RHEL 9 - Update to 0.17.13 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Minor conditional fixes for ELN - Drop the unused BuildRequires on liboauth Resolves: #1996380 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 0.18.1 - Update to 0.18.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Remove uhttpmock-devel from BuildRequires on RHEL 9 - Update to 0.17.13 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Minor conditional fixes for ELN - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 0.20.4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 0.20.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 0.20.2 - Rebase to the latest upstream 0.14.3 (RHEL-88597) - Update to 1.3.4 for nvidia drivers - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.3.2 - Forward few patches from rhel - Update to 1.3.1 - Update to 1.3.0 - Bump mesa-libGLES obsoletes version as well - Update to 1.3.4 for nvidia drivers - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.3.2 - Forward few patches from rhel - Update to 1.3.1 - Update to 1.3.0 - Bump mesa-libGLES obsoletes version as well - Update to 1.3.4 for nvidia drivers - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.3.2 - Forward few patches from rhel - Update to 1.3.1 - Update to 1.3.0 - Bump mesa-libGLES obsoletes version as well - Update to 1.3.4 for nvidia drivers - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.3.2 - Forward few patches from rhel - Update to 1.3.1 - Update to 1.3.0 - Bump mesa-libGLES obsoletes version as well - Update to 1.3.4 for nvidia drivers - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.3.2 - Forward few patches from rhel - Update to 1.3.1 - Update to 1.3.0 - Bump mesa-libGLES obsoletes version as well - Update to 1.3.4 for nvidia drivers - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.3.2 - Forward few patches from rhel - Update to 1.3.1 - Update to 1.3.0 - Bump mesa-libGLES obsoletes version as well - Update to 1.3.4 for nvidia drivers - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.3.2 - Forward few patches from rhel - Update to 1.3.1 - Update to 1.3.0 - Bump mesa-libGLES obsoletes version as well - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Avoid using bad function inet_addr - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Address coverity reported issues - New upstream release (#1941582) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - New upstream release (#1909749) - New upstream release (#1800640) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - new upstream release 1.37 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - New upstream release 2.5.27 (#1931187) - New upstream release 2.5.26 (#1887201) - Add support for hwdb output (#1658259) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - New upstream release 2.5.25 (#1839543) - Fix configure check for symbol versioning with GCC 10 (rhbz #1862745) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add libcurl for Lumix WIFI support - Update to 2.5.24 release - Update to 1.6.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.6.2 - Update to 1.6.1 - Update to 1.6 - Update to 1.5.3 - Update to 1.5.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for Python 3.9 - Update to 1.5.1 - Update to 1.6.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.6.2 - Update to 1.6.1 - Update to 1.6 - Update to 1.5.3 - Update to 1.5.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for Python 3.9 - Update to 1.5.1 - Update to 1.6.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.6.2 - Update to 1.6.1 - Update to 1.6 - Update to 1.5.3 - Update to 1.5.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for Python 3.9 - Update to 1.5.1 - Update to 1.6.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.6.2 - Update to 1.6.1 - Update to 1.6 - Update to 1.5.3 - Update to 1.5.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for Python 3.9 - Update to 1.5.1 - RHEL-88966 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow - RHEL-18397 CVE-2023-46751 ghostscript: dangling pointer in gdev_prn_open_printer_seekable() - RHEL-67048 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space - RHEL-67053 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding - RHEL-67053 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript - RHEL-67053 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution - RHEL-44759 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths - RHEL-44745 CVE-2024-33869 ghostscript: path traversal and command execution due to path reduction - RHEL-44731 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass) - RHEL-38839 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library - fix for CVE-2023-43115 - Resolves: RHEL-10185 - fix for CVE-2023-38559 - Resolves: rhbz#2224372 - fix for CVE-2023-36664 - Resolves: rhbz#2217810 - RHEL-264921 CVE-2026-39919 ghostscript: Heap buffer overflow in JPEG 2000 (JPXDecode) output adapter - RHEL-88966 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow - RHEL-18397 CVE-2023-46751 ghostscript: dangling pointer in gdev_prn_open_printer_seekable() - RHEL-67048 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space - RHEL-67053 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding - RHEL-67053 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript - RHEL-67053 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution - RHEL-273957 CVE-2026-103226 ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data - CVE-2026-101258 ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free via Type 5 shading OOB write and procedure-stream use-after-free - RHEL-264921 CVE-2026-39919 ghostscript: Heap buffer overflow in JPEG 2000 (JPXDecode) output adapter - RHEL-88966 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow - RHEL-18397 CVE-2023-46751 ghostscript: dangling pointer in gdev_prn_open_printer_seekable() - RHEL-67048 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space - RHEL-67053 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding - RHEL-67053 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript - RHEL-67053 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - New upstream release 1.14.47 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Avoid use of deprecated networking functions (#2050712) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild + libgudev-237-1 - Update to 237 - Resolves: rhbz#1995044 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 + libgudev-236-1 - Update to 236 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild + libgudev-234-1 - Update to 234 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fix build for AlmaLinux - Avoid permission denied for yum/dnf cache - Enable building for ppc64le - Ignore blank disks in Windows drive mapping resolves: RHEL-108803 - Generate correct osinfo for SLES >= 15 resolves: RHEL-95791 - Remove duplicate root mountpoints in /etc/fstab resolves: RHEL-90168 - Run the fstrim command twice resolves: RHEL-88508 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87493 - Include host kernel information in libguestfs debugging output resolves: RHEL-83025 - Add new APIs to allow command output > 4MB resolves: RHEL-80159 - Rebase to libguestfs 1.54.0 resolves: RHEL-56809 - Fix osinfo for Windows Server 2025 resolves: RHEL-62935 - Replace Jansson with json-c resolves: RHEL-65292 - Update to libguestfs 1.50.2 resolves: RHEL-46775 - Fix build for AlmaLinux - Avoid permission denied for yum/dnf cache - Enable building for ppc64le - Ignore blank disks in Windows drive mapping resolves: RHEL-108803 - Generate correct osinfo for SLES >= 15 resolves: RHEL-95791 - Remove duplicate root mountpoints in /etc/fstab resolves: RHEL-90168 - Run the fstrim command twice resolves: RHEL-88508 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87493 - Include host kernel information in libguestfs debugging output resolves: RHEL-83025 - Add new APIs to allow command output > 4MB resolves: RHEL-80159 - Rebase to libguestfs 1.54.0 resolves: RHEL-56809 - Fix osinfo for Windows Server 2025 resolves: RHEL-62935 - Replace Jansson with json-c resolves: RHEL-65292 - Update to libguestfs 1.50.2 resolves: RHEL-46775 - Fix build for AlmaLinux - Avoid permission denied for yum/dnf cache - Enable building for ppc64le - Ignore blank disks in Windows drive mapping resolves: RHEL-108803 - Generate correct osinfo for SLES >= 15 resolves: RHEL-95791 - Remove duplicate root mountpoints in /etc/fstab resolves: RHEL-90168 - Run the fstrim command twice resolves: RHEL-88508 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87493 - Include host kernel information in libguestfs debugging output resolves: RHEL-83025 - Add new APIs to allow command output > 4MB resolves: RHEL-80159 - Rebase to libguestfs 1.54.0 resolves: RHEL-56809 - Fix osinfo for Windows Server 2025 resolves: RHEL-62935 - Replace Jansson with json-c resolves: RHEL-65292 - Update to libguestfs 1.50.2 resolves: RHEL-46775 - Fix build for AlmaLinux - Avoid permission denied for yum/dnf cache - Enable building for ppc64le - Ignore blank disks in Windows drive mapping resolves: RHEL-108803 - Generate correct osinfo for SLES >= 15 resolves: RHEL-95791 - Remove duplicate root mountpoints in /etc/fstab resolves: RHEL-90168 - Run the fstrim command twice resolves: RHEL-88508 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87493 - Include host kernel information in libguestfs debugging output resolves: RHEL-83025 - Add new APIs to allow command output > 4MB resolves: RHEL-80159 - Rebase to libguestfs 1.54.0 resolves: RHEL-56809 - Fix osinfo for Windows Server 2025 resolves: RHEL-62935 - Replace Jansson with json-c resolves: RHEL-65292 - Update to libguestfs 1.50.2 resolves: RHEL-46775 - Fix build for AlmaLinux - Avoid permission denied for yum/dnf cache - Enable building for ppc64le - Ignore blank disks in Windows drive mapping resolves: RHEL-108803 - Generate correct osinfo for SLES >= 15 resolves: RHEL-95791 - Remove duplicate root mountpoints in /etc/fstab resolves: RHEL-90168 - Run the fstrim command twice resolves: RHEL-88508 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87493 - Include host kernel information in libguestfs debugging output resolves: RHEL-83025 - Add new APIs to allow command output > 4MB resolves: RHEL-80159 - Rebase to libguestfs 1.54.0 resolves: RHEL-56809 - Fix osinfo for Windows Server 2025 resolves: RHEL-62935 - Replace Jansson with json-c resolves: RHEL-65292 - Update to libguestfs 1.50.2 resolves: RHEL-46775 - Fix build for AlmaLinux - Avoid permission denied for yum/dnf cache - Enable building for ppc64le - Ignore blank disks in Windows drive mapping resolves: RHEL-108803 - Generate correct osinfo for SLES >= 15 resolves: RHEL-95791 - Remove duplicate root mountpoints in /etc/fstab resolves: RHEL-90168 - Run the fstrim command twice resolves: RHEL-88508 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87493 - Include host kernel information in libguestfs debugging output resolves: RHEL-83025 - Add new APIs to allow command output > 4MB resolves: RHEL-80159 - Rebase to libguestfs 1.54.0 resolves: RHEL-56809 - Fix osinfo for Windows Server 2025 resolves: RHEL-62935 - Replace Jansson with json-c resolves: RHEL-65292 - Update to libguestfs 1.50.2 resolves: RHEL-46775 - Rebase to ntfs-3g 2022.10.3 - Fixes: CVE-2022-40284 - resolves: rhbz#2236376 - Rebase to ntfs-3g 2022.5.17 - Fixes: CVE-2021-46790, CVE-2022-30783, CVE-2022-30784, CVE-2022-30785, CVE-2022-30786, CVE-2022-30787, CVE-2022-30788, CVE-2022-30789 resolves: rhbz#2127235 rhbz#2127242 (also 2127264 2127250 2127257) - Rebase to ntfs-3g 2021.8.22 resolves: rhbz#2002985 - Fix build for AlmaLinux - Avoid permission denied for yum/dnf cache - Enable building for ppc64le - Ignore blank disks in Windows drive mapping resolves: RHEL-108803 - Generate correct osinfo for SLES >= 15 resolves: RHEL-95791 - Remove duplicate root mountpoints in /etc/fstab resolves: RHEL-90168 - Run the fstrim command twice resolves: RHEL-88508 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87493 - Include host kernel information in libguestfs debugging output resolves: RHEL-83025 - Add new APIs to allow command output > 4MB resolves: RHEL-80159 - Rebase to libguestfs 1.54.0 resolves: RHEL-56809 - Fix osinfo for Windows Server 2025 resolves: RHEL-62935 - Replace Jansson with json-c resolves: RHEL-65292 - Update to libguestfs 1.50.2 resolves: RHEL-46775 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 40.0 - Update to 40.beta - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 40.alpha.1 - Update to 40.alpha - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild + libgweather-3.36.1-1 - Update to 3.36.1 - Work-around broken current conditions weather servers - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 40.0 - Update to 40.beta - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 40.alpha.1 - Update to 40.alpha - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild + libgweather-3.36.1-1 - Update to 3.36.1 - Work-around broken current conditions weather servers - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 0.3.2 upstream release - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Ship libhandy-devel in CRB Resolves: RHEL-126951 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt - Resolves: rhbz#2072719 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Version 4.3 - Resolves: rhbz#1989260 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Move eeprog to i2c-tools (shouldn't have been in eepromer sub package) - Drop/obsolete eepromer subpackage, deprecated for 6 years - Drop python2 conditionals - Minor cleanups - Version 4.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.0.3 - Iniital build - Update to 1.0.3 - Iniital build - Resolves: #2054087 (Update to 3.0.14) - Resolves: #2041724 (Update to 3.0.13) - Resolves: #2031657 (Update to 3.0.12) - Resolves: #2014989 (Update to 3.0.11) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #1953449 (Update to 3.0.10) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 3.0.9 - Use CMake macros for the build - Change how python tests are invoked (RH bug #1865924) - Resolves: #2054087 (Update to 3.0.14) - Resolves: #2041724 (Update to 3.0.13) - Resolves: #2031657 (Update to 3.0.12) - Resolves: #2014989 (Update to 3.0.11) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #1953449 (Update to 3.0.10) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 3.0.9 - Use CMake macros for the build - Change how python tests are invoked (RH bug #1865924) - Resolves: #2054087 (Update to 3.0.14) - Resolves: #2041724 (Update to 3.0.13) - Resolves: #2031657 (Update to 3.0.12) - Resolves: #2014989 (Update to 3.0.11) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #1953449 (Update to 3.0.10) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 3.0.9 - Use CMake macros for the build - Change how python tests are invoked (RH bug #1865924) - Resolves: #2054087 (Update to 3.0.14) - Resolves: #2041724 (Update to 3.0.13) - Resolves: #2031657 (Update to 3.0.12) - Resolves: #2014989 (Update to 3.0.11) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #1953449 (Update to 3.0.10) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 3.0.9 - Use CMake macros for the build - Change how python tests are invoked (RH bug #1865924) - ICU-22973 Fix buffer overflow by using CharString Resolves: RHEL-96664 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Touch a couple autoconf related files to prevent undesired rebuilding if %configure changes one or more configure files. - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Upgrade to 2.3.0 (#1764345, #1772703) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Handle BTN_STYLUS3 (RHEL-147703) - Fix crash when the Wacom Intuos Pro 3rd gen sends absolute wheel events - Add support for the Wacom Intuos Pro (RHEL-105483) - Rename existing patches for better order clarity - Add quirks for four more dell touchpads (RHEL-69798) - Handle BTN_STYLUS3 (RHEL-147703) - Fix crash when the Wacom Intuos Pro 3rd gen sends absolute wheel events - Add support for the Wacom Intuos Pro (RHEL-105483) - Rename existing patches for better order clarity - Add quirks for four more dell touchpads (RHEL-69798) - Rebuild to get -devel in compose - Resolves: RHEL-45353 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.9.0 git snapshot - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Disable RDMA on arm 32-bit (rhbz #1778517) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.9.0 git snapshot - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Disable RDMA on arm 32-bit (rhbz #1778517) - Fix upgrades from non-alternativized versions/packages - Fix upgrades from non-alternativized versions/packages - Fix URLs Resolves: #1967489 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Upgrade to 1.5.4 (#1926007) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fix URLs Resolves: #1967489 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Upgrade to 1.5.4 (#1926007) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Debrand for AlmaLinux - Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding branches and calls to gcov output, but not conditions (RHEL-105416). - Fix testsuite failures when run with -fstack-protector* (PR testsuite/70230, RHEL-116477) - Add cross compilers for ppc64le and s390x for non-production uses (RHEL-94764) - Adjust glibc32 build dependency (RHEL-105072) - Exception handling performance improvements (RHEL-105072) - libgcc: Use _dl_find_object to find DWARF data in unwinder - libgcc: Use lock-free data structures for run-time unwinder registration - Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-100148). - Sync libstdc++ pretty printers to latest GTS (RHEL-81975) - Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90239) - rs6000: Rework ELFv2 support for -fpatchable-function-entry (PR target/99888, RHEL-75806) - Debrand for AlmaLinux - Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding branches and calls to gcov output, but not conditions (RHEL-105416). - Fix testsuite failures when run with -fstack-protector* (PR testsuite/70230, RHEL-116477) - Add cross compilers for ppc64le and s390x for non-production uses (RHEL-94764) - Adjust glibc32 build dependency (RHEL-105072) - Exception handling performance improvements (RHEL-105072) - libgcc: Use _dl_find_object to find DWARF data in unwinder - libgcc: Use lock-free data structures for run-time unwinder registration - Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-100148). - Sync libstdc++ pretty printers to latest GTS (RHEL-81975) - Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90239) - rs6000: Rework ELFv2 support for -fpatchable-function-entry (PR target/99888, RHEL-75806) - Rebase jose-14 upstream version Resolves: #RHEL-38079 - Fix CVE-2021-29390 - Resolves: RHEL-5413 - Fix CVE-2021-46822 - Resolves: CVE-2021-46822 - Fix CVE-2021-29390 - Resolves: RHEL-5413 - Fix CVE-2021-46822 - Resolves: CVE-2021-46822 - Fix CVE-2021-29390 - Resolves: RHEL-5413 - Fix CVE-2021-46822 - Resolves: CVE-2021-46822 - Rebase to upstream v0.5.5 Resolves: RHEL-86262 - Rebase to upstream v0.5.4 Resolves: RHEL-67143 - Add tests/ directory - Add gating.yaml to RHEL9 libkdumpfile - Update to 0.5.2 - Use SPDX license identifiers - Fix documentation build to be properly be noarch - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Rebase to upstream v0.5.5 Resolves: RHEL-86262 - Rebase to upstream v0.5.4 Resolves: RHEL-67143 - Add tests/ directory - Add gating.yaml to RHEL9 libkdumpfile - Update to 0.5.2 - Use SPDX license identifiers - Fix documentation build to be properly be noarch - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Add CI test. Resolves: rhbz#2008783 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add gcc buildrequires - Use make macros - Update License field for liblangtag-data. It is actually Unicode but not UCD. - Suppress documentation in Flatpak builds - build gir with non-parallel to avoid strange behavior. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Add CI test. Resolves: rhbz#2008783 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add gcc buildrequires - Use make macros - Update License field for liblangtag-data. It is actually Unicode but not UCD. - Suppress documentation in Flatpak builds - build gir with non-parallel to avoid strange behavior. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Fix cmake out-of-source FTBFS for F33/rawhide - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuild resolves: rhbz#2227729 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add skipempty to liblognorm json type resolves: rhbz#1990737 - Rebuild resolves: rhbz#2227729 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add skipempty to liblognorm json type resolves: rhbz#1990737 - Fix CVE-2023-26767 (#2181147) - Fix CVE-2023-26768 (#2181151) - Fix CVE-2023-26769 (#2181149) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Debrand for AlmaLinux - Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding branches and calls to gcov output, but not conditions (RHEL-105416). - Fix testsuite failures when run with -fstack-protector* (PR testsuite/70230, RHEL-116477) - Add cross compilers for ppc64le and s390x for non-production uses (RHEL-94764) - Adjust glibc32 build dependency (RHEL-105072) - Exception handling performance improvements (RHEL-105072) - libgcc: Use _dl_find_object to find DWARF data in unwinder - libgcc: Use lock-free data structures for run-time unwinder registration - Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-100148). - Sync libstdc++ pretty printers to latest GTS (RHEL-81975) - Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90239) - rs6000: Rework ELFv2 support for -fpatchable-function-entry (PR target/99888, RHEL-75806) - New upstream release v10 Resolves: RHEL-122139 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Resolves: RHEL-30424 - Addressing findings from static application security testing - Add cve-2023-27371.patch Related: rhbz#2174640 CVE-2023-27371 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Fix gating.yaml - Release bump - Add gating.yaml - Release bump - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - fix RHEL-132706 - use sysusers.d for uuidd - fix RHEL-133956 - login-utils: fix setpwnam() buffer use [CVE-2025-14104] - fix RHEL-123527 - mount: improve --all documentation - fix RHEL-123531 - libblkid: use snprintf() instead of sprintf() - fix RHEL-123536 - libfdisk: (dos) fix off-by-one in maximum last sector calculation - fix RHEL-113638 - lscpu: update ARM identifiers - fix RHEL-108386 - libblkid: (jmicron_raid) backport checksum verification - fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing - fix RHEL-56983 - sulogin: fix POSIX locale use - fix RHEL-25559 - more: make sure we have data on stderr - fix RHEL-34165 - lsipc: fix semaphore USED counter - fix RHEL-25265 - libblkid: Check offset in LUKS2 header - fix RHEL-25559 - more: fix poll() use - lscpu: another tests update (RHEL-12783) - lscpu: update tests, follow max freq for scaling (RHEL-12783) - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1) - fix RHEL-21257 - logger sending process start time not current time with log messages - fix RHEL-16071 - issues in libblkid - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value - fix RHEL-14612 - Userspace mount options are not preserved for NFS - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Upgrade to libmpc version 1.2.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Drop the libmpc-mpfr3 and libmpc-mpfr3-devel subpackages - Build the main package against mpfr4 - Make mpfr3 and mpfr3-devel subpackages - Drop the compat-libmpc package; nothing in Fedora needs it - Update project URL - Add a -doc subpackage to hold the GFDL-licensed content - Drop unnecessary texinfo BR - Drop ldconfig_scriptlets; this version cannot appear in distros that need it - Make sure there are no rpaths and that -Wl,--as-needed takes effect - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Upgrade to libmpc version 1.2.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Drop the libmpc-mpfr3 and libmpc-mpfr3-devel subpackages - Build the main package against mpfr4 - Make mpfr3 and mpfr3-devel subpackages - Drop the compat-libmpc package; nothing in Fedora needs it - Update project URL - Add a -doc subpackage to hold the GFDL-licensed content - Drop unnecessary texinfo BR - Drop ldconfig_scriptlets; this version cannot appear in distros that need it - Make sure there are no rpaths and that -Wl,--as-needed takes effect - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuild for ICU 67 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fix missing #include for gcc-10 - Rebuild for ICU 65 - Disable player match that breaks Bluetooth on Mediatek MT7925 adapters (RHEL-140110) - rhbz#2031658 merge in fedora 34 changes - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - new upstream release - new upstream release - new upstream release - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - new upstream release - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - add provides for rng-double library #2064301 - add provides for fastapprox library #2064301 - add gating.yaml file - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Rebuild for versioned symbols in json-c - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add nbdcopy --blkhash option resolves: RHEL-85509 - Rebase to libnbd 1.20.3 - Rebase to libnbd 1.20.2 resolves: RHEL-31883 - Fix multiple flaws in TLS server certificate checking resolves: RHEL-49801 - Print full NBD error from server resolves: RHEL-50665 - Rebase to 1.20.0 resolves: RHEL-31883 - Backport unit test of recent libnbd API addition resolves: RHEL-16292 - Fix assertion in ext-mode BLOCK_STATUS (CVE-2023-5871) resolves: RHEL-15143 - Rebase to 1.18.1 resolves: RHEL-14476 - Rebase to 1.16.0 resolves: rhbz#2168628 - Add nbdcopy --blkhash option resolves: RHEL-85509 - Rebase to libnbd 1.20.3 - Rebase to libnbd 1.20.2 resolves: RHEL-31883 - Fix multiple flaws in TLS server certificate checking resolves: RHEL-49801 - Print full NBD error from server resolves: RHEL-50665 - Rebase to 1.20.0 resolves: RHEL-31883 - Backport unit test of recent libnbd API addition resolves: RHEL-16292 - Fix assertion in ext-mode BLOCK_STATUS (CVE-2023-5871) resolves: RHEL-15143 - Rebase to 1.18.1 resolves: RHEL-14476 - Rebase to 1.16.0 resolves: rhbz#2168628 - Apply upstream patch to fix 3 findings from static application security testing Resolves: RHEL-27656 - src: fix incorrect building and parsing of the NFCTH_POLICY_SETX attribute - examples: kill the "invalid argument" error in nftc-helper-add - examples: fix double free in nftc-helper-add - include: Sync with kernel headers - src: fix use after free - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebase onto upstream version 1.0.5 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - extra: use inet_ntop instead of inet_ntoa - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 3.11.0 release (RHEL-67129) - Update to 3.9.0 release (RHEL-17843) - Update to 3.8.0 release (RHEL-17843) - Update to 1.8.40 release - Demote WEP (rh #2030997) - Update to 1.8.38 release - Rebuilt (outage) - Update to 1.8.36 release (rh #2066742) - Include OWE wireless security (rh #2066737) - Fix OWE wireless security entry in Hidden Networks dialog (rh #2057512) - Update to 1.8.32 release - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Make notify-send return failure when it fails Resolves: #2017158 - Fix inconsistent IDs in specification (#1915831) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 0.7.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Make notify-send return failure when it fails Resolves: #2017158 - Fix inconsistent IDs in specification (#1915831) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 0.7.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebase to upstream 2.0.0 release - Resolves: rhbz#2039220 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Upstreal released new version 1.3.0 - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - latest version - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - new upstream release - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - update to 1.3.4 - include soname in file list - Remove compat libs for LLVM 20 - Update LLVM Toolset to 21.1.8 [rhel-9] - Update to 21.1.7 - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683) - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037) - Backport fix for build of highway package on ppc64le (rhbz#2383182) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to LLVM 20.1.8 - Add riscv64 enablement bits; thanks: Songsong Zhang (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com) - Update to LLVM 20.1.7 - Fix llvm-config alternatives handling (rhbz#2361779) - Use libdir suffix in versioned prefix - Remove compat libs for LLVM 20 - Update LLVM Toolset to 21.1.8 [rhel-9] - Update to 21.1.7 - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683) - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037) - Backport fix for build of highway package on ppc64le (rhbz#2383182) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to LLVM 20.1.8 - Add riscv64 enablement bits; thanks: Songsong Zhang (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com) - Update to LLVM 20.1.7 - Fix llvm-config alternatives handling (rhbz#2361779) - Use libdir suffix in versioned prefix - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for Boost 1.75 - fix build without libixion under rhel - build without libixion under rhel - Fix missing headers for gcc-11 - latest release - reenable make check - replace -DSIZEOF_VOID_P=4 with upstream solution - Update to 1.10.0 release - Warn on EACCES error when skipMissing is set Resolves: rhbz#2051559 - Improve error message on failure to access database due permission Related: rhbz#1942431 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 1.9.0 release - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 1.1.28 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 + libpeas-1.30.0-3 - Correct license for some of the icons - Resolves: rhbz#1971434 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 1.30.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.28.0 + libpeas-1.26.0-5 - Remove unused Python macro that caused errors on install (#1863667) - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for Python 3.9 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 + libpeas-1.30.0-3 - Correct license for some of the icons - Resolves: rhbz#1971434 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 1.30.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.28.0 + libpeas-1.26.0-5 - Remove unused Python macro that caused errors on install (#1863667) - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for Python 3.9 - Add libpfm-ibm-counters.patch - Add libpfm-ibm-counters.patch - Rebase to upstream release 13.5 - Add -j1 also into build section - Resolves: #1975438 - Disable parallel build - Resolves: #1975438 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 2.6.0 - bug fixes - Update to 2.4.92 - update pinyin data - bug fixes - Update to 2.4.91 - improve full pinyin auto correction - bug fixes - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 2.6.0 - bug fixes - Update to 2.4.92 - update pinyin data - bug fixes - Update to 2.4.91 - improve full pinyin auto correction - bug fixes - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - fix CVE-2026-33416: use-after-free via pointer aliasing in png_set_tRNS and png_set_PLTE (RHEL-161448) - fix CVE-2026-33636: out-of-bounds R/W in the palette expansion on ARM Neon (RHEL-161299) - fix CVE-2026-25646: heap buffer overflow in png_set_quantize (RHEL-148411) - fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-147356) - fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-149000) - CVE-2025-64720: buffer overflow (RHEL-131594) - CVE-2025-65018: heap buffer overflow (RHEL-131603) - CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133294) - fix CVE-2026-25646: heap buffer overflow in png_set_quantize (RHEL-148411) - fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-147356) - fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-149000) - CVE-2025-64720: buffer overflow (RHEL-131594) - CVE-2025-65018: heap buffer overflow (RHEL-131603) - CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133294) - fix CVE-2026-25646: heap buffer overflow in png_set_quantize (RHEL-148404) - fix CVE-2026-33416: use-after-free via pointer aliasing in png_set_tRNS and png_set_PLTE (RHEL-161449) - fix CVE-2026-25646: heap buffer overflow in png_set_quantize (RHEL-148412) - Rebase to upstream release 13.23 - Resolves: RHEL-131279 (CVE-2025-12818) - Update to 13.20 - Update to 13.15 - Add BuildRequires for perl-File-Compare needed by genbki.pl - Related: RHEL-192239 - Backport fixes for CVE-2026-6478, CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 from PostgreSQL 14.23 - Resolves: RHEL-192239 - Rebase to upstream release 13.23 - Resolves: RHEL-131279 (CVE-2025-12818) - Update to 13.20 - Update to 13.15 - Rebase to upstream release 13.23 - Resolves: RHEL-131279 (CVE-2025-12818) - Update to 13.20 - Update to 13.15 - Add BuildRequires for perl-File-Compare needed by genbki.pl - Related: RHEL-192239 - Backport fixes for CVE-2026-6478, CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 from PostgreSQL 14.23 - Resolves: RHEL-192239 - Rebase to upstream release 13.23 - Resolves: RHEL-131279 (CVE-2025-12818) - Update to 13.20 - Update to 13.15 - Drop networkmanager subpackage. Resolves: rhbz#1996028 - Drop pacrunner subpackage. Resolves: rhbz#1990974 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add Copyright.txt. Resolves: rhbz#1986586 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Tweak KDE conditionals to only apply at runtime - Depend on KDE only on Fedora (#1902608) - Disable mozjs backend by default, obsolete it by webkit subpackage - Fix PAC buffer overflow (#1883584) - Drop networkmanager subpackage. Resolves: rhbz#1996028 - Drop pacrunner subpackage. Resolves: rhbz#1990974 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add Copyright.txt. Resolves: rhbz#1986586 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Tweak KDE conditionals to only apply at runtime - Depend on KDE only on Fedora (#1902608) - Disable mozjs backend by default, obsolete it by webkit subpackage - Fix PAC buffer overflow (#1883584) - Drop networkmanager subpackage. Resolves: rhbz#1996028 - Drop pacrunner subpackage. Resolves: rhbz#1990974 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add Copyright.txt. Resolves: rhbz#1986586 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Tweak KDE conditionals to only apply at runtime - Depend on KDE only on Fedora (#1902608) - Disable mozjs backend by default, obsolete it by webkit subpackage - Fix PAC buffer overflow (#1883584) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - update to 0.21.1 (#1858489) - fix unnecessary build failure due to missing tree_index.sgml in gtk-doc output - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add patch to correct 'extern "C"' usage - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Resolves: #1913613 (Disable DII (and ImageMagic dependency) for RHEL 9) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for Boost 1.75 - FTBFS fix: %{__python} must now be explicitly defined - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Cleanup conditionals for using python3 - Rebuilt for Boost 1.73 - Rebase to 2.0.8 Resolves: rhbz#2223950 - bump rpm version for rhel-exception build Resolves: rhbz#2230712 - blackbox: fix buffer overflow with long log lines Resolves: rhbz#2236171 - ipc: Retry receiving credentials if the the message is short Resolves: rhbz2149647 - Rebase to 2.0.6 Resolves: rhbz#2072903 - Fix negative errno in qb_ipcc_connect (introduced in 2.0.3-4) Resolves: rhbz#2057527 - Bump soname for async-connect API addition Resolves: rhbz#bz2031865 - Fix gating.yaml for RHEL-9 Resolves: rhbz#bz2031865 - Add gating.yaml from RHEL Resolves: rhbz#bz2031865 - Add async connect call for Pacemaker Resolves: rhbz#bz2031865 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuild for ICU 67 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuild for ICU 65 - add missing gating.yaml - fix rpminspect issue Related: #2215766 - Resolves: #2215766, insecure credentials submission - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - CVE-2026-44236 librabbitmq: rabbitmq-c: Heap buffer overflow leading to denial of service [rhel-8.10.z] to denial of service [rhel-8.10.z] Resolves: RHEL-266750 - add missing gating.yaml - fix rpminspect issue Related: #2215766 - Resolves: #2215766, insecure credentials submission - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - CVE-2026-44236 librabbitmq: rabbitmq-c: Heap buffer overflow leading to denial of service [rhel-8.10.z] to denial of service [rhel-8.10.z] Resolves: RHEL-266750 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Drop fmt-devel from build requires - Apply fmt-header-only patches - Update licence field - Drop unnecessary dependencies - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebase to 16.2.4 - Add libcephsqlite packages - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - libblk.so -> libblk.a - remove python3-rgw from ceph-common deps - disable multiple build options - disable multiple packages - remove unnecessary files - ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb) - rpmbuild apparently unable to automatically derive 'Requires: rocksdb' from 'BuildRequires: rocksdb-devel' for librocksdb.so.6.13 - ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Drop fmt-devel from build requires - Apply fmt-header-only patches - Update licence field - Drop unnecessary dependencies - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebase to 16.2.4 - Add libcephsqlite packages - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - libblk.so -> libblk.a - remove python3-rgw from ceph-common deps - disable multiple build options - disable multiple packages - remove unnecessary files - ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb) - rpmbuild apparently unable to automatically derive 'Requires: rocksdb' from 'BuildRequires: rocksdb-devel' for librocksdb.so.6.13 - ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb) - Changes for tests to compile and run appropriately Related: rhbz#2032923 - Add missing tests Related: rhbz#2032923 - Fix for rpmlint reporting crypto-policy-non-compliance-openssl resolves: rhbz#2032923 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to upstream 1.6.1 resolves: rhbz#1932286 - Update to upstream 1.6.0 resolves: rhbz#1883910 - Enable all missing features - Fix linking to external lz4 library - Minor spec cleanups - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to upstream 1.5.0 resolves: rhbz#1818082 - Rebuild resolves: rhbz#2227723 - Replace GNUTLS_SHUT_RDWR by GNUTLS_SHUT_WR when ending TLS connections resolves: rhbz#1990735 - Add patch to comply with crypto policies - Forward return code from relpEngineSetTLSLib to relpEngineSetTLSLibByName - Enable openssl resolves: rhbz#1972067 - Debrand for AlmaLinux - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2024-3044 add notify for script use - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2182392 CVE-2022-38745 - Debrand for AlmaLinux - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Resolves: RHEL-269334 CVE-2026-63274 heap buffer overflow in PDF import stream handling - Resolves: RHEL-269195 CVE-2026-63275 stack buffer overflow in CFF font hint handling - Resolves: RHEL-269182 CVE-2026-63276 stack buffer overflow in CFF to Type 1 font conversion - Resolves: RHEL-276436 CVE-2026-63277 Arbitrary code execution via remote Java database driver - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2024-3044 add notify for script use - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2182392 CVE-2022-38745 - Debrand for AlmaLinux - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Resolves: RHEL-269334 CVE-2026-63274 heap buffer overflow in PDF import stream handling - Resolves: RHEL-269195 CVE-2026-63275 stack buffer overflow in CFF font hint handling - Resolves: RHEL-269182 CVE-2026-63276 stack buffer overflow in CFF to Type 1 font conversion - Resolves: RHEL-276436 CVE-2026-63277 Arbitrary code execution via remote Java database driver - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2024-3044 add notify for script use - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2182392 CVE-2022-38745 - Debrand for AlmaLinux - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Resolves: RHEL-269334 CVE-2026-63274 heap buffer overflow in PDF import stream handling - Resolves: RHEL-269195 CVE-2026-63275 stack buffer overflow in CFF font hint handling - Resolves: RHEL-269182 CVE-2026-63276 stack buffer overflow in CFF to Type 1 font conversion - Resolves: RHEL-276436 CVE-2026-63277 Arbitrary code execution via remote Java database driver - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2024-3044 add notify for script use - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2182392 CVE-2022-38745 - Debrand for AlmaLinux - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Resolves: RHEL-269334 CVE-2026-63274 heap buffer overflow in PDF import stream handling - Resolves: RHEL-269195 CVE-2026-63275 stack buffer overflow in CFF font hint handling - Resolves: RHEL-269182 CVE-2026-63276 stack buffer overflow in CFF to Type 1 font conversion - Resolves: RHEL-276436 CVE-2026-63277 Arbitrary code execution via remote Java database driver - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2024-3044 add notify for script use - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2182392 CVE-2022-38745 - Debrand for AlmaLinux - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Resolves: RHEL-269334 CVE-2026-63274 heap buffer overflow in PDF import stream handling - Resolves: RHEL-269195 CVE-2026-63275 stack buffer overflow in CFF font hint handling - Resolves: RHEL-269182 CVE-2026-63276 stack buffer overflow in CFF to Type 1 font conversion - Resolves: RHEL-276436 CVE-2026-63277 Arbitrary code execution via remote Java database driver - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2024-3044 add notify for script use - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2182392 CVE-2022-38745 - Debrand for AlmaLinux - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Resolves: RHEL-269334 CVE-2026-63274 heap buffer overflow in PDF import stream handling - Resolves: RHEL-269195 CVE-2026-63275 stack buffer overflow in CFF font hint handling - Resolves: RHEL-269182 CVE-2026-63276 stack buffer overflow in CFF to Type 1 font conversion - Resolves: RHEL-276436 CVE-2026-63277 Arbitrary code execution via remote Java database driver - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2024-3044 add notify for script use - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2182392 CVE-2022-38745 - Debrand for AlmaLinux - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Resolves: RHEL-269334 CVE-2026-63274 heap buffer overflow in PDF import stream handling - Resolves: RHEL-269195 CVE-2026-63275 stack buffer overflow in CFF font hint handling - Resolves: RHEL-269182 CVE-2026-63276 stack buffer overflow in CFF to Type 1 font conversion - Resolves: RHEL-276436 CVE-2026-63277 Arbitrary code execution via remote Java database driver - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2024-3044 add notify for script use - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2182392 CVE-2022-38745 - Debrand for AlmaLinux - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Resolves: RHEL-269334 CVE-2026-63274 heap buffer overflow in PDF import stream handling - Resolves: RHEL-269195 CVE-2026-63275 stack buffer overflow in CFF font hint handling - Resolves: RHEL-269182 CVE-2026-63276 stack buffer overflow in CFF to Type 1 font conversion - Resolves: RHEL-276436 CVE-2026-63277 Arbitrary code execution via remote Java database driver - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2024-3044 add notify for script use - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2182392 CVE-2022-38745 - Debrand for AlmaLinux - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Resolves: RHEL-269334 CVE-2026-63274 heap buffer overflow in PDF import stream handling - Resolves: RHEL-269195 CVE-2026-63275 stack buffer overflow in CFF font hint handling - Resolves: RHEL-269182 CVE-2026-63276 stack buffer overflow in CFF to Type 1 font conversion - Resolves: RHEL-276436 CVE-2026-63277 Arbitrary code execution via remote Java database driver - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2024-3044 add notify for script use - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2182392 CVE-2022-38745 - Debrand for AlmaLinux - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Resolves: RHEL-269334 CVE-2026-63274 heap buffer overflow in PDF import stream handling - Resolves: RHEL-269195 CVE-2026-63275 stack buffer overflow in CFF font hint handling - Resolves: RHEL-269182 CVE-2026-63276 stack buffer overflow in CFF to Type 1 font conversion - Resolves: RHEL-276436 CVE-2026-63277 Arbitrary code execution via remote Java database driver - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2024-3044 add notify for script use - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2182392 CVE-2022-38745 - Debrand for AlmaLinux - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Resolves: RHEL-269334 CVE-2026-63274 heap buffer overflow in PDF import stream handling - Resolves: RHEL-269195 CVE-2026-63275 stack buffer overflow in CFF font hint handling - Resolves: RHEL-269182 CVE-2026-63276 stack buffer overflow in CFF to Type 1 font conversion - Resolves: RHEL-276436 CVE-2026-63277 Arbitrary code execution via remote Java database driver - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2024-3044 add notify for script use - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2182392 CVE-2022-38745 - Debrand for AlmaLinux - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Resolves: RHEL-269334 CVE-2026-63274 heap buffer overflow in PDF import stream handling - Resolves: RHEL-269195 CVE-2026-63275 stack buffer overflow in CFF font hint handling - Resolves: RHEL-269182 CVE-2026-63276 stack buffer overflow in CFF to Type 1 font conversion - Resolves: RHEL-276436 CVE-2026-63277 Arbitrary code execution via remote Java database driver - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2024-3044 add notify for script use - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2182392 CVE-2022-38745 - Debrand for AlmaLinux - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Resolves: RHEL-269334 CVE-2026-63274 heap buffer overflow in PDF import stream handling - Resolves: RHEL-269195 CVE-2026-63275 stack buffer overflow in CFF font hint handling - Resolves: RHEL-269182 CVE-2026-63276 stack buffer overflow in CFF to Type 1 font conversion - Resolves: RHEL-276436 CVE-2026-63277 Arbitrary code execution via remote Java database driver - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2024-3044 add notify for script use - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2182392 CVE-2022-38745 - Debrand for AlmaLinux - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Debrand for AlmaLinux - Resolves: RHEL-269334 CVE-2026-63274 heap buffer overflow in PDF import stream handling - Resolves: RHEL-269195 CVE-2026-63275 stack buffer overflow in CFF font hint handling - Resolves: RHEL-269182 CVE-2026-63276 stack buffer overflow in CFF to Type 1 font conversion - Resolves: RHEL-276436 CVE-2026-63277 Arbitrary code execution via remote Java database driver - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2025-1080 Filter out more unwanted command URIs - Add support for AlmaLinux Bug Tracker - Remove libreport-rhel-bugzilla and libreport-rhel-anaconda-bugzilla - [reporter-bugzilla] Retry XML-RPC calls - Resolves: rhbz#2037399 - [reporter-bugzilla] Fix subcomponent handling - Resolves: rhbz#2037399 - Change the default Bugzilla group - Resolves: rhbz#2037399 - Rebuild against json-c-0.14-11 Related: rhbz#2023322 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - New upstream version 2.15.2 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Drop AnacondaRHEL workflow reference - Add support for AlmaLinux Bug Tracker - Remove libreport-rhel-bugzilla and libreport-rhel-anaconda-bugzilla - [reporter-bugzilla] Retry XML-RPC calls - Resolves: rhbz#2037399 - [reporter-bugzilla] Fix subcomponent handling - Resolves: rhbz#2037399 - Change the default Bugzilla group - Resolves: rhbz#2037399 - Rebuild against json-c-0.14-11 Related: rhbz#2023322 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - New upstream version 2.15.2 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Drop AnacondaRHEL workflow reference - Add support for AlmaLinux Bug Tracker - Remove libreport-rhel-bugzilla and libreport-rhel-anaconda-bugzilla - [reporter-bugzilla] Retry XML-RPC calls - Resolves: rhbz#2037399 - [reporter-bugzilla] Fix subcomponent handling - Resolves: rhbz#2037399 - Change the default Bugzilla group - Resolves: rhbz#2037399 - Rebuild against json-c-0.14-11 Related: rhbz#2023322 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - New upstream version 2.15.2 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Drop AnacondaRHEL workflow reference - Add support for AlmaLinux Bug Tracker - Remove libreport-rhel-bugzilla and libreport-rhel-anaconda-bugzilla - [reporter-bugzilla] Retry XML-RPC calls - Resolves: rhbz#2037399 - [reporter-bugzilla] Fix subcomponent handling - Resolves: rhbz#2037399 - Change the default Bugzilla group - Resolves: rhbz#2037399 - Rebuild against json-c-0.14-11 Related: rhbz#2023322 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - New upstream version 2.15.2 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Drop AnacondaRHEL workflow reference - Add support for AlmaLinux Bug Tracker - Remove libreport-rhel-bugzilla and libreport-rhel-anaconda-bugzilla - [reporter-bugzilla] Retry XML-RPC calls - Resolves: rhbz#2037399 - [reporter-bugzilla] Fix subcomponent handling - Resolves: rhbz#2037399 - Change the default Bugzilla group - Resolves: rhbz#2037399 - Rebuild against json-c-0.14-11 Related: rhbz#2023322 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - New upstream version 2.15.2 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Drop AnacondaRHEL workflow reference - Add support for AlmaLinux Bug Tracker - Remove libreport-rhel-bugzilla and libreport-rhel-anaconda-bugzilla - [reporter-bugzilla] Retry XML-RPC calls - Resolves: rhbz#2037399 - [reporter-bugzilla] Fix subcomponent handling - Resolves: rhbz#2037399 - Change the default Bugzilla group - Resolves: rhbz#2037399 - Rebuild against json-c-0.14-11 Related: rhbz#2023322 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - New upstream version 2.15.2 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Drop AnacondaRHEL workflow reference - Add support for AlmaLinux Bug Tracker - Remove libreport-rhel-bugzilla and libreport-rhel-anaconda-bugzilla - [reporter-bugzilla] Retry XML-RPC calls - Resolves: rhbz#2037399 - [reporter-bugzilla] Fix subcomponent handling - Resolves: rhbz#2037399 - Change the default Bugzilla group - Resolves: rhbz#2037399 - Rebuild against json-c-0.14-11 Related: rhbz#2023322 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - New upstream version 2.15.2 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Drop AnacondaRHEL workflow reference - Backport fix for CVE-2026-14957 (RHEL-212107) - Backport fixes for CVE-2026-12413, CVE-2026-50721 and CVE-2026-50722 (RHEL-190120, RHEL-190125, RHEL-190155) - showhostkey: fix regression after RHEL-68047 (RHEL-70842) - Remove libreswan-4.15-whack-fd-refcount.patch (RHEL-61461) - Update libreswan-4.15-whack-fd-refcount.patch to be more complete (RHEL-61461) - crypto: refcnt struct secret_pubkey_stuff when passing to helper thread (RHEL-68047) - pluto: fix refcounting of whack FD at CREATE_CHILD_SA request (RHEL-61461) - pluto: ignore CREATE_CHILD_SA request if crypto is in progress (RHEL-61461) - Fix release number - Fix auto=ondemand connection initialization with TCP (RHEL-51879) - Make use of Netlink extack for additional error reporting (RHEL-51881) - Update to 4.15 (RHEL-50006) - Backport fixes for CVE-2026-94453, CVE-2026-77206, and CVE-2026-77207 (RHEL-281889, RHEL-281998, RHEL-281985) - Backport fix for CVE-2026-14957 (RHEL-212107) - Backport fixes for CVE-2026-12413, CVE-2026-50721 and CVE-2026-50722 (RHEL-190120, RHEL-190125, RHEL-190155) - showhostkey: fix regression after RHEL-68047 (RHEL-70842) - Remove libreswan-4.15-whack-fd-refcount.patch (RHEL-61461) - Update libreswan-4.15-whack-fd-refcount.patch to be more complete (RHEL-61461) - crypto: refcnt struct secret_pubkey_stuff when passing to helper thread (RHEL-68047) - pluto: fix refcounting of whack FD at CREATE_CHILD_SA request (RHEL-61461) - pluto: ignore CREATE_CHILD_SA request if crypto is in progress (RHEL-61461) - showhostkey: fix regression after RHEL-68047 (RHEL-70842) - Remove libreswan-4.15-whack-fd-refcount.patch (RHEL-61461) - Update libreswan-4.15-whack-fd-refcount.patch to be more complete (RHEL-61461) - crypto: refcnt struct secret_pubkey_stuff when passing to helper thread (RHEL-68047) - pluto: fix refcounting of whack FD at CREATE_CHILD_SA request (RHEL-61461) - pluto: ignore CREATE_CHILD_SA request if crypto is in progress (RHEL-61461) - Fix release number - Fix auto=ondemand connection initialization with TCP (RHEL-51879) - Make use of Netlink extack for additional error reporting (RHEL-51881) - Update to 4.15 (RHEL-50006) - Bump release to synchronize with el9_5 package - Fix CVE-2024-3652 (RHEL-32483) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Resolves: rhbz#1786466 Do not use %{?_isa} for GDB dependency. - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Resolves: rhbz#1786466 Do not use %{?_isa} for GDB dependency. - Specify bundled crates (RHEL-4102) - Fix CVE-2023-38633 (#2224947) - CVE-2026-96889 librsvg2: Use-after-free when XML includes have duplicated entities entities - Specify bundled crates (RHEL-4102) - Fix CVE-2023-38633 (#2224947) - CVE-2026-96889 librsvg2: Use-after-free when XML includes have duplicated entities entities - Specify bundled crates (RHEL-4102) - Fix CVE-2023-38633 (#2224947) - CVE-2026-96889 librsvg2: Use-after-free when XML includes have duplicated entities entities - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - 1922563 - sane-airscan-0.99.24 is available - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 1914565 - sane-airscan-0.99.23 is available - 1906510 - sane-airscan-0.99.22 is available - 0.99.21 - 1900160 - sane-airscan-0.99.20 is available - 1897935 - Crash on libsane-airscan when trying to activate scanner - 1890866 - sane-airscan-0.99.19 is available - make is no longer in buildroot by default - use smaller git-core instead of git - add AlmaLinux support - fix permission for custom created gpg dir - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - add hplip-repack.sh as a source - 1969767 - remove redundant files - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - 1929977 - hplip-3.21.2 is available - get out of hp-setup if the device is a standalone scanner - remove the old search algorithm - 1925259 - %pre scriptlet enables and starts cups.service, which is unnecessary - 1919556 - hp-fab crashed: QFileDialog.getOpenFileName is not used correctly - Аdd AlmaLinux support - Fix permission for custom created gpg dir - Fix more leaks in hpcups - OSH fixes after CVE-2026-8631 - CVE-2026-8631 hplip: HPLIP: Arbitrary code execution and privilege escalation via integer overflow in hpcups - CVE-2026-8632 hplip: Privilege escalation and arbitrary code execution via OS command injection in Is_Process_Running() - Аdd AlmaLinux support - Fix permission for custom created gpg dir - RHEL-192001 CVE-2026-14544 hplip: Incomplete Fix for CVE-2026-8631 - Fix more leaks in hpcups - OSH fixes after CVE-2026-8631 - CVE-2026-8631 hplip: HPLIP: Arbitrary code execution and privilege escalation via integer overflow in hpcups - CVE-2026-8632 hplip: Privilege escalation and arbitrary code execution via OS command injection in Is_Process_Running() - Fix LEDM scanning - fix OSH issues - really fix missing /var/lib/hp - Rebase to 3.26.6 - RHEL-257310 [IMAGE-MODE] missing /var/lib/hp on image-mode - RHEL-192001 CVE-2026-14544 hplip: Incomplete Fix for CVE-2026-8631 - Fix more leaks in hpcups - OSH fixes after CVE-2026-8631 - CVE-2026-8631 hplip: HPLIP: Arbitrary code execution and privilege escalation via integer overflow in hpcups - CVE-2026-8632 hplip: Privilege escalation and arbitrary code execution via OS command injection in Is_Process_Running() - Bump release to address sbc-devel inclusion to CRB Resolves: RHEL-105435 - fix devel-usability test - rebase to 2.5.2 resolves: rhbz#2019887 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Apply fixes to change internal handling of the notification fd (#1865802) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - New upstream version (#1858965) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Modernize spec - Backport fix for missing __SNR_ppoll symbol (#1777889) - Refresh patch to build on aarch64 with upstream version - New upstream version (#1765314) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 0.20.4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 0.20.3 - Drop gnome-keyring recommends again (#1781864) - Update to 0.20.2 - Update to 0.20.1 - Update to 0.20.0 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 0.20.4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 0.20.3 - Drop gnome-keyring recommends again (#1781864) - Update to 0.20.2 - Update to 0.20.1 - Update to 0.20.0 - Close old selabel handle when setting a new one (RHEL-76472) - restorecon: Include <selinux/label.h> (RHEL-50821, RHEL-54385) - SELinux userspace 3.6 release - SELinux userspace 3.6-rc1 release - SELinux userspace 3.5 release - SELinux userspace 3.5-rc3 release - Close old selabel handle when setting a new one (RHEL-76472) - restorecon: Include <selinux/label.h> (RHEL-50821, RHEL-54385) - SELinux userspace 3.6 release - SELinux userspace 3.6-rc1 release - SELinux userspace 3.5 release - SELinux userspace 3.5-rc3 release - Fix static analyzer issues (RHEL-28966) - sepol_compute_sid: Do not destroy uninitialized context (RHEL-28964) - SELinux userspace 3.6 release - SELinux userspace 3.6-rc1 release - Fix static analyzer issues (RHEL-28966) - sepol_compute_sid: Do not destroy uninitialized context (RHEL-28964) - SELinux userspace 3.6 release - SELinux userspace 3.6-rc1 release - Fix linking of gssapi to support kerberos - Resolves: RHEL-6802 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Release bump due to dropped autotools patch Resolves: rhbz#1956444 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 2.4.3 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fix NEWS file to not be executable - Update to 2.10.7 - Rebuilt for IMA sigs, glibc 2.34, and aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 2.10.6 - Update to 2.10.4 - Switch to meson build system - Update upstream URL - Tighten soname globs - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 2.10.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Backport upstream commit b09dbd9557 ("ip: Enforce strict aliasing") Fixes JIRA RHEL-27868 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - apply patch for CVE-2026-37555 Resolves: RHEL-174543 - fix crash in ogg vorbis (#RHEL-65096) (CVE-2024-50612) - apply patch for CVE-2026-37555 Resolves: RHEL-174543 - fix crash in ogg vorbis (#RHEL-65096) (CVE-2024-50612) - Backport patch for CVE-2026-5119 - Backport patch for CVE-2026-1761 - Backport patch for CVE-2026-0719 - Fix NTLM authentication test failures in FIPS mode - Backport patch for CVE-2025-14523 - Backport patch for CVE-2025-4945 and CVE-2025-11021 - Backport patches for various CVEs Resolves: RHEL-84797 Resolves: RHEL-85888 Resolves: RHEL-87080 Resolves: RHEL-92284 - Backport patches for various CVEs, plus test improvements Resolves: RHEL-85909 Resolves: RHEL-85915 Resolves: RHEL-85920 Resolves: RHEL-87058 Resolves: RHEL-87068 Resolves: RHEL-87101 Resolves: RHEL-87119 Resolves: RHEL-88360 Resolves: RHEL-88363 - Enable tests in check, and add patches to fix tests Resolves: RHEL-76426 - Add patches for CVE-2024-52530, CVE-2024-52531, and CVE-2024-52532 Resolves: RHEL-67069 Resolves: RHEL-67081 - Fix CVE-2026-15711: Reject oversized WebSocket control frames - Backport patch for CVE-2026-15709 - Backport patch for CVE-2026-5119 - Backport patch for CVE-2026-1761 - Backport patch for CVE-2026-0719 - Fix NTLM authentication test failures in FIPS mode - Backport patch for CVE-2025-14523 - Backport patch for CVE-2025-4945 and CVE-2025-11021 - Backport patches for various CVEs Resolves: RHEL-84797 Resolves: RHEL-85888 Resolves: RHEL-87080 Resolves: RHEL-92284 - Backport patches for various CVEs, plus test improvements Resolves: RHEL-85909 Resolves: RHEL-85915 Resolves: RHEL-85920 Resolves: RHEL-87058 Resolves: RHEL-87068 Resolves: RHEL-87101 Resolves: RHEL-87119 Resolves: RHEL-88360 Resolves: RHEL-88363 - Enable tests in check, and add patches to fix tests Resolves: RHEL-76426 - CVE-2026-102556 libsoup: libsoup: Heap buffer overflow from WebSocket Pong signal type confusion - CVE-2026-102558 libsoup: libsoup: Heap buffer overflow during WebSocket receive-buffer growth - CVE-2026-102559 libsoup: libsoup: Heap buffer overflow during WebSocket client-frame masking - CVE-2026-102560 libsoup: libsoup: Heap buffer overflow during outgoing permessage-deflate buffer growth - CVE-2026-102557 libsoup: libsoup: Heap buffer overflow during WebSocket message reassembly message reassembly - Fix CVE-2026-15711: Reject oversized WebSocket control frames - Backport patch for CVE-2026-15709 - Backport patch for CVE-2026-5119 - Backport patch for CVE-2026-1761 - Backport patch for CVE-2026-0719 - Fix NTLM authentication test failures in FIPS mode - Backport patch for CVE-2026-5119 - Backport patch for CVE-2026-1761 - Backport patch for CVE-2026-0719 - Fix NTLM authentication test failures in FIPS mode - Backport patch for CVE-2025-14523 - Backport patch for CVE-2025-4945 and CVE-2025-11021 - Backport patches for various CVEs Resolves: RHEL-84797 Resolves: RHEL-85888 Resolves: RHEL-87080 Resolves: RHEL-92284 - Backport patches for various CVEs, plus test improvements Resolves: RHEL-85909 Resolves: RHEL-85915 Resolves: RHEL-85920 Resolves: RHEL-87058 Resolves: RHEL-87068 Resolves: RHEL-87101 Resolves: RHEL-87119 Resolves: RHEL-88360 Resolves: RHEL-88363 - Enable tests in check, and add patches to fix tests Resolves: RHEL-76426 - Add patches for CVE-2024-52530, CVE-2024-52531, and CVE-2024-52532 Resolves: RHEL-67069 Resolves: RHEL-67081 - Fix CVE-2026-15711: Reject oversized WebSocket control frames - Backport patch for CVE-2026-15709 - Backport patch for CVE-2026-5119 - Backport patch for CVE-2026-1761 - Backport patch for CVE-2026-0719 - Fix NTLM authentication test failures in FIPS mode - Backport patch for CVE-2025-14523 - Backport patch for CVE-2025-4945 and CVE-2025-11021 - Backport patches for various CVEs Resolves: RHEL-84797 Resolves: RHEL-85888 Resolves: RHEL-87080 Resolves: RHEL-92284 - Backport patches for various CVEs, plus test improvements Resolves: RHEL-85909 Resolves: RHEL-85915 Resolves: RHEL-85920 Resolves: RHEL-87058 Resolves: RHEL-87068 Resolves: RHEL-87101 Resolves: RHEL-87119 Resolves: RHEL-88360 Resolves: RHEL-88363 - Enable tests in check, and add patches to fix tests Resolves: RHEL-76426 - CVE-2026-102556 libsoup: libsoup: Heap buffer overflow from WebSocket Pong signal type confusion - CVE-2026-102558 libsoup: libsoup: Heap buffer overflow during WebSocket receive-buffer growth - CVE-2026-102559 libsoup: libsoup: Heap buffer overflow during WebSocket client-frame masking - CVE-2026-102560 libsoup: libsoup: Heap buffer overflow during outgoing permessage-deflate buffer growth - CVE-2026-102557 libsoup: libsoup: Heap buffer overflow during WebSocket message reassembly message reassembly - Fix CVE-2026-15711: Reject oversized WebSocket control frames - Backport patch for CVE-2026-15709 - Backport patch for CVE-2026-5119 - Backport patch for CVE-2026-1761 - Backport patch for CVE-2026-0719 - Fix NTLM authentication test failures in FIPS mode - Set alignment for rendering to default - Resolves: #2029329 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 0.2.9 - Resolves: #1832567 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 20200505 version (#1831576) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 20190731. Fixes bug #1742423 - fix NSS incompatibility, thanks to George Joseph Resolves: rhbz#2211526 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: RHEL-150661 - Resolves: CVE-2025-4877 - Resolves: CVE-2025-4878 - Resolves: CVE-2025-5351 - Resolves: CVE-2025-8114 - Resolves: CVE-2025-8277 - Resolves: CVE-2026-0964 - Resolves: CVE-2026-0965 - Resolves: CVE-2026-0966 - Resolves: CVE-2026-0967 - Resolves: CVE-2026-0968 - Bump spec to resolve build tagging issues - Fix CVE-2025-5987 Resolves: RHEL-130051 - Workaround sshd failure rate limiting in tests Resolves: RHEL-135506 - Bump spec to make the 9.7 NVR higher than the 9.6 one - Fix CVE-2025-5318 Resolves: RHEL-111732 - Bump up the version so that the version in 9.3 is lower. - Resolves: RHEL-19310, RHEL-19691, RHEL-17245 - Backport CVE patches from 0.11.5 Resolves: RHEL-213033 Resolves: RHEL-213041 Resolves: RHEL-213047 Resolves: RHEL-213081 Resolves: RHEL-213114 Resolves: RHEL-213119 Resolves: RHEL-213151 - Resolves: RHEL-150661 - Resolves: CVE-2025-4877 - Resolves: CVE-2025-4878 - Resolves: CVE-2025-5351 - Resolves: CVE-2025-8114 - Resolves: CVE-2025-8277 - Resolves: CVE-2026-0964 - Resolves: CVE-2026-0965 - Resolves: CVE-2026-0966 - Resolves: CVE-2026-0967 - Resolves: CVE-2026-0968 - Bump spec to resolve build tagging issues - Fix CVE-2025-5987 Resolves: RHEL-130051 - Workaround sshd failure rate limiting in tests Resolves: RHEL-135506 - Bump spec to make the 9.7 NVR higher than the 9.6 one - Fix CVE-2025-5318 Resolves: RHEL-111732 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - new upstream release - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Debrand for AlmaLinux - Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding branches and calls to gcov output, but not conditions (RHEL-105416). - Fix testsuite failures when run with -fstack-protector* (PR testsuite/70230, RHEL-116477) - Add cross compilers for ppc64le and s390x for non-production uses (RHEL-94764) - Adjust glibc32 build dependency (RHEL-105072) - Exception handling performance improvements (RHEL-105072) - libgcc: Use _dl_find_object to find DWARF data in unwinder - libgcc: Use lock-free data structures for run-time unwinder registration - Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-100148). - Sync libstdc++ pretty printers to latest GTS (RHEL-81975) - Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90239) - rs6000: Rework ELFv2 support for -fpatchable-function-entry (PR target/99888, RHEL-75806) - Debrand for AlmaLinux - Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding branches and calls to gcov output, but not conditions (RHEL-105416). - Fix testsuite failures when run with -fstack-protector* (PR testsuite/70230, RHEL-116477) - Add cross compilers for ppc64le and s390x for non-production uses (RHEL-94764) - Adjust glibc32 build dependency (RHEL-105072) - Exception handling performance improvements (RHEL-105072) - libgcc: Use _dl_find_object to find DWARF data in unwinder - libgcc: Use lock-free data structures for run-time unwinder registration - Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-100148). - Sync libstdc++ pretty printers to latest GTS (RHEL-81975) - Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90239) - rs6000: Rework ELFv2 support for -fpatchable-function-entry (PR target/99888, RHEL-75806) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Upgrade to 1.10.1 - Upgrade to 1.10.0 - FIPS correction ref: https://issues.redhat.com/browse/RHEL-376 - Upgrade to 1.9.7 - Upgrade to 1.9.5 - Use systemd-sysusers - Upgrade to 1.10.1 - Upgrade to 1.10.0 - FIPS correction ref: https://issues.redhat.com/browse/RHEL-376 - Upgrade to 1.9.7 - Upgrade to 1.9.5 - Use systemd-sysusers - Upgrade to 1.10.1 - Upgrade to 1.10.0 - FIPS correction ref: https://issues.redhat.com/browse/RHEL-376 - Upgrade to 1.9.7 - Upgrade to 1.9.5 - Use systemd-sysusers - Upgrade to 1.10.1 - Upgrade to 1.10.0 - FIPS correction ref: https://issues.redhat.com/browse/RHEL-376 - Upgrade to 1.9.7 - Upgrade to 1.9.5 - Use systemd-sysusers - Upgrade to 1.10.1 - Upgrade to 1.10.0 - FIPS correction ref: https://issues.redhat.com/browse/RHEL-376 - Upgrade to 1.9.7 - Upgrade to 1.9.5 - Use systemd-sysusers - Upgrade to 1.10.1 - Upgrade to 1.10.0 - FIPS correction ref: https://issues.redhat.com/browse/RHEL-376 - Upgrade to 1.9.7 - Upgrade to 1.9.5 - Use systemd-sysusers - Upgrade to 1.10.1 - Upgrade to 1.10.0 - FIPS correction ref: https://issues.redhat.com/browse/RHEL-376 - Upgrade to 1.9.7 - Upgrade to 1.9.5 - Use systemd-sysusers - Upgrade to 1.10.1 - Upgrade to 1.10.0 - FIPS correction ref: https://issues.redhat.com/browse/RHEL-376 - Upgrade to 1.9.7 - Upgrade to 1.9.5 - Use systemd-sysusers - Upgrade to 1.10.1 - Upgrade to 1.10.0 - FIPS correction ref: https://issues.redhat.com/browse/RHEL-376 - Upgrade to 1.9.7 - Upgrade to 1.9.5 - Use systemd-sysusers - Backport the fix for CVE-2025-13151 (RHEL-139568) - Backport the fix for CVE-2024-12133 (RHEL-78580) - Backport the fix for CVE-2024-12133 (RHEL-78580) - Backport the fix for CVE-2025-13151 (RHEL-139568) - Backport the fix for CVE-2024-12133 (RHEL-78580) - Backport the fix for CVE-2024-12133 (RHEL-78580) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Use new macros, update config.\* locations - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - fix CVE-2026-12912: heap-buffer-overflow in PixarLog 8BITABGR decode with stride 3 (RHEL-189387) - rebuild - fix CVE-2026-4775: signed integer overflow in putcontig8bitYCbCr44tile (RHEL-159331) - fix CVE-2025-9900: Out-of-Bounds Write in TIFFReadRGBAImageOriented (RHEL-112543) - fix CVE-2025-8176: use after free in tiffmedian (RHEL-120238) - backport documentation change for CVE-2023-52355 (RHEL-17328) - fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-17337) - fix CVE-2024-7006 a null pointer dereference in tif_dirinfo (RHEL-52931) - rebuild - fix CVE-2026-4775: signed integer overflow in putcontig8bitYCbCr44tile (RHEL-159331) - fix CVE-2025-9900: Out-of-Bounds Write in TIFFReadRGBAImageOriented (RHEL-112543) - fix CVE-2025-8176: use after free in tiffmedian (RHEL-120238) - backport documentation change for CVE-2023-52355 (RHEL-17328) - fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-17337) - fix CVE-2024-7006 a null pointer dereference in tif_dirinfo (RHEL-52931) - fix CVE-2026-12912: heap-buffer-overflow in PixarLog 8BITABGR decode with stride 3 (RHEL-189387) - rebuild - fix CVE-2026-4775: signed integer overflow in putcontig8bitYCbCr44tile (RHEL-159331) - fix CVE-2025-9900: Out-of-Bounds Write in TIFFReadRGBAImageOriented (RHEL-112543) - fix CVE-2025-8176: use after free in tiffmedian (RHEL-120238) - backport documentation change for CVE-2023-52355 (RHEL-17328) - fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-17337) - fix CVE-2024-7006 a null pointer dereference in tif_dirinfo (RHEL-52931) - rebuild - fix CVE-2026-4775: signed integer overflow in putcontig8bitYCbCr44tile (RHEL-159331) - fix CVE-2025-9900: Out-of-Bounds Write in TIFFReadRGBAImageOriented (RHEL-112543) - fix CVE-2025-8176: use after free in tiffmedian (RHEL-120238) - backport documentation change for CVE-2023-52355 (RHEL-17328) - fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-17337) - fix CVE-2024-7006 a null pointer dereference in tif_dirinfo (RHEL-52931) - Add libtimezonemap-devel to CRB Resolves: RHEL-13916 - Remove regions from the map Resolves: rhbz#2097831 - Harden libltdl loaders (RHEL-39991) - Fix CVE-2025-49133 (build for 9.7) Resolves: RHEL-96254 - Fix CVE-2025-49133 Resolves: RHEL-96258 - Backport "tpm2: Return TPM_RC_VALUE upon decryption failure" Resolves: RHEL-58056 - Backport module-based libsoup support Resolves: rhbz#2137366 - Ship tracker-devel in CRB - Update to 3.1.2 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 3.1.1 - Update to 3.1.0 - Obsolete libtracker-control and libtracker-miner - Add conflicts with tracker3 packages to help with the upgrade path - Update to 3.1.0.rc, based on earlier tracker3 packaging - Obsolete separate tracker3 packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Debrand for AlmaLinux - Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding branches and calls to gcov output, but not conditions (RHEL-105416). - Fix testsuite failures when run with -fstack-protector* (PR testsuite/70230, RHEL-116477) - Add cross compilers for ppc64le and s390x for non-production uses (RHEL-94764) - Adjust glibc32 build dependency (RHEL-105072) - Exception handling performance improvements (RHEL-105072) - libgcc: Use _dl_find_object to find DWARF data in unwinder - libgcc: Use lock-free data structures for run-time unwinder registration - Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-100148). - Sync libstdc++ pretty printers to latest GTS (RHEL-81975) - Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90239) - rs6000: Rework ELFv2 support for -fpatchable-function-entry (PR target/99888, RHEL-75806) - Always inline _M_extract_name (RHEL-150603) - update from releases/gcc-15 branch (RHEL-116513) - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185, ada/123289, ada/123302, ada/123306, ada/123371, ada/123589, analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764, c++/116952, c++/120446, c++/121854, c++/121966, c++/122048, c++/122070, c++/122550, c++/122668, c++/122752, c++/122772, c++/122834, c++/122922, c++/123331, c++/123597, debug/121964, diagnostics/120063, fortran/107406, libfortran/122936, libstdc++/120446, libstdc++/122812, libstdc++/122907, libstdc++/123147, middle-end/111817, middle-end/123107, middle-end/123392, middle-end/123703, rtl-optimization/121773, rtl-optimization/122215, rtl-optimization/123121, rtl-optimization/123523, target/117575, target/119130, target/120250, target/121192, target/121485, target/123022, target/123092, target/123155, target/123217, target/123460, target/123484, target/123489, target/123521, target/123607, target/123742, testsuite/123353, tree-optimization/122793, tree-optimization/122868, tree-optimization/123040, tree-optimization/123300, tree-optimization/123351, tree-optimization/123372, tree-optimization/123431, tree-optimization/123513, tree-optimization/123602, tree-optimization/123736, tree-optimization/123741 - Fix glibc32 build dependency (RHEL-113182) - ship libstdc++.modules.json (RHEL-97095) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-94866) - configure with --enable-host-pie --enable-host-bind-now (RHEL-95564) - re-enable annobin-plugin and offload-nvptx - update from releases/gcc-15 branch - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938, c++/119939, c++/119981, c++/119996, c++/120012, c++/120013, c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891, fortran/102900, fortran/119928, fortran/119986, fortran/120049, fortran/120107, fortran/120139, fortran/120163, fortran/120179, fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146, libfortran/120152, libfortran/120153, libfortran/120158, libfortran/120196, libstdc++/118260, libstdc++/119427, libstdc++/119714, libstdc++/120029, libstdc++/120114, libstdc++/120159, libstdc++/120187, libstdc++/120190, libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914, modula2/119915, modula2/120117, modula2/120188, preprocessor/116047, preprocessor/120061, target/119610, testsuite/119909, tree-optimization/111873, tree-optimization/119712, tree-optimization/120043, tree-optimization/120048, tree-optimization/120074, tree-optimization/120089, tree-optimization/120143, tree-optimization/120211 - update from releases/gcc-15 branch - GCC 15.1 release - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407 - Fix GTS version in package name. - Debrand for AlmaLinux - Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding branches and calls to gcov output, but not conditions (RHEL-105416). - Fix testsuite failures when run with -fstack-protector* (PR testsuite/70230, RHEL-116477) - Add cross compilers for ppc64le and s390x for non-production uses (RHEL-94764) - Adjust glibc32 build dependency (RHEL-105072) - Exception handling performance improvements (RHEL-105072) - libgcc: Use _dl_find_object to find DWARF data in unwinder - libgcc: Use lock-free data structures for run-time unwinder registration - Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-100148). - Sync libstdc++ pretty printers to latest GTS (RHEL-81975) - Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90239) - rs6000: Rework ELFv2 support for -fpatchable-function-entry (PR target/99888, RHEL-75806) - udiskslinuxmanager: Add lower bounds check to fd_index (CVE-2025-8067) (RHEL-109413) - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder - lvm2: Refactor udisks_daemon_util_lvm2_wipe_block() - tests: Fix targetcli_config.json (RHEL-16229) - Rebase to version 2.12. Follow fedora and get rid of explicit % attr for library files - Resolves: RHEL-114115 - Rebase to 2.5. - Resolves: RHEL-16030 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - New upstream release 0.1.7 (rhbz#1805154) - Add tests-examples sub-package and %check - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Pull in new upstream libusb containing important regression fixes Resolves: #2058730 Resolves: #1938801 - Updated and new regression fixes Resolves: #2058730 Related: #1938801 - Fix a crash if a transfer outlives closing the device Related: #1938801 - Update to 1.0.25 - Fix a crash after libusb_exit API has been misused - Add patchset to fix covscan reports Resolves: #1938801 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Pull in upstream bugfixes Resolves: #1929148 - Update to 1.0.24 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to upstream version 1.0.30 to include the major bug fixes - Include the necessary API for fwupd backporting to RHEL9. Resolves: RHEL-183213 - fix RHEL-132706 - use sysusers.d for uuidd - fix RHEL-133956 - login-utils: fix setpwnam() buffer use [CVE-2025-14104] - fix RHEL-123527 - mount: improve --all documentation - fix RHEL-123531 - libblkid: use snprintf() instead of sprintf() - fix RHEL-123536 - libfdisk: (dos) fix off-by-one in maximum last sector calculation - fix RHEL-113638 - lscpu: update ARM identifiers - fix RHEL-108386 - libblkid: (jmicron_raid) backport checksum verification - fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing - fix RHEL-56983 - sulogin: fix POSIX locale use - fix RHEL-25559 - more: make sure we have data on stderr - fix RHEL-34165 - lsipc: fix semaphore USED counter - fix RHEL-25265 - libblkid: Check offset in LUKS2 header - fix RHEL-25559 - more: fix poll() use - lscpu: another tests update (RHEL-12783) - lscpu: update tests, follow max freq for scaling (RHEL-12783) - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1) - fix RHEL-21257 - logger sending process start time not current time with log messages - fix RHEL-16071 - issues in libblkid - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value - fix RHEL-14612 - Userspace mount options are not preserved for NFS - Backport fix for CVE-2024-24806 Resolves: RHEL-24791 - Rebuilt for CRB inclusion Resolves: RHEL-135108 - Resolves: RHEL-59629, rebase to 2.22.0 - RHEL-6895, rebase to 2.20.0 - Resolves: RHEL-59629, rebase to 2.22.0 - RHEL-6895, rebase to 2.20.0 - Update to 1.5 - rhbz#2075057 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt - Update to 1.5 - rhbz#2075057 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - New upstream version (0.3.2) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - New upstream version (0.3.1) - Drop tevent goo and RHEL conditionals - Rebuild for libevent soname bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Enable building for ppc64le - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - Enable building for ppc64le - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - Enable building for ppc64le - remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245282, CVE-2026-18917) - qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242549) - qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242549) - qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242549) - qemu: Remove 'allowReboot' field (RHEL-242549) - qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242549) - qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242549) - qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242549) - processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242549) - conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242549) - qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242549) - qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242549) - qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242549) - Add support for keeping VM running when panic notifier is used (RHEL-242549) - qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-224986) - Add guest device info to virDomainGetGuestInfo (RHEL-243306) - qemu_agent: Introduce guest-get-devices (RHEL-243306) - qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-243306) - qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-243306) - virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-243306) - qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-224986) - util: virFileChownFiles: do not follow symlinks (CVE-2026-63622) - distro: Update URL in plans.fmf - qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-186018) - qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-186018) - qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-186018) - qemu: validate: Validate VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186018) - qemu: postparse: Process VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186018) - virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-186018) - qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-186018) - qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-186018) - qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-186018) - qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-186018) - qemustatusxml2xml: Add test case capturing virtio video device (RHEL-186018) - virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-186018) - conf: Add fields for recording actually-selected virtio video device (RHEL-186018) - qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-186018) - qemuDeviceVideoGetModel: Directly return picked model (RHEL-186018) - qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-186018) - qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-186018) - qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-186018) - qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-186018) - qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-186018) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - Enable building for ppc64le - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090) - Enable building for ppc64le - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - Enable building for ppc64le - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - Enable building for ppc64le - remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245282, CVE-2026-18917) - qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242549) - qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242549) - qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242549) - qemu: Remove 'allowReboot' field (RHEL-242549) - qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242549) - qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242549) - qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242549) - processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242549) - conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242549) - qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242549) - qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242549) - qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242549) - Add support for keeping VM running when panic notifier is used (RHEL-242549) - qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-224986) - Add guest device info to virDomainGetGuestInfo (RHEL-243306) - qemu_agent: Introduce guest-get-devices (RHEL-243306) - qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-243306) - qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-243306) - virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-243306) - qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-224986) - util: virFileChownFiles: do not follow symlinks (CVE-2026-63622) - distro: Update URL in plans.fmf - qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-186018) - qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-186018) - qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-186018) - qemu: validate: Validate VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186018) - qemu: postparse: Process VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186018) - virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-186018) - qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-186018) - qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-186018) - qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-186018) - qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-186018) - qemustatusxml2xml: Add test case capturing virtio video device (RHEL-186018) - virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-186018) - conf: Add fields for recording actually-selected virtio video device (RHEL-186018) - qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-186018) - qemuDeviceVideoGetModel: Directly return picked model (RHEL-186018) - qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-186018) - qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-186018) - qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-186018) - qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-186018) - qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-186018) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - Enable building for ppc64le - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090) - Enable building for ppc64le - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - Enable building for ppc64le - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - Enable building for ppc64le - remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245282, CVE-2026-18917) - qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242549) - qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242549) - qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242549) - qemu: Remove 'allowReboot' field (RHEL-242549) - qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242549) - qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242549) - qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242549) - processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242549) - conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242549) - qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242549) - qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242549) - qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242549) - Add support for keeping VM running when panic notifier is used (RHEL-242549) - qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-224986) - Add guest device info to virDomainGetGuestInfo (RHEL-243306) - qemu_agent: Introduce guest-get-devices (RHEL-243306) - qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-243306) - qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-243306) - virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-243306) - qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-224986) - util: virFileChownFiles: do not follow symlinks (CVE-2026-63622) - distro: Update URL in plans.fmf - qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-186018) - qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-186018) - qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-186018) - qemu: validate: Validate VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186018) - qemu: postparse: Process VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186018) - virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-186018) - qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-186018) - qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-186018) - qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-186018) - qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-186018) - qemustatusxml2xml: Add test case capturing virtio video device (RHEL-186018) - virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-186018) - conf: Add fields for recording actually-selected virtio video device (RHEL-186018) - qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-186018) - qemuDeviceVideoGetModel: Directly return picked model (RHEL-186018) - qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-186018) - qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-186018) - qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-186018) - qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-186018) - qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-186018) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - Enable building for ppc64le - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090) - Enable building for ppc64le - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - Enable building for ppc64le - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - Enable building for ppc64le - remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245282, CVE-2026-18917) - qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242549) - qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242549) - qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242549) - qemu: Remove 'allowReboot' field (RHEL-242549) - qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242549) - qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242549) - qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242549) - processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242549) - conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242549) - qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242549) - qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242549) - qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242549) - Add support for keeping VM running when panic notifier is used (RHEL-242549) - qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-224986) - Add guest device info to virDomainGetGuestInfo (RHEL-243306) - qemu_agent: Introduce guest-get-devices (RHEL-243306) - qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-243306) - qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-243306) - virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-243306) - qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-224986) - util: virFileChownFiles: do not follow symlinks (CVE-2026-63622) - distro: Update URL in plans.fmf - qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-186018) - qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-186018) - qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-186018) - qemu: validate: Validate VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186018) - qemu: postparse: Process VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186018) - virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-186018) - qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-186018) - qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-186018) - qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-186018) - qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-186018) - qemustatusxml2xml: Add test case capturing virtio video device (RHEL-186018) - virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-186018) - conf: Add fields for recording actually-selected virtio video device (RHEL-186018) - qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-186018) - qemuDeviceVideoGetModel: Directly return picked model (RHEL-186018) - qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-186018) - qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-186018) - qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-186018) - qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-186018) - qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-186018) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - Enable building for ppc64le - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090) - Enable building for ppc64le - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - Enable building for ppc64le - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - Enable building for ppc64le - remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245282, CVE-2026-18917) - qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242549) - qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242549) - qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242549) - qemu: Remove 'allowReboot' field (RHEL-242549) - qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242549) - qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242549) - qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242549) - processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242549) - conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242549) - qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242549) - qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242549) - qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242549) - Add support for keeping VM running when panic notifier is used (RHEL-242549) - qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-224986) - Add guest device info to virDomainGetGuestInfo (RHEL-243306) - qemu_agent: Introduce guest-get-devices (RHEL-243306) - qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-243306) - qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-243306) - virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-243306) - qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-224986) - util: virFileChownFiles: do not follow symlinks (CVE-2026-63622) - distro: Update URL in plans.fmf - qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-186018) - qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-186018) - qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-186018) - qemu: validate: Validate VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186018) - qemu: postparse: Process VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186018) - virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-186018) - qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-186018) - qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-186018) - qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-186018) - qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-186018) - qemustatusxml2xml: Add test case capturing virtio video device (RHEL-186018) - virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-186018) - conf: Add fields for recording actually-selected virtio video device (RHEL-186018) - qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-186018) - qemuDeviceVideoGetModel: Directly return picked model (RHEL-186018) - qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-186018) - qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-186018) - qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-186018) - qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-186018) - qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-186018) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - Enable building for ppc64le - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090) - Enable building for ppc64le - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - Enable building for ppc64le - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - Enable building for ppc64le - remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245282, CVE-2026-18917) - qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242549) - qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242549) - qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242549) - qemu: Remove 'allowReboot' field (RHEL-242549) - qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242549) - qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242549) - qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242549) - processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242549) - conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242549) - qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242549) - qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242549) - qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242549) - Add support for keeping VM running when panic notifier is used (RHEL-242549) - qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-224986) - Add guest device info to virDomainGetGuestInfo (RHEL-243306) - qemu_agent: Introduce guest-get-devices (RHEL-243306) - qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-243306) - qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-243306) - virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-243306) - qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-224986) - util: virFileChownFiles: do not follow symlinks (CVE-2026-63622) - distro: Update URL in plans.fmf - qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-186018) - qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-186018) - qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-186018) - qemu: validate: Validate VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186018) - qemu: postparse: Process VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186018) - virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-186018) - qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-186018) - qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-186018) - qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-186018) - qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-186018) - qemustatusxml2xml: Add test case capturing virtio video device (RHEL-186018) - virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-186018) - conf: Add fields for recording actually-selected virtio video device (RHEL-186018) - qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-186018) - qemuDeviceVideoGetModel: Directly return picked model (RHEL-186018) - qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-186018) - qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-186018) - qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-186018) - qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-186018) - qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-186018) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - Enable building for ppc64le - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090) - Enable building for ppc64le - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - Enable building for ppc64le - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - Enable building for ppc64le - remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245282, CVE-2026-18917) - qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242549) - qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242549) - qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242549) - qemu: Remove 'allowReboot' field (RHEL-242549) - qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242549) - qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242549) - qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242549) - processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242549) - conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242549) - qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242549) - qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242549) - qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242549) - Add support for keeping VM running when panic notifier is used (RHEL-242549) - qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-224986) - Add guest device info to virDomainGetGuestInfo (RHEL-243306) - qemu_agent: Introduce guest-get-devices (RHEL-243306) - qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-243306) - qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-243306) - virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-243306) - qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-224986) - util: virFileChownFiles: do not follow symlinks (CVE-2026-63622) - distro: Update URL in plans.fmf - qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-186018) - qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-186018) - qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-186018) - qemu: validate: Validate VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186018) - qemu: postparse: Process VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186018) - virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-186018) - qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-186018) - qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-186018) - qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-186018) - qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-186018) - qemustatusxml2xml: Add test case capturing virtio video device (RHEL-186018) - virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-186018) - conf: Add fields for recording actually-selected virtio video device (RHEL-186018) - qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-186018) - qemuDeviceVideoGetModel: Directly return picked model (RHEL-186018) - qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-186018) - qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-186018) - qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-186018) - qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-186018) - qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-186018) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - Enable building for ppc64le - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090) - Enable building for ppc64le - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - Enable building for ppc64le - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - Enable building for ppc64le - remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245282, CVE-2026-18917) - qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242549) - qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242549) - qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242549) - qemu: Remove 'allowReboot' field (RHEL-242549) - qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242549) - qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242549) - qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242549) - processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242549) - conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242549) - qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242549) - qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242549) - qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242549) - Add support for keeping VM running when panic notifier is used (RHEL-242549) - qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-224986) - Add guest device info to virDomainGetGuestInfo (RHEL-243306) - qemu_agent: Introduce guest-get-devices (RHEL-243306) - qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-243306) - qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-243306) - virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-243306) - qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-224986) - util: virFileChownFiles: do not follow symlinks (CVE-2026-63622) - distro: Update URL in plans.fmf - qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-186018) - qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-186018) - qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-186018) - qemu: validate: Validate VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186018) - qemu: postparse: Process VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186018) - virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-186018) - qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-186018) - qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-186018) - qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-186018) - qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-186018) - qemustatusxml2xml: Add test case capturing virtio video device (RHEL-186018) - virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-186018) - conf: Add fields for recording actually-selected virtio video device (RHEL-186018) - qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-186018) - qemuDeviceVideoGetModel: Directly return picked model (RHEL-186018) - qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-186018) - qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-186018) - qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-186018) - qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-186018) - qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-186018) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - Enable building for ppc64le - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090) - Enable building for ppc64le - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - Enable building for ppc64le - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - Enable building for ppc64le - remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245282, CVE-2026-18917) - qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242549) - qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242549) - qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242549) - qemu: Remove 'allowReboot' field (RHEL-242549) - qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242549) - qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242549) - qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242549) - processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242549) - conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242549) - qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242549) - qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242549) - qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242549) - Add support for keeping VM running when panic notifier is used (RHEL-242549) - qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-224986) - Add guest device info to virDomainGetGuestInfo (RHEL-243306) - qemu_agent: Introduce guest-get-devices (RHEL-243306) - qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-243306) - qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-243306) - virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-243306) - qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-224986) - util: virFileChownFiles: do not follow symlinks (CVE-2026-63622) - distro: Update URL in plans.fmf - qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-186018) - qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-186018) - qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-186018) - qemu: validate: Validate VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186018) - qemu: postparse: Process VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186018) - virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-186018) - qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-186018) - qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-186018) - qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-186018) - qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-186018) - qemustatusxml2xml: Add test case capturing virtio video device (RHEL-186018) - virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-186018) - conf: Add fields for recording actually-selected virtio video device (RHEL-186018) - qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-186018) - qemuDeviceVideoGetModel: Directly return picked model (RHEL-186018) - qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-186018) - qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-186018) - qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-186018) - qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-186018) - qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-186018) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - Enable building for ppc64le - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090) - Enable building for ppc64le - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - Enable building for ppc64le - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - Enable building for ppc64le - remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245282, CVE-2026-18917) - qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242549) - qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242549) - qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242549) - qemu: Remove 'allowReboot' field (RHEL-242549) - qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242549) - qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242549) - qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242549) - processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242549) - conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242549) - qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242549) - qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242549) - qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242549) - Add support for keeping VM running when panic notifier is used (RHEL-242549) - qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-224986) - Add guest device info to virDomainGetGuestInfo (RHEL-243306) - qemu_agent: Introduce guest-get-devices (RHEL-243306) - qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-243306) - qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-243306) - virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-243306) - qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-224986) - util: virFileChownFiles: do not follow symlinks (CVE-2026-63622) - distro: Update URL in plans.fmf - qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-186018) - qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-186018) - qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-186018) - qemu: validate: Validate VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186018) - qemu: postparse: Process VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186018) - virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-186018) - qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-186018) - qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-186018) - qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-186018) - qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-186018) - qemustatusxml2xml: Add test case capturing virtio video device (RHEL-186018) - virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-186018) - conf: Add fields for recording actually-selected virtio video device (RHEL-186018) - qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-186018) - qemuDeviceVideoGetModel: Directly return picked model (RHEL-186018) - qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-186018) - qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-186018) - qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-186018) - qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-186018) - qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-186018) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - Enable building for ppc64le - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090) - Enable building for ppc64le - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - Enable building for ppc64le - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - Enable building for ppc64le - remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245282, CVE-2026-18917) - qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242549) - qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242549) - qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242549) - qemu: Remove 'allowReboot' field (RHEL-242549) - qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242549) - qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242549) - qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242549) - processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242549) - conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242549) - qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242549) - qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242549) - qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242549) - Add support for keeping VM running when panic notifier is used (RHEL-242549) - qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-224986) - Add guest device info to virDomainGetGuestInfo (RHEL-243306) - qemu_agent: Introduce guest-get-devices (RHEL-243306) - qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-243306) - qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-243306) - virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-243306) - qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-224986) - util: virFileChownFiles: do not follow symlinks (CVE-2026-63622) - distro: Update URL in plans.fmf - qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-186018) - qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-186018) - qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-186018) - qemu: validate: Validate VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186018) - qemu: postparse: Process VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186018) - virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-186018) - qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-186018) - qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-186018) - qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-186018) - qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-186018) - qemustatusxml2xml: Add test case capturing virtio video device (RHEL-186018) - virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-186018) - conf: Add fields for recording actually-selected virtio video device (RHEL-186018) - qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-186018) - qemuDeviceVideoGetModel: Directly return picked model (RHEL-186018) - qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-186018) - qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-186018) - qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-186018) - qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-186018) - qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-186018) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - Enable building for ppc64le - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090) - Enable building for ppc64le - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - Enable building for ppc64le - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - Enable building for ppc64le - remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245282, CVE-2026-18917) - qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242549) - qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242549) - qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242549) - qemu: Remove 'allowReboot' field (RHEL-242549) - qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242549) - qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242549) - qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242549) - processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242549) - conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242549) - qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242549) - qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242549) - qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242549) - Add support for keeping VM running when panic notifier is used (RHEL-242549) - qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-224986) - Add guest device info to virDomainGetGuestInfo (RHEL-243306) - qemu_agent: Introduce guest-get-devices (RHEL-243306) - qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-243306) - qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-243306) - virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-243306) - qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-224986) - util: virFileChownFiles: do not follow symlinks (CVE-2026-63622) - distro: Update URL in plans.fmf - qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-186018) - qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-186018) - qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-186018) - qemu: validate: Validate VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186018) - qemu: postparse: Process VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186018) - virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-186018) - qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-186018) - qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-186018) - qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-186018) - qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-186018) - qemustatusxml2xml: Add test case capturing virtio video device (RHEL-186018) - virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-186018) - conf: Add fields for recording actually-selected virtio video device (RHEL-186018) - qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-186018) - qemuDeviceVideoGetModel: Directly return picked model (RHEL-186018) - qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-186018) - qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-186018) - qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-186018) - qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-186018) - qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-186018) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - Enable building for ppc64le - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090) - Enable building for ppc64le - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - Enable building for ppc64le - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - Enable building for ppc64le - remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245282, CVE-2026-18917) - qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242549) - qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242549) - qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242549) - qemu: Remove 'allowReboot' field (RHEL-242549) - qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242549) - qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242549) - qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242549) - processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242549) - conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242549) - qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242549) - qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242549) - qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242549) - Add support for keeping VM running when panic notifier is used (RHEL-242549) - qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-224986) - Add guest device info to virDomainGetGuestInfo (RHEL-243306) - qemu_agent: Introduce guest-get-devices (RHEL-243306) - qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-243306) - qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-243306) - virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-243306) - qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-224986) - util: virFileChownFiles: do not follow symlinks (CVE-2026-63622) - distro: Update URL in plans.fmf - qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-186018) - qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-186018) - qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-186018) - qemu: validate: Validate VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186018) - qemu: postparse: Process VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186018) - virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-186018) - qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-186018) - qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-186018) - qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-186018) - qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-186018) - qemustatusxml2xml: Add test case capturing virtio video device (RHEL-186018) - virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-186018) - conf: Add fields for recording actually-selected virtio video device (RHEL-186018) - qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-186018) - qemuDeviceVideoGetModel: Directly return picked model (RHEL-186018) - qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-186018) - qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-186018) - qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-186018) - qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-186018) - qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-186018) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - Enable building for ppc64le - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090) - Enable building for ppc64le - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - Enable building for ppc64le - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - Enable building for ppc64le - remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245282, CVE-2026-18917) - qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242549) - qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242549) - qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242549) - qemu: Remove 'allowReboot' field (RHEL-242549) - qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242549) - qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242549) - qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242549) - processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242549) - conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242549) - qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242549) - qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242549) - qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242549) - Add support for keeping VM running when panic notifier is used (RHEL-242549) - qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-224986) - Add guest device info to virDomainGetGuestInfo (RHEL-243306) - qemu_agent: Introduce guest-get-devices (RHEL-243306) - qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-243306) - qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-243306) - virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-243306) - qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-224986) - util: virFileChownFiles: do not follow symlinks (CVE-2026-63622) - distro: Update URL in plans.fmf - qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-186018) - qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-186018) - qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-186018) - qemu: validate: Validate VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186018) - qemu: postparse: Process VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186018) - virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-186018) - qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-186018) - qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-186018) - qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-186018) - qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-186018) - qemustatusxml2xml: Add test case capturing virtio video device (RHEL-186018) - virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-186018) - conf: Add fields for recording actually-selected virtio video device (RHEL-186018) - qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-186018) - qemuDeviceVideoGetModel: Directly return picked model (RHEL-186018) - qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-186018) - qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-186018) - qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-186018) - qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-186018) - qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-186018) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - Enable building for ppc64le - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090) - Enable building for ppc64le - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - Enable building for ppc64le - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - Enable building for ppc64le - remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245282, CVE-2026-18917) - qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242549) - qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242549) - qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242549) - qemu: Remove 'allowReboot' field (RHEL-242549) - qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242549) - qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242549) - qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242549) - processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242549) - conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242549) - qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242549) - qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242549) - qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242549) - Add support for keeping VM running when panic notifier is used (RHEL-242549) - qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-224986) - Add guest device info to virDomainGetGuestInfo (RHEL-243306) - qemu_agent: Introduce guest-get-devices (RHEL-243306) - qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-243306) - qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-243306) - virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-243306) - qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-224986) - util: virFileChownFiles: do not follow symlinks (CVE-2026-63622) - distro: Update URL in plans.fmf - qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-186018) - qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-186018) - qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-186018) - qemu: validate: Validate VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186018) - qemu: postparse: Process VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186018) - virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-186018) - qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-186018) - qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-186018) - qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-186018) - qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-186018) - qemustatusxml2xml: Add test case capturing virtio video device (RHEL-186018) - virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-186018) - conf: Add fields for recording actually-selected virtio video device (RHEL-186018) - qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-186018) - qemuDeviceVideoGetModel: Directly return picked model (RHEL-186018) - qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-186018) - qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-186018) - qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-186018) - qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-186018) - qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-186018) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - Enable building for ppc64le - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090) - Enable building for ppc64le - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - Enable building for ppc64le - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - Enable building for ppc64le - remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245282, CVE-2026-18917) - qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242549) - qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242549) - qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242549) - qemu: Remove 'allowReboot' field (RHEL-242549) - qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242549) - qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242549) - qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242549) - processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242549) - conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242549) - qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242549) - qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242549) - qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242549) - Add support for keeping VM running when panic notifier is used (RHEL-242549) - qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-224986) - Add guest device info to virDomainGetGuestInfo (RHEL-243306) - qemu_agent: Introduce guest-get-devices (RHEL-243306) - qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-243306) - qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-243306) - virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-243306) - qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-224986) - util: virFileChownFiles: do not follow symlinks (CVE-2026-63622) - distro: Update URL in plans.fmf - qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-186018) - qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-186018) - qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-186018) - qemu: validate: Validate VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186018) - qemu: postparse: Process VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186018) - virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-186018) - qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-186018) - qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-186018) - qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-186018) - qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-186018) - qemustatusxml2xml: Add test case capturing virtio video device (RHEL-186018) - virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-186018) - conf: Add fields for recording actually-selected virtio video device (RHEL-186018) - qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-186018) - qemuDeviceVideoGetModel: Directly return picked model (RHEL-186018) - qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-186018) - qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-186018) - qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-186018) - qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-186018) - qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-186018) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - Enable building for ppc64le - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090) - Enable building for ppc64le - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - Enable building for ppc64le - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - Enable building for ppc64le - remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245282, CVE-2026-18917) - qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242549) - qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242549) - qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242549) - qemu: Remove 'allowReboot' field (RHEL-242549) - qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242549) - qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242549) - qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242549) - processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242549) - conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242549) - qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242549) - qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242549) - qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242549) - Add support for keeping VM running when panic notifier is used (RHEL-242549) - qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-224986) - Add guest device info to virDomainGetGuestInfo (RHEL-243306) - qemu_agent: Introduce guest-get-devices (RHEL-243306) - qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-243306) - qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-243306) - virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-243306) - qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-224986) - util: virFileChownFiles: do not follow symlinks (CVE-2026-63622) - distro: Update URL in plans.fmf - qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-186018) - qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-186018) - qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-186018) - qemu: validate: Validate VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186018) - qemu: postparse: Process VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186018) - virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-186018) - qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-186018) - qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-186018) - qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-186018) - qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-186018) - qemustatusxml2xml: Add test case capturing virtio video device (RHEL-186018) - virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-186018) - conf: Add fields for recording actually-selected virtio video device (RHEL-186018) - qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-186018) - qemuDeviceVideoGetModel: Directly return picked model (RHEL-186018) - qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-186018) - qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-186018) - qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-186018) - qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-186018) - qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-186018) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - Enable building for ppc64le - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090) - Enable building for ppc64le - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - Enable building for ppc64le - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - Enable building for ppc64le - remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245282, CVE-2026-18917) - qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242549) - qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242549) - qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242549) - qemu: Remove 'allowReboot' field (RHEL-242549) - qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242549) - qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242549) - qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242549) - processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242549) - conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242549) - qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242549) - qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242549) - qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242549) - Add support for keeping VM running when panic notifier is used (RHEL-242549) - qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-224986) - Add guest device info to virDomainGetGuestInfo (RHEL-243306) - qemu_agent: Introduce guest-get-devices (RHEL-243306) - qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-243306) - qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-243306) - virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-243306) - qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-224986) - util: virFileChownFiles: do not follow symlinks (CVE-2026-63622) - distro: Update URL in plans.fmf - qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-186018) - qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-186018) - qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-186018) - qemu: validate: Validate VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186018) - qemu: postparse: Process VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186018) - virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-186018) - qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-186018) - qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-186018) - qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-186018) - qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-186018) - qemustatusxml2xml: Add test case capturing virtio video device (RHEL-186018) - virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-186018) - conf: Add fields for recording actually-selected virtio video device (RHEL-186018) - qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-186018) - qemuDeviceVideoGetModel: Directly return picked model (RHEL-186018) - qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-186018) - qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-186018) - qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-186018) - qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-186018) - qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-186018) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - Enable building for ppc64le - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090) - Enable building for ppc64le - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - Enable building for ppc64le - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - Enable building for ppc64le - remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245282, CVE-2026-18917) - qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242549) - qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242549) - qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242549) - qemu: Remove 'allowReboot' field (RHEL-242549) - qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242549) - qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242549) - qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242549) - processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242549) - conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242549) - qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242549) - qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242549) - qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242549) - Add support for keeping VM running when panic notifier is used (RHEL-242549) - qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-224986) - Add guest device info to virDomainGetGuestInfo (RHEL-243306) - qemu_agent: Introduce guest-get-devices (RHEL-243306) - qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-243306) - qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-243306) - virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-243306) - qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-224986) - util: virFileChownFiles: do not follow symlinks (CVE-2026-63622) - distro: Update URL in plans.fmf - qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-186018) - qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-186018) - qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-186018) - qemu: validate: Validate VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186018) - qemu: postparse: Process VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186018) - virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-186018) - qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-186018) - qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-186018) - qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-186018) - qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-186018) - qemustatusxml2xml: Add test case capturing virtio video device (RHEL-186018) - virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-186018) - conf: Add fields for recording actually-selected virtio video device (RHEL-186018) - qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-186018) - qemuDeviceVideoGetModel: Directly return picked model (RHEL-186018) - qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-186018) - qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-186018) - qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-186018) - qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-186018) - qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-186018) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - Enable building for ppc64le - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090) - Enable building for ppc64le - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - Enable building for ppc64le - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - Enable building for ppc64le - remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245282, CVE-2026-18917) - qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242549) - qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242549) - qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242549) - qemu: Remove 'allowReboot' field (RHEL-242549) - qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242549) - qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242549) - qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242549) - processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242549) - conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242549) - qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242549) - qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242549) - qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242549) - Add support for keeping VM running when panic notifier is used (RHEL-242549) - qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-224986) - Add guest device info to virDomainGetGuestInfo (RHEL-243306) - qemu_agent: Introduce guest-get-devices (RHEL-243306) - qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-243306) - qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-243306) - virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-243306) - qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-224986) - util: virFileChownFiles: do not follow symlinks (CVE-2026-63622) - distro: Update URL in plans.fmf - qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-186018) - qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-186018) - qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-186018) - qemu: validate: Validate VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186018) - qemu: postparse: Process VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186018) - virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-186018) - qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-186018) - qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-186018) - qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-186018) - qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-186018) - qemustatusxml2xml: Add test case capturing virtio video device (RHEL-186018) - virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-186018) - conf: Add fields for recording actually-selected virtio video device (RHEL-186018) - qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-186018) - qemuDeviceVideoGetModel: Directly return picked model (RHEL-186018) - qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-186018) - qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-186018) - qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-186018) - qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-186018) - qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-186018) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - Enable building for ppc64le - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090) - Enable building for ppc64le - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - Enable building for ppc64le - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - Enable building for ppc64le - remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245282, CVE-2026-18917) - qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242549) - qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242549) - qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242549) - qemu: Remove 'allowReboot' field (RHEL-242549) - qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242549) - qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242549) - qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242549) - processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242549) - conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242549) - qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242549) - qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242549) - qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242549) - Add support for keeping VM running when panic notifier is used (RHEL-242549) - qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-224986) - Add guest device info to virDomainGetGuestInfo (RHEL-243306) - qemu_agent: Introduce guest-get-devices (RHEL-243306) - qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-243306) - qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-243306) - virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-243306) - qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-224986) - util: virFileChownFiles: do not follow symlinks (CVE-2026-63622) - distro: Update URL in plans.fmf - qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-186018) - qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-186018) - qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-186018) - qemu: validate: Validate VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186018) - qemu: postparse: Process VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186018) - virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-186018) - qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-186018) - qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-186018) - qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-186018) - qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-186018) - qemustatusxml2xml: Add test case capturing virtio video device (RHEL-186018) - virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-186018) - conf: Add fields for recording actually-selected virtio video device (RHEL-186018) - qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-186018) - qemuDeviceVideoGetModel: Directly return picked model (RHEL-186018) - qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-186018) - qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-186018) - qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-186018) - qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-186018) - qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-186018) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - Enable building for ppc64le - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090) - Enable building for ppc64le - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - Enable building for ppc64le - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - Enable building for ppc64le - remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245282, CVE-2026-18917) - qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242549) - qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242549) - qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242549) - qemu: Remove 'allowReboot' field (RHEL-242549) - qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242549) - qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242549) - qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242549) - processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242549) - conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242549) - qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242549) - qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242549) - qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242549) - Add support for keeping VM running when panic notifier is used (RHEL-242549) - qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-224986) - Add guest device info to virDomainGetGuestInfo (RHEL-243306) - qemu_agent: Introduce guest-get-devices (RHEL-243306) - qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-243306) - qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-243306) - virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-243306) - qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-224986) - util: virFileChownFiles: do not follow symlinks (CVE-2026-63622) - distro: Update URL in plans.fmf - qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-186018) - qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-186018) - qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-186018) - qemu: validate: Validate VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186018) - qemu: postparse: Process VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186018) - virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-186018) - qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-186018) - qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-186018) - qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-186018) - qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-186018) - qemustatusxml2xml: Add test case capturing virtio video device (RHEL-186018) - virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-186018) - conf: Add fields for recording actually-selected virtio video device (RHEL-186018) - qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-186018) - qemuDeviceVideoGetModel: Directly return picked model (RHEL-186018) - qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-186018) - qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-186018) - qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-186018) - qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-186018) - qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-186018) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - Enable building for ppc64le - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090) - Enable building for ppc64le - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - Enable building for ppc64le - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - Enable building for ppc64le - remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245282, CVE-2026-18917) - qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242549) - qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242549) - qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242549) - qemu: Remove 'allowReboot' field (RHEL-242549) - qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242549) - qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242549) - qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242549) - processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242549) - conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242549) - qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242549) - qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242549) - qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242549) - Add support for keeping VM running when panic notifier is used (RHEL-242549) - qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-224986) - Add guest device info to virDomainGetGuestInfo (RHEL-243306) - qemu_agent: Introduce guest-get-devices (RHEL-243306) - qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-243306) - qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-243306) - virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-243306) - qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-224986) - util: virFileChownFiles: do not follow symlinks (CVE-2026-63622) - distro: Update URL in plans.fmf - qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-186018) - qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-186018) - qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-186018) - qemu: validate: Validate VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186018) - qemu: postparse: Process VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186018) - virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-186018) - qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-186018) - qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-186018) - qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-186018) - qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-186018) - qemustatusxml2xml: Add test case capturing virtio video device (RHEL-186018) - virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-186018) - conf: Add fields for recording actually-selected virtio video device (RHEL-186018) - qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-186018) - qemuDeviceVideoGetModel: Directly return picked model (RHEL-186018) - qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-186018) - qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-186018) - qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-186018) - qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-186018) - qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-186018) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - Enable building for ppc64le - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090) - Enable building for ppc64le - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - Enable building for ppc64le - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - Enable building for ppc64le - remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245282, CVE-2026-18917) - qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242549) - qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242549) - qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242549) - qemu: Remove 'allowReboot' field (RHEL-242549) - qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242549) - qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242549) - qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242549) - processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242549) - conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242549) - qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242549) - qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242549) - qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242549) - Add support for keeping VM running when panic notifier is used (RHEL-242549) - qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-224986) - Add guest device info to virDomainGetGuestInfo (RHEL-243306) - qemu_agent: Introduce guest-get-devices (RHEL-243306) - qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-243306) - qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-243306) - virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-243306) - qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-224986) - util: virFileChownFiles: do not follow symlinks (CVE-2026-63622) - distro: Update URL in plans.fmf - qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-186018) - qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-186018) - qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-186018) - qemu: validate: Validate VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186018) - qemu: postparse: Process VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186018) - virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-186018) - qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-186018) - qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-186018) - qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-186018) - qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-186018) - qemustatusxml2xml: Add test case capturing virtio video device (RHEL-186018) - virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-186018) - conf: Add fields for recording actually-selected virtio video device (RHEL-186018) - qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-186018) - qemuDeviceVideoGetModel: Directly return picked model (RHEL-186018) - qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-186018) - qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-186018) - qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-186018) - qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-186018) - qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-186018) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - Enable building for ppc64le - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090) - Enable building for ppc64le - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - Enable building for ppc64le - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - Enable building for ppc64le - remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245282, CVE-2026-18917) - qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242549) - qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242549) - qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242549) - qemu: Remove 'allowReboot' field (RHEL-242549) - qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242549) - qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242549) - qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242549) - processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242549) - conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242549) - qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242549) - qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242549) - qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242549) - Add support for keeping VM running when panic notifier is used (RHEL-242549) - qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-224986) - Add guest device info to virDomainGetGuestInfo (RHEL-243306) - qemu_agent: Introduce guest-get-devices (RHEL-243306) - qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-243306) - qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-243306) - virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-243306) - qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-224986) - util: virFileChownFiles: do not follow symlinks (CVE-2026-63622) - distro: Update URL in plans.fmf - qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-186018) - qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-186018) - qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-186018) - qemu: validate: Validate VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186018) - qemu: postparse: Process VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186018) - virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-186018) - qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-186018) - qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-186018) - qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-186018) - qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-186018) - qemustatusxml2xml: Add test case capturing virtio video device (RHEL-186018) - virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-186018) - conf: Add fields for recording actually-selected virtio video device (RHEL-186018) - qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-186018) - qemuDeviceVideoGetModel: Directly return picked model (RHEL-186018) - qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-186018) - qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-186018) - qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-186018) - qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-186018) - qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-186018) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - Enable building for ppc64le - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090) - Enable building for ppc64le - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - Enable building for ppc64le - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - Enable building for ppc64le - remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245282, CVE-2026-18917) - qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242549) - qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242549) - qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242549) - qemu: Remove 'allowReboot' field (RHEL-242549) - qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242549) - qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242549) - qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242549) - processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242549) - conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242549) - qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242549) - qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242549) - qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242549) - Add support for keeping VM running when panic notifier is used (RHEL-242549) - qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-224986) - Add guest device info to virDomainGetGuestInfo (RHEL-243306) - qemu_agent: Introduce guest-get-devices (RHEL-243306) - qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-243306) - qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-243306) - virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-243306) - qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-224986) - util: virFileChownFiles: do not follow symlinks (CVE-2026-63622) - distro: Update URL in plans.fmf - qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-186018) - qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-186018) - qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-186018) - qemu: validate: Validate VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186018) - qemu: postparse: Process VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186018) - virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-186018) - qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-186018) - qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-186018) - qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-186018) - qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-186018) - qemustatusxml2xml: Add test case capturing virtio video device (RHEL-186018) - virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-186018) - conf: Add fields for recording actually-selected virtio video device (RHEL-186018) - qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-186018) - qemuDeviceVideoGetModel: Directly return picked model (RHEL-186018) - qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-186018) - qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-186018) - qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-186018) - qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-186018) - qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-186018) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - Enable building for ppc64le - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add missing file for RHEL-9 gating tests (rhbz#1950602) - FIX: RHEL: Add gating tests for RHEL-9 (rhbz#1950602) - RHEL: Add gating tests for RHEL-9 (rhbz#1950602) - Rebased to libvirt-dbus-1.4.1 (rhbz#1977337) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.4.0 release - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebased to 4.0.0 release - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Enable building for ppc64le - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - Enable building for ppc64le - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - Enable building for ppc64le - remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245282, CVE-2026-18917) - qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242549) - qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242549) - qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242549) - qemu: Remove 'allowReboot' field (RHEL-242549) - qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242549) - qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242549) - qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242549) - processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242549) - conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242549) - qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242549) - qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242549) - qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242549) - Add support for keeping VM running when panic notifier is used (RHEL-242549) - qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-224986) - Add guest device info to virDomainGetGuestInfo (RHEL-243306) - qemu_agent: Introduce guest-get-devices (RHEL-243306) - qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-243306) - qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-243306) - virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-243306) - qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-224986) - util: virFileChownFiles: do not follow symlinks (CVE-2026-63622) - distro: Update URL in plans.fmf - qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-186018) - qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-186018) - qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-186018) - qemu: validate: Validate VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186018) - qemu: postparse: Process VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186018) - virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-186018) - qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-186018) - qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-186018) - qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-186018) - qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-186018) - qemustatusxml2xml: Add test case capturing virtio video device (RHEL-186018) - virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-186018) - conf: Add fields for recording actually-selected virtio video device (RHEL-186018) - qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-186018) - qemuDeviceVideoGetModel: Directly return picked model (RHEL-186018) - qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-186018) - qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-186018) - qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-186018) - qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-186018) - qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-186018) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - Enable building for ppc64le - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090) - Enable building for ppc64le - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - Enable building for ppc64le - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - Enable building for ppc64le - remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245282, CVE-2026-18917) - qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242549) - qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242549) - qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242549) - qemu: Remove 'allowReboot' field (RHEL-242549) - qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242549) - qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242549) - qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242549) - processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242549) - conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242549) - qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242549) - qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242549) - qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242549) - Add support for keeping VM running when panic notifier is used (RHEL-242549) - qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-224986) - Add guest device info to virDomainGetGuestInfo (RHEL-243306) - qemu_agent: Introduce guest-get-devices (RHEL-243306) - qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-243306) - qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-243306) - virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-243306) - qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-224986) - util: virFileChownFiles: do not follow symlinks (CVE-2026-63622) - distro: Update URL in plans.fmf - qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-186018) - qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-186018) - qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-186018) - qemu: validate: Validate VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186018) - qemu: postparse: Process VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186018) - virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-186018) - qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-186018) - qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-186018) - qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-186018) - qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-186018) - qemustatusxml2xml: Add test case capturing virtio video device (RHEL-186018) - virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-186018) - conf: Add fields for recording actually-selected virtio video device (RHEL-186018) - qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-186018) - qemuDeviceVideoGetModel: Directly return picked model (RHEL-186018) - qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-186018) - qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-186018) - qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-186018) - qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-186018) - qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-186018) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - Enable building for ppc64le - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090) - Enable building for ppc64le - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - Enable building for ppc64le - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - Enable building for ppc64le - remote: Fix integer overflow in RPC handler for virNodeGetFreePages (CVE-2026-18917) (RHEL-245282, CVE-2026-18917) - qemu: Always assume support for 'QEMU_CAPS_SET_ACTION' (RHEL-242549) - qemu: Remove unused 'qemuProcessRebootAllowed' (RHEL-242549) - qemu: monitor: Remove support for 'watchdog-set-action' (RHEL-242549) - qemu: Remove 'allowReboot' field (RHEL-242549) - qemu: capabilities: Retire QEMU_CAPS_SET_ACTION (RHEL-242549) - qemuProcessSetupLifecycleActions: Prepare to handle other actions (RHEL-242549) - qemuDomainModifyLifecycleActionLive: Prepare to handle other actions (RHEL-242549) - processGuestPanicEvent: Don't pass panic action via parameter (RHEL-242549) - conf: Use proper enum types for 'onReboot', 'onPoweroff', 'onCrash', and 'onLockFailure' (RHEL-242549) - qemuMonitorGuestPanicEventInfoFormatMsg: Directly return message (RHEL-242549) - qemuProcessGuestPanicEventInfo: Fold into only caller (RHEL-242549) - qemu: processGuestPanicEvent: Split individual steps under separate conditions (RHEL-242549) - Add support for keeping VM running when panic notifier is used (RHEL-242549) - qemu: Fix proper ordering of 'virtlockd' shutdown (RHEL-224986) - Add guest device info to virDomainGetGuestInfo (RHEL-243306) - qemu_agent: Introduce guest-get-devices (RHEL-243306) - qemuagenttest: Introduce GetGuestDeviceInfo test case (RHEL-243306) - qemu: Implement device info for virDomainGetGuestInfo() API (RHEL-243306) - virsh: Add support for VIR_DOMAIN_GUEST_INFO_DEVICES (RHEL-243306) - qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-224986) - util: virFileChownFiles: do not follow symlinks (CVE-2026-63622) - distro: Update URL in plans.fmf - qemu: capabilities: Apply 'capability_filters' configration option on all capabilities (RHEL-186018) - qemu: capabilities: Export 'virQEMUCapsNewCopy' outside of 'qemu_capspriv' (RHEL-186018) - qemu: Allow reuse of 'qemuProcessStartUpdateCustomCaps' (RHEL-186018) - qemu: validate: Validate VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186018) - qemu: postparse: Process VM config with qemuCaps influenced by <qemu:capabilities> (RHEL-186018) - virQEMUCapsCacheLookupDefault: Fix error message when no emulators are installed (RHEL-186018) - qemuxmlconfdata: un-symlink 'video-virtio-vga-gpu-gl' output (RHEL-186018) - qemuxmlconftest: Add 'video-virtio-vga' invocation with QEMU_CAPS_DEVICE_VIRTIO_VGA disabled (RHEL-186018) - qemuxmlconftest: Add test cases for configs asking for 'virtio-gpu-gl' or 'virtio-vga-gl' without the capability (RHEL-186018) - qemuxmlconftest: Add invocation of 'video-virtio-vga-gpu-gl' with missing caps and VIR_DOMAIN_DEF_PARSE_ABI_UPDATE (RHEL-186018) - qemustatusxml2xml: Add test case capturing virtio video device (RHEL-186018) - virDomainVideoDefFormat: Use 'virXMLFormatElement' instead of custom formatter (RHEL-186018) - conf: Add fields for recording actually-selected virtio video device (RHEL-186018) - qemuxmlconftest: Add test case for specifying 'virtio-gpu' where 'virtio-vga' would be picked (RHEL-186018) - qemuDeviceVideoGetModel: Directly return picked model (RHEL-186018) - qemu: postparse: Fill in selected virtio video frondend device in the XML (RHEL-186018) - qemuValidateDomainDeviceDefVideo: Fix checks of virtio video devices (RHEL-186018) - qemuDeviceVideoGetModel: Remove logic for selecting 'virtio' devices (RHEL-186018) - qemuDeviceVideoGetModel: Simplify by relying on checks from 'qemuValidateDomainDeviceDefVideo' (RHEL-186018) - qemu: Remove 'qemuDomainSupportsVideoVga' (RHEL-186018) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - Enable building for ppc64le - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuild for ICU 67 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuild for ICU 65 - new upstream release - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Use make_build/make_install macros - Drop unneeded ldconfig_scriptlets macro call - Remove a no longer needed -mmmx CFLAGS addition - Disable strict aliasing - Fix multilib conflicts in lvconfig.h - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuild for RHEL-9.8 - Resolves: RHEL-98267 - Rebuilt after updating rdma-core - Resolves: RHEL-98267 - bump release to rebuild in sidetag - Resolves: RHEL-98267 - Update to upstream release 9.8.80 - Resolves: RHEL-98267 - Update to upstream release 9.8.71. - Resolves: RHEL-94446 - Update to upstream release 9.8.60. - Resolves: RHEL-52882 - Update to upstream release 9.8.51. - Resolves: RHEL-24467 - Rebuild for RHEL-9.8 - Resolves: RHEL-98267 - Rebuilt after updating rdma-core - Resolves: RHEL-98267 - bump release to rebuild in sidetag - Resolves: RHEL-98267 - Update to upstream release 9.8.80 - Resolves: RHEL-98267 - Update to upstream release 9.8.71. - Resolves: RHEL-94446 - Update to upstream release 9.8.60. - Resolves: RHEL-52882 - Update to upstream release 9.8.51. - Resolves: RHEL-24467 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: rhbz#1977691 bump release number to add libvoikko-devel package to CRB - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Add Requires: voikko-fi - The dictionary data directory will now be /usr/lib/voikko on all architectures - Create and own /usr/lib/voikko, so different dictionary packages can own the subdirectories there - This was suggested in the review of the voikko-fi package, see rhbz#1919688 - Use the license macro - Bump release for a new Copr build - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 4.3 - Add GPG signature check for the source - Fix pycached stuff - Remove old python_provide macro - Remove ldconfig_scriptlets macro - Only use VFST for now, HFST can be provided in a later update - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.3.7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Add patch for superindex full Resolves: RHEL-150344 - Add patch for double free Resolves: RHEL-93910 - Add patch to fix integer overflows. - Disable LTO to fix build - Resolves: RHEL-40655 - Add stylus definitions for the propen group (RHEL-122207) - Add tablet definitions for the latest Cintiqs (RHEL-122206) - Fix the overlap for button assignments in the SVG (RHEL-126355) - Rearrange the OSD buttons for the Intuos Pro 3rd Gen (RHEL-101881) - Use separate Ring/Ring2 assignments - Add support for the Cintiq Pro 27 (RHEL-101886) - Add support for the Intuos Pro 3rd Gen series (RHEL-101881) - Add a set of newer Wacom tablets description files - Add stylus definitions for the propen group (RHEL-122207) - Add tablet definitions for the latest Cintiqs (RHEL-122206) - Fix the overlap for button assignments in the SVG (RHEL-126355) - Rearrange the OSD buttons for the Intuos Pro 3rd Gen (RHEL-101881) - Use separate Ring/Ring2 assignments - Add support for the Cintiq Pro 27 (RHEL-101886) - Add support for the Intuos Pro 3rd Gen series (RHEL-101881) - Add a set of newer Wacom tablets description files - Update to 1.21.0 Resolves: rhbz#2063522 - Rebuilt for libffi 3.4.2 SONAME transition. Related: rhbz#1891914 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 1.19.0 - Switch to meson build system - Drop old provides - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.21.0 Resolves: rhbz#2063522 - Rebuilt for libffi 3.4.2 SONAME transition. Related: rhbz#1891914 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 1.19.0 - Switch to meson build system - Drop old provides - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.21.0 Resolves: rhbz#2063522 - Rebuilt for libffi 3.4.2 SONAME transition. Related: rhbz#1891914 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 1.19.0 - Switch to meson build system - Drop old provides - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.21.0 Resolves: rhbz#2063522 - Rebuilt for libffi 3.4.2 SONAME transition. Related: rhbz#1891914 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 1.19.0 - Switch to meson build system - Drop old provides - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Added fix for CVE-2023-4863 - Bump the release to "7" to accommodate the 9.1.0.z release bumps as libwebp-1.2.0-6.el9 < libwebp-1.2.0-6.el9_1 - Add fix for mzbz#1819244 - Fix tools subpackage dependency - Bump the release to "6" to accommodate the 9.1.0.z release bumps - Added fix for CVE-2023-4863 - Bump the release to "7" to accommodate the 9.1.0.z release bumps as libwebp-1.2.0-6.el9 < libwebp-1.2.0-6.el9_1 - Add fix for mzbz#1819244 - Fix tools subpackage dependency - Bump the release to "6" to accommodate the 9.1.0.z release bumps - Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952) Resolves: RHEL-159860 - Fix double free in xf_rail_window_common cleanup (CVE-2026-26986) - Fix growth of preallocated buffers (CVE-2026-27951) - Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775) - Add DSP format checks (CVE-2026-31884) - Fix DSP array bounds checks (CVE-2026-31883) - Fix DSP array bounds checks (CVE-2026-31885) - Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985) Resolves: RHEL-159816, RHEL-155478, RHEL-161047, RHEL-161482 Resolves: RHEL-161519, RHEL-161085, RHEL-168463 - Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984) - Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983) Resolves: RHEL-163097, RHEL-163113 - Fix use of nsc_process_message Resolves: RHEL-155994 - Backport several CVE fixes Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081 Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032 Resolves: RHEL-149043, RHEL-149066, RHEL-155994 - Backport several CVE fixes Resolves: RHEL-151989, RHEL-152216 - Backport several CVE fixes Resolves: RHEL-148849, RHEL-148891, RHEL-149030 - Backport several CVE fixes Resolves: RHEL-142427, RHEL-142411, RHEL-142395, RHEL-142379, RHEL-142363 Resolves: RHEL-142348, RHEL-142332 - Try next DNS entry on connect failure Resolves: RHEL-113722 - Update to 2.11.7 (CVE-2024-32039, CVE-2024-32040, CVE-2024-32041, CVE-2024-32458, CVE-2024-32459, CVE-2024-32460, CVE-2024-32658, CVE-2024-32659, CVE-2024-32660, CVE-2024-32661, CVE-2024-32662) - Fix incorrect bounds checks in planar codec (CVE-2026-45700) Resolves: RHEL-186991 - Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952) Resolves: RHEL-159860 - Fix double free in xf_rail_window_common cleanup (CVE-2026-26986) - Fix growth of preallocated buffers (CVE-2026-27951) - Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775) - Add DSP format checks (CVE-2026-31884) - Fix DSP array bounds checks (CVE-2026-31883) - Fix DSP array bounds checks (CVE-2026-31885) - Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985) Resolves: RHEL-159816, RHEL-155478, RHEL-161047, RHEL-161482 Resolves: RHEL-161519, RHEL-161085, RHEL-168463 - Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984) - Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983) Resolves: RHEL-163097, RHEL-163113 - Fix use of nsc_process_message Resolves: RHEL-155994 - Backport several CVE fixes Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081 Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032 Resolves: RHEL-149043, RHEL-149066, RHEL-155994 - Backport several CVE fixes Resolves: RHEL-151989, RHEL-152216 - Backport several CVE fixes Resolves: RHEL-148849, RHEL-148891, RHEL-149030 - Backport several CVE fixes Resolves: RHEL-142427, RHEL-142411, RHEL-142395, RHEL-142379, RHEL-142363 Resolves: RHEL-142348, RHEL-142332 - Try next DNS entry on connect failure Resolves: RHEL-113722 - Backport several CVE fixes (CVE-2026-64624, CVE-2026-67289, CVE-2026-67299, CVE-2026-68580) Resolves: RHEL-213169, RHEL-222785, RHEL-222966, RHEL-223605 - Fix incorrect bounds checks in planar codec (CVE-2026-45700) Resolves: RHEL-186991 - Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952) Resolves: RHEL-159860 - Fix double free in xf_rail_window_common cleanup (CVE-2026-26986) - Fix growth of preallocated buffers (CVE-2026-27951) - Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775) - Add DSP format checks (CVE-2026-31884) - Fix DSP array bounds checks (CVE-2026-31883) - Fix DSP array bounds checks (CVE-2026-31885) - Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985) Resolves: RHEL-159816, RHEL-155478, RHEL-161047, RHEL-161482 Resolves: RHEL-161519, RHEL-161085, RHEL-168463 - Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984) - Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983) Resolves: RHEL-163097, RHEL-163113 - Fix use of nsc_process_message Resolves: RHEL-155994 - Backport several CVE fixes Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081 Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032 Resolves: RHEL-149043, RHEL-149066, RHEL-155994 - Backport several CVE fixes Resolves: RHEL-151989, RHEL-152216 - Backport several CVE fixes Resolves: RHEL-148849, RHEL-148891, RHEL-149030 - Backport several CVE fixes Resolves: RHEL-142427, RHEL-142411, RHEL-142395, RHEL-142379, RHEL-142363 Resolves: RHEL-142348, RHEL-142332 - Backport several CVE fixes (CVE-2026-55194, CVE-2026-67288, CVE-2026-67291, CVE-2026-67301) Resolves: RHEL-225096, RHEL-227729, RHEL-236060, RHEL-246241 - Backport several CVE fixes (CVE-2026-64624, CVE-2026-67289, CVE-2026-67299, CVE-2026-68580) Resolves: RHEL-213169, RHEL-222785, RHEL-222966, RHEL-223605 - Fix incorrect bounds checks in planar codec (CVE-2026-45700) Resolves: RHEL-186991 - Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952) Resolves: RHEL-159860 - Fix double free in xf_rail_window_common cleanup (CVE-2026-26986) - Fix growth of preallocated buffers (CVE-2026-27951) - Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775) - Add DSP format checks (CVE-2026-31884) - Fix DSP array bounds checks (CVE-2026-31883) - Fix DSP array bounds checks (CVE-2026-31885) - Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985) Resolves: RHEL-159816, RHEL-155478, RHEL-161047, RHEL-161482 Resolves: RHEL-161519, RHEL-161085, RHEL-168463 - Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984) - Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983) Resolves: RHEL-163097, RHEL-163113 - Fix use of nsc_process_message Resolves: RHEL-155994 - Backport several CVE fixes Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081 Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032 Resolves: RHEL-149043, RHEL-149066, RHEL-155994 - Backport several CVE fixes Resolves: RHEL-151989, RHEL-152216 - Backport several CVE fixes Resolves: RHEL-148849, RHEL-148891, RHEL-149030 - Fix RPC gateway fragment size and capacity checks (CVE-2026-55193) Resolves: RHEL-247356 - Backport several CVE fixes (CVE-2026-55194, CVE-2026-67288, CVE-2026-67291, CVE-2026-67301) Resolves: RHEL-225096, RHEL-227729, RHEL-236060, RHEL-246241 - Backport several CVE fixes (CVE-2026-64624, CVE-2026-67289, CVE-2026-67299, CVE-2026-68580) Resolves: RHEL-213169, RHEL-222785, RHEL-222966, RHEL-223605 - Fix incorrect bounds checks in planar codec (CVE-2026-45700) Resolves: RHEL-186991 - Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952) Resolves: RHEL-159860 - Fix double free in xf_rail_window_common cleanup (CVE-2026-26986) - Fix growth of preallocated buffers (CVE-2026-27951) - Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775) - Add DSP format checks (CVE-2026-31884) - Fix DSP array bounds checks (CVE-2026-31883) - Fix DSP array bounds checks (CVE-2026-31885) - Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985) Resolves: RHEL-159816, RHEL-155478, RHEL-161047, RHEL-161482 Resolves: RHEL-161519, RHEL-161085, RHEL-168463 - Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984) - Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983) Resolves: RHEL-163097, RHEL-163113 - Fix use of nsc_process_message Resolves: RHEL-155994 - Backport several CVE fixes Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081 Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032 Resolves: RHEL-149043, RHEL-149066, RHEL-155994 - Backport several CVE fixes Resolves: RHEL-151989, RHEL-152216 - Backport several CVE fixes (CVE-2026-91953, CVE-2026-91954, CVE-2026-91956, CVE-2026-91959, CVE-2026-91963, CVE-2026-91964) Resolves: RHEL-260758, RHEL-260785, RHEL-260803, RHEL-260849, RHEL-260871 Resolves: RHEL-260902 - Fix RPC gateway fragment size and capacity checks (CVE-2026-55193) Resolves: RHEL-247356 - Backport several CVE fixes (CVE-2026-55194, CVE-2026-67288, CVE-2026-67291, CVE-2026-67301) Resolves: RHEL-225096, RHEL-227729, RHEL-236060, RHEL-246241 - Backport several CVE fixes (CVE-2026-64624, CVE-2026-67289, CVE-2026-67299, CVE-2026-68580) Resolves: RHEL-213169, RHEL-222785, RHEL-222966, RHEL-223605 - Fix incorrect bounds checks in planar codec (CVE-2026-45700) Resolves: RHEL-186991 - Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952) Resolves: RHEL-159860 - Fix double free in xf_rail_window_common cleanup (CVE-2026-26986) - Fix growth of preallocated buffers (CVE-2026-27951) - Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775) - Add DSP format checks (CVE-2026-31884) - Fix DSP array bounds checks (CVE-2026-31883) - Fix DSP array bounds checks (CVE-2026-31885) - Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985) Resolves: RHEL-159816, RHEL-155478, RHEL-161047, RHEL-161482 Resolves: RHEL-161519, RHEL-161085, RHEL-168463 - Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984) - Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983) Resolves: RHEL-163097, RHEL-163113 - Fix use of nsc_process_message Resolves: RHEL-155994 - Backport several CVE fixes Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081 Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032 Resolves: RHEL-149043, RHEL-149066, RHEL-155994 - Fix use of nsc_process_message Resolves: RHEL-155994 - Backport several CVE fixes Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081 Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032 Resolves: RHEL-149043, RHEL-149066, RHEL-155994 - Backport several CVE fixes Resolves: RHEL-151989, RHEL-152216 - Backport several CVE fixes Resolves: RHEL-148849, RHEL-148891, RHEL-149030 - Backport several CVE fixes Resolves: RHEL-142427, RHEL-142411, RHEL-142395, RHEL-142379, RHEL-142363 Resolves: RHEL-142348, RHEL-142332 - Try next DNS entry on connect failure Resolves: RHEL-113722 - Update to 2.11.7 (CVE-2024-32039, CVE-2024-32040, CVE-2024-32041, CVE-2024-32458, CVE-2024-32459, CVE-2024-32460, CVE-2024-32658, CVE-2024-32659, CVE-2024-32660, CVE-2024-32661, CVE-2024-32662) - ship libwmf-devel in CRB - add gating.yaml file - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - document that libwmf bundles a modified old copy of gd 2.0.1 https://fedoraproject.org/wiki/Bundled_Libraries#Requirement_if_you_bundle - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - ship libwmf-devel in CRB - add gating.yaml file - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - document that libwmf bundles a modified old copy of gd 2.0.1 https://fedoraproject.org/wiki/Bundled_Libraries#Requirement_if_you_bundle - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - revert https://gitlab.gnome.org/GNOME/libwnck/-/commit/3456b74 - fixes rhbz #1971048 - and https://github.com/mate-desktop/mate-panel/issues/1230 - Update to 40.0 - Tighten soname globs - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - update to 3.36.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Fix missing #includes for gcc-11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt to add -devel subpackage to CRB Resolves: #2059251 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 1.10.0 - Update to 1.9.91 - Update to 1.9.90 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.9.1 - Update to 1.8.0 - Update to 1.7.1 and switch to meson build system - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - new upstream release - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - new upstream release - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Support added for post-quantum cryptography Resolves: RHEL-127516 - Fix bogus 'sscg' arguments Related: RHEL-118292 - Update to openwsman-2.8.1 Resolves: RHEL-97643 - Add libwsman-client.so.4 for backward compatibility Related: RHEL-97643 - Update OpenSSL certificates set up Resolves: RHEL-118292 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - New upstream release - Add explicit BR: perl-core - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - New upstream release - Add a patch to add support for LTO builds - Enable LTO - Add a patch to fix Wformat-overflow - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Disable LTO - Trim %changelog starting with v4.4.0 - Remove memcheck conditional - Explicitly force linking with '-Wl,-z,defs' - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - New upstream release - Add explicit BR: perl-core - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - New upstream release - Add a patch to add support for LTO builds - Enable LTO - Add a patch to fix Wformat-overflow - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Disable LTO - Trim %changelog starting with v4.4.0 - Remove memcheck conditional - Explicitly force linking with '-Wl,-z,defs' - Add explicit package version requirement for the devel package for rpminspect. - Update to 0.1.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild - Update to 0.1.1 - Initial import (#1980342) - Upstream version bump - Upstream version bump - Drop upstreamed patch - Upstream version bump - Add annocheck exceptions for BPF objects (Felix) - Re-enable debug builds (Felix) - Add libcap-ng-devel to BuildDepends - Upstream version bump - Fix build with Clang 20 - Upstream version bump - Upstream version bump - Upstream version bump - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - libxkbcommon 1.0.3 - libxkbcommon 1.0.2 - libxkbcommon 1.0.1 - libxkbcommon 1.0.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - libxkbcommon 0.10.0 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - libxkbcommon 1.0.3 - libxkbcommon 1.0.2 - libxkbcommon 1.0.1 - libxkbcommon 1.0.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - libxkbcommon 0.10.0 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - libxkbcommon 1.0.3 - libxkbcommon 1.0.2 - libxkbcommon 1.0.1 - libxkbcommon 1.0.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - libxkbcommon 0.10.0 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for the correct target in RHEL (9.7-z) (RHEL-119283) - Fix CVE-2025-9714 (RHEL-119283) - Fix CVE-2025-32415 (RHEL-100182) - Fix CVE-2025-32414 (RHEL-99873) - Fix CVE-2025-7425 (RHEL-102806) - Fix CVE-2025-6021 (RHEL-96507) - Fix CVE-2025-49794 (RHEL-96405) - Fix CVE-2025-49796 (RHEL-96431) - Fix CVE-2025-24928 (RHEL-80142) - Fix CVE-2024-56171 (RHEL-80127) - Fix CVE-2022-49043 (RHEL-76298) - Fix CVE-2024-25062 (RHEL-29196) - Fix CVE-2024-34459 (RHEL-177882) - Rebuilt for the correct target in RHEL (9.7-z) (RHEL-119283) - Fix CVE-2025-9714 (RHEL-119283) - Fix CVE-2025-32415 (RHEL-100182) - Fix CVE-2025-32414 (RHEL-99873) - Fix CVE-2025-7425 (RHEL-102806) - Fix CVE-2025-6021 (RHEL-96507) - Fix CVE-2025-49794 (RHEL-96405) - Fix CVE-2025-49796 (RHEL-96431) - Fix CVE-2025-24928 (RHEL-80142) - Fix CVE-2024-56171 (RHEL-80127) - Fix CVE-2022-49043 (RHEL-76298) - Fix CVE-2025-6170 (RHEL-182016) - Fix CVE-2024-34459 (RHEL-177882) - Rebuilt for the correct target in RHEL (9.7-z) (RHEL-119283) - Fix CVE-2025-9714 (RHEL-119283) - Fix CVE-2025-32415 (RHEL-100182) - Fix CVE-2025-32414 (RHEL-99873) - Fix CVE-2025-7425 (RHEL-102806) - Fix CVE-2025-6021 (RHEL-96507) - Fix CVE-2025-49794 (RHEL-96405) - Fix CVE-2025-49796 (RHEL-96431) - Fix CVE-2025-24928 (RHEL-80142) - Fix CVE-2024-56171 (RHEL-80127) - Fix CVE-2022-49043 (RHEL-76298) - Fix CVE-2026-11979 (RHEL-215568) - Fix CVE-2026-6653 (RHEL-215619) - Fix CVE-2025-6170 (RHEL-182016) - Fix CVE-2024-34459 (RHEL-177882) - Rebuilt for the correct target in RHEL (9.7-z) (RHEL-119283) - Fix CVE-2025-9714 (RHEL-119283) - Fix CVE-2025-32415 (RHEL-100182) - Fix CVE-2025-32414 (RHEL-99873) - Fix CVE-2025-7425 (RHEL-102806) - Fix CVE-2025-6021 (RHEL-96507) - Fix CVE-2025-49794 (RHEL-96405) - Fix CVE-2025-49796 (RHEL-96431) - Fix CVE-2025-24928 (RHEL-80142) - Fix CVE-2026-86144 (RHEL-256304) - Fix CVE-2026-86140 (RHEL-256027) - Fix CVE-2026-74860 (RHEL-256120) - Fix CVE-2026-86142 (RHEL-256365) - Fix CVE-2026-86143 (RHEL-256901) - Fix CVE-2026-86138 (RHEL-256953) - Fix CVE-2026-11979 (RHEL-215568) - Fix CVE-2026-6653 (RHEL-215619) - Fix CVE-2025-6170 (RHEL-182016) - Fix CVE-2024-34459 (RHEL-177882) - Rebuilt for the correct target in RHEL (9.7-z) (RHEL-119283) - Fix CVE-2025-9714 (RHEL-119283) - Fix CVE-2025-32415 (RHEL-100182) - Fix CVE-2025-32414 (RHEL-99873) - Fix CVE-2025-7425 (RHEL-102806) - Fix CVE-2025-6021 (RHEL-96507) - Fix CVE-2025-49794 (RHEL-96405) - Fix CVE-2025-49796 (RHEL-96431) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fix upgrade path for CVE-2023-40403 (RHEL-82213) - Fix CVE-2023-40403 (RHEL-82213) - Include alloc changes into previous patch (RHEL-83514) - Fix CVE-2024-55549 (RHEL-83514) - Fix CVE-2025-24855 (RHEL-83500) - Fix CVE-2025-10911 (RHEL-171991) - Fix upgrade path for CVE-2023-40403 (RHEL-82213) - Fix CVE-2023-40403 (RHEL-82213) - Include alloc changes into previous patch (RHEL-83514) - Fix CVE-2024-55549 (RHEL-83514) - Fix CVE-2025-24855 (RHEL-83500) - Fix upgrade path for CVE-2023-40403 (RHEL-82213) - Fix CVE-2023-40403 (RHEL-82213) - Include alloc changes into previous patch (RHEL-83514) - Fix CVE-2024-55549 (RHEL-83514) - Fix CVE-2025-24855 (RHEL-83500) - Fix CVE-2025-10911 (RHEL-171991) - Fix upgrade path for CVE-2023-40403 (RHEL-82213) - Fix CVE-2023-40403 (RHEL-82213) - Include alloc changes into previous patch (RHEL-83514) - Fix CVE-2024-55549 (RHEL-83514) - Fix CVE-2025-24855 (RHEL-83500) - Resolves: RHEL-126845 - Rebase libyang to version 2.1.148 - Resolves: RHEL-111202 - Move libyang-devel to CRB - Fix integer overflow and OOM in LYB parser string/value reading - Resolves: RHEL-177019 - Resolves: RHEL-126845 - Rebase libyang to version 2.1.148 - Resolves: RHEL-111202 - Move libyang-devel to CRB - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 2.6.0 - bug fixes - Update to 2.4.92 - update pinyin data - bug fixes - Update to 2.4.91 - improve full pinyin auto correction - bug fixes - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for adding libzip-tools subpackage to pungi Appstream repo - Rebuilt for adding libzip-tools subpackage to pungi Appstream repo - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuild for ICU 67 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuild for ICU 65 - Rebase to 1.5.5 Resolves: RHEL-62221 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 1.7.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 1.7.0 - Fix store/restore utils handling #1753648 - Update to 1.6.1 - handle missing pulses in ts2phc (RHEL-112193) - fix unicast server to recover after port fault (RHEL-93496) - add experimental option for external PPS in ts2phc automatic mode (RHEL-72468) - add command to set external grandmaster properties (RHEL-90585) - refresh link status on faults (RHEL-56168) - update to 4.4 (RHEL-58213 RHEL-57040) - fix port-specific ptp/p2p_dst_ipv4 configuration (RHEL-60027) - support static sink clocks in phc2sys automatic mode (RHEL-62864) - don't require -O option without -a and -w in phc2sys (RHEL-69138) - rework NMEA delay patch to fix PPS edge rejection (RHEL-39387) - fix ts2phc to correctly handle leap seconds (RHEL-40216) - fix ts2phc to reset NMEA parser after RMC message (RHEL-40947) - add options to configure multicast IP addresses (RHEL-31178) - add holdover support to ts2phc (RHEL-50216) - fix loading and reloading of leapfile - update to 4.2 (RHEL-2026 RHEL-2342 RHEL-12182 RHEL-15929) - fix ts2phc to handle large NMEA delay (RHEL-23208) - fix high CPU usage by ptp4l when link is down (RHEL-191410) - fix phc2sys to not get stuck in static mode (RHEL-187949) - fix unicast server to recover after port fault (RHEL-93496) - add experimental option for external PPS in ts2phc automatic mode (RHEL-72468) - add command to set external grandmaster properties (RHEL-90585) - refresh link status on faults (RHEL-56168) - update to 4.4 (RHEL-58213 RHEL-57040) - fix port-specific ptp/p2p_dst_ipv4 configuration (RHEL-60027) - support static sink clocks in phc2sys automatic mode (RHEL-62864) - don't require -O option without -a and -w in phc2sys (RHEL-69138) - rework NMEA delay patch to fix PPS edge rejection (RHEL-39387) - fix ts2phc to correctly handle leap seconds (RHEL-40216) - fix ts2phc to reset NMEA parser after RMC message (RHEL-40947) - add options to configure multicast IP addresses (RHEL-31178) - add holdover support to ts2phc (RHEL-50216) - add experimental PROFINET transport (RHEL-171412) - handle missing pulses in ts2phc (RHEL-250934) - fix high CPU usage by ptp4l when link is down (RHEL-191410) - fix phc2sys to not get stuck in static mode (RHEL-187949) - fix unicast server to recover after port fault (RHEL-93496) - add experimental option for external PPS in ts2phc automatic mode (RHEL-72468) - add command to set external grandmaster properties (RHEL-90585) - refresh link status on faults (RHEL-56168) - update to 4.4 (RHEL-58213 RHEL-57040) - fix port-specific ptp/p2p_dst_ipv4 configuration (RHEL-60027) - support static sink clocks in phc2sys automatic mode (RHEL-62864) - don't require -O option without -a and -w in phc2sys (RHEL-69138) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update fontconfig DTD id in conf file - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - man doc update and one fix for lib and another for sctp_test. Related: RHEL-25098 - Bring back one RHEL specific patch to fix the installation issue. Related: rhbz#2031786 - man doc update and one fix for lib and another for sctp_test. Related: RHEL-25098 - Bring back one RHEL specific patch to fix the installation issue. Related: rhbz#2031786 - Remove compat libs for LLVM 20 - Update LLVM Toolset to 21.1.8 [rhel-9] - Update to 21.1.7 - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683) - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037) - Backport fix for build of highway package on ppc64le (rhbz#2383182) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to LLVM 20.1.8 - Add riscv64 enablement bits; thanks: Songsong Zhang (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com) - Update to LLVM 20.1.7 - Fix llvm-config alternatives handling (rhbz#2361779) - Use libdir suffix in versioned prefix - Remove compat libs for LLVM 20 - Update LLVM Toolset to 21.1.8 [rhel-9] - Update to 21.1.7 - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683) - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037) - Backport fix for build of highway package on ppc64le (rhbz#2383182) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to LLVM 20.1.8 - Add riscv64 enablement bits; thanks: Songsong Zhang (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com) - Update to LLVM 20.1.7 - Fix llvm-config alternatives handling (rhbz#2361779) - Use libdir suffix in versioned prefix - Remove compat libs for LLVM 20 - Update LLVM Toolset to 21.1.8 [rhel-9] - Update to 21.1.7 - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683) - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037) - Backport fix for build of highway package on ppc64le (rhbz#2383182) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to LLVM 20.1.8 - Add riscv64 enablement bits; thanks: Songsong Zhang (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com) - Update to LLVM 20.1.7 - Fix llvm-config alternatives handling (rhbz#2361779) - Use libdir suffix in versioned prefix - Remove compat libs for LLVM 20 - Update LLVM Toolset to 21.1.8 [rhel-9] - Update to 21.1.7 - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683) - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037) - Backport fix for build of highway package on ppc64le (rhbz#2383182) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to LLVM 20.1.8 - Add riscv64 enablement bits; thanks: Songsong Zhang (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com) - Update to LLVM 20.1.7 - Fix llvm-config alternatives handling (rhbz#2361779) - Use libdir suffix in versioned prefix - Remove compat libs for LLVM 20 - Update LLVM Toolset to 21.1.8 [rhel-9] - Update to 21.1.7 - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683) - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037) - Backport fix for build of highway package on ppc64le (rhbz#2383182) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to LLVM 20.1.8 - Add riscv64 enablement bits; thanks: Songsong Zhang (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com) - Update to LLVM 20.1.7 - Fix llvm-config alternatives handling (rhbz#2361779) - Use libdir suffix in versioned prefix - Add range checking for tx-interval and tx-hold [RHEL-40245] - Add range checking for tx-interval and tx-hold [RHEL-40245] - lldpd use systemd-sysusers [RHEL-5787] - Add range checking for tx-interval and tx-hold [RHEL-40245] - Add range checking for tx-interval and tx-hold [RHEL-40245] - lldpd use systemd-sysusers [RHEL-5787] - Remove compat libs for LLVM 20 - Update LLVM Toolset to 21.1.8 [rhel-9] - Update to 21.1.7 - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683) - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037) - Backport fix for build of highway package on ppc64le (rhbz#2383182) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to LLVM 20.1.8 - Add riscv64 enablement bits; thanks: Songsong Zhang (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com) - Update to LLVM 20.1.7 - Fix llvm-config alternatives handling (rhbz#2361779) - Use libdir suffix in versioned prefix - Remove compat libs for LLVM 20 - Update LLVM Toolset to 21.1.8 [rhel-9] - Update to 21.1.7 - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683) - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037) - Backport fix for build of highway package on ppc64le (rhbz#2383182) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to LLVM 20.1.8 - Add riscv64 enablement bits; thanks: Songsong Zhang (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com) - Update to LLVM 20.1.7 - Fix llvm-config alternatives handling (rhbz#2361779) - Use libdir suffix in versioned prefix - Remove compat libs for LLVM 20 - Update LLVM Toolset to 21.1.8 [rhel-9] - Update to 21.1.7 - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683) - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037) - Backport fix for build of highway package on ppc64le (rhbz#2383182) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to LLVM 20.1.8 - Add riscv64 enablement bits; thanks: Songsong Zhang (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com) - Update to LLVM 20.1.7 - Fix llvm-config alternatives handling (rhbz#2361779) - Use libdir suffix in versioned prefix - Remove compat libs for LLVM 20 - Update LLVM Toolset to 21.1.8 [rhel-9] - Update to 21.1.7 - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683) - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037) - Backport fix for build of highway package on ppc64le (rhbz#2383182) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to LLVM 20.1.8 - Add riscv64 enablement bits; thanks: Songsong Zhang (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com) - Update to LLVM 20.1.7 - Fix llvm-config alternatives handling (rhbz#2361779) - Use libdir suffix in versioned prefix - Remove compat libs for LLVM 20 - Update LLVM Toolset to 21.1.8 [rhel-9] - Update to 21.1.7 - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683) - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037) - Backport fix for build of highway package on ppc64le (rhbz#2383182) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to LLVM 20.1.8 - Add riscv64 enablement bits; thanks: Songsong Zhang (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com) - Update to LLVM 20.1.7 - Fix llvm-config alternatives handling (rhbz#2361779) - Use libdir suffix in versioned prefix - Remove compat libs for LLVM 20 - Update LLVM Toolset to 21.1.8 [rhel-9] - Update to 21.1.7 - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683) - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037) - Backport fix for build of highway package on ppc64le (rhbz#2383182) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to LLVM 20.1.8 - Add riscv64 enablement bits; thanks: Songsong Zhang (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com) - Update to LLVM 20.1.7 - Fix llvm-config alternatives handling (rhbz#2361779) - Use libdir suffix in versioned prefix - Remove compat libs for LLVM 20 - Update LLVM Toolset to 21.1.8 [rhel-9] - Update to 21.1.7 - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683) - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037) - Backport fix for build of highway package on ppc64le (rhbz#2383182) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to LLVM 20.1.8 - Add riscv64 enablement bits; thanks: Songsong Zhang (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com) - Update to LLVM 20.1.7 - Fix llvm-config alternatives handling (rhbz#2361779) - Use libdir suffix in versioned prefix - Remove compat libs for LLVM 20 - Update LLVM Toolset to 21.1.8 [rhel-9] - Update to 21.1.7 - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683) - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037) - Backport fix for build of highway package on ppc64le (rhbz#2383182) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to LLVM 20.1.8 - Add riscv64 enablement bits; thanks: Songsong Zhang (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com) - Update to LLVM 20.1.7 - Fix llvm-config alternatives handling (rhbz#2361779) - Use libdir suffix in versioned prefix - Remove compat libs for LLVM 20 - Update LLVM Toolset to 21.1.8 [rhel-9] - Update to 21.1.7 - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683) - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037) - Backport fix for build of highway package on ppc64le (rhbz#2383182) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to LLVM 20.1.8 - Add riscv64 enablement bits; thanks: Songsong Zhang (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com) - Update to LLVM 20.1.7 - Fix llvm-config alternatives handling (rhbz#2361779) - Use libdir suffix in versioned prefix - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Add support for AMD CPU Family 19h - New flag for no sensors added. This flag is used in VM environment to make sensors binaries not fail if no sensors was detected. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Fix systemd warning about use of /var/run - Resolves: rhbz#1869421 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make_build macro - New version - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Add support for AMD CPU Family 19h - New flag for no sensors added. This flag is used in VM environment to make sensors binaries not fail if no sensors was detected. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Fix systemd warning about use of /var/run - Resolves: rhbz#1869421 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make_build macro - New version - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Add support for AMD CPU Family 19h - New flag for no sensors added. This flag is used in VM environment to make sensors binaries not fail if no sensors was detected. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Fix systemd warning about use of /var/run - Resolves: rhbz#1869421 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make_build macro - New version - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Add support for AMD CPU Family 19h - New flag for no sensors added. This flag is used in VM environment to make sensors binaries not fail if no sensors was detected. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Fix systemd warning about use of /var/run - Resolves: rhbz#1869421 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make_build macro - New version - Update to upstream version 2.17.2 - Re-add log4j-web subpackage - Remove glyphicons resources from source package - Fix compatibility with OpenJDK 8 - Remove dependency on jackson - Update log4j to 2.17.1 for CVE-2021-44832 RCE via JDBC Appender (when attacker controls config) - Update log4j to 2.17.0 for CVE-2021-45105 Denial of Service attack - Update log4j to 2.16.0 - Disables JNDI by default - Update log4j to 2.15.0 (#2030907) - Security fix for CVE-2021-44228 (#2030945) - Update to 2.14.1 - Disable javadoc (#1988896) - Build with jansi-2 - Remove deps on slf4j-ext (no longer available in Fedora 35) - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Update to upstream version 2.17.2 - Re-add log4j-web subpackage - Remove glyphicons resources from source package - Fix compatibility with OpenJDK 8 - Remove dependency on jackson - Update log4j to 2.17.1 for CVE-2021-44832 RCE via JDBC Appender (when attacker controls config) - Update log4j to 2.17.0 for CVE-2021-45105 Denial of Service attack - Update log4j to 2.16.0 - Disables JNDI by default - Update log4j to 2.15.0 (#2030907) - Security fix for CVE-2021-44228 (#2030945) - Update to 2.14.1 - Disable javadoc (#1988896) - Build with jansi-2 - Remove deps on slf4j-ext (no longer available in Fedora 35) - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Update to upstream version 2.17.2 - Re-add log4j-web subpackage - Remove glyphicons resources from source package - Fix compatibility with OpenJDK 8 - Remove dependency on jackson - Update log4j to 2.17.1 for CVE-2021-44832 RCE via JDBC Appender (when attacker controls config) - Update log4j to 2.17.0 for CVE-2021-45105 Denial of Service attack - Update log4j to 2.16.0 - Disables JNDI by default - Update log4j to 2.15.0 (#2030907) - Security fix for CVE-2021-44228 (#2030945) - Update to 2.14.1 - Disable javadoc (#1988896) - Build with jansi-2 - Remove deps on slf4j-ext (no longer available in Fedora 35) - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Install and use systemd-tmpfiles.d mechanism - Resolves: RHEL-105257 - Add support for zstd-compressed log files - Resolves: RHEL-97021 - sshd: sort IP addresses reported by count - Resolves: RHEL-69277 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - templates: Synchronize with lorax-templates-rhel (bcl) (bcl) Resolves: RHEL-54712 - Fix tzselect path in runtime-cleanup.tmpl (jikortus) (jikortus) Resolves: RHEL-100463 - lorax.spec: Fix a wrong issue reference (bcl) (bcl) Related: RHEL-83986 - templates.d: Synchronize with lorax-templates-rhel (bcl) Related: RHEL-54712 Resolves: RHEL-69019 - lorax: Change default rootfs size to 4GiB (bcl) Resolves: RHEL-95360 - New lorax documentation - 34.9.27 (bcl) (bcl) Related: RHEL-83208 - mkksiso: Update to newer version supporting rebuilding efiboot.img (bcl) Resolves: RHEL-83208 - livemedia-creator: Set 0755 permission on / cpio overlay (bcl) (bcl) Resolves: RHEL-83986 - monitor: Skip repo errors involving CDROM/file source (bcl) (bcl) Resolves: RHEL-4658 - rsyslog.conf: Update to use current config syntax (bcl) (bcl) Resolves: RHEL-46857 - templates: Remove libreport bugzilla plugins (bcl) Resolves: RHEL-24420 - Add setpriv as ostree containers dependency (jkonecny) (jkonecny) Resolves: RHEL-15123 - templates: Synchronize with lorax-templates-rhel (bcl) (bcl) Resolves: RHEL-54712 - Fix tzselect path in runtime-cleanup.tmpl (jikortus) (jikortus) Resolves: RHEL-100463 - lorax.spec: Fix a wrong issue reference (bcl) (bcl) Related: RHEL-83986 - templates.d: Synchronize with lorax-templates-rhel (bcl) Related: RHEL-54712 Resolves: RHEL-69019 - lorax: Change default rootfs size to 4GiB (bcl) Resolves: RHEL-95360 - New lorax documentation - 34.9.27 (bcl) (bcl) Related: RHEL-83208 - mkksiso: Update to newer version supporting rebuilding efiboot.img (bcl) Resolves: RHEL-83208 - livemedia-creator: Set 0755 permission on / cpio overlay (bcl) (bcl) Resolves: RHEL-83986 - monitor: Skip repo errors involving CDROM/file source (bcl) (bcl) Resolves: RHEL-4658 - rsyslog.conf: Update to use current config syntax (bcl) (bcl) Resolves: RHEL-46857 - templates: Remove libreport bugzilla plugins (bcl) Resolves: RHEL-24420 - Add setpriv as ostree containers dependency (jkonecny) (jkonecny) Resolves: RHEL-15123 - templates: Synchronize with lorax-templates-rhel (bcl) (bcl) Resolves: RHEL-54712 - Fix tzselect path in runtime-cleanup.tmpl (jikortus) (jikortus) Resolves: RHEL-100463 - lorax.spec: Fix a wrong issue reference (bcl) (bcl) Related: RHEL-83986 - templates.d: Synchronize with lorax-templates-rhel (bcl) Related: RHEL-54712 Resolves: RHEL-69019 - lorax: Change default rootfs size to 4GiB (bcl) Resolves: RHEL-95360 - New lorax documentation - 34.9.27 (bcl) (bcl) Related: RHEL-83208 - mkksiso: Update to newer version supporting rebuilding efiboot.img (bcl) Resolves: RHEL-83208 - livemedia-creator: Set 0755 permission on / cpio overlay (bcl) (bcl) Resolves: RHEL-83986 - monitor: Skip repo errors involving CDROM/file source (bcl) (bcl) Resolves: RHEL-4658 - rsyslog.conf: Update to use current config syntax (bcl) (bcl) Resolves: RHEL-46857 - templates: Remove libreport bugzilla plugins (bcl) Resolves: RHEL-24420 - Add setpriv as ostree containers dependency (jkonecny) (jkonecny) Resolves: RHEL-15123 - templates: Synchronize with lorax-templates-rhel (bcl) (bcl) Resolves: RHEL-54712 - Fix tzselect path in runtime-cleanup.tmpl (jikortus) (jikortus) Resolves: RHEL-100463 - lorax.spec: Fix a wrong issue reference (bcl) (bcl) Related: RHEL-83986 - templates.d: Synchronize with lorax-templates-rhel (bcl) Related: RHEL-54712 Resolves: RHEL-69019 - lorax: Change default rootfs size to 4GiB (bcl) Resolves: RHEL-95360 - New lorax documentation - 34.9.27 (bcl) (bcl) Related: RHEL-83208 - mkksiso: Update to newer version supporting rebuilding efiboot.img (bcl) Resolves: RHEL-83208 - livemedia-creator: Set 0755 permission on / cpio overlay (bcl) (bcl) Resolves: RHEL-83986 - monitor: Skip repo errors involving CDROM/file source (bcl) (bcl) Resolves: RHEL-4658 - rsyslog.conf: Update to use current config syntax (bcl) (bcl) Resolves: RHEL-46857 - templates: Remove libreport bugzilla plugins (bcl) Resolves: RHEL-24420 - Add setpriv as ostree containers dependency (jkonecny) (jkonecny) Resolves: RHEL-15123 - Update for AlmaLinux 9.6 beta - Correct grammar in Grub rescue menuentries - Update for AlmaLinux 9.6 beta - templates: Synchronize with lorax-templates-rhel (bcl) (bcl) Resolves: RHEL-54712 - Fix tzselect path in runtime-cleanup.tmpl (jikortus) (jikortus) Resolves: RHEL-100463 - lorax.spec: Fix a wrong issue reference (bcl) (bcl) Related: RHEL-83986 - templates.d: Synchronize with lorax-templates-rhel (bcl) Related: RHEL-54712 Resolves: RHEL-69019 - lorax: Change default rootfs size to 4GiB (bcl) Resolves: RHEL-95360 - New lorax documentation - 34.9.27 (bcl) (bcl) Related: RHEL-83208 - mkksiso: Update to newer version supporting rebuilding efiboot.img (bcl) Resolves: RHEL-83208 - livemedia-creator: Set 0755 permission on / cpio overlay (bcl) (bcl) Resolves: RHEL-83986 - monitor: Skip repo errors involving CDROM/file source (bcl) (bcl) Resolves: RHEL-4658 - rsyslog.conf: Update to use current config syntax (bcl) (bcl) Resolves: RHEL-46857 - templates: Remove libreport bugzilla plugins (bcl) Resolves: RHEL-24420 - Add setpriv as ostree containers dependency (jkonecny) (jkonecny) Resolves: RHEL-15123 - live-install.tmpl: Fix broken single item tuple (bcl) Related: RHEL-108149 - libvirt.tmpl: Fix use of xrange (bcl) Related: RHEL-108149 - 80-rhel: Remove unused templates and config files (bcl) Resolves: RHEL-108149 - Fix tzselect path in runtime-cleanup.tmpl (jikortus) Resolves: RHEL-101453 - Set ppc64le default boot to test the media (bcl) Resolves: RHEL-93170 - Bump release version to 9.7 (bcl) Related: RHEL-91930 - Add a boot menu for fips=1 (bcl) Resolves: RHEL-91930 - runtime-cleanup: Leave stat binary and openssl files (bcl) Resolves: RHEL-79950 - Bump release version to 9.6 (bcl) Related: RHEL-69011 - runtime-cleanup: Newer glibc installs /usr/sbin/ldconfig (bcl) Resolves: RHEL-69011 - rsyslog.conf: Update to use current config syntax (bcl) Resolves: RHEL-28654 - templates: Remove libreport bugzilla plugins (bcl) Resolves: RHEL-24421 - tools: Add support for Jira RHEL-XXX issues (bcl) Related: RHEL-15122 - Add setpriv as ostree containers dependency (bcl) Resolves: RHEL-15122 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild + low-memory-monitor-2.1-1 - Update to 2.1 - Don't poke at sysrq proc file (#1898524) + low-memory-monitor-2.0-6 - Reload presets when updating from an older version to enable daemon - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild + low-memory-monitor-2.0-3 - Disable OOM killer by default for now - Import into Fedora (#1769843) + low-memory-monitor-2.0-2 - Rename -docs subpackage to -doc + low-memory-monitor-2.0-1 - Update to 2.0 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Release B.02.20-4 update to upstream latest(209f8306e95) - Release B.02.20-3 update to upstream latest(af7c69e1b6e) - Release B.02.20-2 update to upstream latest(98b74f64e76) - Release B.02.20-1 update to upstream latest(9372b680418) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Add support for SCV syscall insn for ppc64le - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Initialize some variables to avoid gcc warning (#1799619) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for Python 3.9 - New upstream release - New upstream release - Add requires systemtap-sdt-devel to lttng-ust-devel (#1386412) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Enable SystemTAP SDT support (#1386412) - Add patch to fix build failure with GCC 10 - Disable bootstrap mode forgotten on 5.4 rebase (#2135419) - Apply upstream patch for CVE-2022-28805 - Resolves CVE-2021-43519 - Rebase to lua 5.4.4 - Resolves CVE-2021-44964 - Fix up CVE-2022-33099 patch - Enable gating - apply upstream fix for CVE-2022-33099 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Added tests.yaml - Resolves: rhbz#2058499 - Added gating.yaml - Resolves: rhbz#2054488 - Pass LDFLAGS to the build so RPM linker flags are used and annocheck passes. - Add patch from upstream to fix propagation of LDFLAGS into build system. - Resolves: rhbz#2044879 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 35.0 - Fix bit32 patch - More lua 5.4 fixes - Update to 34.1.1 (bz#1849450) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Modify several conditionals to support RHEL 9+ and drop ancient Fedora 17 - Add explicit conflict with older lua-devel - Require rpm, not redhat-rpm-config - Also move lua.attr requires generator - Initial package - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Modify several conditionals to support RHEL 9+ and drop ancient Fedora 17 - Add explicit conflict with older lua-devel - Require rpm, not redhat-rpm-config - Also move lua.attr requires generator - Initial package - New upstream release v10 Resolves: RHEL-122139 - Handle wrong XFS reported size when shrinking LV immediately after growing. - Allow integrity to use multiple segments for metadata. - Add message when activating RAID volumes with snapshots. - Update to upstream version 2.03.33. - See WHATS_NEW and WHATS_NEW_DM for more information. - Fix vgremove hanging immediately after lockstart. - Add repair option for RAID volumes with too many transiently failed devices. - Update to upstream version 2.03.32. - See WHATS_NEW and WHATS_NEW_DM for more information. - Fix race causing lvm2 not recognizing active devices. - Fix temporary LVs not cleaned when converting in use LV to a thin pool. - Check FS resize is supported before extending LV. - Fix issue affecting memory locking before suspend (2.03.27). - Workaround for NVMe WWID changing after kernel update. - Fix duplicate LV names when converting pools to RAID1 with more than 2 legs. - Fix false positive warnings about stray FDs on s390x. - Handle wrong XFS reported size when shrinking LV immediately after growing. - Allow integrity to use multiple segments for metadata. - Add message when activating RAID volumes with snapshots. - Update to upstream version 2.03.33. - See WHATS_NEW and WHATS_NEW_DM for more information. - Fix vgremove hanging immediately after lockstart. - Add repair option for RAID volumes with too many transiently failed devices. - Update to upstream version 2.03.32. - See WHATS_NEW and WHATS_NEW_DM for more information. - Fix race causing lvm2 not recognizing active devices. - Fix temporary LVs not cleaned when converting in use LV to a thin pool. - Check FS resize is supported before extending LV. - Fix issue affecting memory locking before suspend (2.03.27). - Workaround for NVMe WWID changing after kernel update. - Handle wrong XFS reported size when shrinking LV immediately after growing. - Allow integrity to use multiple segments for metadata. - Add message when activating RAID volumes with snapshots. - Update to upstream version 2.03.33. - See WHATS_NEW and WHATS_NEW_DM for more information. - Fix vgremove hanging immediately after lockstart. - Add repair option for RAID volumes with too many transiently failed devices. - Update to upstream version 2.03.32. - See WHATS_NEW and WHATS_NEW_DM for more information. - Fix race causing lvm2 not recognizing active devices. - Fix temporary LVs not cleaned when converting in use LV to a thin pool. - Check FS resize is supported before extending LV. - Fix issue affecting memory locking before suspend (2.03.27). - Workaround for NVMe WWID changing after kernel update. - Fix duplicate LV names when converting pools to RAID1 with more than 2 legs. - Fix false positive warnings about stray FDs on s390x. - Handle wrong XFS reported size when shrinking LV immediately after growing. - Allow integrity to use multiple segments for metadata. - Add message when activating RAID volumes with snapshots. - Update to upstream version 2.03.33. - See WHATS_NEW and WHATS_NEW_DM for more information. - Fix vgremove hanging immediately after lockstart. - Add repair option for RAID volumes with too many transiently failed devices. - Update to upstream version 2.03.32. - See WHATS_NEW and WHATS_NEW_DM for more information. - Fix race causing lvm2 not recognizing active devices. - Fix temporary LVs not cleaned when converting in use LV to a thin pool. - Check FS resize is supported before extending LV. - Fix issue affecting memory locking before suspend (2.03.27). - Workaround for NVMe WWID changing after kernel update. - fix page downloading (RHEL-16809) - backport IDN2 support from upstream (#2040124) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix cve-2021-3520 resolves: cve-2021-3520 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.9.3 and switch to Meson - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 1.9.1 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Release bump to drop unused patches from the dist-git Resolves: rhbz#1956457 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Disable -fno-strict-aliasing (RHBZ#1807737) - Update to 2.10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Release bump to drop unused patches from the dist-git Resolves: rhbz#1956457 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Disable -fno-strict-aliasing (RHBZ#1807737) - Update to 2.10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves:rhbz#1961997 - minglish file permission fix - Resolves:rhbz#1961997 - Add gating tests from rhel-8 - Malayalam Mozhi input scheme bug fix - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make_build and make_install macros - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fix mni-inscript2-{beng,mtei}.mim and sat-inscript2-{deva,olck}.mim - Add si-sayura.mim input method - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves:rhbz#1967892 - Add conditional for anthy module subpackage - Resolves:rhbz#1961998 - Add gating tests from rhel-8 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to m4-1.4.19 Resolves: #1975101 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Drop workaround introduced in previous release Resolves: #1864107 - Disable %check on ppc64le (workaround for FTBFS) Resolves: #1864107 - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update fontconfig DTD id in conf file - Update CI script for new installed font path - Convert to new fonts packaging guidelines - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fix adding U0970 based on Vishal Vijayraghavan's fix - Initial commit for make-latest.el9 - Ensure that we can transition from make-latest to make - Rebase to make 4.4 - Handle SIGPIPE as a fatal signal - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Rebase to make 4.4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Add SCL compatibility to LTS builds. - Initial commit for make-latest.el9 - Ensure that we can transition from make-latest to make - Rebase to make 4.4 - Handle SIGPIPE as a fatal signal - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Rebase to make 4.4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Add SCL compatibility to LTS builds. - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fix patch to increase MAX_NAME to 16384 - Resolves: RHEL-93724 - Increase MAX_NAME to 16384 - Resolves: RHEL-93724 - Initial package for RHEL 9 - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Rebase to 10.11.13 - Rebase to 10.11.11 - Add explicit BR: libxcrypt-devel - Rebase to 10.11.10 - Rebase to 10.11.18 - Rebase to 10.11.17 - Rebase to 10.11.16 - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Rebase to 10.11.13 - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Rebase to 10.11.18 - Rebase to 10.11.17 - Rebase to 10.11.16 - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Release bump for rebuild - Release bump for rebuild - Rebase to 10.5.29 - Rebase to 10.5.27 - Rebase to 10.5.26 - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Release bump for rebuild - Release bump for rebuild - Rebase to 10.5.29 - Rebase to 10.5.27 - Rebase to 10.5.26 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Initial commit on stream-mariadb-11.8-rhel-9.8.0 - Resolves: RHEL-96956 - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Initial commit on stream-mariadb-11.8-rhel-9.8.0 - Resolves: RHEL-96956 - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Rebase to 10.11.13 - Rebase to 10.11.11 - Add explicit BR: libxcrypt-devel - Rebase to 10.11.10 - Rebase to 10.11.18 - Rebase to 10.11.17 - Rebase to 10.11.16 - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Rebase to 10.11.13 - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Rebase to 10.11.18 - Rebase to 10.11.17 - Rebase to 10.11.16 - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Release bump for rebuild - Release bump for rebuild - Rebase to 10.5.29 - Rebase to 10.5.27 - Rebase to 10.5.26 - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Release bump for rebuild - Release bump for rebuild - Rebase to 10.5.29 - Rebase to 10.5.27 - Rebase to 10.5.26 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Initial commit on stream-mariadb-11.8-rhel-9.8.0 - Resolves: RHEL-96956 - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Initial commit on stream-mariadb-11.8-rhel-9.8.0 - Resolves: RHEL-96956 - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Initial commit on stream-mariadb-11.8-rhel-9.8.0 - Resolves: RHEL-96956 - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Initial commit on stream-mariadb-11.8-rhel-9.8.0 - Resolves: RHEL-96956 - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Rebase to 10.11.13 - Rebase to 10.11.11 - Add explicit BR: libxcrypt-devel - Rebase to 10.11.10 - Rebase to 10.11.18 - Rebase to 10.11.17 - Rebase to 10.11.16 - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Rebase to 10.11.13 - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Rebase to 10.11.18 - Rebase to 10.11.17 - Rebase to 10.11.16 - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Release bump for rebuild - Release bump for rebuild - Rebase to 10.5.29 - Rebase to 10.5.27 - Rebase to 10.5.26 - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Release bump for rebuild - Release bump for rebuild - Rebase to 10.5.29 - Rebase to 10.5.27 - Rebase to 10.5.26 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Initial commit on stream-mariadb-11.8-rhel-9.8.0 - Resolves: RHEL-96956 - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Initial commit on stream-mariadb-11.8-rhel-9.8.0 - Resolves: RHEL-96956 - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Rebase to 3.2.6 - Introduction of a new '*-doc' subpackage - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebase to 3.1.13 - Fix package conflicts - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebase to 3.1.12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebase to 3.1.11 - Rebase to 3.1.10 - CVE-2026-44172 fix - Rebase to 3.2.6 - Introduction of a new '*-doc' subpackage - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebase to 3.1.13 - Fix package conflicts - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebase to 3.1.12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebase to 3.1.11 - Rebase to 3.1.10 - CVE-2026-44172 fix - Rebase to 3.2.6 - Introduction of a new '*-doc' subpackage - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebase to 3.1.13 - Fix package conflicts - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebase to 3.1.12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebase to 3.1.11 - Rebase to 3.1.10 - CVE-2026-44172 fix - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebase to 3.1.12 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebase to 3.1.11 - Add updates for paths in libraries_include_path.patch - Force the CMake change regarding the in-source builds also to F31 and F32 - %cmake macro covers the %{set_build_flags}, so they are not needed That also means, the debug build changes to the build flags must be done AFTER the %cmake macro was used. - %cmake macro also covers several other options which redudndant specification I removed in this commit - Default to %cmake commands instead of %make commands - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebase to 3.1.9 - Add patch add_docs_license_dir_option - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Rebase to 10.11.13 - Rebase to 10.11.11 - Add explicit BR: libxcrypt-devel - Rebase to 10.11.10 - Rebase to 10.11.18 - Rebase to 10.11.17 - Rebase to 10.11.16 - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Rebase to 10.11.13 - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Rebase to 10.11.18 - Rebase to 10.11.17 - Rebase to 10.11.16 - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Initial commit on stream-mariadb-11.8-rhel-9.8.0 - Resolves: RHEL-96956 - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Initial commit on stream-mariadb-11.8-rhel-9.8.0 - Resolves: RHEL-96956 - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Rebase to 10.11.13 - Rebase to 10.11.11 - Add explicit BR: libxcrypt-devel - Rebase to 10.11.10 - Rebase to 10.11.18 - Rebase to 10.11.17 - Rebase to 10.11.16 - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Rebase to 10.11.13 - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Rebase to 10.11.18 - Rebase to 10.11.17 - Rebase to 10.11.16 - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Release bump for rebuild - Release bump for rebuild - Rebase to 10.5.29 - Rebase to 10.5.27 - Rebase to 10.5.26 - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Release bump for rebuild - Release bump for rebuild - Rebase to 10.5.29 - Rebase to 10.5.27 - Rebase to 10.5.26 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Initial commit on stream-mariadb-11.8-rhel-9.8.0 - Resolves: RHEL-96956 - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Initial commit on stream-mariadb-11.8-rhel-9.8.0 - Resolves: RHEL-96956 - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Rebase to 10.11.13 - Rebase to 10.11.11 - Add explicit BR: libxcrypt-devel - Rebase to 10.11.10 - Rebase to 10.11.18 - Rebase to 10.11.17 - Rebase to 10.11.16 - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Rebase to 10.11.13 - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Rebase to 10.11.18 - Rebase to 10.11.17 - Rebase to 10.11.16 - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Initial commit on stream-mariadb-11.8-rhel-9.8.0 - Resolves: RHEL-96956 - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Initial commit on stream-mariadb-11.8-rhel-9.8.0 - Resolves: RHEL-96956 - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Rebase to 10.11.13 - Rebase to 10.11.11 - Add explicit BR: libxcrypt-devel - Rebase to 10.11.10 - Rebase to 10.11.18 - Rebase to 10.11.17 - Rebase to 10.11.16 - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Rebase to 10.11.13 - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Rebase to 10.11.18 - Rebase to 10.11.17 - Rebase to 10.11.16 - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Release bump for rebuild - Release bump for rebuild - Rebase to 10.5.29 - Rebase to 10.5.27 - Rebase to 10.5.26 - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Release bump for rebuild - Release bump for rebuild - Rebase to 10.5.29 - Rebase to 10.5.27 - Rebase to 10.5.26 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Initial commit on stream-mariadb-11.8-rhel-9.8.0 - Resolves: RHEL-96956 - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Initial commit on stream-mariadb-11.8-rhel-9.8.0 - Resolves: RHEL-96956 - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Rebase to 10.11.13 - Rebase to 10.11.11 - Add explicit BR: libxcrypt-devel - Rebase to 10.11.10 - Rebase to 10.11.18 - Rebase to 10.11.17 - Rebase to 10.11.16 - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Rebase to 10.11.13 - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Rebase to 10.11.18 - Rebase to 10.11.17 - Rebase to 10.11.16 - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Release bump for rebuild - Release bump for rebuild - Rebase to 10.5.29 - Rebase to 10.5.27 - Rebase to 10.5.26 - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Release bump for rebuild - Release bump for rebuild - Rebase to 10.5.29 - Rebase to 10.5.27 - Rebase to 10.5.26 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Initial commit on stream-mariadb-11.8-rhel-9.8.0 - Resolves: RHEL-96956 - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Initial commit on stream-mariadb-11.8-rhel-9.8.0 - Resolves: RHEL-96956 - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Rebase to 3.0.3 - Temporarily disable generation of -javadoc.rpm, due to missing feature in xmvn, which leads to build crash - Rebase to new major version 3.0.1 (it's Beta version) - Removed documentation/ folder, as it was removed by upstream - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Remove maven-javadoc-plugin dependency - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebase to version 2.7.1 (#1906291) - Rebase to version 2.7.0 (#1882558) - Remove unnecessary dependency on sonatype-oss-parent. - Rebase to version 2.6.2 (#1860212) - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Rebase to 10.11.13 - Rebase to 10.11.11 - Add explicit BR: libxcrypt-devel - Rebase to 10.11.10 - Rebase to 10.11.18 - Rebase to 10.11.17 - Rebase to 10.11.16 - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Rebase to 10.11.13 - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Rebase to 10.11.18 - Rebase to 10.11.17 - Rebase to 10.11.16 - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Release bump for rebuild - Release bump for rebuild - Rebase to 10.5.29 - Rebase to 10.5.27 - Rebase to 10.5.26 - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Release bump for rebuild - Release bump for rebuild - Rebase to 10.5.29 - Rebase to 10.5.27 - Rebase to 10.5.26 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Initial commit on stream-mariadb-11.8-rhel-9.8.0 - Resolves: RHEL-96956 - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Initial commit on stream-mariadb-11.8-rhel-9.8.0 - Resolves: RHEL-96956 - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Rebase to 10.11.13 - Rebase to 10.11.11 - Add explicit BR: libxcrypt-devel - Rebase to 10.11.10 - Rebase to 10.11.18 - Rebase to 10.11.17 - Rebase to 10.11.16 - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Rebase to 10.11.13 - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Rebase to 10.11.18 - Rebase to 10.11.17 - Rebase to 10.11.16 - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Release bump for rebuild - Release bump for rebuild - Rebase to 10.5.29 - Rebase to 10.5.27 - Rebase to 10.5.26 - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Release bump for rebuild - Release bump for rebuild - Rebase to 10.5.29 - Rebase to 10.5.27 - Rebase to 10.5.26 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Initial commit on stream-mariadb-11.8-rhel-9.8.0 - Resolves: RHEL-96956 - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Initial commit on stream-mariadb-11.8-rhel-9.8.0 - Resolves: RHEL-96956 - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Rebase to 10.11.13 - Rebase to 10.11.11 - Add explicit BR: libxcrypt-devel - Rebase to 10.11.10 - Rebase to 10.11.18 - Rebase to 10.11.17 - Rebase to 10.11.16 - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Rebase to 10.11.13 - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Rebase to 10.11.18 - Rebase to 10.11.17 - Rebase to 10.11.16 - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Release bump for rebuild - Release bump for rebuild - Rebase to 10.5.29 - Rebase to 10.5.27 - Rebase to 10.5.26 - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Release bump for rebuild - Release bump for rebuild - Rebase to 10.5.29 - Rebase to 10.5.27 - Rebase to 10.5.26 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Initial commit on stream-mariadb-11.8-rhel-9.8.0 - Resolves: RHEL-96956 - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Initial commit on stream-mariadb-11.8-rhel-9.8.0 - Resolves: RHEL-96956 - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Rebase to 10.11.13 - Rebase to 10.11.11 - Add explicit BR: libxcrypt-devel - Rebase to 10.11.10 - Rebase to 10.11.18 - Rebase to 10.11.17 - Rebase to 10.11.16 - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Rebase to 10.11.13 - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Rebase to 10.11.18 - Rebase to 10.11.17 - Rebase to 10.11.16 - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Release bump for rebuild - Release bump for rebuild - Rebase to 10.5.29 - Rebase to 10.5.27 - Rebase to 10.5.26 - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Release bump for rebuild - Release bump for rebuild - Rebase to 10.5.29 - Rebase to 10.5.27 - Rebase to 10.5.26 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Initial commit on stream-mariadb-11.8-rhel-9.8.0 - Resolves: RHEL-96956 - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Initial commit on stream-mariadb-11.8-rhel-9.8.0 - Resolves: RHEL-96956 - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Rebase to 10.11.13 - Rebase to 10.11.11 - Add explicit BR: libxcrypt-devel - Rebase to 10.11.10 - Rebase to 10.11.18 - Rebase to 10.11.17 - Rebase to 10.11.16 - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Rebase to 10.11.13 - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Rebase to 10.11.18 - Rebase to 10.11.17 - Rebase to 10.11.16 - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Release bump for rebuild - Release bump for rebuild - Rebase to 10.5.29 - Rebase to 10.5.27 - Rebase to 10.5.26 - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Release bump for rebuild - Release bump for rebuild - Rebase to 10.5.29 - Rebase to 10.5.27 - Rebase to 10.5.26 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Initial commit on stream-mariadb-11.8-rhel-9.8.0 - Resolves: RHEL-96956 - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Initial commit on stream-mariadb-11.8-rhel-9.8.0 - Resolves: RHEL-96956 - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Rebase to 10.11.13 - Rebase to 10.11.11 - Add explicit BR: libxcrypt-devel - Rebase to 10.11.10 - Rebase to 10.11.18 - Rebase to 10.11.17 - Rebase to 10.11.16 - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Rebase to 10.11.13 - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Rebase to 10.11.18 - Rebase to 10.11.17 - Rebase to 10.11.16 - Updated service files to work with environment files - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Add installation of downstream sysusers.d config file in place of the upstream one - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Initial commit on stream-mariadb-11.8-rhel-9.8.0 - Resolves: RHEL-96956 - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Initial commit on stream-mariadb-11.8-rhel-9.8.0 - Resolves: RHEL-96956 - Fix MDEV-40470 GRANT PROXY with empty password incorrectly checks grantor's privileges - Rebase to 11.8.8 - Rebase to 11.8.7 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.6 - Rebase to 11.8.5 - Bump release for rebuild - Bump release for rebuild - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - add -fcommon to the flags (#1799634) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Add maven-openjdk25 binding - Implement new non-conflicting Java bindings - Resolves: RHEL-54068, RHEL-54070, RHEL-54071, RHEL-54072 - Add noarch to ExclusiveArch - Disable building on i686 - Switch to Fedora tests - Fix patch usage - Rebuild with regenerated Requires on Java - Suggest maven-openjdk17 - Resolves: RHEL-62398 - Add maven-openjdk21 - Resolves: RHEL-62407 - Rebuild to regenerate auto-requires - Add OpenJDK 21 binding - Related: RHEL-13046 - Turn hard dependency on java-devel into a weak dependencny - Resolves: rhbz#2165595 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Add build-dependency on extra-enforcer-rules - Update to upstream version 3.8.5 - Add maven-openjdk25 binding - Reuse jlink image if it already exists - Require /plans/matrix/unbound/jlink for gating - Update javapackages test plan to f42 - Add test plan for maven-unbound - Exclude maven-unbound from openjdk21 tests - Generate bindings with %jp_binding macro - Expect JVMs in %_jvmdir instead of %_jvmlibdir - Update gating.yaml - Drop bindings for OpenJDK < 21 - Add maven-openjdk25 binding - Implement new non-conflicting Java bindings - Resolves: RHEL-54068, RHEL-54070, RHEL-54071, RHEL-54072 - Add noarch to ExclusiveArch - Disable building on i686 - Switch to Fedora tests - Fix patch usage - Rebuild with regenerated Requires on Java - Suggest maven-openjdk17 - Resolves: RHEL-62398 - Add maven-openjdk21 - Resolves: RHEL-62407 - Rebuild to regenerate auto-requires - Add OpenJDK 21 binding - Related: RHEL-13046 - Turn hard dependency on java-devel into a weak dependencny - Resolves: rhbz#2165595 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Add build-dependency on extra-enforcer-rules - Update to upstream version 3.8.5 - Add maven-openjdk25 binding - Reuse jlink image if it already exists - Require /plans/matrix/unbound/jlink for gating - Update javapackages test plan to f42 - Add test plan for maven-unbound - Exclude maven-unbound from openjdk21 tests - Generate bindings with %jp_binding macro - Expect JVMs in %_jvmdir instead of %_jvmlibdir - Update gating.yaml - Drop bindings for OpenJDK < 21 - Add maven-openjdk25 binding - Implement new non-conflicting Java bindings - Resolves: RHEL-54068, RHEL-54070, RHEL-54071, RHEL-54072 - Add noarch to ExclusiveArch - Disable building on i686 - Switch to Fedora tests - Fix patch usage - Rebuild with regenerated Requires on Java - Suggest maven-openjdk17 - Resolves: RHEL-62398 - Add maven-openjdk21 - Resolves: RHEL-62407 - Rebuild to regenerate auto-requires - Add OpenJDK 21 binding - Related: RHEL-13046 - Turn hard dependency on java-devel into a weak dependencny - Resolves: rhbz#2165595 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Add build-dependency on extra-enforcer-rules - Update to upstream version 3.8.5 - Add maven-openjdk25 binding - Reuse jlink image if it already exists - Require /plans/matrix/unbound/jlink for gating - Update javapackages test plan to f42 - Add test plan for maven-unbound - Exclude maven-unbound from openjdk21 tests - Generate bindings with %jp_binding macro - Expect JVMs in %_jvmdir instead of %_jvmlibdir - Update gating.yaml - Drop bindings for OpenJDK < 21 - Add maven-openjdk25 binding - Implement new non-conflicting Java bindings - Resolves: RHEL-54068, RHEL-54070, RHEL-54071, RHEL-54072 - Add noarch to ExclusiveArch - Disable building on i686 - Switch to Fedora tests - Fix patch usage - Rebuild with regenerated Requires on Java - Suggest maven-openjdk17 - Resolves: RHEL-62398 - Add maven-openjdk21 - Resolves: RHEL-62407 - Rebuild to regenerate auto-requires - Add OpenJDK 21 binding - Related: RHEL-13046 - Turn hard dependency on java-devel into a weak dependencny - Resolves: rhbz#2165595 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Add build-dependency on extra-enforcer-rules - Update to upstream version 3.8.5 - Add maven-openjdk25 binding - Reuse jlink image if it already exists - Require /plans/matrix/unbound/jlink for gating - Update javapackages test plan to f42 - Add test plan for maven-unbound - Exclude maven-unbound from openjdk21 tests - Generate bindings with %jp_binding macro - Expect JVMs in %_jvmdir instead of %_jvmlibdir - Update gating.yaml - Drop bindings for OpenJDK < 21 - Add maven-openjdk25 binding - Implement new non-conflicting Java bindings - Resolves: RHEL-54068, RHEL-54070, RHEL-54071, RHEL-54072 - Add noarch to ExclusiveArch - Disable building on i686 - Switch to Fedora tests - Fix patch usage - Rebuild with regenerated Requires on Java - Suggest maven-openjdk17 - Resolves: RHEL-62398 - Add maven-openjdk21 - Resolves: RHEL-62407 - Rebuild to regenerate auto-requires - Add OpenJDK 21 binding - Related: RHEL-13046 - Turn hard dependency on java-devel into a weak dependencny - Resolves: rhbz#2165595 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Add build-dependency on extra-enforcer-rules - Update to upstream version 3.8.5 - Add maven-openjdk25 binding - Reuse jlink image if it already exists - Require /plans/matrix/unbound/jlink for gating - Update javapackages test plan to f42 - Add test plan for maven-unbound - Exclude maven-unbound from openjdk21 tests - Generate bindings with %jp_binding macro - Expect JVMs in %_jvmdir instead of %_jvmlibdir - Update gating.yaml - Drop bindings for OpenJDK < 21 - Add maven-openjdk25 binding - Implement new non-conflicting Java bindings - Resolves: RHEL-54068, RHEL-54070, RHEL-54071, RHEL-54072 - Add noarch to ExclusiveArch - Disable building on i686 - Switch to Fedora tests - Fix patch usage - Rebuild with regenerated Requires on Java - Suggest maven-openjdk17 - Resolves: RHEL-62398 - Add maven-openjdk21 - Resolves: RHEL-62407 - Add maven-openjdk25 binding - Reuse jlink image if it already exists - Require /plans/matrix/unbound/jlink for gating - Update javapackages test plan to f42 - Add test plan for maven-unbound - Exclude maven-unbound from openjdk21 tests - Generate bindings with %jp_binding macro - Expect JVMs in %_jvmdir instead of %_jvmlibdir - Update gating.yaml - Drop bindings for OpenJDK < 21 - Add maven-openjdk25 binding - Implement new non-conflicting Java bindings - Resolves: RHEL-54068, RHEL-54070, RHEL-54071, RHEL-54072 - Add noarch to ExclusiveArch - Disable building on i686 - Switch to Fedora tests - Fix patch usage - Rebuild with regenerated Requires on Java - Suggest maven-openjdk17 - Resolves: RHEL-62398 - Add maven-openjdk21 - Resolves: RHEL-62407 - Rebuild to regenerate auto-requires - Add OpenJDK 21 binding - Related: RHEL-13046 - Turn hard dependency on java-devel into a weak dependencny - Resolves: rhbz#2165595 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Add build-dependency on extra-enforcer-rules - Update to upstream version 3.8.5 - Add maven-openjdk25 binding - Reuse jlink image if it already exists - Require /plans/matrix/unbound/jlink for gating - Update javapackages test plan to f42 - Add test plan for maven-unbound - Exclude maven-unbound from openjdk21 tests - Generate bindings with %jp_binding macro - Expect JVMs in %_jvmdir instead of %_jvmlibdir - Update gating.yaml - Drop bindings for OpenJDK < 21 - Add noarch to ExclusiveArch - Disable building on i686 - Fix patch usage - Rebuild with regenerated Requires on Java - Rebuild to regenerate auto-requires - Rebuild to regenerate auto-requires - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Add aether-connector-wagon alias - Rebuilt for java-17-openjdk as system jdk - Update javapackages test plan to f42 - Update to upstream version 1.9.22 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Switch to a newer patch macro syntax - Rebuilt for java-21-openjdk as system jdk - bump of release for for java-21-openjdk as system jdk - Update to upstream version 1.9.18 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild to regenerate auto-Requires on java - Rebuild to regenerate auto-requires - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Rebuilt for java-17-openjdk as system jdk - Add noarch to ExclusiveArch - Disable building on i686 - Fix patch usage - Rebuild with regenerated Requires on Java - Rebuild to regenerate auto-requires - Update javapackages test plan to f42 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Rebuilt for java-21-openjdk as system jdk - bump of release for for java-21-openjdk as system jdk - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild to regenerate auto-Requires on java - Rebuild - Update to upstream version 3.4.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Add maven-openjdk25 binding - Reuse jlink image if it already exists - Require /plans/matrix/unbound/jlink for gating - Update javapackages test plan to f42 - Add test plan for maven-unbound - Exclude maven-unbound from openjdk21 tests - Generate bindings with %jp_binding macro - Expect JVMs in %_jvmdir instead of %_jvmlibdir - Update gating.yaml - Drop bindings for OpenJDK < 21 - Add noarch to ExclusiveArch - Disable building on i686 - Rebuild with regenerated Requires on Java - Rebuild to regenerate auto-requires - Rebuild to regenerate auto-requires - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Update to upstream version 3.5.1 - Rebuilt for java-17-openjdk as system jdk - Use %autosetup -C - Update javapackages test plan to f42 - Set Java compiler source/target via javaVersion property - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Rebuilt for java-21-openjdk as system jdk - Update Java source/target to 1.8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild to regenerate auto-Requires on java - Convert License tag to SPDX format - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Avoid usage of libssh2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - update to 4.8.26 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - update BR - update to 4.8.25 - fix gcc-10 build failure - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebase to 1.3.0 Resolves: RHEL-73318 - Bump version for package rebuild We are moving the 'mecab-devel' RPM from the 'buildroot' repo to the 'CRB' repo - Resolves: #2182069 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Bump version for package rebuild We are moving the 'mecab-devel' RPM from the 'buildroot' repo to the 'CRB' repo - Resolves: #2182069 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Bump version for package rebuild We are moving the 'mecab-devel' RPM from the 'buildroot' repo to the 'CRB' repo - Resolves: #2182069 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use systemd-users - Resolves: rhbz#2095432 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Enable sasl pwdb (#1909724) - Update to 1.6.9 - Update to 1.6.8 - Rebuilt with libevent-2.1.12 - Update to 1.6.7 - Fix timing side-channel in SASL password database authentication (CVE-2026-47783) - Resolves: RHEL-179093 - Use systemd-users - Resolves: rhbz#2095432 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Enable sasl pwdb (#1909724) - Update to 1.6.9 - Update to 1.6.8 - Rebuilt with libevent-2.1.12 - Update to 1.6.7 - Fix timing side-channel in SASL password database authentication (CVE-2026-47783) - Resolves: RHEL-179093 - Fix annocheck pie test failure (2044880) - Update memkind source file to 1.11.0 upstream - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Work around false positive warning with gcc-11 - Update memkind source file to 1.10.1 upstream - Avoid uninitialized variable in testsuite - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update memkind source file to 1.10.0 upstream - Rebase to latest upstream(813c2feaa2f) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to upstream latest release - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to upstream latest release - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Use %make_build macro https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make - Update to upstream latest release - Update to upstream latest release - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Enable gating - Initial commit on c9s Resolves: https://issues.redhat.com/browse/RHEL-132415 - Enable gating - Initial commit on c9s Resolves: https://issues.redhat.com/browse/RHEL-132415 - Enable gating - Initial commit on c9s Resolves: https://issues.redhat.com/browse/RHEL-132415 - Enable gating - Initial commit on c9s Resolves: https://issues.redhat.com/browse/RHEL-132415 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Sync with upstream to drop the glew dependency - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for new freeglut. - Enable vc4 and v3d for Raspberry Pi graphics in AlmaLinux (Resolves: https://github.com/AlmaLinux/raspberry-pi/issues/32) - Fix s390x regressions Resolves: https://issues.redhat.com/browse/RHEL-151315 - Enable va-driver only in Fedora Resolves: https://issues.redhat.com/browse/RHEL-144489 - Resolves: https://issues.redhat.com/browse/RHEL-105157 - Resolves: https://issues.redhat.com/browse/RHEL-132415 - Disable LTO globally Resolves: https://issues.redhat.com/browse/RHEL-128255 - Resolves: https://issues.redhat.com/browse/RHEL-107477 Enable NVK also for RHEL 9 - Fix black screen on ppc64le Resolves: https://issues.redhat.com/browse/RHEL-113831 - NV dGFX fix for firefox crashing Backport fixes for NV dGFX driver crashing firefox Resolves: https://issues.redhat.com/browse/RHEL-93219 * Update to 25.0.7 Resolves: https://issues.redhat.com/browse/RHEL-75954 - Enable vc4 and v3d for Raspberry Pi graphics in AlmaLinux (Resolves: https://github.com/AlmaLinux/raspberry-pi/issues/32) - Resolves: https://redhat.atlassian.net/browse/RHEL-181885 - Fix s390x regressions Resolves: https://issues.redhat.com/browse/RHEL-151315 - Enable va-driver only in Fedora Resolves: https://issues.redhat.com/browse/RHEL-144489 - Resolves: https://issues.redhat.com/browse/RHEL-105157 - Resolves: https://issues.redhat.com/browse/RHEL-132415 - Disable LTO globally Resolves: https://issues.redhat.com/browse/RHEL-128255 - Resolves: https://issues.redhat.com/browse/RHEL-107477 Enable NVK also for RHEL 9 - Fix black screen on ppc64le Resolves: https://issues.redhat.com/browse/RHEL-113831 - NV dGFX fix for firefox crashing Backport fixes for NV dGFX driver crashing firefox Resolves: https://issues.redhat.com/browse/RHEL-93219 - Enable vc4 and v3d for Raspberry Pi graphics in AlmaLinux (Resolves: https://github.com/AlmaLinux/raspberry-pi/issues/32) - Fix s390x regressions Resolves: https://issues.redhat.com/browse/RHEL-151315 - Enable va-driver only in Fedora Resolves: https://issues.redhat.com/browse/RHEL-144489 - Resolves: https://issues.redhat.com/browse/RHEL-105157 - Resolves: https://issues.redhat.com/browse/RHEL-132415 - Disable LTO globally Resolves: https://issues.redhat.com/browse/RHEL-128255 - Resolves: https://issues.redhat.com/browse/RHEL-107477 Enable NVK also for RHEL 9 - Fix black screen on ppc64le Resolves: https://issues.redhat.com/browse/RHEL-113831 - NV dGFX fix for firefox crashing Backport fixes for NV dGFX driver crashing firefox Resolves: https://issues.redhat.com/browse/RHEL-93219 * Update to 25.0.7 Resolves: https://issues.redhat.com/browse/RHEL-75954 - Enable vc4 and v3d for Raspberry Pi graphics in AlmaLinux (Resolves: https://github.com/AlmaLinux/raspberry-pi/issues/32) - Resolves: https://redhat.atlassian.net/browse/RHEL-181885 - Fix s390x regressions Resolves: https://issues.redhat.com/browse/RHEL-151315 - Enable va-driver only in Fedora Resolves: https://issues.redhat.com/browse/RHEL-144489 - Resolves: https://issues.redhat.com/browse/RHEL-105157 - Resolves: https://issues.redhat.com/browse/RHEL-132415 - Disable LTO globally Resolves: https://issues.redhat.com/browse/RHEL-128255 - Resolves: https://issues.redhat.com/browse/RHEL-107477 Enable NVK also for RHEL 9 - Fix black screen on ppc64le Resolves: https://issues.redhat.com/browse/RHEL-113831 - NV dGFX fix for firefox crashing Backport fixes for NV dGFX driver crashing firefox Resolves: https://issues.redhat.com/browse/RHEL-93219 - Enable vc4 and v3d for Raspberry Pi graphics in AlmaLinux (Resolves: https://github.com/AlmaLinux/raspberry-pi/issues/32) - Fix s390x regressions Resolves: https://issues.redhat.com/browse/RHEL-151315 - Enable va-driver only in Fedora Resolves: https://issues.redhat.com/browse/RHEL-144489 - Resolves: https://issues.redhat.com/browse/RHEL-105157 - Resolves: https://issues.redhat.com/browse/RHEL-132415 - Disable LTO globally Resolves: https://issues.redhat.com/browse/RHEL-128255 - Resolves: https://issues.redhat.com/browse/RHEL-107477 Enable NVK also for RHEL 9 - Fix black screen on ppc64le Resolves: https://issues.redhat.com/browse/RHEL-113831 - NV dGFX fix for firefox crashing Backport fixes for NV dGFX driver crashing firefox Resolves: https://issues.redhat.com/browse/RHEL-93219 * Update to 25.0.7 Resolves: https://issues.redhat.com/browse/RHEL-75954 - Enable vc4 and v3d for Raspberry Pi graphics in AlmaLinux (Resolves: https://github.com/AlmaLinux/raspberry-pi/issues/32) - Resolves: https://redhat.atlassian.net/browse/RHEL-181885 - Fix s390x regressions Resolves: https://issues.redhat.com/browse/RHEL-151315 - Enable va-driver only in Fedora Resolves: https://issues.redhat.com/browse/RHEL-144489 - Resolves: https://issues.redhat.com/browse/RHEL-105157 - Resolves: https://issues.redhat.com/browse/RHEL-132415 - Disable LTO globally Resolves: https://issues.redhat.com/browse/RHEL-128255 - Resolves: https://issues.redhat.com/browse/RHEL-107477 Enable NVK also for RHEL 9 - Fix black screen on ppc64le Resolves: https://issues.redhat.com/browse/RHEL-113831 - NV dGFX fix for firefox crashing Backport fixes for NV dGFX driver crashing firefox Resolves: https://issues.redhat.com/browse/RHEL-93219 - Enable vc4 and v3d for Raspberry Pi graphics in AlmaLinux (Resolves: https://github.com/AlmaLinux/raspberry-pi/issues/32) - Fix s390x regressions Resolves: https://issues.redhat.com/browse/RHEL-151315 - Enable va-driver only in Fedora Resolves: https://issues.redhat.com/browse/RHEL-144489 - Resolves: https://issues.redhat.com/browse/RHEL-105157 - Resolves: https://issues.redhat.com/browse/RHEL-132415 - Disable LTO globally Resolves: https://issues.redhat.com/browse/RHEL-128255 - Resolves: https://issues.redhat.com/browse/RHEL-107477 Enable NVK also for RHEL 9 - Fix black screen on ppc64le Resolves: https://issues.redhat.com/browse/RHEL-113831 - NV dGFX fix for firefox crashing Backport fixes for NV dGFX driver crashing firefox Resolves: https://issues.redhat.com/browse/RHEL-93219 * Update to 25.0.7 Resolves: https://issues.redhat.com/browse/RHEL-75954 - Enable vc4 and v3d for Raspberry Pi graphics in AlmaLinux (Resolves: https://github.com/AlmaLinux/raspberry-pi/issues/32) - Resolves: https://redhat.atlassian.net/browse/RHEL-181885 - Fix s390x regressions Resolves: https://issues.redhat.com/browse/RHEL-151315 - Enable va-driver only in Fedora Resolves: https://issues.redhat.com/browse/RHEL-144489 - Resolves: https://issues.redhat.com/browse/RHEL-105157 - Resolves: https://issues.redhat.com/browse/RHEL-132415 - Disable LTO globally Resolves: https://issues.redhat.com/browse/RHEL-128255 - Resolves: https://issues.redhat.com/browse/RHEL-107477 Enable NVK also for RHEL 9 - Fix black screen on ppc64le Resolves: https://issues.redhat.com/browse/RHEL-113831 - NV dGFX fix for firefox crashing Backport fixes for NV dGFX driver crashing firefox Resolves: https://issues.redhat.com/browse/RHEL-93219 - Enable vc4 and v3d for Raspberry Pi graphics in AlmaLinux (Resolves: https://github.com/AlmaLinux/raspberry-pi/issues/32) - Fix s390x regressions Resolves: https://issues.redhat.com/browse/RHEL-151315 - Enable va-driver only in Fedora Resolves: https://issues.redhat.com/browse/RHEL-144489 - Resolves: https://issues.redhat.com/browse/RHEL-105157 - Resolves: https://issues.redhat.com/browse/RHEL-132415 - Disable LTO globally Resolves: https://issues.redhat.com/browse/RHEL-128255 - Resolves: https://issues.redhat.com/browse/RHEL-107477 Enable NVK also for RHEL 9 - Fix black screen on ppc64le Resolves: https://issues.redhat.com/browse/RHEL-113831 - NV dGFX fix for firefox crashing Backport fixes for NV dGFX driver crashing firefox Resolves: https://issues.redhat.com/browse/RHEL-93219 * Update to 25.0.7 Resolves: https://issues.redhat.com/browse/RHEL-75954 - Enable vc4 and v3d for Raspberry Pi graphics in AlmaLinux (Resolves: https://github.com/AlmaLinux/raspberry-pi/issues/32) - Resolves: https://redhat.atlassian.net/browse/RHEL-181885 - Fix s390x regressions Resolves: https://issues.redhat.com/browse/RHEL-151315 - Enable va-driver only in Fedora Resolves: https://issues.redhat.com/browse/RHEL-144489 - Resolves: https://issues.redhat.com/browse/RHEL-105157 - Resolves: https://issues.redhat.com/browse/RHEL-132415 - Disable LTO globally Resolves: https://issues.redhat.com/browse/RHEL-128255 - Resolves: https://issues.redhat.com/browse/RHEL-107477 Enable NVK also for RHEL 9 - Fix black screen on ppc64le Resolves: https://issues.redhat.com/browse/RHEL-113831 - NV dGFX fix for firefox crashing Backport fixes for NV dGFX driver crashing firefox Resolves: https://issues.redhat.com/browse/RHEL-93219 - Enable vc4 and v3d for Raspberry Pi graphics in AlmaLinux (Resolves: https://github.com/AlmaLinux/raspberry-pi/issues/32) - Fix s390x regressions Resolves: https://issues.redhat.com/browse/RHEL-151315 - Enable va-driver only in Fedora Resolves: https://issues.redhat.com/browse/RHEL-144489 - Resolves: https://issues.redhat.com/browse/RHEL-105157 - Resolves: https://issues.redhat.com/browse/RHEL-132415 - Disable LTO globally Resolves: https://issues.redhat.com/browse/RHEL-128255 - Resolves: https://issues.redhat.com/browse/RHEL-107477 Enable NVK also for RHEL 9 - Fix black screen on ppc64le Resolves: https://issues.redhat.com/browse/RHEL-113831 - NV dGFX fix for firefox crashing Backport fixes for NV dGFX driver crashing firefox Resolves: https://issues.redhat.com/browse/RHEL-93219 * Update to 25.0.7 Resolves: https://issues.redhat.com/browse/RHEL-75954 - Enable vc4 and v3d for Raspberry Pi graphics in AlmaLinux (Resolves: https://github.com/AlmaLinux/raspberry-pi/issues/32) - Resolves: https://redhat.atlassian.net/browse/RHEL-181885 - Fix s390x regressions Resolves: https://issues.redhat.com/browse/RHEL-151315 - Enable va-driver only in Fedora Resolves: https://issues.redhat.com/browse/RHEL-144489 - Resolves: https://issues.redhat.com/browse/RHEL-105157 - Resolves: https://issues.redhat.com/browse/RHEL-132415 - Disable LTO globally Resolves: https://issues.redhat.com/browse/RHEL-128255 - Resolves: https://issues.redhat.com/browse/RHEL-107477 Enable NVK also for RHEL 9 - Fix black screen on ppc64le Resolves: https://issues.redhat.com/browse/RHEL-113831 - NV dGFX fix for firefox crashing Backport fixes for NV dGFX driver crashing firefox Resolves: https://issues.redhat.com/browse/RHEL-93219 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Enable vc4 and v3d for Raspberry Pi graphics in AlmaLinux (Resolves: https://github.com/AlmaLinux/raspberry-pi/issues/32) - Fix s390x regressions Resolves: https://issues.redhat.com/browse/RHEL-151315 - Enable va-driver only in Fedora Resolves: https://issues.redhat.com/browse/RHEL-144489 - Resolves: https://issues.redhat.com/browse/RHEL-105157 - Resolves: https://issues.redhat.com/browse/RHEL-132415 - Disable LTO globally Resolves: https://issues.redhat.com/browse/RHEL-128255 - Resolves: https://issues.redhat.com/browse/RHEL-107477 Enable NVK also for RHEL 9 - Fix black screen on ppc64le Resolves: https://issues.redhat.com/browse/RHEL-113831 - NV dGFX fix for firefox crashing Backport fixes for NV dGFX driver crashing firefox Resolves: https://issues.redhat.com/browse/RHEL-93219 * Update to 25.0.7 Resolves: https://issues.redhat.com/browse/RHEL-75954 - Enable vc4 and v3d for Raspberry Pi graphics in AlmaLinux (Resolves: https://github.com/AlmaLinux/raspberry-pi/issues/32) - Resolves: https://redhat.atlassian.net/browse/RHEL-181885 - Fix s390x regressions Resolves: https://issues.redhat.com/browse/RHEL-151315 - Enable va-driver only in Fedora Resolves: https://issues.redhat.com/browse/RHEL-144489 - Resolves: https://issues.redhat.com/browse/RHEL-105157 - Resolves: https://issues.redhat.com/browse/RHEL-132415 - Disable LTO globally Resolves: https://issues.redhat.com/browse/RHEL-128255 - Resolves: https://issues.redhat.com/browse/RHEL-107477 Enable NVK also for RHEL 9 - Fix black screen on ppc64le Resolves: https://issues.redhat.com/browse/RHEL-113831 - NV dGFX fix for firefox crashing Backport fixes for NV dGFX driver crashing firefox Resolves: https://issues.redhat.com/browse/RHEL-93219 - Enable vc4 and v3d for Raspberry Pi graphics in AlmaLinux (Resolves: https://github.com/AlmaLinux/raspberry-pi/issues/32) - Fix s390x regressions Resolves: https://issues.redhat.com/browse/RHEL-151315 - Enable va-driver only in Fedora Resolves: https://issues.redhat.com/browse/RHEL-144489 - Resolves: https://issues.redhat.com/browse/RHEL-105157 - Resolves: https://issues.redhat.com/browse/RHEL-132415 - Disable LTO globally Resolves: https://issues.redhat.com/browse/RHEL-128255 - Resolves: https://issues.redhat.com/browse/RHEL-107477 Enable NVK also for RHEL 9 - Fix black screen on ppc64le Resolves: https://issues.redhat.com/browse/RHEL-113831 - NV dGFX fix for firefox crashing Backport fixes for NV dGFX driver crashing firefox Resolves: https://issues.redhat.com/browse/RHEL-93219 * Update to 25.0.7 Resolves: https://issues.redhat.com/browse/RHEL-75954 - Enable vc4 and v3d for Raspberry Pi graphics in AlmaLinux (Resolves: https://github.com/AlmaLinux/raspberry-pi/issues/32) - Resolves: https://redhat.atlassian.net/browse/RHEL-181885 - Fix s390x regressions Resolves: https://issues.redhat.com/browse/RHEL-151315 - Enable va-driver only in Fedora Resolves: https://issues.redhat.com/browse/RHEL-144489 - Resolves: https://issues.redhat.com/browse/RHEL-105157 - Resolves: https://issues.redhat.com/browse/RHEL-132415 - Disable LTO globally Resolves: https://issues.redhat.com/browse/RHEL-128255 - Resolves: https://issues.redhat.com/browse/RHEL-107477 Enable NVK also for RHEL 9 - Fix black screen on ppc64le Resolves: https://issues.redhat.com/browse/RHEL-113831 - NV dGFX fix for firefox crashing Backport fixes for NV dGFX driver crashing firefox Resolves: https://issues.redhat.com/browse/RHEL-93219 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Disable the test run under RHEL due to missing dependencies Resolves: rhbz#1932454 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.0.2 (#1906430) - Update to 1.0.1 - Update to 1.0.0 (#1884346) - Update to 0.6.0 (#1875250) - Update to 0.5.1 (#1859995) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - RHEL-57746 - mingw-qemu-ga-win failed to build on s390x - RHEL-57013 - Rebase qemu-ga to 9.1.0 - RHEL-57012 - guest agent public ssh injection api support for Windows - Set version to 109.1.0 - RHEL-45598 - Set version to 108.0.2 - Set version to 108.0.1 - RHEL-34770 - Gatting rpminspect SPDX license expressions validate failed - Set version to 108.0.0 - RHEL-23026 - Rebase qemu-ga to 9.0.0 - Set version to 107.0.2 - RHEL-26205 - [QGA] Add Windows Server 2025 to guest-osinfo command - Set version to 107.0.1 - RHEL-21655 - Fix mingw-qemu-ga-win licenses - Set version to 107.0.0 - RHEL-15491 - Rebase qemu-ga to 8.2.0 - Set version to 106.0.1 - RHELPLAN-147763 - [mingw-qemu-ga-win] VSS DLL: Add logging mechanism - RHEL-581 - Use the SPDX vocabulary to specify the license - Set version to 106.0.0 - RHEL-408 - Add provides, obsoletes for mingw-qemu-ga-win - RHEL-385 - Rebase mingw-qemu-ga-win to QEMU 8.0 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Split mkfontscale/mkfontdir out from xorg-x11-font-utils into its own package (#1932734) - Enable mkpasswd building (#2054043) - Remove changelog from mkpasswd, it has double size of actual tool - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - 5.5.9 bump - 5.5.8 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 5.5.7 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to upstream release 20210805 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to upstream release 20201225 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - crypto: Handle EVP changes in OpenSSL 3 - Resolves: #1992648 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Build dep adjustments; no Fedora code changes - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - New upstream release (1.6.3) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - New upstream release (1.6.2) - Resolves: #1828142 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fixing mellon_create_metadata.sh script Resolves: RHEL-35898 - Publishing diagnostic module in CRB repository Resolves: RHEL-33585 - Fixing gating issue - rebuild Resolves: rhbz#2184763 Rebase to version 2.4.16.11 - Resolves: RHEL-86221 Rebase to version 2.4.16.10 - Resolves: RHEL-44894 - Resolves: RHEL-3335 Rebase to 2.4.10 version improves `state cookies piling up` problem Resolves: RHEL-32450 Race condition in mod_auth_openidc filecache Resolves: RHEL-25422 mod_auth_openidc: DoS when using `OIDCSessionType client-cookie` and manipulating cookies (CVE-2024-24814) Resolves: rhbz#2189268 - auth_openidc.conf mode 0640 by default - Resolves: rhbz#2184145 - CVE-2023-28625 NULL pointer dereference when OIDCStripCookies is set and a crafted Cookie header is supplied - Resolves: RHEL-248048 - CVE-2026-54789 out-of-bounds read/write in oidc_state_cookies_clean_expired when a state-prefixed cookie token contains no '=' separator Rebase to version 2.4.16.11 - Resolves: RHEL-86221 Rebase to version 2.4.16.10 - Resolves: RHEL-44894 - Resolves: RHEL-3335 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - 1944553 - rebase to upstream version 1.2.2. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 1855338 - rebase to upstream version 1.2.1. - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - mod_dav_svn: add conflicts to ensure compatible mod_dav Related: RHEL-79948 - mod_dav_svn: inherit DavBasePath from httpd Resolves: RHEL-79948 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - fix env var truncation to 127 bytes (#1961948) - suppress symbol exports (#1961947) - Resolves: #1958882 - mod_fcgid does not pass more than 64 variables to an FCGI server process environment - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Drop EL-6 support - Use %license unconditionally - _httpd_* macros always available - Run directory is always /run on tmpfs - Assume httpd ≥ 2.4 filesystem layout - systemd-units always provided by systemd - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - merge fixes from RHEL (r1848298, etc) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Resolves: RHEL-108706 - CVE-2025-49630 httpd: untrusted input from a client causes an assertion to fail in the Apache mod_proxy_http2 module - Resolves: RHEL-76413 - mod_proxy_http2 failures after CVE-2024-38477 fix - Resolves: RHEL-45806 - mod_http2: DoS by null pointer in websocket over HTTP/2 (CVE-2024-36387) - Resolves: RHEL-31855 - mod_http2: httpd: CONTINUATION frames DoS (CVE-2024-27316) - Resolves: RHEL-14691 - mod_http2 rebase to 2.0.26 - Resolves: RHEL-182417 - mod_http2: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack (CVE-2026-49975) - Resolves: RHEL-166293 - httpd: Apache HTTP Server: HTTP/2 DoS by Memory Increase (CVE-2025-53020) - Resolves: RHEL-108706 - CVE-2025-49630 httpd: untrusted input from a client causes an assertion to fail in the Apache mod_proxy_http2 module - Resolves: RHEL-76413 - mod_proxy_http2 failures after CVE-2024-38477 fix - Resolves: RHEL-45806 - mod_http2: DoS by null pointer in websocket over HTTP/2 (CVE-2024-36387) - Resolves: RHEL-190583 - address CVE-2026-43951 and CVE-2026-48913 in mod_http2 - Resolves: RHEL-182417 - mod_http2: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack (CVE-2026-49975) - Resolves: RHEL-166293 - httpd: Apache HTTP Server: HTTP/2 DoS by Memory Increase (CVE-2025-53020) - Resolves: RHEL-108706 - CVE-2025-49630 httpd: untrusted input from a client causes an assertion to fail in the Apache mod_proxy_http2 module - Resolves: RHEL-76413 - mod_proxy_http2 failures after CVE-2024-38477 fix - Resolves: RHEL-45806 - mod_http2: DoS by null pointer in websocket over HTTP/2 (CVE-2024-36387) - Resolves: RHEL-166293 - httpd: Apache HTTP Server: HTTP/2 DoS by Memory Increase (CVE-2025-53020) - Resolves: RHEL-108706 - CVE-2025-49630 httpd: untrusted input from a client causes an assertion to fail in the Apache mod_proxy_http2 module - Resolves: RHEL-76413 - mod_proxy_http2 failures after CVE-2024-38477 fix - Resolves: RHEL-45806 - mod_http2: DoS by null pointer in websocket over HTTP/2 (CVE-2024-36387) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Resolves: RHEL-70161 - Rebuild mod_jk against httpd 2.4.62 - Related: RHEL-27511 - Rebase to upstream 1.2.49 release - Add entries for tmpfiles.d mechanism - Remove /var/run legacy location - Resolves: rhbz#2047969 - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-114501 Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99815 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99968 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-94562 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - mod_dav: add dav_get_base_path() API - Resolves: RHEL-41069 - Resolves: RHEL-66488 - Apache HTTPD no longer parse PHP files with unicode characters in the name - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-114501 Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99815 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99968 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-94562 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - mod_dav: add dav_get_base_path() API - Resolves: RHEL-41069 - Resolves: RHEL-192752 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-186217 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-182578 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Also addresses CVE-2026-24072, CVE-2026-33006, CVE-2026-42535, CVE-2026-43951, CVE-2026-44119, CVE-2026-44186 - Resolves: RHEL-186186 - httpd: mod_proxy_html buffer handling vulnerability (CVE-2026-34355) - Resolves: RHEL-175636 - httpd: mod_dav_lock uses wrong lock discovery (CVE-2026-29169) - Resolves: RHEL-186196 - mod_xml2enc: fix bblen accounting in fix_skipto (CVE-2026-42536) - Resolves: RHEL-186164 - httpd: fix OCSP write buffer advancement bug in mod_ssl (CVE-2026-44185) - Resolves: RHEL-184312 - httpd: ap_regname restrict to reasonable captures (CVE-2026-44631) - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-190807 - httpd: use-after-free in mod_ldap uldap_connection_find via per-directory client cert list (CVE-2026-29167) - Resolves: RHEL-192752 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-186217 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-182578 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Also addresses CVE-2026-24072, CVE-2026-33006, CVE-2026-42535, CVE-2026-43951, CVE-2026-44119, CVE-2026-44186 - Resolves: RHEL-186186 - httpd: mod_proxy_html buffer handling vulnerability (CVE-2026-34355) - Resolves: RHEL-175636 - httpd: mod_dav_lock uses wrong lock discovery (CVE-2026-29169) - Resolves: RHEL-186196 - mod_xml2enc: fix bblen accounting in fix_skipto (CVE-2026-42536) - Resolves: RHEL-186164 - httpd: fix OCSP write buffer advancement bug in mod_ssl (CVE-2026-44185) - Resolves: RHEL-184312 - httpd: ap_regname restrict to reasonable captures (CVE-2026-44631) - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Related: RHEL-275261 - httpd: Arbitrary code execution via oversized Host header in mod_vhost_alias (CVE-2026-63292) - Resolves: RHEL-280369 - httpd: Denial of Service via mod_rewrite lookahead (CVE-2026-56154) - Resolves: RHEL-275551 CVE-2026-48005 httpd: Denial of service via forged Authorization headers in mod_auth_digest - Resolves: RHEL-275338 CVE-2026-73636 httpd: Authentication bypass via credential replay in mod_auth_digest - Resolves: RHEL-275229 CVE-2026-73637 httpd: Authentication state corruption via concurrent Digest authentication requests - Resolves: RHEL-275323 CVE-2026-56153 httpd: Denial of Service via heap-based buffer overflow in mod_charset_lite - Resolves: RHEL-275307 CVE-2026-46729 httpd: mod_heartmonitor: Denial of Service via NULL pointer dereference - Resolves: RHEL-275276 CVE-2026-63045 httpd: unauthorized connection to arbitrary hosts via crafted FTP PASV response - Resolves: RHEL-275261 CVE-2026-63292 httpd: Arbitrary code execution via oversized Host header in mod_vhost_alias - Resolves: RHEL-275245 CVE-2026-63686 httpd: Denial of Service via charset conversion failure in mod_xml2enc - Resolves: RHEL-275214 CVE-2026-93546 httpd: Denial of Service via integer overflow in mod_dav_fs - Resolves: RHEL-275176 CVE-2026-63718 httpd: HTTP response smuggling via crafted Transfer-Encoding response in mod_proxy_uwsgi - Resolves: RHEL-190807 - httpd: use-after-free in mod_ldap uldap_connection_find via per-directory client cert list (CVE-2026-29167) - Resolves: RHEL-192752 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-186217 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-182578 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Also addresses CVE-2026-24072, CVE-2026-33006, CVE-2026-42535, CVE-2026-43951, CVE-2026-44119, CVE-2026-44186 - Resolves: RHEL-186186 - httpd: mod_proxy_html buffer handling vulnerability (CVE-2026-34355) - Resolves: RHEL-175636 - httpd: mod_dav_lock uses wrong lock discovery (CVE-2026-29169) - Resolves: RHEL-186196 - mod_xml2enc: fix bblen accounting in fix_skipto (CVE-2026-42536) - Resolves: RHEL-186164 - httpd: fix OCSP write buffer advancement bug in mod_ssl (CVE-2026-44185) - Resolves: RHEL-184312 - httpd: ap_regname restrict to reasonable captures (CVE-2026-44631) - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-114501 Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99815 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99968 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-94562 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - mod_dav: add dav_get_base_path() API - Resolves: RHEL-41069 - Resolves: RHEL-66488 - Apache HTTPD no longer parse PHP files with unicode characters in the name - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-114501 Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99815 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99968 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-94562 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - mod_dav: add dav_get_base_path() API - Resolves: RHEL-41069 - Resolves: RHEL-192752 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-186217 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-182578 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Also addresses CVE-2026-24072, CVE-2026-33006, CVE-2026-42535, CVE-2026-43951, CVE-2026-44119, CVE-2026-44186 - Resolves: RHEL-186186 - httpd: mod_proxy_html buffer handling vulnerability (CVE-2026-34355) - Resolves: RHEL-175636 - httpd: mod_dav_lock uses wrong lock discovery (CVE-2026-29169) - Resolves: RHEL-186196 - mod_xml2enc: fix bblen accounting in fix_skipto (CVE-2026-42536) - Resolves: RHEL-186164 - httpd: fix OCSP write buffer advancement bug in mod_ssl (CVE-2026-44185) - Resolves: RHEL-184312 - httpd: ap_regname restrict to reasonable captures (CVE-2026-44631) - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-190807 - httpd: use-after-free in mod_ldap uldap_connection_find via per-directory client cert list (CVE-2026-29167) - Resolves: RHEL-192752 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-186217 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-182578 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Also addresses CVE-2026-24072, CVE-2026-33006, CVE-2026-42535, CVE-2026-43951, CVE-2026-44119, CVE-2026-44186 - Resolves: RHEL-186186 - httpd: mod_proxy_html buffer handling vulnerability (CVE-2026-34355) - Resolves: RHEL-175636 - httpd: mod_dav_lock uses wrong lock discovery (CVE-2026-29169) - Resolves: RHEL-186196 - mod_xml2enc: fix bblen accounting in fix_skipto (CVE-2026-42536) - Resolves: RHEL-186164 - httpd: fix OCSP write buffer advancement bug in mod_ssl (CVE-2026-44185) - Resolves: RHEL-184312 - httpd: ap_regname restrict to reasonable captures (CVE-2026-44631) - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Related: RHEL-275261 - httpd: Arbitrary code execution via oversized Host header in mod_vhost_alias (CVE-2026-63292) - Resolves: RHEL-280369 - httpd: Denial of Service via mod_rewrite lookahead (CVE-2026-56154) - Resolves: RHEL-275551 CVE-2026-48005 httpd: Denial of service via forged Authorization headers in mod_auth_digest - Resolves: RHEL-275338 CVE-2026-73636 httpd: Authentication bypass via credential replay in mod_auth_digest - Resolves: RHEL-275229 CVE-2026-73637 httpd: Authentication state corruption via concurrent Digest authentication requests - Resolves: RHEL-275323 CVE-2026-56153 httpd: Denial of Service via heap-based buffer overflow in mod_charset_lite - Resolves: RHEL-275307 CVE-2026-46729 httpd: mod_heartmonitor: Denial of Service via NULL pointer dereference - Resolves: RHEL-275276 CVE-2026-63045 httpd: unauthorized connection to arbitrary hosts via crafted FTP PASV response - Resolves: RHEL-275261 CVE-2026-63292 httpd: Arbitrary code execution via oversized Host header in mod_vhost_alias - Resolves: RHEL-275245 CVE-2026-63686 httpd: Denial of Service via charset conversion failure in mod_xml2enc - Resolves: RHEL-275214 CVE-2026-93546 httpd: Denial of Service via integer overflow in mod_dav_fs - Resolves: RHEL-275176 CVE-2026-63718 httpd: HTTP response smuggling via crafted Transfer-Encoding response in mod_proxy_uwsgi - Resolves: RHEL-190807 - httpd: use-after-free in mod_ldap uldap_connection_find via per-directory client cert list (CVE-2026-29167) - Resolves: RHEL-192752 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-186217 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-182578 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Also addresses CVE-2026-24072, CVE-2026-33006, CVE-2026-42535, CVE-2026-43951, CVE-2026-44119, CVE-2026-44186 - Resolves: RHEL-186186 - httpd: mod_proxy_html buffer handling vulnerability (CVE-2026-34355) - Resolves: RHEL-175636 - httpd: mod_dav_lock uses wrong lock discovery (CVE-2026-29169) - Resolves: RHEL-186196 - mod_xml2enc: fix bblen accounting in fix_skipto (CVE-2026-42536) - Resolves: RHEL-186164 - httpd: fix OCSP write buffer advancement bug in mod_ssl (CVE-2026-44185) - Resolves: RHEL-184312 - httpd: ap_regname restrict to reasonable captures (CVE-2026-44631) - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-134496 - httpd: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753) - Resolves: RHEL-25075 - new version 2.4.26 - Resolves: RHEL-11838 - [RFE] add support of dns_01 challenge to mod_md - Resolves: RHEL-17462 - OCSP response rejected when nextUpdate field not set - Resolves: RHEL-17467 - mod_md should trigger the reissue of new pair key/certificate when OCSP reports a revoked status - Resolves: RHEL-175644 - mod_md: OCSP response limits (CVE-2026-29168) - Resolves: RHEL-134497 - httpd: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753) - Resolves: RHEL-260407 - Fix crash when ACME order finalization times out - Resolves: RHEL-175644 - mod_md: OCSP response limits (CVE-2026-29168) - Resolves: RHEL-134497 - httpd: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753) - Resolves: RHEL-80864: Bump serial to fix upgrade problems - Resolves: RHEL-80864 Rebase mod_proxy_cluster to upstream 1.3.22.Final release - Rebase mod_cluster to upstream 1.3.20.Final tag - Related: RHEL-27497 - Rebase to upstream 1.3.20.Final release - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-114501 Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99815 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99968 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-94562 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - mod_dav: add dav_get_base_path() API - Resolves: RHEL-41069 - Resolves: RHEL-66488 - Apache HTTPD no longer parse PHP files with unicode characters in the name - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-114501 Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99815 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99968 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-94562 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - mod_dav: add dav_get_base_path() API - Resolves: RHEL-41069 - Resolves: RHEL-192752 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-186217 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-182578 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Also addresses CVE-2026-24072, CVE-2026-33006, CVE-2026-42535, CVE-2026-43951, CVE-2026-44119, CVE-2026-44186 - Resolves: RHEL-186186 - httpd: mod_proxy_html buffer handling vulnerability (CVE-2026-34355) - Resolves: RHEL-175636 - httpd: mod_dav_lock uses wrong lock discovery (CVE-2026-29169) - Resolves: RHEL-186196 - mod_xml2enc: fix bblen accounting in fix_skipto (CVE-2026-42536) - Resolves: RHEL-186164 - httpd: fix OCSP write buffer advancement bug in mod_ssl (CVE-2026-44185) - Resolves: RHEL-184312 - httpd: ap_regname restrict to reasonable captures (CVE-2026-44631) - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-190807 - httpd: use-after-free in mod_ldap uldap_connection_find via per-directory client cert list (CVE-2026-29167) - Resolves: RHEL-192752 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-186217 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-182578 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Also addresses CVE-2026-24072, CVE-2026-33006, CVE-2026-42535, CVE-2026-43951, CVE-2026-44119, CVE-2026-44186 - Resolves: RHEL-186186 - httpd: mod_proxy_html buffer handling vulnerability (CVE-2026-34355) - Resolves: RHEL-175636 - httpd: mod_dav_lock uses wrong lock discovery (CVE-2026-29169) - Resolves: RHEL-186196 - mod_xml2enc: fix bblen accounting in fix_skipto (CVE-2026-42536) - Resolves: RHEL-186164 - httpd: fix OCSP write buffer advancement bug in mod_ssl (CVE-2026-44185) - Resolves: RHEL-184312 - httpd: ap_regname restrict to reasonable captures (CVE-2026-44631) - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Related: RHEL-275261 - httpd: Arbitrary code execution via oversized Host header in mod_vhost_alias (CVE-2026-63292) - Resolves: RHEL-280369 - httpd: Denial of Service via mod_rewrite lookahead (CVE-2026-56154) - Resolves: RHEL-275551 CVE-2026-48005 httpd: Denial of service via forged Authorization headers in mod_auth_digest - Resolves: RHEL-275338 CVE-2026-73636 httpd: Authentication bypass via credential replay in mod_auth_digest - Resolves: RHEL-275229 CVE-2026-73637 httpd: Authentication state corruption via concurrent Digest authentication requests - Resolves: RHEL-275323 CVE-2026-56153 httpd: Denial of Service via heap-based buffer overflow in mod_charset_lite - Resolves: RHEL-275307 CVE-2026-46729 httpd: mod_heartmonitor: Denial of Service via NULL pointer dereference - Resolves: RHEL-275276 CVE-2026-63045 httpd: unauthorized connection to arbitrary hosts via crafted FTP PASV response - Resolves: RHEL-275261 CVE-2026-63292 httpd: Arbitrary code execution via oversized Host header in mod_vhost_alias - Resolves: RHEL-275245 CVE-2026-63686 httpd: Denial of Service via charset conversion failure in mod_xml2enc - Resolves: RHEL-275214 CVE-2026-93546 httpd: Denial of Service via integer overflow in mod_dav_fs - Resolves: RHEL-275176 CVE-2026-63718 httpd: HTTP response smuggling via crafted Transfer-Encoding response in mod_proxy_uwsgi - Resolves: RHEL-190807 - httpd: use-after-free in mod_ldap uldap_connection_find via per-directory client cert list (CVE-2026-29167) - Resolves: RHEL-192752 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-186217 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-182578 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Also addresses CVE-2026-24072, CVE-2026-33006, CVE-2026-42535, CVE-2026-43951, CVE-2026-44119, CVE-2026-44186 - Resolves: RHEL-186186 - httpd: mod_proxy_html buffer handling vulnerability (CVE-2026-34355) - Resolves: RHEL-175636 - httpd: mod_dav_lock uses wrong lock discovery (CVE-2026-29169) - Resolves: RHEL-186196 - mod_xml2enc: fix bblen accounting in fix_skipto (CVE-2026-42536) - Resolves: RHEL-186164 - httpd: fix OCSP write buffer advancement bug in mod_ssl (CVE-2026-44185) - Resolves: RHEL-184312 - httpd: ap_regname restrict to reasonable captures (CVE-2026-44631) - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-30628 - mod_security: httpd doesn't close read side of pipe to rotatelogs for SecAuditLog leading to frozen state during graceful restart - Resolves: RHEL-100098 - mod_security: ModSecurity Denial of Service Vulnerability (CVE-2025-48866) - Resolves: RHEL-93014 - mod_security: ModSecurity Has Possible DoS Vulnerability (CVE-2025-47947) - Resolves: RHEL-30628 - mod_security: httpd doesn't close read side of pipe to rotatelogs for SecAuditLog leading to frozen state during graceful restart - Resolves: RHEL-100098 - mod_security: ModSecurity Denial of Service Vulnerability (CVE-2025-48866) - Resolves: RHEL-93014 - mod_security: ModSecurity Has Possible DoS Vulnerability (CVE-2025-47947) - Resolves: RHEL-80178 A form data, "鹿沼市御成橋"(a name of street/city in Japanese) is forbade by mod_security_crs-3.3.4-3.el8.noarch - Resolves: RHEL-32964 - new version 3.3.5 - Resolves: #RHEL-22733 - mod_security_crs - The rule id:913100 in the REQUEST-913-SCANNER-DETECTION.conf blocks requests with "User-agent: urlgrabber/3.10 yum/3.4.3" - Resolves: RHEL-16358 - A form data, "会社"(Company in Japanese) is forbade with REQUEST-941-APPLICATION-ATTACK-XSS.conf of mod_security_crs - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-114501 Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99815 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99968 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-94562 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - mod_dav: add dav_get_base_path() API - Resolves: RHEL-41069 - Resolves: RHEL-66488 - Apache HTTPD no longer parse PHP files with unicode characters in the name - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-114501 Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99815 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99968 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-94562 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - mod_dav: add dav_get_base_path() API - Resolves: RHEL-41069 - Resolves: RHEL-192752 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-186217 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-182578 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Also addresses CVE-2026-24072, CVE-2026-33006, CVE-2026-42535, CVE-2026-43951, CVE-2026-44119, CVE-2026-44186 - Resolves: RHEL-186186 - httpd: mod_proxy_html buffer handling vulnerability (CVE-2026-34355) - Resolves: RHEL-175636 - httpd: mod_dav_lock uses wrong lock discovery (CVE-2026-29169) - Resolves: RHEL-186196 - mod_xml2enc: fix bblen accounting in fix_skipto (CVE-2026-42536) - Resolves: RHEL-186164 - httpd: fix OCSP write buffer advancement bug in mod_ssl (CVE-2026-44185) - Resolves: RHEL-184312 - httpd: ap_regname restrict to reasonable captures (CVE-2026-44631) - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-190807 - httpd: use-after-free in mod_ldap uldap_connection_find via per-directory client cert list (CVE-2026-29167) - Resolves: RHEL-192752 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-186217 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-182578 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Also addresses CVE-2026-24072, CVE-2026-33006, CVE-2026-42535, CVE-2026-43951, CVE-2026-44119, CVE-2026-44186 - Resolves: RHEL-186186 - httpd: mod_proxy_html buffer handling vulnerability (CVE-2026-34355) - Resolves: RHEL-175636 - httpd: mod_dav_lock uses wrong lock discovery (CVE-2026-29169) - Resolves: RHEL-186196 - mod_xml2enc: fix bblen accounting in fix_skipto (CVE-2026-42536) - Resolves: RHEL-186164 - httpd: fix OCSP write buffer advancement bug in mod_ssl (CVE-2026-44185) - Resolves: RHEL-184312 - httpd: ap_regname restrict to reasonable captures (CVE-2026-44631) - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Related: RHEL-275261 - httpd: Arbitrary code execution via oversized Host header in mod_vhost_alias (CVE-2026-63292) - Resolves: RHEL-280369 - httpd: Denial of Service via mod_rewrite lookahead (CVE-2026-56154) - Resolves: RHEL-275551 CVE-2026-48005 httpd: Denial of service via forged Authorization headers in mod_auth_digest - Resolves: RHEL-275338 CVE-2026-73636 httpd: Authentication bypass via credential replay in mod_auth_digest - Resolves: RHEL-275229 CVE-2026-73637 httpd: Authentication state corruption via concurrent Digest authentication requests - Resolves: RHEL-275323 CVE-2026-56153 httpd: Denial of Service via heap-based buffer overflow in mod_charset_lite - Resolves: RHEL-275307 CVE-2026-46729 httpd: mod_heartmonitor: Denial of Service via NULL pointer dereference - Resolves: RHEL-275276 CVE-2026-63045 httpd: unauthorized connection to arbitrary hosts via crafted FTP PASV response - Resolves: RHEL-275261 CVE-2026-63292 httpd: Arbitrary code execution via oversized Host header in mod_vhost_alias - Resolves: RHEL-275245 CVE-2026-63686 httpd: Denial of Service via charset conversion failure in mod_xml2enc - Resolves: RHEL-275214 CVE-2026-93546 httpd: Denial of Service via integer overflow in mod_dav_fs - Resolves: RHEL-275176 CVE-2026-63718 httpd: HTTP response smuggling via crafted Transfer-Encoding response in mod_proxy_uwsgi - Resolves: RHEL-190807 - httpd: use-after-free in mod_ldap uldap_connection_find via per-directory client cert list (CVE-2026-29167) - Resolves: RHEL-192752 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-186217 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-182578 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Also addresses CVE-2026-24072, CVE-2026-33006, CVE-2026-42535, CVE-2026-43951, CVE-2026-44119, CVE-2026-44186 - Resolves: RHEL-186186 - httpd: mod_proxy_html buffer handling vulnerability (CVE-2026-34355) - Resolves: RHEL-175636 - httpd: mod_dav_lock uses wrong lock discovery (CVE-2026-29169) - Resolves: RHEL-186196 - mod_xml2enc: fix bblen accounting in fix_skipto (CVE-2026-42536) - Resolves: RHEL-186164 - httpd: fix OCSP write buffer advancement bug in mod_ssl (CVE-2026-44185) - Resolves: RHEL-184312 - httpd: ap_regname restrict to reasonable captures (CVE-2026-44631) - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-114501 Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99815 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99968 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-94562 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - mod_dav: add dav_get_base_path() API - Resolves: RHEL-41069 - Resolves: RHEL-66488 - Apache HTTPD no longer parse PHP files with unicode characters in the name - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-114501 Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-99815 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99968 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-94562 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - mod_dav: add dav_get_base_path() API - Resolves: RHEL-41069 - Resolves: RHEL-192752 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-186217 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-182578 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Also addresses CVE-2026-24072, CVE-2026-33006, CVE-2026-42535, CVE-2026-43951, CVE-2026-44119, CVE-2026-44186 - Resolves: RHEL-186186 - httpd: mod_proxy_html buffer handling vulnerability (CVE-2026-34355) - Resolves: RHEL-175636 - httpd: mod_dav_lock uses wrong lock discovery (CVE-2026-29169) - Resolves: RHEL-186196 - mod_xml2enc: fix bblen accounting in fix_skipto (CVE-2026-42536) - Resolves: RHEL-186164 - httpd: fix OCSP write buffer advancement bug in mod_ssl (CVE-2026-44185) - Resolves: RHEL-184312 - httpd: ap_regname restrict to reasonable captures (CVE-2026-44631) - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-190807 - httpd: use-after-free in mod_ldap uldap_connection_find via per-directory client cert list (CVE-2026-29167) - Resolves: RHEL-192752 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-186217 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-182578 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Also addresses CVE-2026-24072, CVE-2026-33006, CVE-2026-42535, CVE-2026-43951, CVE-2026-44119, CVE-2026-44186 - Resolves: RHEL-186186 - httpd: mod_proxy_html buffer handling vulnerability (CVE-2026-34355) - Resolves: RHEL-175636 - httpd: mod_dav_lock uses wrong lock discovery (CVE-2026-29169) - Resolves: RHEL-186196 - mod_xml2enc: fix bblen accounting in fix_skipto (CVE-2026-42536) - Resolves: RHEL-186164 - httpd: fix OCSP write buffer advancement bug in mod_ssl (CVE-2026-44185) - Resolves: RHEL-184312 - httpd: ap_regname restrict to reasonable captures (CVE-2026-44631) - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Related: RHEL-275261 - httpd: Arbitrary code execution via oversized Host header in mod_vhost_alias (CVE-2026-63292) - Resolves: RHEL-280369 - httpd: Denial of Service via mod_rewrite lookahead (CVE-2026-56154) - Resolves: RHEL-275551 CVE-2026-48005 httpd: Denial of service via forged Authorization headers in mod_auth_digest - Resolves: RHEL-275338 CVE-2026-73636 httpd: Authentication bypass via credential replay in mod_auth_digest - Resolves: RHEL-275229 CVE-2026-73637 httpd: Authentication state corruption via concurrent Digest authentication requests - Resolves: RHEL-275323 CVE-2026-56153 httpd: Denial of Service via heap-based buffer overflow in mod_charset_lite - Resolves: RHEL-275307 CVE-2026-46729 httpd: mod_heartmonitor: Denial of Service via NULL pointer dereference - Resolves: RHEL-275276 CVE-2026-63045 httpd: unauthorized connection to arbitrary hosts via crafted FTP PASV response - Resolves: RHEL-275261 CVE-2026-63292 httpd: Arbitrary code execution via oversized Host header in mod_vhost_alias - Resolves: RHEL-275245 CVE-2026-63686 httpd: Denial of Service via charset conversion failure in mod_xml2enc - Resolves: RHEL-275214 CVE-2026-93546 httpd: Denial of Service via integer overflow in mod_dav_fs - Resolves: RHEL-275176 CVE-2026-63718 httpd: HTTP response smuggling via crafted Transfer-Encoding response in mod_proxy_uwsgi - Resolves: RHEL-190807 - httpd: use-after-free in mod_ldap uldap_connection_find via per-directory client cert list (CVE-2026-29167) - Resolves: RHEL-192752 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-186217 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-182578 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Also addresses CVE-2026-24072, CVE-2026-33006, CVE-2026-42535, CVE-2026-43951, CVE-2026-44119, CVE-2026-44186 - Resolves: RHEL-186186 - httpd: mod_proxy_html buffer handling vulnerability (CVE-2026-34355) - Resolves: RHEL-175636 - httpd: mod_dav_lock uses wrong lock discovery (CVE-2026-29169) - Resolves: RHEL-186196 - mod_xml2enc: fix bblen accounting in fix_skipto (CVE-2026-42536) - Resolves: RHEL-186164 - httpd: fix OCSP write buffer advancement bug in mod_ssl (CVE-2026-44185) - Resolves: RHEL-184312 - httpd: ap_regname restrict to reasonable captures (CVE-2026-44631) - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Don't traceback because of a modular SRPM in the repo Related: rhbz#2227436 - Replace deprecated LooseVersion - Fix tests for new libmodulemd version 2.15.0 - Generate profiles section and modulemd-defaults file Related: rhbz#1801747 - Use autosetup to automatically apply patches - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add support for _NET_WORKAREA and _GTK_WORKAREAS Resolves: RHEL-100836 - Fix a memory leak with UTF-8 strings Resolves: RHEL-100816 - Keep drop-down menus on the same monitor as the pull-down button with Xinerama Resolves: RHEL-92832 - Add Xinerama support (RHEL-69956) - Fix CVE-2023-43788: out of bounds read in XpmCreateXpmImageFromBuffer() - Fix CVE-2023-43789: out of bounds read on XPM with corrupted colormap - Add support for _NET_WORKAREA and _GTK_WORKAREAS Resolves: RHEL-100836 - Fix a memory leak with UTF-8 strings Resolves: RHEL-100816 - Keep drop-down menus on the same monitor as the pull-down button with Xinerama Resolves: RHEL-92832 - Add Xinerama support (RHEL-69956) - Fix CVE-2023-43788: out of bounds read in XpmCreateXpmImageFromBuffer() - Fix CVE-2023-43789: out of bounds read on XPM with corrupted colormap - Use /usr prefix for the directories Resolves: rhbz#2068486 - Removed NPAPI from the description, since is no longer supported in Mozilla products Resolves: rhbz#2041339 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixing files section - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - install/own %_libdir/mozilla/native-messaging-hosts (rhbz#1619610) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Split libmpdec++ into a mpdecimal++ subpackage - This prevents packages only using the libmpdec library from transitively depending on libstdc++ - Fix license information - Import into RHEL - Fedora contributions by: Charalampos Stratakis <cstratak@redhat.com> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Jan Vcelak <jvcelak@fedoraproject.org> Jaroslav Škarvada <jskarvad@redhat.com> Jeff Law <law@redhat.com> Lukas Zachar <lzachar@redhat.com> Miro Hrončok <miro@hroncok.cz> Tom Stellard <tstellar@redhat.com> - add /usr/share/doc/mpfr ownership to the doc subpackage as well (RHEL-36690) - add /usr/share/doc/mpfr ownership (RHEL-36690) - fix use of uninitialized value in sin_cos (RHEL-35392) - Rebase to 1.32.9, includes patch for CVE-2024-10573 Resolves: RHEL-65445 - Add patch for CVE-2024-10573 Resolves: RHEL-65445 - Rebase to 1.32.9, includes patch for CVE-2024-10573 Resolves: RHEL-65445 - Add patch for CVE-2024-10573 Resolves: RHEL-65445 - Rebase to 1.32.9, includes patch for CVE-2024-10573 Resolves: RHEL-65445 - Add patch for CVE-2024-10573 Resolves: RHEL-65445 - Update to upstream release 4.1.1 - Resolves: rhbz#2212010 - Update to latest version 3.4.2 - Related: rhbz#2015398 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild to pick up new build flags from redhat-rpm-config (#1984652) - Update to upstream release 4.1.1 - Resolves: rhbz#2212010 - Update to latest version 3.4.2 - Related: rhbz#2015398 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild to pick up new build flags from redhat-rpm-config (#1984652) - Update to upstream release 4.1.1 - Resolves: rhbz#2212010 - Update to latest version 3.4.2 - Related: rhbz#2015398 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild to pick up new build flags from redhat-rpm-config (#1984652) - Update to upstream release 4.1.1 - Resolves: rhbz#2212010 - Update to latest version 3.4.2 - Related: rhbz#2015398 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild to pick up new build flags from redhat-rpm-config (#1984652) - Avoid build failure for i636 - Resolves: rhbz#2220941 - Update OSU benchmarks to upstream release 7.1 - Resolves: rhbz#2220941 - Update OSU benchmarks to upstream release 5.8 - Update Intel MPI Benchmarks 2021.3 - Resolves: rhbz#2015392 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update OSU benchmarks to upstream release 5.7.1 - Update Intel MPI Benchmarks 2021.2 - Resolves: rhbz#1960479 - Avoid build failure for i636 - Resolves: rhbz#2220941 - Update OSU benchmarks to upstream release 7.1 - Resolves: rhbz#2220941 - Update OSU benchmarks to upstream release 5.8 - Update Intel MPI Benchmarks 2021.3 - Resolves: rhbz#2015392 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update OSU benchmarks to upstream release 5.7.1 - Update Intel MPI Benchmarks 2021.2 - Resolves: rhbz#1960479 - Avoid build failure for i636 - Resolves: rhbz#2220941 - Update OSU benchmarks to upstream release 7.1 - Resolves: rhbz#2220941 - Update OSU benchmarks to upstream release 5.8 - Update Intel MPI Benchmarks 2021.3 - Resolves: rhbz#2015392 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update OSU benchmarks to upstream release 5.7.1 - Update Intel MPI Benchmarks 2021.2 - Resolves: rhbz#1960479 - workaround for uAPI header build issue - fix mptcpize to work also when protocol number is 0 (upstream issue #159) and when command resides in another file system (upstream issue #161) Related: rhbz#2015623 - update to version 0.8 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - add a simple sanity test and enable gating. Related: rhbz#1962741 - don't overwrite global build options. Related: rhbz#1967697 - fix 'check_conflicts' on multilib. Related: rhbz#1967697 - update to version 0.7 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - update to version 0.6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - initial build - Add support for Image Mode Resolves: RHEL-142950 - Remove obsolete syslog references from service file Resolves: RHEL-19644 - Fix CVE-2026-72694: symlink-following chown of pid file in daemon mode Resolves: RHEL-236047 - Add support for Image Mode Resolves: RHEL-142950 - Rebuilt for RHEL-9.8 - Resolves: RHEL-98271 - Rebuilt after updating rdma-core - Resolves: RHEL-98271 - bump release to rebuild in sidetag - Resolves: RHEL-98271 - Update to upstream release 4.34.0 - Resolves: RHEL-98267 - Update to upstream release 4.32.0 - Resolves: RHEL-94461, RHEL-86019, RHEL-77099 - Update to upstream release 4.30.0 - Resolves: RHEL-67034 - Update to upstream release 4.29.0 - Resolves: RHEL-52887 - Fix debuginfo - Resolves: RHEL-34752 - Update to upstream release 4.26.0 - Resolves: RHEL-24470 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Make will no longer be in BuildRoot by default - Fix not working autocompletion - install completions to system directory - rebased to 1.4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - rebased to 1.3 (#1849416) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add make to BuildRequires - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - add smoke test - Change UDP and ICMP sockets binding to accept a source IP from the -a CLI option - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fix CVE-2026-25506 - Resolved: RHEL-148533 - Fix CVE-2026-25506 - Resolved: RHEL-148533 - Fix for: CVE-2023-4874 CVE-2023-4875 - Resolves: RHEL-2812 - Rebase to upstream version 2.2.6 Resolves: CVE-2022-1328 - Rebase to upstream version 2.1.5 Resolves: rhbz#2032988 rhbz#1959896 - Sanity check input on workspace activation API Related: RHEL-68825 - Backport linux-dmabuf v4 support to restore hardware acceleration in Xwayland 24.1 with Mesa 25.2 Resolves: RHEL-129832 - Fix handling of more WM_HINTS window icon types Resolves: RHEL-70872 - Fix input latency regression Resolves: RHEL-117098 - Backport fix for screen not refreshing properly Resolves: RHEL-89352 - Backport fixes for cogl OpenGL conformance Resolves: RHEL-4521 - Fix polyinstantiation preventing Xwayland to start Resolves: RHEL-90588 - Do not disable touchscreen on DPMS off if touch-mode is disabled Resolves: RHEL-31742 - Fix stuck modifier keys Resolves: RHEL-21286 - Backport fix for flicker-free login Resolves: RHEL-10895 - Don't unminimize mapped windows Resolves: RHEL-180797 - Sanity check input on workspace activation API Related: RHEL-68825 - Backport linux-dmabuf v4 support to restore hardware acceleration in Xwayland 24.1 with Mesa 25.2 Resolves: RHEL-129832 - Fix handling of more WM_HINTS window icon types Resolves: RHEL-70872 - Fix input latency regression Resolves: RHEL-117098 - Backport fix for screen not refreshing properly Resolves: RHEL-89352 - Backport fixes for cogl OpenGL conformance Resolves: RHEL-4521 - Fix polyinstantiation preventing Xwayland to start Resolves: RHEL-90588 - Do not disable touchscreen on DPMS off if touch-mode is disabled Resolves: RHEL-31742 - Fix stuck modifier keys Resolves: RHEL-21286 - Switch stylus button order to match Xorg session Related: RHEL-190440 - Don't unminimize mapped windows Resolves: RHEL-180797 - Sanity check input on workspace activation API Related: RHEL-68825 - Backport linux-dmabuf v4 support to restore hardware acceleration in Xwayland 24.1 with Mesa 25.2 Resolves: RHEL-129832 - Fix handling of more WM_HINTS window icon types Resolves: RHEL-70872 - Fix input latency regression Resolves: RHEL-117098 - Backport fix for screen not refreshing properly Resolves: RHEL-89352 - Backport fixes for cogl OpenGL conformance Resolves: RHEL-4521 - Fix polyinstantiation preventing Xwayland to start Resolves: RHEL-90588 - Do not disable touchscreen on DPMS off if touch-mode is disabled Resolves: RHEL-31742 - Update to upstream release 2.3.7-1 - Resolves: rhbz#2212461 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild to pick up new build flags from redhat-rpm-config (#1984652) - Update to upstream stable point release v2.3.6 - Resolves: rhbz#1960478 - Update to upstream release 2.3.7-1 - Resolves: rhbz#2212461 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild to pick up new build flags from redhat-rpm-config (#1984652) - Update to upstream stable point release v2.3.6 - Resolves: rhbz#1960478 - Update to upstream release 2.3.7-1 - Resolves: rhbz#2212461 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild to pick up new build flags from redhat-rpm-config (#1984652) - Update to upstream stable point release v2.3.6 - Resolves: rhbz#1960478 - add gating.yaml file - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.3.1 - Rebase to 8.0.45 - Rebase to MySQL 8.0.44 - Rebase to MySQL 8.0.43 - Rebase to MySQL 8.0.42 - Fix patching of logrotate - Update to MySQL 8.0.41 - Update to MySQL 8.0.40 - Rebase to version 8.0.39 - Use signal to flush logs when rotating - Update to MySQL 8.0.37 - Remove some legacy cmake options - Rebase to 8.0.46 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 8.0.45 - Rebase to MySQL 8.0.44 - Rebase to MySQL 8.0.43 - Rebase to MySQL 8.0.42 - Fix patching of logrotate - Update to MySQL 8.0.41 - Update to MySQL 8.0.40 - Rebase to version 8.0.39 - Rebase to 8.4.11 - Rebase to 8.4.9 - Rebase to 8.4.8 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 8.4.7 - Rebase to 8.4.6 - Rebase to 8.4.5 - Rebase to 8.4.4 - Rebase to 8.4.3 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.4.8 - Rebase to 8.4.7 - Rebase to 8.4.6 - Rebase to 8.4.5 - Rebase to 8.4.4 - Rebase to 8.4.3 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for a rebuild - Bump release for a rebuild - Bump release for a rebuild - Rebase to 8.4.9 - Rebase to 8.4.8 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 8.4.7 - Rebase to 8.4.6 - Rebase to 8.4.5 - Rebase to 8.4.4 - Rebase to 8.4.3 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for a rebuild - Rebase to 8.0.45 - Rebase to MySQL 8.0.44 - Rebase to MySQL 8.0.43 - Rebase to MySQL 8.0.42 - Fix patching of logrotate - Update to MySQL 8.0.41 - Update to MySQL 8.0.40 - Rebase to version 8.0.39 - Use signal to flush logs when rotating - Update to MySQL 8.0.37 - Remove some legacy cmake options - Rebase to 8.0.46 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 8.0.45 - Rebase to MySQL 8.0.44 - Rebase to MySQL 8.0.43 - Rebase to MySQL 8.0.42 - Fix patching of logrotate - Update to MySQL 8.0.41 - Update to MySQL 8.0.40 - Rebase to version 8.0.39 - Rebase to 8.4.11 - Rebase to 8.4.9 - Rebase to 8.4.8 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 8.4.7 - Rebase to 8.4.6 - Rebase to 8.4.5 - Rebase to 8.4.4 - Rebase to 8.4.3 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.4.8 - Rebase to 8.4.7 - Rebase to 8.4.6 - Rebase to 8.4.5 - Rebase to 8.4.4 - Rebase to 8.4.3 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for a rebuild - Bump release for a rebuild - Bump release for a rebuild - Rebase to 8.4.9 - Rebase to 8.4.8 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 8.4.7 - Rebase to 8.4.6 - Rebase to 8.4.5 - Rebase to 8.4.4 - Rebase to 8.4.3 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for a rebuild - Rebase to 8.4.11 - Rebase to 8.4.9 - Rebase to 8.4.8 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 8.4.7 - Rebase to 8.4.6 - Rebase to 8.4.5 - Rebase to 8.4.4 - Rebase to 8.4.3 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.4.8 - Rebase to 8.4.7 - Rebase to 8.4.6 - Rebase to 8.4.5 - Rebase to 8.4.4 - Rebase to 8.4.3 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for a rebuild - Bump release for a rebuild - Bump release for a rebuild - Rebase to 8.4.9 - Rebase to 8.4.8 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 8.4.7 - Rebase to 8.4.6 - Rebase to 8.4.5 - Rebase to 8.4.4 - Rebase to 8.4.3 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for a rebuild - Rebase to 8.0.45 - Rebase to MySQL 8.0.44 - Rebase to MySQL 8.0.43 - Rebase to MySQL 8.0.42 - Fix patching of logrotate - Update to MySQL 8.0.41 - Update to MySQL 8.0.40 - Rebase to version 8.0.39 - Use signal to flush logs when rotating - Update to MySQL 8.0.37 - Remove some legacy cmake options - Rebase to 8.0.46 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 8.0.45 - Rebase to MySQL 8.0.44 - Rebase to MySQL 8.0.43 - Rebase to MySQL 8.0.42 - Fix patching of logrotate - Update to MySQL 8.0.41 - Update to MySQL 8.0.40 - Rebase to version 8.0.39 - Rebase to 8.4.11 - Rebase to 8.4.9 - Rebase to 8.4.8 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 8.4.7 - Rebase to 8.4.6 - Rebase to 8.4.5 - Rebase to 8.4.4 - Rebase to 8.4.3 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.4.8 - Rebase to 8.4.7 - Rebase to 8.4.6 - Rebase to 8.4.5 - Rebase to 8.4.4 - Rebase to 8.4.3 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for a rebuild - Bump release for a rebuild - Bump release for a rebuild - Rebase to 8.4.9 - Rebase to 8.4.8 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 8.4.7 - Rebase to 8.4.6 - Rebase to 8.4.5 - Rebase to 8.4.4 - Rebase to 8.4.3 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for a rebuild - Rebase to 8.0.45 - Rebase to MySQL 8.0.44 - Rebase to MySQL 8.0.43 - Rebase to MySQL 8.0.42 - Fix patching of logrotate - Update to MySQL 8.0.41 - Update to MySQL 8.0.40 - Rebase to version 8.0.39 - Use signal to flush logs when rotating - Update to MySQL 8.0.37 - Remove some legacy cmake options - Rebase to 8.0.46 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 8.0.45 - Rebase to MySQL 8.0.44 - Rebase to MySQL 8.0.43 - Rebase to MySQL 8.0.42 - Fix patching of logrotate - Update to MySQL 8.0.41 - Update to MySQL 8.0.40 - Rebase to version 8.0.39 - Rebase to 8.4.11 - Rebase to 8.4.9 - Rebase to 8.4.8 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 8.4.7 - Rebase to 8.4.6 - Rebase to 8.4.5 - Rebase to 8.4.4 - Rebase to 8.4.3 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.4.8 - Rebase to 8.4.7 - Rebase to 8.4.6 - Rebase to 8.4.5 - Rebase to 8.4.4 - Rebase to 8.4.3 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for a rebuild - Bump release for a rebuild - Bump release for a rebuild - Rebase to 8.4.9 - Rebase to 8.4.8 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 8.4.7 - Rebase to 8.4.6 - Rebase to 8.4.5 - Rebase to 8.4.4 - Rebase to 8.4.3 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for a rebuild - Update to version 1.0.14 - Resolves: rhbz#2380217 - Rebase to 1.0.13 - 2nd attempt to fix rhbz#2186996 rhbz#2221433 rhbz#2245705 (Michal Schorm) - Resolves rhbz#2250424 - Revert "Attempt to fix rhbz#2186996 rhbz#2221433 rhbz#2245705" This reverts commit de84778e555b891fd9ea5f3111c87a4990650d6c. (Michal Schorm) - Resolves rhbz#2250360 - Bump release for rebuild - Empty commit to test Fedora PACKIT configuration for packaging automation (Michal Schorm) - Rebase to 8.0.45 - Rebase to MySQL 8.0.44 - Rebase to MySQL 8.0.43 - Rebase to MySQL 8.0.42 - Fix patching of logrotate - Update to MySQL 8.0.41 - Update to MySQL 8.0.40 - Rebase to version 8.0.39 - Use signal to flush logs when rotating - Update to MySQL 8.0.37 - Remove some legacy cmake options - Rebase to 8.0.46 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 8.0.45 - Rebase to MySQL 8.0.44 - Rebase to MySQL 8.0.43 - Rebase to MySQL 8.0.42 - Fix patching of logrotate - Update to MySQL 8.0.41 - Update to MySQL 8.0.40 - Rebase to version 8.0.39 - Rebase to 8.4.11 - Rebase to 8.4.9 - Rebase to 8.4.8 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 8.4.7 - Rebase to 8.4.6 - Rebase to 8.4.5 - Rebase to 8.4.4 - Rebase to 8.4.3 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.4.8 - Rebase to 8.4.7 - Rebase to 8.4.6 - Rebase to 8.4.5 - Rebase to 8.4.4 - Rebase to 8.4.3 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for a rebuild - Bump release for a rebuild - Bump release for a rebuild - Rebase to 8.4.9 - Rebase to 8.4.8 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 8.4.7 - Rebase to 8.4.6 - Rebase to 8.4.5 - Rebase to 8.4.4 - Rebase to 8.4.3 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for a rebuild - Rebase to 8.4.11 - Rebase to 8.4.9 - Rebase to 8.4.8 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 8.4.7 - Rebase to 8.4.6 - Rebase to 8.4.5 - Rebase to 8.4.4 - Rebase to 8.4.3 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.4.8 - Rebase to 8.4.7 - Rebase to 8.4.6 - Rebase to 8.4.5 - Rebase to 8.4.4 - Rebase to 8.4.3 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for a rebuild - Bump release for a rebuild - Bump release for a rebuild - Rebase to 8.4.9 - Rebase to 8.4.8 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 8.4.7 - Rebase to 8.4.6 - Rebase to 8.4.5 - Rebase to 8.4.4 - Rebase to 8.4.3 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for a rebuild - Rebase to 8.4.11 - Rebase to 8.4.9 - Rebase to 8.4.8 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 8.4.7 - Rebase to 8.4.6 - Rebase to 8.4.5 - Rebase to 8.4.4 - Rebase to 8.4.3 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.4.8 - Rebase to 8.4.7 - Rebase to 8.4.6 - Rebase to 8.4.5 - Rebase to 8.4.4 - Rebase to 8.4.3 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for a rebuild - Bump release for a rebuild - Bump release for a rebuild - Rebase to 8.4.9 - Rebase to 8.4.8 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 8.4.7 - Rebase to 8.4.6 - Rebase to 8.4.5 - Rebase to 8.4.4 - Rebase to 8.4.3 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Bump release for a rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fix crashes when dragging from another application (RHEL-12820) - Force reload current location when it reappears (#2184292) - Generate thumbnails when the preview icon is available (#2120263) - Try current location even if it is marked as gone (#2184292) - Try to own the name until after exporting skeleton (#2162302) - Export FileManager1 iface from dbus_register vfunc (#2162302) - Backport "_Copy Location" translations (#2099982) - Add toolbar action to copy current location (#2098578) - Update translations for encrypted archives support (#2064754) - Update Persian translation from upstream (#2003134) - Fix crashes when dragging from another application (RHEL-12820) - Force reload current location when it reappears (#2184292) - Generate thumbnails when the preview icon is available (#2120263) - Try current location even if it is marked as gone (#2184292) - Try to own the name until after exporting skeleton (#2162302) - Export FileManager1 iface from dbus_register vfunc (#2162302) - Backport "_Copy Location" translations (#2099982) - Add toolbar action to copy current location (#2098578) - Update translations for encrypted archives support (#2064754) - Update Persian translation from upstream (#2003134) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Add nbdcopy --blkhash option resolves: RHEL-85509 - Rebase to libnbd 1.20.3 - Rebase to libnbd 1.20.2 resolves: RHEL-31883 - Fix multiple flaws in TLS server certificate checking resolves: RHEL-49801 - Print full NBD error from server resolves: RHEL-50665 - Rebase to 1.20.0 resolves: RHEL-31883 - Backport unit test of recent libnbd API addition resolves: RHEL-16292 - Fix assertion in ext-mode BLOCK_STATUS (CVE-2023-5871) resolves: RHEL-15143 - Rebase to 1.18.1 resolves: RHEL-14476 - Rebase to 1.16.0 resolves: rhbz#2168628 - server: Fix .zero fallback path resolves: RHEL-101635 - Add support for VDDK 9.0.0.0 resolves: RHEL-99466 - CVE-2025-47711 denial of service attack by client sending maximum size block status - CVE-2025-47712 denial of service attack by client sending large unaligned size block status resolves: RHEL-95814 - vddk: Improve statistics related: RHEL-94823 - Log filename, offset and count in nbdkit-file-plugin error messages resolves: RHEL-95363 - vddk: Pre-cache the extents for readonly connections resolves: RHEL-94823 - Add extra system call checking and debugging to nbdkit-file-plugin resolves: RHEL-85510 - Allow nbdkit-file-plugin to zero and trim block devices resolves: RHEL-89353 - vddk: Avoid reading partial chunk beyond the end of the disk resolves: RHEL-71694 - Rebase to 1.38.5 (along stable branch) - Rebase to 1.38.3 (along stable branch) - Send the last error to the NBD client resolves: RHEL-50664 - server: Fix .zero fallback path resolves: RHEL-101635 - Add support for VDDK 9.0.0.0 resolves: RHEL-99466 - CVE-2025-47711 denial of service attack by client sending maximum size block status - CVE-2025-47712 denial of service attack by client sending large unaligned size block status resolves: RHEL-95814 - vddk: Improve statistics related: RHEL-94823 - Log filename, offset and count in nbdkit-file-plugin error messages resolves: RHEL-95363 - vddk: Pre-cache the extents for readonly connections resolves: RHEL-94823 - Add extra system call checking and debugging to nbdkit-file-plugin resolves: RHEL-85510 - Allow nbdkit-file-plugin to zero and trim block devices resolves: RHEL-89353 - vddk: Avoid reading partial chunk beyond the end of the disk resolves: RHEL-71694 - Rebase to 1.38.5 (along stable branch) - Rebase to 1.38.3 (along stable branch) - Send the last error to the NBD client resolves: RHEL-50664 - server: Fix .zero fallback path resolves: RHEL-101635 - Add support for VDDK 9.0.0.0 resolves: RHEL-99466 - CVE-2025-47711 denial of service attack by client sending maximum size block status - CVE-2025-47712 denial of service attack by client sending large unaligned size block status resolves: RHEL-95814 - vddk: Improve statistics related: RHEL-94823 - Log filename, offset and count in nbdkit-file-plugin error messages resolves: RHEL-95363 - vddk: Pre-cache the extents for readonly connections resolves: RHEL-94823 - Add extra system call checking and debugging to nbdkit-file-plugin resolves: RHEL-85510 - Allow nbdkit-file-plugin to zero and trim block devices resolves: RHEL-89353 - vddk: Avoid reading partial chunk beyond the end of the disk resolves: RHEL-71694 - Rebase to 1.38.5 (along stable branch) - Rebase to 1.38.3 (along stable branch) - Send the last error to the NBD client resolves: RHEL-50664 - server: Fix .zero fallback path resolves: RHEL-101635 - Add support for VDDK 9.0.0.0 resolves: RHEL-99466 - CVE-2025-47711 denial of service attack by client sending maximum size block status - CVE-2025-47712 denial of service attack by client sending large unaligned size block status resolves: RHEL-95814 - vddk: Improve statistics related: RHEL-94823 - Log filename, offset and count in nbdkit-file-plugin error messages resolves: RHEL-95363 - vddk: Pre-cache the extents for readonly connections resolves: RHEL-94823 - Add extra system call checking and debugging to nbdkit-file-plugin resolves: RHEL-85510 - Allow nbdkit-file-plugin to zero and trim block devices resolves: RHEL-89353 - vddk: Avoid reading partial chunk beyond the end of the disk resolves: RHEL-71694 - Rebase to 1.38.5 (along stable branch) - Rebase to 1.38.3 (along stable branch) - Send the last error to the NBD client resolves: RHEL-50664 - server: Fix .zero fallback path resolves: RHEL-101635 - Add support for VDDK 9.0.0.0 resolves: RHEL-99466 - CVE-2025-47711 denial of service attack by client sending maximum size block status - CVE-2025-47712 denial of service attack by client sending large unaligned size block status resolves: RHEL-95814 - vddk: Improve statistics related: RHEL-94823 - Log filename, offset and count in nbdkit-file-plugin error messages resolves: RHEL-95363 - vddk: Pre-cache the extents for readonly connections resolves: RHEL-94823 - Add extra system call checking and debugging to nbdkit-file-plugin resolves: RHEL-85510 - Allow nbdkit-file-plugin to zero and trim block devices resolves: RHEL-89353 - vddk: Avoid reading partial chunk beyond the end of the disk resolves: RHEL-71694 - Rebase to 1.38.5 (along stable branch) - Rebase to 1.38.3 (along stable branch) - Send the last error to the NBD client resolves: RHEL-50664 - server: Fix .zero fallback path resolves: RHEL-101635 - Add support for VDDK 9.0.0.0 resolves: RHEL-99466 - CVE-2025-47711 denial of service attack by client sending maximum size block status - CVE-2025-47712 denial of service attack by client sending large unaligned size block status resolves: RHEL-95814 - vddk: Improve statistics related: RHEL-94823 - Log filename, offset and count in nbdkit-file-plugin error messages resolves: RHEL-95363 - vddk: Pre-cache the extents for readonly connections resolves: RHEL-94823 - Add extra system call checking and debugging to nbdkit-file-plugin resolves: RHEL-85510 - Allow nbdkit-file-plugin to zero and trim block devices resolves: RHEL-89353 - vddk: Avoid reading partial chunk beyond the end of the disk resolves: RHEL-71694 - Rebase to 1.38.5 (along stable branch) - Rebase to 1.38.3 (along stable branch) - Send the last error to the NBD client resolves: RHEL-50664 - server: Fix .zero fallback path resolves: RHEL-101635 - Add support for VDDK 9.0.0.0 resolves: RHEL-99466 - CVE-2025-47711 denial of service attack by client sending maximum size block status - CVE-2025-47712 denial of service attack by client sending large unaligned size block status resolves: RHEL-95814 - vddk: Improve statistics related: RHEL-94823 - Log filename, offset and count in nbdkit-file-plugin error messages resolves: RHEL-95363 - vddk: Pre-cache the extents for readonly connections resolves: RHEL-94823 - Add extra system call checking and debugging to nbdkit-file-plugin resolves: RHEL-85510 - Allow nbdkit-file-plugin to zero and trim block devices resolves: RHEL-89353 - vddk: Avoid reading partial chunk beyond the end of the disk resolves: RHEL-71694 - Rebase to 1.38.5 (along stable branch) - Rebase to 1.38.3 (along stable branch) - Send the last error to the NBD client resolves: RHEL-50664 - server: Fix .zero fallback path resolves: RHEL-101635 - Add support for VDDK 9.0.0.0 resolves: RHEL-99466 - CVE-2025-47711 denial of service attack by client sending maximum size block status - CVE-2025-47712 denial of service attack by client sending large unaligned size block status resolves: RHEL-95814 - vddk: Improve statistics related: RHEL-94823 - Log filename, offset and count in nbdkit-file-plugin error messages resolves: RHEL-95363 - vddk: Pre-cache the extents for readonly connections resolves: RHEL-94823 - Add extra system call checking and debugging to nbdkit-file-plugin resolves: RHEL-85510 - Allow nbdkit-file-plugin to zero and trim block devices resolves: RHEL-89353 - vddk: Avoid reading partial chunk beyond the end of the disk resolves: RHEL-71694 - Rebase to 1.38.5 (along stable branch) - Rebase to 1.38.3 (along stable branch) - Send the last error to the NBD client resolves: RHEL-50664 - server: Fix .zero fallback path resolves: RHEL-101635 - Add support for VDDK 9.0.0.0 resolves: RHEL-99466 - CVE-2025-47711 denial of service attack by client sending maximum size block status - CVE-2025-47712 denial of service attack by client sending large unaligned size block status resolves: RHEL-95814 - vddk: Improve statistics related: RHEL-94823 - Log filename, offset and count in nbdkit-file-plugin error messages resolves: RHEL-95363 - vddk: Pre-cache the extents for readonly connections resolves: RHEL-94823 - Add extra system call checking and debugging to nbdkit-file-plugin resolves: RHEL-85510 - Allow nbdkit-file-plugin to zero and trim block devices resolves: RHEL-89353 - vddk: Avoid reading partial chunk beyond the end of the disk resolves: RHEL-71694 - Rebase to 1.38.5 (along stable branch) - Rebase to 1.38.3 (along stable branch) - Send the last error to the NBD client resolves: RHEL-50664 - server: Fix .zero fallback path resolves: RHEL-101635 - Add support for VDDK 9.0.0.0 resolves: RHEL-99466 - CVE-2025-47711 denial of service attack by client sending maximum size block status - CVE-2025-47712 denial of service attack by client sending large unaligned size block status resolves: RHEL-95814 - vddk: Improve statistics related: RHEL-94823 - Log filename, offset and count in nbdkit-file-plugin error messages resolves: RHEL-95363 - vddk: Pre-cache the extents for readonly connections resolves: RHEL-94823 - Add extra system call checking and debugging to nbdkit-file-plugin resolves: RHEL-85510 - Allow nbdkit-file-plugin to zero and trim block devices resolves: RHEL-89353 - vddk: Avoid reading partial chunk beyond the end of the disk resolves: RHEL-71694 - Rebase to 1.38.5 (along stable branch) - Rebase to 1.38.3 (along stable branch) - Send the last error to the NBD client resolves: RHEL-50664 - server: Fix .zero fallback path resolves: RHEL-101635 - Add support for VDDK 9.0.0.0 resolves: RHEL-99466 - CVE-2025-47711 denial of service attack by client sending maximum size block status - CVE-2025-47712 denial of service attack by client sending large unaligned size block status resolves: RHEL-95814 - vddk: Improve statistics related: RHEL-94823 - Log filename, offset and count in nbdkit-file-plugin error messages resolves: RHEL-95363 - vddk: Pre-cache the extents for readonly connections resolves: RHEL-94823 - Add extra system call checking and debugging to nbdkit-file-plugin resolves: RHEL-85510 - Allow nbdkit-file-plugin to zero and trim block devices resolves: RHEL-89353 - vddk: Avoid reading partial chunk beyond the end of the disk resolves: RHEL-71694 - Rebase to 1.38.5 (along stable branch) - Rebase to 1.38.3 (along stable branch) - Send the last error to the NBD client resolves: RHEL-50664 - server: Fix .zero fallback path resolves: RHEL-101635 - Add support for VDDK 9.0.0.0 resolves: RHEL-99466 - CVE-2025-47711 denial of service attack by client sending maximum size block status - CVE-2025-47712 denial of service attack by client sending large unaligned size block status resolves: RHEL-95814 - vddk: Improve statistics related: RHEL-94823 - Log filename, offset and count in nbdkit-file-plugin error messages resolves: RHEL-95363 - vddk: Pre-cache the extents for readonly connections resolves: RHEL-94823 - Add extra system call checking and debugging to nbdkit-file-plugin resolves: RHEL-85510 - Allow nbdkit-file-plugin to zero and trim block devices resolves: RHEL-89353 - vddk: Avoid reading partial chunk beyond the end of the disk resolves: RHEL-71694 - Rebase to 1.38.5 (along stable branch) - Rebase to 1.38.3 (along stable branch) - Send the last error to the NBD client resolves: RHEL-50664 - server: Fix .zero fallback path resolves: RHEL-101635 - Add support for VDDK 9.0.0.0 resolves: RHEL-99466 - CVE-2025-47711 denial of service attack by client sending maximum size block status - CVE-2025-47712 denial of service attack by client sending large unaligned size block status resolves: RHEL-95814 - vddk: Improve statistics related: RHEL-94823 - Log filename, offset and count in nbdkit-file-plugin error messages resolves: RHEL-95363 - vddk: Pre-cache the extents for readonly connections resolves: RHEL-94823 - Add extra system call checking and debugging to nbdkit-file-plugin resolves: RHEL-85510 - Allow nbdkit-file-plugin to zero and trim block devices resolves: RHEL-89353 - vddk: Avoid reading partial chunk beyond the end of the disk resolves: RHEL-71694 - Rebase to 1.38.5 (along stable branch) - Rebase to 1.38.3 (along stable branch) - Send the last error to the NBD client resolves: RHEL-50664 - server: Fix .zero fallback path resolves: RHEL-101635 - Add support for VDDK 9.0.0.0 resolves: RHEL-99466 - CVE-2025-47711 denial of service attack by client sending maximum size block status - CVE-2025-47712 denial of service attack by client sending large unaligned size block status resolves: RHEL-95814 - vddk: Improve statistics related: RHEL-94823 - Log filename, offset and count in nbdkit-file-plugin error messages resolves: RHEL-95363 - vddk: Pre-cache the extents for readonly connections resolves: RHEL-94823 - Add extra system call checking and debugging to nbdkit-file-plugin resolves: RHEL-85510 - Allow nbdkit-file-plugin to zero and trim block devices resolves: RHEL-89353 - vddk: Avoid reading partial chunk beyond the end of the disk resolves: RHEL-71694 - Rebase to 1.38.5 (along stable branch) - Rebase to 1.38.3 (along stable branch) - Send the last error to the NBD client resolves: RHEL-50664 - server: Fix .zero fallback path resolves: RHEL-101635 - Add support for VDDK 9.0.0.0 resolves: RHEL-99466 - CVE-2025-47711 denial of service attack by client sending maximum size block status - CVE-2025-47712 denial of service attack by client sending large unaligned size block status resolves: RHEL-95814 - vddk: Improve statistics related: RHEL-94823 - Log filename, offset and count in nbdkit-file-plugin error messages resolves: RHEL-95363 - vddk: Pre-cache the extents for readonly connections resolves: RHEL-94823 - Add extra system call checking and debugging to nbdkit-file-plugin resolves: RHEL-85510 - Allow nbdkit-file-plugin to zero and trim block devices resolves: RHEL-89353 - vddk: Avoid reading partial chunk beyond the end of the disk resolves: RHEL-71694 - Rebase to 1.38.5 (along stable branch) - Rebase to 1.38.3 (along stable branch) - Send the last error to the NBD client resolves: RHEL-50664 - remove execute permissions from ANNOUNCE file (RHEL-101067) - guard against corrupt terminfo data in string conversion (CVE-2022-29458 RHEL-100135) - ignore TERMINFO and HOME only if setuid/setgid/capability (#2211666) - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491) - ignore TERMINFO and HOME environment variables if running as root (#2211666) - remove execute permissions from ANNOUNCE file (RHEL-101067) - guard against corrupt terminfo data in string conversion (CVE-2022-29458 RHEL-100135) - ignore TERMINFO and HOME only if setuid/setgid/capability (#2211666) - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491) - ignore TERMINFO and HOME environment variables if running as root (#2211666) - remove execute permissions from ANNOUNCE file (RHEL-101067) - guard against corrupt terminfo data in string conversion (CVE-2022-29458 RHEL-100135) - ignore TERMINFO and HOME only if setuid/setgid/capability (#2211666) - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491) - ignore TERMINFO and HOME environment variables if running as root (#2211666) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - drop libproxy support for RHEL (#1989594) - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - temporarily disable tests (#1964827) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - add bcond for PKCS#11 support - use make macros - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - fix tests with current OpenSSL (#1863681) - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - fix creation of /var/lib/net-snmp in image mode (RHEL-132655) - fix out of bound access issue (RHEL-137511) - enable PQC (RHEL-132653) - remove wrong assert (RHEL-122095) - fix inverted usage of -n in snmptrapd (RHEL-101078) - fix use after free issue (RHEL-121091) - fix help and manpage for net-snmp-create-v3-user script(RHEL-101614 and RHEL-103557) - fix segfault with error on subcontainer (RHEL-46033) - fix unexpected header length in /proc/net/snmp (RHEL-44357) - fix changelog issue - fix CVE-2022-24805, CVE-2022-24806, CVE-2022-24807, CVE-2022-24808, CVE-2022-24809 and CVE-2022-24810 (RHEL-26649) - fix creation of /var/lib/net-snmp in image mode (RHEL-132655) - fix out of bound access issue (RHEL-137511) - enable PQC (RHEL-132653) - remove wrong assert (RHEL-122095) - fix inverted usage of -n in snmptrapd (RHEL-101078) - fix use after free issue (RHEL-121091) - fix help and manpage for net-snmp-create-v3-user script(RHEL-101614 and RHEL-103557) - fix segfault with error on subcontainer (RHEL-46033) - fix unexpected header length in /proc/net/snmp (RHEL-44357) - fix changelog issue - fix CVE-2022-24805, CVE-2022-24806, CVE-2022-24807, CVE-2022-24808, CVE-2022-24809 and CVE-2022-24810 (RHEL-26649) - fix creation of /var/lib/net-snmp in image mode (RHEL-132655) - fix out of bound access issue (RHEL-137511) - enable PQC (RHEL-132653) - remove wrong assert (RHEL-122095) - fix inverted usage of -n in snmptrapd (RHEL-101078) - fix use after free issue (RHEL-121091) - fix help and manpage for net-snmp-create-v3-user script(RHEL-101614 and RHEL-103557) - fix segfault with error on subcontainer (RHEL-46033) - fix unexpected header length in /proc/net/snmp (RHEL-44357) - fix changelog issue - fix CVE-2022-24805, CVE-2022-24806, CVE-2022-24807, CVE-2022-24808, CVE-2022-24809 and CVE-2022-24810 (RHEL-26649) - fix creation of /var/lib/net-snmp in image mode (RHEL-132655) - fix out of bound access issue (RHEL-137511) - enable PQC (RHEL-132653) - remove wrong assert (RHEL-122095) - fix inverted usage of -n in snmptrapd (RHEL-101078) - fix use after free issue (RHEL-121091) - fix help and manpage for net-snmp-create-v3-user script(RHEL-101614 and RHEL-103557) - fix segfault with error on subcontainer (RHEL-46033) - fix unexpected header length in /proc/net/snmp (RHEL-44357) - fix changelog issue - fix CVE-2022-24805, CVE-2022-24806, CVE-2022-24807, CVE-2022-24808, CVE-2022-24809 and CVE-2022-24810 (RHEL-26649) - fix creation of /var/lib/net-snmp in image mode (RHEL-132655) - fix out of bound access issue (RHEL-137511) - enable PQC (RHEL-132653) - remove wrong assert (RHEL-122095) - fix inverted usage of -n in snmptrapd (RHEL-101078) - fix use after free issue (RHEL-121091) - fix help and manpage for net-snmp-create-v3-user script(RHEL-101614 and RHEL-103557) - fix segfault with error on subcontainer (RHEL-46033) - fix unexpected header length in /proc/net/snmp (RHEL-44357) - fix changelog issue - fix CVE-2022-24805, CVE-2022-24806, CVE-2022-24807, CVE-2022-24808, CVE-2022-24809 and CVE-2022-24810 (RHEL-26649) - fix creation of /var/lib/net-snmp in image mode (RHEL-132655) - fix out of bound access issue (RHEL-137511) - enable PQC (RHEL-132653) - remove wrong assert (RHEL-122095) - fix inverted usage of -n in snmptrapd (RHEL-101078) - fix use after free issue (RHEL-121091) - fix help and manpage for net-snmp-create-v3-user script(RHEL-101614 and RHEL-103557) - fix segfault with error on subcontainer (RHEL-46033) - fix unexpected header length in /proc/net/snmp (RHEL-44357) - fix changelog issue - fix CVE-2022-24805, CVE-2022-24806, CVE-2022-24807, CVE-2022-24808, CVE-2022-24809 and CVE-2022-24810 (RHEL-26649) - update to https://github.com/containers/netavark/releases/tag/v1.17.2 - Related: RHEL-111919 - update to https://github.com/containers/netavark/releases/tag/v1.17.1 - Related: RHEL-111919 - update to https://github.com/containers/netavark/releases/tag/v1.16.1 - Related: RHEL-80816 - update to https://github.com/containers/netavark/releases/tag/v1.16.0 - Related: RHEL-80816 - update to https://github.com/containers/netavark/releases/tag/v1.15.2 - Related: RHEL-80816 - update to https://github.com/containers/netavark/releases/tag/v1.15.1 - Related: RHEL-80816 - update to https://github.com/containers/netavark/releases/tag/v1.15.0 - Related: RHEL-80816 - update to https://github.com/containers/netavark/releases/tag/v1.14.1 - Related: RHEL-80816 - update to https://github.com/containers/netavark/releases/tag/v1.14.0 - Related: RHEL-60277 - update to https://github.com/containers/netavark/releases/tag/v1.13.1 - Related: RHEL-60277 - remove broken patch (RHEL-23298) - remove broken patch (RHEL-23298) - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100599 - Update to .NET SDK 9.0.107 and Runtime 9.0.6 - Resolves: RHEL-94421 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100599 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235476 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252278 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235476 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.122 and Runtime 9.0.21 - Resolves: RHEL-277800 - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252278 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235476 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to nettle 3.10.1 (RHEL-52740) - Update to nettle 3.9.1 (RHEL-14890) - Update Japanese translation (rh #2083047) - Update to 1.26.0 release (rh #2066750) - Fix OWE settings disappearing on nm-connection-editor (rh #2057004) - Update to 1.24.0 release - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 1.22.0 release. - editor: show missing toggle in the 8021x-security page. - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 1.20.0 release - Drop NotShowIn=GNOME - Use wireless-security code from libnma - Add flatpak build configuration - applet: hide unmanaged ethernet devices in nm-applet - applet: fix Wi-Fi scan requests with appindicator - editor: fix drop down list for connection.secondaries - Move desktop file to new nm-connection-editor-desktop package (rh #1923262) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - disable python2 subpackage on fedora >= 32 (#1763073) - Rebuilt for Python 3.8.0rc1 (#1748018) - Rebuilt for Python 3.8 - Replace statfs64 with statfs (RHEL-127105) - NFS export symlink vulnerability fix (RHEL-127105) - mountd: Minor refactor of get_rootfh() (RHEL-127105) - mountd: Separate lookup of the exported directory and the mount path (RHEL-127105) - support: Add a mini-library to extract and apply RPC credentials (RHEL-127105) - Fix access checks when mounting subdirectories in NFSv3 (RHEL-127105) - Add requires for selinux-policy (RHEL-127105) Resolves: CVE-2025-12801 - gssd: protect kerberos ticket cache access (RHEL-138462) - nfsrahead: modify get_device_info logic (RHEL-134397) - Fix dependency definition in rpc-statd.service (RHEL-116079) - ensure services are stopped when nfs-utils is uninstalled (RHEL-88422) - gssd.man: add documentation for use-gss-proxy nfs.conf option (RHEL-85408) - gssd: do not use krb5_cc_initialize (RHEL-85412) - mountstats: verify that old and new types are the same (RHEL-88553) - nfs(5): Add new rdirplus functionality, clarify (RHEL-87143) - nfsd: allow more than 64 backlogged connections (RHEL-87752) - mountstats/nfsiostat: bugfixes for iostat (RHEL-72243) - Add nfs.conf to nfsv4-client-utils package (RHEL-72013) - Replace statfs64 with statfs (RHEL-127105) - NFS export symlink vulnerability fix (RHEL-127105) - mountd: Minor refactor of get_rootfh() (RHEL-127105) - mountd: Separate lookup of the exported directory and the mount path (RHEL-127105) - support: Add a mini-library to extract and apply RPC credentials (RHEL-127105) - Fix access checks when mounting subdirectories in NFSv3 (RHEL-127105) - Add requires for selinux-policy (RHEL-127105) Resolves: CVE-2025-12801 - gssd: protect kerberos ticket cache access (RHEL-138462) - nfsrahead: modify get_device_info logic (RHEL-134397) - Fix dependency definition in rpc-statd.service (RHEL-116079) - ensure services are stopped when nfs-utils is uninstalled (RHEL-88422) - gssd.man: add documentation for use-gss-proxy nfs.conf option (RHEL-85408) - gssd: do not use krb5_cc_initialize (RHEL-85412) - mountstats: verify that old and new types are the same (RHEL-88553) - nfs(5): Add new rdirplus functionality, clarify (RHEL-87143) - nfsd: allow more than 64 backlogged connections (RHEL-87752) - mountstats/nfsiostat: bugfixes for iostat (RHEL-72243) - Add nfs.conf to nfsv4-client-utils package (RHEL-72013) - Debrand for AlmaLinux - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-85556 - nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742) - Resolves: RHEL-91446 - nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741) - Resolves: RHEL-6786 - SSL-errors 0A000126 / NS_NET_ERROR_PARTIAL_TRANSFER at nginx with reverse-proxy - Resolves: RHEL-78236 - nginx: TLS Session Resumption Vulnerability (CVE-2025-23419) - Debrand for AlmaLinux - Resolves: RHEL-178684 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182553 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-85556 - nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742) - Resolves: RHEL-91446 - nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741) - Resolves: RHEL-6786 - SSL-errors 0A000126 / NS_NET_ERROR_PARTIAL_TRANSFER at nginx with reverse-proxy - Debrand for AlmaLinux - Resolves: RHEL-190800 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188418 - nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178684 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182553 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-85556 - nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742) - Resolves: RHEL-91446 - nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741) - Debrand for AlmaLinux - Resolves: RHEL-219316 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) - Resolves: RHEL-217969 - nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) - Resolves: RHEL-190800 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188418 - nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178684 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182553 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Debrand for AlmaLinux - Resolves: RHEL-212458 - nginx: NGINX: Arbitrary code execution via crafted HTTP requests (CVE-2026-42533) - Resolves: RHEL-219316 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) - Resolves: RHEL-217969 - nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) - Resolves: RHEL-190800 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188418 - nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178684 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182553 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Fix CVE-2026-42945 nginx: NGINX: Buffer overrun in rewrite module via arguments in replacement strings - Debrand for AlmaLinux - Resolves: RHEL-84484 - nginx:1.22/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-49349 - nginx worker processes memory leak - Resolves: RHEL-40621 - openssl 3.2 ENGINE regression in nginx - Resolves: RHEL-32650 - Nginx seg faults when proxy_ssl_certificate is set - Debrand for AlmaLinux - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-49350 - nginx worker processes memory leak - Resolves: RHEL-40622 - openssl 3.2 ENGINE regression in nginx - Resolves: RHEL-38498 - Nginx seg faults when proxy_ssl_certificate is set - Debrand for AlmaLinux - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182554 - nginx:1.24/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-49350 - nginx worker processes memory leak - Debrand for AlmaLinux - Resolves: RHEL-191773 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188413 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182554 - nginx:1.24/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-49350 - nginx worker processes memory leak - Debrand for AlmaLinux - Resolves: RHEL-219310 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) - Resolves: RHEL-217962 - nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) - Resolves: RHEL-191773 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188413 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182554 - nginx:1.24/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Debrand for AlmaLinux - Resolves: RHEL-212508 - nginx:1.24/nginx: NGINX: Arbitrary code execution via crafted HTTP requests (CVE-2026-42533) - Resolves: RHEL-219310 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) - Resolves: RHEL-217962 - nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) - Resolves: RHEL-191773 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188413 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182554 - nginx:1.24/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Fix CVE-2026-42945 nginx: NGINX: Buffer overrun in rewrite module via arguments in replacement strings - Resolves: RHEL-157887 - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159446 - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159538 - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-159559 - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections (CVE-2026-1642) - New version 1.26.3 - Use systemd-sysusers - Fix PKCS-11 support - Adjust QE files - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-144454 - Clarify binding behavior of -t option - Add tmpfiles.d rules for /var directories (bootc compatibility) - New version 1.26.3 - Use systemd-sysusers - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-144454 - Clarify binding behavior of -t option - Add tmpfiles.d rules for /var directories (bootc compatibility) - Resolves: RHEL-191774 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-144454 - Clarify binding behavior of -t option - Fixes CVE-2026-56434 and CVE-2026-60005 - Resolves: RHEL-191774 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Fixes CVE-2026-42533 - Fixes CVE-2026-56434 and CVE-2026-60005 - Resolves: RHEL-191774 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Debrand for AlmaLinux - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-85556 - nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742) - Resolves: RHEL-91446 - nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741) - Resolves: RHEL-6786 - SSL-errors 0A000126 / NS_NET_ERROR_PARTIAL_TRANSFER at nginx with reverse-proxy - Resolves: RHEL-78236 - nginx: TLS Session Resumption Vulnerability (CVE-2025-23419) - Debrand for AlmaLinux - Resolves: RHEL-178684 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182553 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-85556 - nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742) - Resolves: RHEL-91446 - nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741) - Resolves: RHEL-6786 - SSL-errors 0A000126 / NS_NET_ERROR_PARTIAL_TRANSFER at nginx with reverse-proxy - Debrand for AlmaLinux - Resolves: RHEL-190800 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188418 - nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178684 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182553 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-85556 - nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742) - Resolves: RHEL-91446 - nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741) - Debrand for AlmaLinux - Resolves: RHEL-219316 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) - Resolves: RHEL-217969 - nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) - Resolves: RHEL-190800 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188418 - nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178684 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182553 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Debrand for AlmaLinux - Resolves: RHEL-212458 - nginx: NGINX: Arbitrary code execution via crafted HTTP requests (CVE-2026-42533) - Resolves: RHEL-219316 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) - Resolves: RHEL-217969 - nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) - Resolves: RHEL-190800 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188418 - nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178684 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182553 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Fix CVE-2026-42945 nginx: NGINX: Buffer overrun in rewrite module via arguments in replacement strings - Debrand for AlmaLinux - Resolves: RHEL-84484 - nginx:1.22/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-49349 - nginx worker processes memory leak - Resolves: RHEL-40621 - openssl 3.2 ENGINE regression in nginx - Resolves: RHEL-32650 - Nginx seg faults when proxy_ssl_certificate is set - Debrand for AlmaLinux - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-49350 - nginx worker processes memory leak - Resolves: RHEL-40622 - openssl 3.2 ENGINE regression in nginx - Resolves: RHEL-38498 - Nginx seg faults when proxy_ssl_certificate is set - Debrand for AlmaLinux - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182554 - nginx:1.24/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-49350 - nginx worker processes memory leak - Debrand for AlmaLinux - Resolves: RHEL-191773 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188413 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182554 - nginx:1.24/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-49350 - nginx worker processes memory leak - Debrand for AlmaLinux - Resolves: RHEL-219310 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) - Resolves: RHEL-217962 - nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) - Resolves: RHEL-191773 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188413 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182554 - nginx:1.24/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Debrand for AlmaLinux - Resolves: RHEL-212508 - nginx:1.24/nginx: NGINX: Arbitrary code execution via crafted HTTP requests (CVE-2026-42533) - Resolves: RHEL-219310 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) - Resolves: RHEL-217962 - nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) - Resolves: RHEL-191773 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188413 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182554 - nginx:1.24/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Fix CVE-2026-42945 nginx: NGINX: Buffer overrun in rewrite module via arguments in replacement strings - Resolves: RHEL-157887 - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159446 - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159538 - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-159559 - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections (CVE-2026-1642) - New version 1.26.3 - Use systemd-sysusers - Fix PKCS-11 support - Adjust QE files - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-144454 - Clarify binding behavior of -t option - Add tmpfiles.d rules for /var directories (bootc compatibility) - New version 1.26.3 - Use systemd-sysusers - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-144454 - Clarify binding behavior of -t option - Add tmpfiles.d rules for /var directories (bootc compatibility) - Resolves: RHEL-191774 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-144454 - Clarify binding behavior of -t option - Fixes CVE-2026-56434 and CVE-2026-60005 - Resolves: RHEL-191774 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Fixes CVE-2026-42533 - Fixes CVE-2026-56434 and CVE-2026-60005 - Resolves: RHEL-191774 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Debrand for AlmaLinux - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-85556 - nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742) - Resolves: RHEL-91446 - nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741) - Resolves: RHEL-6786 - SSL-errors 0A000126 / NS_NET_ERROR_PARTIAL_TRANSFER at nginx with reverse-proxy - Resolves: RHEL-78236 - nginx: TLS Session Resumption Vulnerability (CVE-2025-23419) - Debrand for AlmaLinux - Resolves: RHEL-178684 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182553 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-85556 - nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742) - Resolves: RHEL-91446 - nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741) - Resolves: RHEL-6786 - SSL-errors 0A000126 / NS_NET_ERROR_PARTIAL_TRANSFER at nginx with reverse-proxy - Debrand for AlmaLinux - Resolves: RHEL-190800 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188418 - nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178684 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182553 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-85556 - nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742) - Resolves: RHEL-91446 - nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741) - Debrand for AlmaLinux - Resolves: RHEL-219316 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) - Resolves: RHEL-217969 - nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) - Resolves: RHEL-190800 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188418 - nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178684 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182553 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Debrand for AlmaLinux - Resolves: RHEL-212458 - nginx: NGINX: Arbitrary code execution via crafted HTTP requests (CVE-2026-42533) - Resolves: RHEL-219316 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) - Resolves: RHEL-217969 - nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) - Resolves: RHEL-190800 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188418 - nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178684 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182553 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Fix CVE-2026-42945 nginx: NGINX: Buffer overrun in rewrite module via arguments in replacement strings - Debrand for AlmaLinux - Resolves: RHEL-84484 - nginx:1.22/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-49349 - nginx worker processes memory leak - Resolves: RHEL-40621 - openssl 3.2 ENGINE regression in nginx - Resolves: RHEL-32650 - Nginx seg faults when proxy_ssl_certificate is set - Debrand for AlmaLinux - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-49350 - nginx worker processes memory leak - Resolves: RHEL-40622 - openssl 3.2 ENGINE regression in nginx - Resolves: RHEL-38498 - Nginx seg faults when proxy_ssl_certificate is set - Debrand for AlmaLinux - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182554 - nginx:1.24/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-49350 - nginx worker processes memory leak - Debrand for AlmaLinux - Resolves: RHEL-191773 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188413 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182554 - nginx:1.24/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-49350 - nginx worker processes memory leak - Debrand for AlmaLinux - Resolves: RHEL-219310 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) - Resolves: RHEL-217962 - nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) - Resolves: RHEL-191773 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188413 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182554 - nginx:1.24/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Debrand for AlmaLinux - Resolves: RHEL-212508 - nginx:1.24/nginx: NGINX: Arbitrary code execution via crafted HTTP requests (CVE-2026-42533) - Resolves: RHEL-219310 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) - Resolves: RHEL-217962 - nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) - Resolves: RHEL-191773 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188413 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182554 - nginx:1.24/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Fix CVE-2026-42945 nginx: NGINX: Buffer overrun in rewrite module via arguments in replacement strings - Resolves: RHEL-157887 - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159446 - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159538 - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-159559 - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections (CVE-2026-1642) - New version 1.26.3 - Use systemd-sysusers - Fix PKCS-11 support - Adjust QE files - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-144454 - Clarify binding behavior of -t option - Add tmpfiles.d rules for /var directories (bootc compatibility) - New version 1.26.3 - Use systemd-sysusers - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-144454 - Clarify binding behavior of -t option - Add tmpfiles.d rules for /var directories (bootc compatibility) - Resolves: RHEL-191774 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-144454 - Clarify binding behavior of -t option - Fixes CVE-2026-56434 and CVE-2026-60005 - Resolves: RHEL-191774 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Fixes CVE-2026-42533 - Fixes CVE-2026-56434 and CVE-2026-60005 - Resolves: RHEL-191774 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Debrand for AlmaLinux - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-85556 - nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742) - Resolves: RHEL-91446 - nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741) - Resolves: RHEL-6786 - SSL-errors 0A000126 / NS_NET_ERROR_PARTIAL_TRANSFER at nginx with reverse-proxy - Resolves: RHEL-78236 - nginx: TLS Session Resumption Vulnerability (CVE-2025-23419) - Debrand for AlmaLinux - Resolves: RHEL-178684 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182553 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-85556 - nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742) - Resolves: RHEL-91446 - nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741) - Resolves: RHEL-6786 - SSL-errors 0A000126 / NS_NET_ERROR_PARTIAL_TRANSFER at nginx with reverse-proxy - Debrand for AlmaLinux - Resolves: RHEL-190800 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188418 - nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178684 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182553 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-85556 - nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742) - Resolves: RHEL-91446 - nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741) - Debrand for AlmaLinux - Resolves: RHEL-219316 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) - Resolves: RHEL-217969 - nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) - Resolves: RHEL-190800 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188418 - nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178684 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182553 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Debrand for AlmaLinux - Resolves: RHEL-212458 - nginx: NGINX: Arbitrary code execution via crafted HTTP requests (CVE-2026-42533) - Resolves: RHEL-219316 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) - Resolves: RHEL-217969 - nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) - Resolves: RHEL-190800 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188418 - nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178684 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182553 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Fix CVE-2026-42945 nginx: NGINX: Buffer overrun in rewrite module via arguments in replacement strings - Debrand for AlmaLinux - Resolves: RHEL-84484 - nginx:1.22/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-49349 - nginx worker processes memory leak - Resolves: RHEL-40621 - openssl 3.2 ENGINE regression in nginx - Resolves: RHEL-32650 - Nginx seg faults when proxy_ssl_certificate is set - Debrand for AlmaLinux - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-49350 - nginx worker processes memory leak - Resolves: RHEL-40622 - openssl 3.2 ENGINE regression in nginx - Resolves: RHEL-38498 - Nginx seg faults when proxy_ssl_certificate is set - Debrand for AlmaLinux - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182554 - nginx:1.24/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-49350 - nginx worker processes memory leak - Debrand for AlmaLinux - Resolves: RHEL-191773 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188413 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182554 - nginx:1.24/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-49350 - nginx worker processes memory leak - Debrand for AlmaLinux - Resolves: RHEL-219310 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) - Resolves: RHEL-217962 - nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) - Resolves: RHEL-191773 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188413 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182554 - nginx:1.24/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Debrand for AlmaLinux - Resolves: RHEL-212508 - nginx:1.24/nginx: NGINX: Arbitrary code execution via crafted HTTP requests (CVE-2026-42533) - Resolves: RHEL-219310 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) - Resolves: RHEL-217962 - nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) - Resolves: RHEL-191773 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188413 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182554 - nginx:1.24/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Fix CVE-2026-42945 nginx: NGINX: Buffer overrun in rewrite module via arguments in replacement strings - Resolves: RHEL-157887 - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159446 - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159538 - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-159559 - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections (CVE-2026-1642) - New version 1.26.3 - Use systemd-sysusers - Fix PKCS-11 support - Adjust QE files - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-144454 - Clarify binding behavior of -t option - Add tmpfiles.d rules for /var directories (bootc compatibility) - New version 1.26.3 - Use systemd-sysusers - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-144454 - Clarify binding behavior of -t option - Add tmpfiles.d rules for /var directories (bootc compatibility) - Resolves: RHEL-191774 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-144454 - Clarify binding behavior of -t option - Fixes CVE-2026-56434 and CVE-2026-60005 - Resolves: RHEL-191774 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Fixes CVE-2026-42533 - Fixes CVE-2026-56434 and CVE-2026-60005 - Resolves: RHEL-191774 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Fix CVE-2026-42945 nginx: NGINX: Buffer overrun in rewrite module via arguments in replacement strings - Debrand for AlmaLinux - Resolves: RHEL-84484 - nginx:1.22/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-49349 - nginx worker processes memory leak - Resolves: RHEL-40621 - openssl 3.2 ENGINE regression in nginx - Resolves: RHEL-32650 - Nginx seg faults when proxy_ssl_certificate is set - Debrand for AlmaLinux - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-49350 - nginx worker processes memory leak - Resolves: RHEL-40622 - openssl 3.2 ENGINE regression in nginx - Resolves: RHEL-38498 - Nginx seg faults when proxy_ssl_certificate is set - Debrand for AlmaLinux - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182554 - nginx:1.24/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-49350 - nginx worker processes memory leak - Debrand for AlmaLinux - Resolves: RHEL-191773 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188413 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182554 - nginx:1.24/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-49350 - nginx worker processes memory leak - Debrand for AlmaLinux - Resolves: RHEL-219310 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) - Resolves: RHEL-217962 - nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) - Resolves: RHEL-191773 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188413 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182554 - nginx:1.24/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Debrand for AlmaLinux - Resolves: RHEL-212508 - nginx:1.24/nginx: NGINX: Arbitrary code execution via crafted HTTP requests (CVE-2026-42533) - Resolves: RHEL-219310 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) - Resolves: RHEL-217962 - nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) - Resolves: RHEL-191773 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188413 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182554 - nginx:1.24/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Fix CVE-2026-42945 nginx: NGINX: Buffer overrun in rewrite module via arguments in replacement strings - Resolves: RHEL-157887 - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159446 - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159538 - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-159559 - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections (CVE-2026-1642) - New version 1.26.3 - Use systemd-sysusers - Fix PKCS-11 support - Adjust QE files - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-144454 - Clarify binding behavior of -t option - Add tmpfiles.d rules for /var directories (bootc compatibility) - New version 1.26.3 - Use systemd-sysusers - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-144454 - Clarify binding behavior of -t option - Add tmpfiles.d rules for /var directories (bootc compatibility) - Resolves: RHEL-191774 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-144454 - Clarify binding behavior of -t option - Fixes CVE-2026-56434 and CVE-2026-60005 - Resolves: RHEL-191774 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Fixes CVE-2026-42533 - Fixes CVE-2026-56434 and CVE-2026-60005 - Resolves: RHEL-191774 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Debrand for AlmaLinux - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-85556 - nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742) - Resolves: RHEL-91446 - nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741) - Resolves: RHEL-6786 - SSL-errors 0A000126 / NS_NET_ERROR_PARTIAL_TRANSFER at nginx with reverse-proxy - Resolves: RHEL-78236 - nginx: TLS Session Resumption Vulnerability (CVE-2025-23419) - Debrand for AlmaLinux - Resolves: RHEL-178684 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182553 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-85556 - nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742) - Resolves: RHEL-91446 - nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741) - Resolves: RHEL-6786 - SSL-errors 0A000126 / NS_NET_ERROR_PARTIAL_TRANSFER at nginx with reverse-proxy - Debrand for AlmaLinux - Resolves: RHEL-190800 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188418 - nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178684 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182553 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-85556 - nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742) - Resolves: RHEL-91446 - nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741) - Debrand for AlmaLinux - Resolves: RHEL-219316 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) - Resolves: RHEL-217969 - nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) - Resolves: RHEL-190800 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188418 - nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178684 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182553 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Debrand for AlmaLinux - Resolves: RHEL-212458 - nginx: NGINX: Arbitrary code execution via crafted HTTP requests (CVE-2026-42533) - Resolves: RHEL-219316 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) - Resolves: RHEL-217969 - nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) - Resolves: RHEL-190800 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188418 - nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178684 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182553 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Fix CVE-2026-42945 nginx: NGINX: Buffer overrun in rewrite module via arguments in replacement strings - Debrand for AlmaLinux - Resolves: RHEL-84484 - nginx:1.22/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-49349 - nginx worker processes memory leak - Resolves: RHEL-40621 - openssl 3.2 ENGINE regression in nginx - Resolves: RHEL-32650 - Nginx seg faults when proxy_ssl_certificate is set - Debrand for AlmaLinux - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-49350 - nginx worker processes memory leak - Resolves: RHEL-40622 - openssl 3.2 ENGINE regression in nginx - Resolves: RHEL-38498 - Nginx seg faults when proxy_ssl_certificate is set - Debrand for AlmaLinux - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182554 - nginx:1.24/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-49350 - nginx worker processes memory leak - Debrand for AlmaLinux - Resolves: RHEL-191773 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188413 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182554 - nginx:1.24/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-49350 - nginx worker processes memory leak - Debrand for AlmaLinux - Resolves: RHEL-219310 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) - Resolves: RHEL-217962 - nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) - Resolves: RHEL-191773 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188413 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182554 - nginx:1.24/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Debrand for AlmaLinux - Resolves: RHEL-212508 - nginx:1.24/nginx: NGINX: Arbitrary code execution via crafted HTTP requests (CVE-2026-42533) - Resolves: RHEL-219310 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) - Resolves: RHEL-217962 - nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) - Resolves: RHEL-191773 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188413 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182554 - nginx:1.24/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Fix CVE-2026-42945 nginx: NGINX: Buffer overrun in rewrite module via arguments in replacement strings - Resolves: RHEL-157887 - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159446 - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159538 - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-159559 - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections (CVE-2026-1642) - New version 1.26.3 - Use systemd-sysusers - Fix PKCS-11 support - Adjust QE files - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-144454 - Clarify binding behavior of -t option - Add tmpfiles.d rules for /var directories (bootc compatibility) - New version 1.26.3 - Use systemd-sysusers - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-144454 - Clarify binding behavior of -t option - Add tmpfiles.d rules for /var directories (bootc compatibility) - Resolves: RHEL-191774 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-144454 - Clarify binding behavior of -t option - Fixes CVE-2026-56434 and CVE-2026-60005 - Resolves: RHEL-191774 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Fixes CVE-2026-42533 - Fixes CVE-2026-56434 and CVE-2026-60005 - Resolves: RHEL-191774 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Debrand for AlmaLinux - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-85556 - nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742) - Resolves: RHEL-91446 - nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741) - Resolves: RHEL-6786 - SSL-errors 0A000126 / NS_NET_ERROR_PARTIAL_TRANSFER at nginx with reverse-proxy - Resolves: RHEL-78236 - nginx: TLS Session Resumption Vulnerability (CVE-2025-23419) - Debrand for AlmaLinux - Resolves: RHEL-178684 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182553 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-85556 - nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742) - Resolves: RHEL-91446 - nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741) - Resolves: RHEL-6786 - SSL-errors 0A000126 / NS_NET_ERROR_PARTIAL_TRANSFER at nginx with reverse-proxy - Debrand for AlmaLinux - Resolves: RHEL-190800 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188418 - nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178684 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182553 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-85556 - nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742) - Resolves: RHEL-91446 - nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741) - Debrand for AlmaLinux - Resolves: RHEL-219316 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) - Resolves: RHEL-217969 - nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) - Resolves: RHEL-190800 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188418 - nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178684 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182553 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Debrand for AlmaLinux - Resolves: RHEL-212458 - nginx: NGINX: Arbitrary code execution via crafted HTTP requests (CVE-2026-42533) - Resolves: RHEL-219316 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) - Resolves: RHEL-217969 - nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) - Resolves: RHEL-190800 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188418 - nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178684 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182553 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Fix CVE-2026-42945 nginx: NGINX: Buffer overrun in rewrite module via arguments in replacement strings - Debrand for AlmaLinux - Resolves: RHEL-84484 - nginx:1.22/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-49349 - nginx worker processes memory leak - Resolves: RHEL-40621 - openssl 3.2 ENGINE regression in nginx - Resolves: RHEL-32650 - Nginx seg faults when proxy_ssl_certificate is set - Debrand for AlmaLinux - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-49350 - nginx worker processes memory leak - Resolves: RHEL-40622 - openssl 3.2 ENGINE regression in nginx - Resolves: RHEL-38498 - Nginx seg faults when proxy_ssl_certificate is set - Debrand for AlmaLinux - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182554 - nginx:1.24/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-49350 - nginx worker processes memory leak - Debrand for AlmaLinux - Resolves: RHEL-191773 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188413 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182554 - nginx:1.24/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-49350 - nginx worker processes memory leak - Debrand for AlmaLinux - Resolves: RHEL-219310 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) - Resolves: RHEL-217962 - nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) - Resolves: RHEL-191773 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188413 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182554 - nginx:1.24/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Debrand for AlmaLinux - Resolves: RHEL-212508 - nginx:1.24/nginx: NGINX: Arbitrary code execution via crafted HTTP requests (CVE-2026-42533) - Resolves: RHEL-219310 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) - Resolves: RHEL-217962 - nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) - Resolves: RHEL-191773 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188413 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182554 - nginx:1.24/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Fix CVE-2026-42945 nginx: NGINX: Buffer overrun in rewrite module via arguments in replacement strings - Resolves: RHEL-157887 - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159446 - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159538 - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-159559 - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections (CVE-2026-1642) - New version 1.26.3 - Use systemd-sysusers - Fix PKCS-11 support - Adjust QE files - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-144454 - Clarify binding behavior of -t option - Add tmpfiles.d rules for /var directories (bootc compatibility) - New version 1.26.3 - Use systemd-sysusers - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-144454 - Clarify binding behavior of -t option - Add tmpfiles.d rules for /var directories (bootc compatibility) - Resolves: RHEL-191774 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-144454 - Clarify binding behavior of -t option - Fixes CVE-2026-56434 and CVE-2026-60005 - Resolves: RHEL-191774 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Fixes CVE-2026-42533 - Fixes CVE-2026-56434 and CVE-2026-60005 - Resolves: RHEL-191774 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Debrand for AlmaLinux - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-85556 - nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742) - Resolves: RHEL-91446 - nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741) - Resolves: RHEL-6786 - SSL-errors 0A000126 / NS_NET_ERROR_PARTIAL_TRANSFER at nginx with reverse-proxy - Resolves: RHEL-78236 - nginx: TLS Session Resumption Vulnerability (CVE-2025-23419) - Debrand for AlmaLinux - Resolves: RHEL-178684 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182553 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-85556 - nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742) - Resolves: RHEL-91446 - nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741) - Resolves: RHEL-6786 - SSL-errors 0A000126 / NS_NET_ERROR_PARTIAL_TRANSFER at nginx with reverse-proxy - Debrand for AlmaLinux - Resolves: RHEL-190800 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188418 - nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178684 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182553 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-85556 - nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742) - Resolves: RHEL-91446 - nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741) - Debrand for AlmaLinux - Resolves: RHEL-219316 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) - Resolves: RHEL-217969 - nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) - Resolves: RHEL-190800 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188418 - nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178684 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182553 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Debrand for AlmaLinux - Resolves: RHEL-212458 - nginx: NGINX: Arbitrary code execution via crafted HTTP requests (CVE-2026-42533) - Resolves: RHEL-219316 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) - Resolves: RHEL-217969 - nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) - Resolves: RHEL-190800 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188418 - nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178684 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182553 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Fix CVE-2026-42945 nginx: NGINX: Buffer overrun in rewrite module via arguments in replacement strings - Debrand for AlmaLinux - Resolves: RHEL-84484 - nginx:1.22/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-49349 - nginx worker processes memory leak - Resolves: RHEL-40621 - openssl 3.2 ENGINE regression in nginx - Resolves: RHEL-32650 - Nginx seg faults when proxy_ssl_certificate is set - Debrand for AlmaLinux - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-49350 - nginx worker processes memory leak - Resolves: RHEL-40622 - openssl 3.2 ENGINE regression in nginx - Resolves: RHEL-38498 - Nginx seg faults when proxy_ssl_certificate is set - Debrand for AlmaLinux - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182554 - nginx:1.24/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-49350 - nginx worker processes memory leak - Debrand for AlmaLinux - Resolves: RHEL-191773 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188413 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182554 - nginx:1.24/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-49350 - nginx worker processes memory leak - Debrand for AlmaLinux - Resolves: RHEL-219310 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) - Resolves: RHEL-217962 - nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) - Resolves: RHEL-191773 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188413 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182554 - nginx:1.24/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Debrand for AlmaLinux - Resolves: RHEL-212508 - nginx:1.24/nginx: NGINX: Arbitrary code execution via crafted HTTP requests (CVE-2026-42533) - Resolves: RHEL-219310 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) - Resolves: RHEL-217962 - nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) - Resolves: RHEL-191773 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188413 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182554 - nginx:1.24/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Fix CVE-2026-42945 nginx: NGINX: Buffer overrun in rewrite module via arguments in replacement strings - Resolves: RHEL-157887 - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159446 - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159538 - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-159559 - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections (CVE-2026-1642) - New version 1.26.3 - Use systemd-sysusers - Fix PKCS-11 support - Adjust QE files - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-144454 - Clarify binding behavior of -t option - Add tmpfiles.d rules for /var directories (bootc compatibility) - New version 1.26.3 - Use systemd-sysusers - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-144454 - Clarify binding behavior of -t option - Add tmpfiles.d rules for /var directories (bootc compatibility) - Resolves: RHEL-191774 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-144454 - Clarify binding behavior of -t option - Fixes CVE-2026-56434 and CVE-2026-60005 - Resolves: RHEL-191774 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Fixes CVE-2026-42533 - Fixes CVE-2026-56434 and CVE-2026-60005 - Resolves: RHEL-191774 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Debrand for AlmaLinux - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-85556 - nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742) - Resolves: RHEL-91446 - nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741) - Resolves: RHEL-6786 - SSL-errors 0A000126 / NS_NET_ERROR_PARTIAL_TRANSFER at nginx with reverse-proxy - Resolves: RHEL-78236 - nginx: TLS Session Resumption Vulnerability (CVE-2025-23419) - Debrand for AlmaLinux - Resolves: RHEL-178684 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182553 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-85556 - nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742) - Resolves: RHEL-91446 - nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741) - Resolves: RHEL-6786 - SSL-errors 0A000126 / NS_NET_ERROR_PARTIAL_TRANSFER at nginx with reverse-proxy - Debrand for AlmaLinux - Resolves: RHEL-190800 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188418 - nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178684 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182553 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-85556 - nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742) - Resolves: RHEL-91446 - nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741) - Debrand for AlmaLinux - Resolves: RHEL-219316 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) - Resolves: RHEL-217969 - nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) - Resolves: RHEL-190800 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188418 - nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178684 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182553 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Debrand for AlmaLinux - Resolves: RHEL-212458 - nginx: NGINX: Arbitrary code execution via crafted HTTP requests (CVE-2026-42533) - Resolves: RHEL-219316 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) - Resolves: RHEL-217969 - nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) - Resolves: RHEL-190800 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188418 - nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178684 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182553 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Fix CVE-2026-42945 nginx: NGINX: Buffer overrun in rewrite module via arguments in replacement strings - Debrand for AlmaLinux - Resolves: RHEL-84484 - nginx:1.22/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-49349 - nginx worker processes memory leak - Resolves: RHEL-40621 - openssl 3.2 ENGINE regression in nginx - Resolves: RHEL-32650 - Nginx seg faults when proxy_ssl_certificate is set - Debrand for AlmaLinux - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-49350 - nginx worker processes memory leak - Resolves: RHEL-40622 - openssl 3.2 ENGINE regression in nginx - Resolves: RHEL-38498 - Nginx seg faults when proxy_ssl_certificate is set - Debrand for AlmaLinux - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182554 - nginx:1.24/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-49350 - nginx worker processes memory leak - Debrand for AlmaLinux - Resolves: RHEL-191773 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188413 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182554 - nginx:1.24/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-49350 - nginx worker processes memory leak - Debrand for AlmaLinux - Resolves: RHEL-219310 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) - Resolves: RHEL-217962 - nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) - Resolves: RHEL-191773 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188413 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182554 - nginx:1.24/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Debrand for AlmaLinux - Resolves: RHEL-212508 - nginx:1.24/nginx: NGINX: Arbitrary code execution via crafted HTTP requests (CVE-2026-42533) - Resolves: RHEL-219310 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) - Resolves: RHEL-217962 - nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) - Resolves: RHEL-191773 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188413 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182554 - nginx:1.24/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Fix CVE-2026-42945 nginx: NGINX: Buffer overrun in rewrite module via arguments in replacement strings - Resolves: RHEL-157887 - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159446 - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159538 - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-159559 - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections (CVE-2026-1642) - New version 1.26.3 - Use systemd-sysusers - Fix PKCS-11 support - Adjust QE files - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-144454 - Clarify binding behavior of -t option - Add tmpfiles.d rules for /var directories (bootc compatibility) - New version 1.26.3 - Use systemd-sysusers - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-144454 - Clarify binding behavior of -t option - Add tmpfiles.d rules for /var directories (bootc compatibility) - Resolves: RHEL-191774 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-144454 - Clarify binding behavior of -t option - Fixes CVE-2026-56434 and CVE-2026-60005 - Resolves: RHEL-191774 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Fixes CVE-2026-42533 - Fixes CVE-2026-56434 and CVE-2026-60005 - Resolves: RHEL-191774 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Debrand for AlmaLinux - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-85556 - nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742) - Resolves: RHEL-91446 - nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741) - Resolves: RHEL-6786 - SSL-errors 0A000126 / NS_NET_ERROR_PARTIAL_TRANSFER at nginx with reverse-proxy - Resolves: RHEL-78236 - nginx: TLS Session Resumption Vulnerability (CVE-2025-23419) - Debrand for AlmaLinux - Resolves: RHEL-178684 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182553 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-85556 - nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742) - Resolves: RHEL-91446 - nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741) - Resolves: RHEL-6786 - SSL-errors 0A000126 / NS_NET_ERROR_PARTIAL_TRANSFER at nginx with reverse-proxy - Debrand for AlmaLinux - Resolves: RHEL-190800 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188418 - nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178684 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182553 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-85556 - nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742) - Resolves: RHEL-91446 - nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741) - Debrand for AlmaLinux - Resolves: RHEL-219316 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) - Resolves: RHEL-217969 - nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) - Resolves: RHEL-190800 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188418 - nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178684 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182553 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Debrand for AlmaLinux - Resolves: RHEL-212458 - nginx: NGINX: Arbitrary code execution via crafted HTTP requests (CVE-2026-42533) - Resolves: RHEL-219316 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) - Resolves: RHEL-217969 - nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) - Resolves: RHEL-190800 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188418 - nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178684 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182553 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Fix CVE-2026-42945 nginx: NGINX: Buffer overrun in rewrite module via arguments in replacement strings - Debrand for AlmaLinux - Resolves: RHEL-84484 - nginx:1.22/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-49349 - nginx worker processes memory leak - Resolves: RHEL-40621 - openssl 3.2 ENGINE regression in nginx - Resolves: RHEL-32650 - Nginx seg faults when proxy_ssl_certificate is set - Debrand for AlmaLinux - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-49350 - nginx worker processes memory leak - Resolves: RHEL-40622 - openssl 3.2 ENGINE regression in nginx - Resolves: RHEL-38498 - Nginx seg faults when proxy_ssl_certificate is set - Debrand for AlmaLinux - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182554 - nginx:1.24/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-49350 - nginx worker processes memory leak - Debrand for AlmaLinux - Resolves: RHEL-191773 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188413 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182554 - nginx:1.24/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-49350 - nginx worker processes memory leak - Debrand for AlmaLinux - Resolves: RHEL-219310 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) - Resolves: RHEL-217962 - nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) - Resolves: RHEL-191773 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188413 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182554 - nginx:1.24/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Debrand for AlmaLinux - Resolves: RHEL-212508 - nginx:1.24/nginx: NGINX: Arbitrary code execution via crafted HTTP requests (CVE-2026-42533) - Resolves: RHEL-219310 - nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434) - Resolves: RHEL-217962 - nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005) - Resolves: RHEL-191773 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188413 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182554 - nginx:1.24/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Fix CVE-2026-42945 nginx: NGINX: Buffer overrun in rewrite module via arguments in replacement strings - Resolves: RHEL-157887 - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159446 - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159538 - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-159559 - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections (CVE-2026-1642) - New version 1.26.3 - Use systemd-sysusers - Fix PKCS-11 support - Adjust QE files - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-144454 - Clarify binding behavior of -t option - Add tmpfiles.d rules for /var directories (bootc compatibility) - New version 1.26.3 - Use systemd-sysusers - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-144454 - Clarify binding behavior of -t option - Add tmpfiles.d rules for /var directories (bootc compatibility) - Resolves: RHEL-191774 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-144454 - Clarify binding behavior of -t option - Fixes CVE-2026-56434 and CVE-2026-60005 - Resolves: RHEL-191774 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Fixes CVE-2026-42533 - Fixes CVE-2026-56434 and CVE-2026-60005 - Resolves: RHEL-191774 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - New release 1.2.14 (Gris Ge) - bond: support changing bond mode (Gris Ge) - Reorganize the code structure (Gris Ge) - CI: Enable VRF and ethool pause test (Gris Ge) - CI: Upgrade the version of github action tasks (Gris Ge) - test: Fix ethtool link mode test on Ubuntu (Gris Ge) - Github CI: Install extra module of running kernel (Gris Ge) - macsec: add base_iface property (Fernando Fernandez Mancera) - macsec: add MACsec interface support (Fernando Fernandez Mancera) - Bump netlink-packet-route to 0.17.1 (Fernando Fernandez Mancera) - New release 1.2.12 (Gris Ge) - Use latest rust-netlink crates (Gris Ge) - Upgrade to 1.2.10. RHBZ#2153165 - Upgrade to 1.2.9. RHBZ#2153165 - Upgrade to 1.2.7. - Upgarde to 1.2.4. RHBZ#2064299 - Upgrade to 1.2.3. Resolves: RHBZ#1996623 - Upgrade to 1.2.2. Resolves: RHBZ#1996623 - Update Japanese translation (rh #2083047) - Update to 1.26.0 release (rh #2066750) - Fix OWE settings disappearing on nm-connection-editor (rh #2057004) - Update to 1.24.0 release - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 1.22.0 release. - editor: show missing toggle in the 8021x-security page. - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 1.20.0 release - Drop NotShowIn=GNOME - Use wireless-security code from libnma - Add flatpak build configuration - applet: hide unmanaged ethernet devices in nm-applet - applet: fix Wi-Fi scan requests with appindicator - editor: fix drop down list for connection.secondaries - Move desktop file to new nm-connection-editor-desktop package (rh #1923262) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Remove obsolete alternatives left behind after leapp upgrade from RHEL8 to RHEL9 Resolves: RHEL-101161 - Resolves: RHEL-130816 - Nmap scans fail with enic driver - Update fmf plans and gating - Support EMS in ssl-enum-ciphers - Remove obsolete alternatives left behind after leapp upgrade from RHEL8 to RHEL9 Resolves: RHEL-101161 - Resolves: RHEL-130816 - Nmap scans fail with enic driver - Update fmf plans and gating - Support EMS in ssl-enum-ciphers - Upgrade to 2.2.58 - vrf: Handle ignore interface when verifying desired state. RHEL-141606 - alt-name: Remove alt-names when interface marked as absent. RHEL-141602 - hsr: Automatically disable IP on hsr port. RHEL-141609 - hsr: add support for configuring "interlink" property. RHEL-141608 - Support referring interface name using its alternative name. RHEL-141601 - Upgrade to 2.2.57 - Add libreswan leftprotoport and rightprotoport support. (RHEL-130912) - Upgrade to 2.2.56 - Allow using VRF name to specify route table. RHEL-123541 - Support OVS-DPDK dpdk-lsc-interrupt in nmstate. RHEL-125052 - Applying desired state with static DNS with static IP will touch `br-ex` even not mentioned. RHEL-126731 - Support rightca ipsec option. RHEL-123542 - Upgrade to 2.2.54. - Automatically set HSR port MAC address. RHEL-122171 - Fix OVSDB query failure on database bigger than 20KiB. RHEL-121992 - Upgrade to 2.2.52 - Support interface altnative name. RHEL-110781 - Upgrade to 2.2.50 - Support MAC referring for VLAN in gen_conf. RHEL-110369 - Introduce state: ignore for route. RHEL-107130 - Support PCI address matching in gen_conf. RHEL-110369 - Support MacSec interface in gen_conf. RHEL-110369 - Upgrade to 2.2.49 - Ignore desired MAC for bonds with fail_over_mac. RHEL-107526 - Fix setting DNS only with search or option. RHEL-104797 - Upgrade to 2.2.48 - Validate OVN bridge mapping. RHEL-85787 - Support bond `lacp_active` and `ns_ip6_target`. RHEL-85784 - Support matching by PCI adress. RHEL-88993 - Apply dispatch changes first. RHEL-101742 - Fix SRIOV VF reference. RHEL-93180 - Upgrade to 2.2.46 - Store DNS to both iface and global DNS. RHEL-91291 - Support nmpolicy against down iface. RHEL-88989 - Support removal VLAN connection with empty ifname. RHEL-93146 - Upgrade to 2.2.25 - Fix stuck of nmstatectl show on OVS. RHEL-93176 - Upgrade to 2.2.60 - ipv4: Add new parameter prefix-route-metric RHEL-170695 - Upgrade to 2.2.59 - Add support for lock-mtu option. RHEL-151933. - Upgrade to 2.2.58 - vrf: Handle ignore interface when verifying desired state. RHEL-141606 - alt-name: Remove alt-names when interface marked as absent. RHEL-141602 - hsr: Automatically disable IP on hsr port. RHEL-141609 - hsr: add support for configuring "interlink" property. RHEL-141608 - Support referring interface name using its alternative name. RHEL-141601 - Upgrade to 2.2.57 - Add libreswan leftprotoport and rightprotoport support. (RHEL-130912) - Upgrade to 2.2.56 - Allow using VRF name to specify route table. RHEL-123541 - Support OVS-DPDK dpdk-lsc-interrupt in nmstate. RHEL-125052 - Applying desired state with static DNS with static IP will touch `br-ex` even not mentioned. RHEL-126731 - Support rightca ipsec option. RHEL-123542 - Upgrade to 2.2.54. - Automatically set HSR port MAC address. RHEL-122171 - Fix OVSDB query failure on database bigger than 20KiB. RHEL-121992 - Upgrade to 2.2.52 - Support interface altnative name. RHEL-110781 - Upgrade to 2.2.50 - Support MAC referring for VLAN in gen_conf. RHEL-110369 - Introduce state: ignore for route. RHEL-107130 - Support PCI address matching in gen_conf. RHEL-110369 - Support MacSec interface in gen_conf. RHEL-110369 - Upgrade to 2.2.49 - Ignore desired MAC for bonds with fail_over_mac. RHEL-107526 - Fix setting DNS only with search or option. RHEL-104797 - Upgrade to 2.2.48 - Validate OVN bridge mapping. RHEL-85787 - Support bond `lacp_active` and `ns_ip6_target`. RHEL-85784 - Support matching by PCI adress. RHEL-88993 - Apply dispatch changes first. RHEL-101742 - Fix SRIOV VF reference. RHEL-93180 - Ignore IP addresses with non-kernel IFA_PROTO. RHEL-253623 - Upgrade to 2.2.60 - ipv4: Add new parameter prefix-route-metric RHEL-170695 - Upgrade to 2.2.59 - Add support for lock-mtu option. RHEL-151933. - Upgrade to 2.2.58 - vrf: Handle ignore interface when verifying desired state. RHEL-141606 - alt-name: Remove alt-names when interface marked as absent. RHEL-141602 - hsr: Automatically disable IP on hsr port. RHEL-141609 - hsr: add support for configuring "interlink" property. RHEL-141608 - Support referring interface name using its alternative name. RHEL-141601 - Upgrade to 2.2.57 - Add libreswan leftprotoport and rightprotoport support. (RHEL-130912) - Upgrade to 2.2.56 - Allow using VRF name to specify route table. RHEL-123541 - Support OVS-DPDK dpdk-lsc-interrupt in nmstate. RHEL-125052 - Applying desired state with static DNS with static IP will touch `br-ex` even not mentioned. RHEL-126731 - Support rightca ipsec option. RHEL-123542 - Upgrade to 2.2.54. - Automatically set HSR port MAC address. RHEL-122171 - Fix OVSDB query failure on database bigger than 20KiB. RHEL-121992 - Upgrade to 2.2.52 - Support interface altnative name. RHEL-110781 - Upgrade to 2.2.50 - Support MAC referring for VLAN in gen_conf. RHEL-110369 - Introduce state: ignore for route. RHEL-107130 - Support PCI address matching in gen_conf. RHEL-110369 - Support MacSec interface in gen_conf. RHEL-110369 - Upgrade to 2.2.49 - Ignore desired MAC for bonds with fail_over_mac. RHEL-107526 - Fix setting DNS only with search or option. RHEL-104797 - Upgrade to 2.2.58 - vrf: Handle ignore interface when verifying desired state. RHEL-141606 - alt-name: Remove alt-names when interface marked as absent. RHEL-141602 - hsr: Automatically disable IP on hsr port. RHEL-141609 - hsr: add support for configuring "interlink" property. RHEL-141608 - Support referring interface name using its alternative name. RHEL-141601 - Upgrade to 2.2.57 - Add libreswan leftprotoport and rightprotoport support. (RHEL-130912) - Upgrade to 2.2.56 - Allow using VRF name to specify route table. RHEL-123541 - Support OVS-DPDK dpdk-lsc-interrupt in nmstate. RHEL-125052 - Applying desired state with static DNS with static IP will touch `br-ex` even not mentioned. RHEL-126731 - Support rightca ipsec option. RHEL-123542 - Upgrade to 2.2.54. - Automatically set HSR port MAC address. RHEL-122171 - Fix OVSDB query failure on database bigger than 20KiB. RHEL-121992 - Upgrade to 2.2.52 - Support interface altnative name. RHEL-110781 - Upgrade to 2.2.50 - Support MAC referring for VLAN in gen_conf. RHEL-110369 - Introduce state: ignore for route. RHEL-107130 - Support PCI address matching in gen_conf. RHEL-110369 - Support MacSec interface in gen_conf. RHEL-110369 - Upgrade to 2.2.49 - Ignore desired MAC for bonds with fail_over_mac. RHEL-107526 - Fix setting DNS only with search or option. RHEL-104797 - Upgrade to 2.2.48 - Validate OVN bridge mapping. RHEL-85787 - Support bond `lacp_active` and `ns_ip6_target`. RHEL-85784 - Support matching by PCI adress. RHEL-88993 - Apply dispatch changes first. RHEL-101742 - Fix SRIOV VF reference. RHEL-93180 - Upgrade to 2.2.46 - Store DNS to both iface and global DNS. RHEL-91291 - Support nmpolicy against down iface. RHEL-88989 - Support removal VLAN connection with empty ifname. RHEL-93146 - Upgrade to 2.2.25 - Fix stuck of nmstatectl show on OVS. RHEL-93176 - Upgrade to 2.2.60 - ipv4: Add new parameter prefix-route-metric RHEL-170695 - Upgrade to 2.2.59 - Add support for lock-mtu option. RHEL-151933. - Upgrade to 2.2.58 - vrf: Handle ignore interface when verifying desired state. RHEL-141606 - alt-name: Remove alt-names when interface marked as absent. RHEL-141602 - hsr: Automatically disable IP on hsr port. RHEL-141609 - hsr: add support for configuring "interlink" property. RHEL-141608 - Support referring interface name using its alternative name. RHEL-141601 - Upgrade to 2.2.57 - Add libreswan leftprotoport and rightprotoport support. (RHEL-130912) - Upgrade to 2.2.56 - Allow using VRF name to specify route table. RHEL-123541 - Support OVS-DPDK dpdk-lsc-interrupt in nmstate. RHEL-125052 - Applying desired state with static DNS with static IP will touch `br-ex` even not mentioned. RHEL-126731 - Support rightca ipsec option. RHEL-123542 - Upgrade to 2.2.54. - Automatically set HSR port MAC address. RHEL-122171 - Fix OVSDB query failure on database bigger than 20KiB. RHEL-121992 - Upgrade to 2.2.52 - Support interface altnative name. RHEL-110781 - Upgrade to 2.2.50 - Support MAC referring for VLAN in gen_conf. RHEL-110369 - Introduce state: ignore for route. RHEL-107130 - Support PCI address matching in gen_conf. RHEL-110369 - Support MacSec interface in gen_conf. RHEL-110369 - Upgrade to 2.2.49 - Ignore desired MAC for bonds with fail_over_mac. RHEL-107526 - Fix setting DNS only with search or option. RHEL-104797 - Upgrade to 2.2.48 - Validate OVN bridge mapping. RHEL-85787 - Support bond `lacp_active` and `ns_ip6_target`. RHEL-85784 - Support matching by PCI adress. RHEL-88993 - Apply dispatch changes first. RHEL-101742 - Fix SRIOV VF reference. RHEL-93180 - Ignore IP addresses with non-kernel IFA_PROTO. RHEL-253623 - Upgrade to 2.2.60 - ipv4: Add new parameter prefix-route-metric RHEL-170695 - Upgrade to 2.2.59 - Add support for lock-mtu option. RHEL-151933. - Upgrade to 2.2.58 - vrf: Handle ignore interface when verifying desired state. RHEL-141606 - alt-name: Remove alt-names when interface marked as absent. RHEL-141602 - hsr: Automatically disable IP on hsr port. RHEL-141609 - hsr: add support for configuring "interlink" property. RHEL-141608 - Support referring interface name using its alternative name. RHEL-141601 - Upgrade to 2.2.57 - Add libreswan leftprotoport and rightprotoport support. (RHEL-130912) - Upgrade to 2.2.56 - Allow using VRF name to specify route table. RHEL-123541 - Support OVS-DPDK dpdk-lsc-interrupt in nmstate. RHEL-125052 - Applying desired state with static DNS with static IP will touch `br-ex` even not mentioned. RHEL-126731 - Support rightca ipsec option. RHEL-123542 - Upgrade to 2.2.54. - Automatically set HSR port MAC address. RHEL-122171 - Fix OVSDB query failure on database bigger than 20KiB. RHEL-121992 - Upgrade to 2.2.52 - Support interface altnative name. RHEL-110781 - Upgrade to 2.2.50 - Support MAC referring for VLAN in gen_conf. RHEL-110369 - Introduce state: ignore for route. RHEL-107130 - Support PCI address matching in gen_conf. RHEL-110369 - Support MacSec interface in gen_conf. RHEL-110369 - Upgrade to 2.2.49 - Ignore desired MAC for bonds with fail_over_mac. RHEL-107526 - Fix setting DNS only with search or option. RHEL-104797 - Actually apply the patch for CVE-2024-27982 - Backport patch for CVE-2024-27982 - Use system OpenSSL configuration section - Backport patches for several CVEs. Fixes CVE-2024-22025 CVE-2024-25629 CVE-2024-27983 CVE-2024-28182 - Fix CVE-2024-22019 - Update version of bundled nghttp2 in spec file - Update bundled nghttp2 to 1.57.0 (CVE-2023-44487) - Rebase to 16.20.2 Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559 - Fix segfault that happens when processing fips-related options Resolves: BZ#2227796 - Rebase to 16.20.1 Resolves: rhbz#2188291 Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590 - Replace /usr/etc/npmrc symlink with builtin configuration Resolves: rhbz#2177781 - Update to version 18.20.8 Resolves: RHEL-88884 RHEL-89802 - Disable npm's update-notifier Resolves: RHEL-81091 - Update to version 18.20.6 Resolves: RHEL-76801 Fixes: CVE-2025-23085 - Update to 18.20.4 Fixes: CVE-2024-22020 CVE-2024-28863 - Removes .ps1 files - Rebase to 18.20.2 - Fix: CVE-2024-27983, CVE-2024-28182, CVE-2024-27982, CVE-2024-25629 - Rebase to version 18.19.1 - Fixes: CVE-2024-21892 CVE-2024-22019 (high) - Fixes: CVE-2023-46809 (medium) - Rebase to version 18.19.0 Resolves: RHEL-21436 - Rebase to version 18.17.1 Resolves: rhbz#2228940 Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559 - Specify proper OpenSSL configuration section build Related: rhbz#2226726 - Fix segfault that happens when processing fips-related options Resolves: BZ#2226726 - Update to version 20.20.2 Patch nghttp2 to version 1.68.1 and disable tests which would fail due to this change. Resolves: RHEL-164336 Fixes: CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 CVE-2026-21710 - Update to version 20.20.0 Resolves: RHEL-141917 - Update to version 20.19.5 Resolves: RHEL-114749 - Update to version 20.19.2 Resolves: RHEL-92865 RHEL-88876 RHEL-91597 - Update to version 20.19.1 Resolves: RHEL-78764 - Update c-ares to 1.34.5 to address CVE-2025-31498 - Disable npm's update-notifier Resolves: RHEL-81078 - Update to version 20.18.2 Fixes: CVE-2025-23083 CVE-2025-23085 CVE-2025-22150 Resolves: RHEL-76363 RHEL-76554 RHEL-76540 - Update to version 20.18.1 - Update to 20.17.0 Resolves: RHEL-58721 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163369 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to 22.22.0 Resolves: RHEL-141879 - Update to 22.19.0 Resolves: RHEL-100426 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Update to 22.15.0 - Drop upstream patches - Patch fix for sqlite CVE-2025-31498 Resolves: RHEL-87320 - Update c-ares to newest version with fix for CVE-2025-31498 Resolves: RHEL-86587 - Remove obsolete lua pretransaction script from spec file Resolves: RHEL-81119 - Disable npm update notifications for users Resolves: RHEL-81079 - Update to version 22.13.1 Fixes CVE-2025-23083 CVE-2025-23085 CVE-2025-22150 Resolves: RHEL-76354 - Update to version 22.23.1 Resolves: RHEL-186622 RHEL-185998 RHEL-183669 Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-2026-48931 CVE-2026-48935 CVE-2026-42338 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163370 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to 22.22.0 Resolves: RHEL-118153 - Update to 22.19.0 Resolves: RHEL-111913 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Update to 22.15.0 - Drop upstream patches - Patch fix for sqlite CVE-2025-31498 Resolves: RHEL-87320 - Update c-ares to newest version with fix for CVE-2025-31498 Resolves: RHEL-86587 - Remove obsolete lua pretransaction script from spec file Resolves: RHEL-81119 - Disable npm update notifications for users Resolves: RHEL-81079 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) by rebasing npm's bundled tar to 7.5.19 - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion Fixes: CVE-2026-59873 CVE-2026-59874 CVE-2026-13149 Resolves: RHEL-212550 RHEL-193849 RHEL-193891 RHEL-208680 - Update to version 22.23.1 Resolves: RHEL-186622 RHEL-185998 RHEL-183669 Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-2026-48931 CVE-2026-48935 CVE-2026-42338 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163370 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to 22.22.0 Resolves: RHEL-118153 - Update to 22.19.0 Resolves: RHEL-111913 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Update to 22.15.0 - Drop upstream patches - Patch fix for sqlite CVE-2025-31498 Resolves: RHEL-87320 - Update c-ares to newest version with fix for CVE-2025-31498 Resolves: RHEL-86587 - deps: update npm/ip-address to 10.4.0 - deps: update npm/brace-expansion to 2.1.4 Fix: CVE-2026-69192 & CVE-2026-54272 CVE-2026-69152 Resolves: RHEL-223914 RHEL-223798 - deps: update sqlite to 3.53.4 Fix: CVE-2026-11824, CVE-2026-11822 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) by rebasing npm's bundled tar to 7.5.19 - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion Fixes: CVE-2026-59873 CVE-2026-59874 CVE-2026-13149 Resolves: RHEL-212550 RHEL-193849 RHEL-193891 RHEL-208680 - Update to version 22.23.1 Resolves: RHEL-186622 RHEL-185998 RHEL-183669 Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-2026-48931 CVE-2026-48935 CVE-2026-42338 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163370 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to 22.22.0 Resolves: RHEL-118153 - Update to 22.19.0 Resolves: RHEL-111913 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Update to 22.15.0 - Drop upstream patches - Update to version 22.23.2 Fixes: CVE-2026-56846 CVE-2026-56848 CVE-2026-58043 Resolves: RHEL-234381 RHEL-234831 RHEL-234896 - deps: update npm/ip-address to 10.4.0 - deps: update npm/brace-expansion to 2.1.4 Fix: CVE-2026-69192 & CVE-2026-54272 CVE-2026-69152 Resolves: RHEL-223914 RHEL-223798 - deps: update sqlite to 3.53.4 Fix: CVE-2026-11824, CVE-2026-11822 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) by rebasing npm's bundled tar to 7.5.19 - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion Fixes: CVE-2026-59873 CVE-2026-59874 CVE-2026-13149 Resolves: RHEL-212550 RHEL-193849 RHEL-193891 RHEL-208680 - Update to version 22.23.1 Resolves: RHEL-186622 RHEL-185998 RHEL-183669 Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-2026-48931 CVE-2026-48935 CVE-2026-42338 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163370 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to 22.22.0 Resolves: RHEL-118153 - Update to 22.19.0 Resolves: RHEL-111913 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Patches Pacote CVE and update undici to 6.28.1 Fixes: CVE-2026-9496 CVE-2026-19534 Resolves: RHEL-259889 RHEL-255272 - Update to version 22.23.2 Fixes: CVE-2026-56846 CVE-2026-56848 CVE-2026-58043 Resolves: RHEL-234381 RHEL-234831 RHEL-234896 - deps: update npm/ip-address to 10.4.0 - deps: update npm/brace-expansion to 2.1.4 Fix: CVE-2026-69192 & CVE-2026-54272 CVE-2026-69152 Resolves: RHEL-223914 RHEL-223798 - deps: update sqlite to 3.53.4 Fix: CVE-2026-11824, CVE-2026-11822 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) by rebasing npm's bundled tar to 7.5.19 - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion Fixes: CVE-2026-59873 CVE-2026-59874 CVE-2026-13149 Resolves: RHEL-212550 RHEL-193849 RHEL-193891 RHEL-208680 - Update to version 22.23.1 Resolves: RHEL-186622 RHEL-185998 RHEL-183669 Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-2026-48931 CVE-2026-48935 CVE-2026-42338 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163370 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to 22.22.0 Resolves: RHEL-118153 - Update to 22.19.0 Resolves: RHEL-111913 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Update to version 24.13.0 - Disable test-tls-session-cache.js as its not currently compatiable with RHEL environment - Update to version 24.11.1 - Add patch to prevent fips usage segfault - Rename nodejs-npm back to npm - Make nodejs-npm provide npm as well - Remove sqlite extension test - Switch to compilation using gcc-toolset-12 - Update to version 24.18.0 - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Update to version 24.13.0 - Disable test-tls-session-cache.js as its not currently compatiable with RHEL environment - Update to version 24.11.1 - Add patch to prevent fips usage segfault - Rename nodejs-npm back to npm - Make nodejs-npm provide npm as well - Remove sqlite extension test - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) in npm's bundled tar - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion - Update to version 24.18.0 - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Update to version 24.13.0 - Disable test-tls-session-cache.js as its not currently compatiable with RHEL environment - Update to version 24.11.1 - Add patch to prevent fips usage segfault - Rename nodejs-npm back to npm - Update brace-expansion from 5.0.6 to 5.0.9 to address CVE-2026-13149 (memory exhaustion via deeply chained brace groups). as well as CVE-2026-14257 (fixed in 5.0.8). - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - deps: update sqlite to 3.53.4 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) in npm's bundled tar - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion - Update to version 24.18.0 - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Update to version 24.13.0 - Disable test-tls-session-cache.js as its not currently compatiable with RHEL environment - Update to version 24.19.0 - Update brace-expansion from 5.0.6 to 5.0.9 to address CVE-2026-13149 (memory exhaustion via deeply chained brace groups). as well as CVE-2026-14257 (fixed in 5.0.8). - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - deps: update sqlite to 3.53.4 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) in npm's bundled tar - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion - Update to version 24.18.0 - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Update to version 24.13.0 - Update to version 24.21.0 - Update to version 24.19.0 - Update brace-expansion from 5.0.6 to 5.0.9 to address CVE-2026-13149 (memory exhaustion via deeply chained brace groups). as well as CVE-2026-14257 (fixed in 5.0.8). - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - deps: update sqlite to 3.53.4 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) in npm's bundled tar - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion - Update to version 24.18.0 - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Update to version 18.20.8 Resolves: RHEL-88884 RHEL-89802 - Disable npm's update-notifier Resolves: RHEL-81091 - Update to version 18.20.6 Resolves: RHEL-76801 Fixes: CVE-2025-23085 - Update to 18.20.4 Fixes: CVE-2024-22020 CVE-2024-28863 - Removes .ps1 files - Rebase to 18.20.2 - Fix: CVE-2024-27983, CVE-2024-28182, CVE-2024-27982, CVE-2024-25629 - Rebase to version 18.19.1 - Fixes: CVE-2024-21892 CVE-2024-22019 (high) - Fixes: CVE-2023-46809 (medium) - Rebase to version 18.19.0 Resolves: RHEL-21436 - Rebase to version 18.17.1 Resolves: rhbz#2228940 Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559 - Specify proper OpenSSL configuration section build Related: rhbz#2226726 - Fix segfault that happens when processing fips-related options Resolves: BZ#2226726 - Update to version 20.20.2 Patch nghttp2 to version 1.68.1 and disable tests which would fail due to this change. Resolves: RHEL-164336 Fixes: CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 CVE-2026-21710 - Update to version 20.20.0 Resolves: RHEL-141917 - Update to version 20.19.5 Resolves: RHEL-114749 - Update to version 20.19.2 Resolves: RHEL-92865 RHEL-88876 RHEL-91597 - Update to version 20.19.1 Resolves: RHEL-78764 - Update c-ares to 1.34.5 to address CVE-2025-31498 - Disable npm's update-notifier Resolves: RHEL-81078 - Update to version 20.18.2 Fixes: CVE-2025-23083 CVE-2025-23085 CVE-2025-22150 Resolves: RHEL-76363 RHEL-76554 RHEL-76540 - Update to version 20.18.1 - Update to 20.17.0 Resolves: RHEL-58721 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163369 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to 22.22.0 Resolves: RHEL-141879 - Update to 22.19.0 Resolves: RHEL-100426 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Update to 22.15.0 - Drop upstream patches - Patch fix for sqlite CVE-2025-31498 Resolves: RHEL-87320 - Update c-ares to newest version with fix for CVE-2025-31498 Resolves: RHEL-86587 - Remove obsolete lua pretransaction script from spec file Resolves: RHEL-81119 - Disable npm update notifications for users Resolves: RHEL-81079 - Update to version 22.13.1 Fixes CVE-2025-23083 CVE-2025-23085 CVE-2025-22150 Resolves: RHEL-76354 - Update to version 22.23.1 Resolves: RHEL-186622 RHEL-185998 RHEL-183669 Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-2026-48931 CVE-2026-48935 CVE-2026-42338 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163370 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to 22.22.0 Resolves: RHEL-118153 - Update to 22.19.0 Resolves: RHEL-111913 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Update to 22.15.0 - Drop upstream patches - Patch fix for sqlite CVE-2025-31498 Resolves: RHEL-87320 - Update c-ares to newest version with fix for CVE-2025-31498 Resolves: RHEL-86587 - Remove obsolete lua pretransaction script from spec file Resolves: RHEL-81119 - Disable npm update notifications for users Resolves: RHEL-81079 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) by rebasing npm's bundled tar to 7.5.19 - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion Fixes: CVE-2026-59873 CVE-2026-59874 CVE-2026-13149 Resolves: RHEL-212550 RHEL-193849 RHEL-193891 RHEL-208680 - Update to version 22.23.1 Resolves: RHEL-186622 RHEL-185998 RHEL-183669 Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-2026-48931 CVE-2026-48935 CVE-2026-42338 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163370 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to 22.22.0 Resolves: RHEL-118153 - Update to 22.19.0 Resolves: RHEL-111913 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Update to 22.15.0 - Drop upstream patches - Patch fix for sqlite CVE-2025-31498 Resolves: RHEL-87320 - Update c-ares to newest version with fix for CVE-2025-31498 Resolves: RHEL-86587 - deps: update npm/ip-address to 10.4.0 - deps: update npm/brace-expansion to 2.1.4 Fix: CVE-2026-69192 & CVE-2026-54272 CVE-2026-69152 Resolves: RHEL-223914 RHEL-223798 - deps: update sqlite to 3.53.4 Fix: CVE-2026-11824, CVE-2026-11822 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) by rebasing npm's bundled tar to 7.5.19 - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion Fixes: CVE-2026-59873 CVE-2026-59874 CVE-2026-13149 Resolves: RHEL-212550 RHEL-193849 RHEL-193891 RHEL-208680 - Update to version 22.23.1 Resolves: RHEL-186622 RHEL-185998 RHEL-183669 Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-2026-48931 CVE-2026-48935 CVE-2026-42338 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163370 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to 22.22.0 Resolves: RHEL-118153 - Update to 22.19.0 Resolves: RHEL-111913 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Update to 22.15.0 - Drop upstream patches - Update to version 22.23.2 Fixes: CVE-2026-56846 CVE-2026-56848 CVE-2026-58043 Resolves: RHEL-234381 RHEL-234831 RHEL-234896 - deps: update npm/ip-address to 10.4.0 - deps: update npm/brace-expansion to 2.1.4 Fix: CVE-2026-69192 & CVE-2026-54272 CVE-2026-69152 Resolves: RHEL-223914 RHEL-223798 - deps: update sqlite to 3.53.4 Fix: CVE-2026-11824, CVE-2026-11822 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) by rebasing npm's bundled tar to 7.5.19 - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion Fixes: CVE-2026-59873 CVE-2026-59874 CVE-2026-13149 Resolves: RHEL-212550 RHEL-193849 RHEL-193891 RHEL-208680 - Update to version 22.23.1 Resolves: RHEL-186622 RHEL-185998 RHEL-183669 Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-2026-48931 CVE-2026-48935 CVE-2026-42338 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163370 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to 22.22.0 Resolves: RHEL-118153 - Update to 22.19.0 Resolves: RHEL-111913 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Patches Pacote CVE and update undici to 6.28.1 Fixes: CVE-2026-9496 CVE-2026-19534 Resolves: RHEL-259889 RHEL-255272 - Update to version 22.23.2 Fixes: CVE-2026-56846 CVE-2026-56848 CVE-2026-58043 Resolves: RHEL-234381 RHEL-234831 RHEL-234896 - deps: update npm/ip-address to 10.4.0 - deps: update npm/brace-expansion to 2.1.4 Fix: CVE-2026-69192 & CVE-2026-54272 CVE-2026-69152 Resolves: RHEL-223914 RHEL-223798 - deps: update sqlite to 3.53.4 Fix: CVE-2026-11824, CVE-2026-11822 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) by rebasing npm's bundled tar to 7.5.19 - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion Fixes: CVE-2026-59873 CVE-2026-59874 CVE-2026-13149 Resolves: RHEL-212550 RHEL-193849 RHEL-193891 RHEL-208680 - Update to version 22.23.1 Resolves: RHEL-186622 RHEL-185998 RHEL-183669 Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-2026-48931 CVE-2026-48935 CVE-2026-42338 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163370 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to 22.22.0 Resolves: RHEL-118153 - Update to 22.19.0 Resolves: RHEL-111913 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Update to version 24.13.0 - Disable test-tls-session-cache.js as its not currently compatiable with RHEL environment - Update to version 24.11.1 - Add patch to prevent fips usage segfault - Rename nodejs-npm back to npm - Make nodejs-npm provide npm as well - Remove sqlite extension test - Switch to compilation using gcc-toolset-12 - Update to version 24.18.0 - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Update to version 24.13.0 - Disable test-tls-session-cache.js as its not currently compatiable with RHEL environment - Update to version 24.11.1 - Add patch to prevent fips usage segfault - Rename nodejs-npm back to npm - Make nodejs-npm provide npm as well - Remove sqlite extension test - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) in npm's bundled tar - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion - Update to version 24.18.0 - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Update to version 24.13.0 - Disable test-tls-session-cache.js as its not currently compatiable with RHEL environment - Update to version 24.11.1 - Add patch to prevent fips usage segfault - Rename nodejs-npm back to npm - Update brace-expansion from 5.0.6 to 5.0.9 to address CVE-2026-13149 (memory exhaustion via deeply chained brace groups). as well as CVE-2026-14257 (fixed in 5.0.8). - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - deps: update sqlite to 3.53.4 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) in npm's bundled tar - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion - Update to version 24.18.0 - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Update to version 24.13.0 - Disable test-tls-session-cache.js as its not currently compatiable with RHEL environment - Update to version 24.19.0 - Update brace-expansion from 5.0.6 to 5.0.9 to address CVE-2026-13149 (memory exhaustion via deeply chained brace groups). as well as CVE-2026-14257 (fixed in 5.0.8). - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - deps: update sqlite to 3.53.4 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) in npm's bundled tar - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion - Update to version 24.18.0 - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Update to version 24.13.0 - Update to version 24.21.0 - Update to version 24.19.0 - Update brace-expansion from 5.0.6 to 5.0.9 to address CVE-2026-13149 (memory exhaustion via deeply chained brace groups). as well as CVE-2026-14257 (fixed in 5.0.8). - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - deps: update sqlite to 3.53.4 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) in npm's bundled tar - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion - Update to version 24.18.0 - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Actually apply the patch for CVE-2024-27982 - Backport patch for CVE-2024-27982 - Use system OpenSSL configuration section - Backport patches for several CVEs. Fixes CVE-2024-22025 CVE-2024-25629 CVE-2024-27983 CVE-2024-28182 - Fix CVE-2024-22019 - Update version of bundled nghttp2 in spec file - Update bundled nghttp2 to 1.57.0 (CVE-2023-44487) - Rebase to 16.20.2 Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559 - Fix segfault that happens when processing fips-related options Resolves: BZ#2227796 - Rebase to 16.20.1 Resolves: rhbz#2188291 Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590 - Replace /usr/etc/npmrc symlink with builtin configuration Resolves: rhbz#2177781 - Update to version 18.20.8 Resolves: RHEL-88884 RHEL-89802 - Disable npm's update-notifier Resolves: RHEL-81091 - Update to version 18.20.6 Resolves: RHEL-76801 Fixes: CVE-2025-23085 - Update to 18.20.4 Fixes: CVE-2024-22020 CVE-2024-28863 - Removes .ps1 files - Rebase to 18.20.2 - Fix: CVE-2024-27983, CVE-2024-28182, CVE-2024-27982, CVE-2024-25629 - Rebase to version 18.19.1 - Fixes: CVE-2024-21892 CVE-2024-22019 (high) - Fixes: CVE-2023-46809 (medium) - Rebase to version 18.19.0 Resolves: RHEL-21436 - Rebase to version 18.17.1 Resolves: rhbz#2228940 Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559 - Specify proper OpenSSL configuration section build Related: rhbz#2226726 - Fix segfault that happens when processing fips-related options Resolves: BZ#2226726 - Update to version 20.20.2 Patch nghttp2 to version 1.68.1 and disable tests which would fail due to this change. Resolves: RHEL-164336 Fixes: CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 CVE-2026-21710 - Update to version 20.20.0 Resolves: RHEL-141917 - Update to version 20.19.5 Resolves: RHEL-114749 - Update to version 20.19.2 Resolves: RHEL-92865 RHEL-88876 RHEL-91597 - Update to version 20.19.1 Resolves: RHEL-78764 - Update c-ares to 1.34.5 to address CVE-2025-31498 - Disable npm's update-notifier Resolves: RHEL-81078 - Update to version 20.18.2 Fixes: CVE-2025-23083 CVE-2025-23085 CVE-2025-22150 Resolves: RHEL-76363 RHEL-76554 RHEL-76540 - Update to version 20.18.1 - Update to 20.17.0 Resolves: RHEL-58721 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163369 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to 22.22.0 Resolves: RHEL-141879 - Update to 22.19.0 Resolves: RHEL-100426 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Update to 22.15.0 - Drop upstream patches - Patch fix for sqlite CVE-2025-31498 Resolves: RHEL-87320 - Update c-ares to newest version with fix for CVE-2025-31498 Resolves: RHEL-86587 - Remove obsolete lua pretransaction script from spec file Resolves: RHEL-81119 - Disable npm update notifications for users Resolves: RHEL-81079 - Update to version 22.13.1 Fixes CVE-2025-23083 CVE-2025-23085 CVE-2025-22150 Resolves: RHEL-76354 - Update to version 22.23.1 Resolves: RHEL-186622 RHEL-185998 RHEL-183669 Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-2026-48931 CVE-2026-48935 CVE-2026-42338 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163370 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to 22.22.0 Resolves: RHEL-118153 - Update to 22.19.0 Resolves: RHEL-111913 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Update to 22.15.0 - Drop upstream patches - Patch fix for sqlite CVE-2025-31498 Resolves: RHEL-87320 - Update c-ares to newest version with fix for CVE-2025-31498 Resolves: RHEL-86587 - Remove obsolete lua pretransaction script from spec file Resolves: RHEL-81119 - Disable npm update notifications for users Resolves: RHEL-81079 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) by rebasing npm's bundled tar to 7.5.19 - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion Fixes: CVE-2026-59873 CVE-2026-59874 CVE-2026-13149 Resolves: RHEL-212550 RHEL-193849 RHEL-193891 RHEL-208680 - Update to version 22.23.1 Resolves: RHEL-186622 RHEL-185998 RHEL-183669 Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-2026-48931 CVE-2026-48935 CVE-2026-42338 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163370 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to 22.22.0 Resolves: RHEL-118153 - Update to 22.19.0 Resolves: RHEL-111913 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Update to 22.15.0 - Drop upstream patches - Patch fix for sqlite CVE-2025-31498 Resolves: RHEL-87320 - Update c-ares to newest version with fix for CVE-2025-31498 Resolves: RHEL-86587 - deps: update npm/ip-address to 10.4.0 - deps: update npm/brace-expansion to 2.1.4 Fix: CVE-2026-69192 & CVE-2026-54272 CVE-2026-69152 Resolves: RHEL-223914 RHEL-223798 - deps: update sqlite to 3.53.4 Fix: CVE-2026-11824, CVE-2026-11822 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) by rebasing npm's bundled tar to 7.5.19 - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion Fixes: CVE-2026-59873 CVE-2026-59874 CVE-2026-13149 Resolves: RHEL-212550 RHEL-193849 RHEL-193891 RHEL-208680 - Update to version 22.23.1 Resolves: RHEL-186622 RHEL-185998 RHEL-183669 Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-2026-48931 CVE-2026-48935 CVE-2026-42338 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163370 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to 22.22.0 Resolves: RHEL-118153 - Update to 22.19.0 Resolves: RHEL-111913 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Update to 22.15.0 - Drop upstream patches - Update to version 22.23.2 Fixes: CVE-2026-56846 CVE-2026-56848 CVE-2026-58043 Resolves: RHEL-234381 RHEL-234831 RHEL-234896 - deps: update npm/ip-address to 10.4.0 - deps: update npm/brace-expansion to 2.1.4 Fix: CVE-2026-69192 & CVE-2026-54272 CVE-2026-69152 Resolves: RHEL-223914 RHEL-223798 - deps: update sqlite to 3.53.4 Fix: CVE-2026-11824, CVE-2026-11822 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) by rebasing npm's bundled tar to 7.5.19 - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion Fixes: CVE-2026-59873 CVE-2026-59874 CVE-2026-13149 Resolves: RHEL-212550 RHEL-193849 RHEL-193891 RHEL-208680 - Update to version 22.23.1 Resolves: RHEL-186622 RHEL-185998 RHEL-183669 Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-2026-48931 CVE-2026-48935 CVE-2026-42338 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163370 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to 22.22.0 Resolves: RHEL-118153 - Update to 22.19.0 Resolves: RHEL-111913 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Patches Pacote CVE and update undici to 6.28.1 Fixes: CVE-2026-9496 CVE-2026-19534 Resolves: RHEL-259889 RHEL-255272 - Update to version 22.23.2 Fixes: CVE-2026-56846 CVE-2026-56848 CVE-2026-58043 Resolves: RHEL-234381 RHEL-234831 RHEL-234896 - deps: update npm/ip-address to 10.4.0 - deps: update npm/brace-expansion to 2.1.4 Fix: CVE-2026-69192 & CVE-2026-54272 CVE-2026-69152 Resolves: RHEL-223914 RHEL-223798 - deps: update sqlite to 3.53.4 Fix: CVE-2026-11824, CVE-2026-11822 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) by rebasing npm's bundled tar to 7.5.19 - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion Fixes: CVE-2026-59873 CVE-2026-59874 CVE-2026-13149 Resolves: RHEL-212550 RHEL-193849 RHEL-193891 RHEL-208680 - Update to version 22.23.1 Resolves: RHEL-186622 RHEL-185998 RHEL-183669 Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-2026-48931 CVE-2026-48935 CVE-2026-42338 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163370 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to 22.22.0 Resolves: RHEL-118153 - Update to 22.19.0 Resolves: RHEL-111913 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Update to version 24.13.0 - Disable test-tls-session-cache.js as its not currently compatiable with RHEL environment - Update to version 24.11.1 - Add patch to prevent fips usage segfault - Rename nodejs-npm back to npm - Make nodejs-npm provide npm as well - Remove sqlite extension test - Switch to compilation using gcc-toolset-12 - Update to version 24.18.0 - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Update to version 24.13.0 - Disable test-tls-session-cache.js as its not currently compatiable with RHEL environment - Update to version 24.11.1 - Add patch to prevent fips usage segfault - Rename nodejs-npm back to npm - Make nodejs-npm provide npm as well - Remove sqlite extension test - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) in npm's bundled tar - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion - Update to version 24.18.0 - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Update to version 24.13.0 - Disable test-tls-session-cache.js as its not currently compatiable with RHEL environment - Update to version 24.11.1 - Add patch to prevent fips usage segfault - Rename nodejs-npm back to npm - Update brace-expansion from 5.0.6 to 5.0.9 to address CVE-2026-13149 (memory exhaustion via deeply chained brace groups). as well as CVE-2026-14257 (fixed in 5.0.8). - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - deps: update sqlite to 3.53.4 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) in npm's bundled tar - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion - Update to version 24.18.0 - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Update to version 24.13.0 - Disable test-tls-session-cache.js as its not currently compatiable with RHEL environment - Update to version 24.19.0 - Update brace-expansion from 5.0.6 to 5.0.9 to address CVE-2026-13149 (memory exhaustion via deeply chained brace groups). as well as CVE-2026-14257 (fixed in 5.0.8). - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - deps: update sqlite to 3.53.4 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) in npm's bundled tar - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion - Update to version 24.18.0 - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Update to version 24.13.0 - Update to version 24.21.0 - Update to version 24.19.0 - Update brace-expansion from 5.0.6 to 5.0.9 to address CVE-2026-13149 (memory exhaustion via deeply chained brace groups). as well as CVE-2026-14257 (fixed in 5.0.8). - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - deps: update sqlite to 3.53.4 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) in npm's bundled tar - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion - Update to version 24.18.0 - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Actually apply the patch for CVE-2024-27982 - Backport patch for CVE-2024-27982 - Use system OpenSSL configuration section - Backport patches for several CVEs. Fixes CVE-2024-22025 CVE-2024-25629 CVE-2024-27983 CVE-2024-28182 - Fix CVE-2024-22019 - Update version of bundled nghttp2 in spec file - Update bundled nghttp2 to 1.57.0 (CVE-2023-44487) - Rebase to 16.20.2 Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559 - Fix segfault that happens when processing fips-related options Resolves: BZ#2227796 - Rebase to 16.20.1 Resolves: rhbz#2188291 Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590 - Replace /usr/etc/npmrc symlink with builtin configuration Resolves: rhbz#2177781 - Update to version 18.20.8 Resolves: RHEL-88884 RHEL-89802 - Disable npm's update-notifier Resolves: RHEL-81091 - Update to version 18.20.6 Resolves: RHEL-76801 Fixes: CVE-2025-23085 - Update to 18.20.4 Fixes: CVE-2024-22020 CVE-2024-28863 - Removes .ps1 files - Rebase to 18.20.2 - Fix: CVE-2024-27983, CVE-2024-28182, CVE-2024-27982, CVE-2024-25629 - Rebase to version 18.19.1 - Fixes: CVE-2024-21892 CVE-2024-22019 (high) - Fixes: CVE-2023-46809 (medium) - Rebase to version 18.19.0 Resolves: RHEL-21436 - Rebase to version 18.17.1 Resolves: rhbz#2228940 Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559 - Specify proper OpenSSL configuration section build Related: rhbz#2226726 - Fix segfault that happens when processing fips-related options Resolves: BZ#2226726 - Update to version 20.20.2 Patch nghttp2 to version 1.68.1 and disable tests which would fail due to this change. Resolves: RHEL-164336 Fixes: CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 CVE-2026-21710 - Update to version 20.20.0 Resolves: RHEL-141917 - Update to version 20.19.5 Resolves: RHEL-114749 - Update to version 20.19.2 Resolves: RHEL-92865 RHEL-88876 RHEL-91597 - Update to version 20.19.1 Resolves: RHEL-78764 - Update c-ares to 1.34.5 to address CVE-2025-31498 - Disable npm's update-notifier Resolves: RHEL-81078 - Update to version 20.18.2 Fixes: CVE-2025-23083 CVE-2025-23085 CVE-2025-22150 Resolves: RHEL-76363 RHEL-76554 RHEL-76540 - Update to version 20.18.1 - Update to 20.17.0 Resolves: RHEL-58721 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163369 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to 22.22.0 Resolves: RHEL-141879 - Update to 22.19.0 Resolves: RHEL-100426 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Update to 22.15.0 - Drop upstream patches - Patch fix for sqlite CVE-2025-31498 Resolves: RHEL-87320 - Update c-ares to newest version with fix for CVE-2025-31498 Resolves: RHEL-86587 - Remove obsolete lua pretransaction script from spec file Resolves: RHEL-81119 - Disable npm update notifications for users Resolves: RHEL-81079 - Update to version 22.13.1 Fixes CVE-2025-23083 CVE-2025-23085 CVE-2025-22150 Resolves: RHEL-76354 - Update to version 22.23.1 Resolves: RHEL-186622 RHEL-185998 RHEL-183669 Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-2026-48931 CVE-2026-48935 CVE-2026-42338 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163370 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to 22.22.0 Resolves: RHEL-118153 - Update to 22.19.0 Resolves: RHEL-111913 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Update to 22.15.0 - Drop upstream patches - Patch fix for sqlite CVE-2025-31498 Resolves: RHEL-87320 - Update c-ares to newest version with fix for CVE-2025-31498 Resolves: RHEL-86587 - Remove obsolete lua pretransaction script from spec file Resolves: RHEL-81119 - Disable npm update notifications for users Resolves: RHEL-81079 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) by rebasing npm's bundled tar to 7.5.19 - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion Fixes: CVE-2026-59873 CVE-2026-59874 CVE-2026-13149 Resolves: RHEL-212550 RHEL-193849 RHEL-193891 RHEL-208680 - Update to version 22.23.1 Resolves: RHEL-186622 RHEL-185998 RHEL-183669 Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-2026-48931 CVE-2026-48935 CVE-2026-42338 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163370 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to 22.22.0 Resolves: RHEL-118153 - Update to 22.19.0 Resolves: RHEL-111913 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Update to 22.15.0 - Drop upstream patches - Patch fix for sqlite CVE-2025-31498 Resolves: RHEL-87320 - Update c-ares to newest version with fix for CVE-2025-31498 Resolves: RHEL-86587 - deps: update npm/ip-address to 10.4.0 - deps: update npm/brace-expansion to 2.1.4 Fix: CVE-2026-69192 & CVE-2026-54272 CVE-2026-69152 Resolves: RHEL-223914 RHEL-223798 - deps: update sqlite to 3.53.4 Fix: CVE-2026-11824, CVE-2026-11822 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) by rebasing npm's bundled tar to 7.5.19 - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion Fixes: CVE-2026-59873 CVE-2026-59874 CVE-2026-13149 Resolves: RHEL-212550 RHEL-193849 RHEL-193891 RHEL-208680 - Update to version 22.23.1 Resolves: RHEL-186622 RHEL-185998 RHEL-183669 Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-2026-48931 CVE-2026-48935 CVE-2026-42338 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163370 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to 22.22.0 Resolves: RHEL-118153 - Update to 22.19.0 Resolves: RHEL-111913 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Update to 22.15.0 - Drop upstream patches - Update to version 22.23.2 Fixes: CVE-2026-56846 CVE-2026-56848 CVE-2026-58043 Resolves: RHEL-234381 RHEL-234831 RHEL-234896 - deps: update npm/ip-address to 10.4.0 - deps: update npm/brace-expansion to 2.1.4 Fix: CVE-2026-69192 & CVE-2026-54272 CVE-2026-69152 Resolves: RHEL-223914 RHEL-223798 - deps: update sqlite to 3.53.4 Fix: CVE-2026-11824, CVE-2026-11822 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) by rebasing npm's bundled tar to 7.5.19 - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion Fixes: CVE-2026-59873 CVE-2026-59874 CVE-2026-13149 Resolves: RHEL-212550 RHEL-193849 RHEL-193891 RHEL-208680 - Update to version 22.23.1 Resolves: RHEL-186622 RHEL-185998 RHEL-183669 Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-2026-48931 CVE-2026-48935 CVE-2026-42338 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163370 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to 22.22.0 Resolves: RHEL-118153 - Update to 22.19.0 Resolves: RHEL-111913 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Patches Pacote CVE and update undici to 6.28.1 Fixes: CVE-2026-9496 CVE-2026-19534 Resolves: RHEL-259889 RHEL-255272 - Update to version 22.23.2 Fixes: CVE-2026-56846 CVE-2026-56848 CVE-2026-58043 Resolves: RHEL-234381 RHEL-234831 RHEL-234896 - deps: update npm/ip-address to 10.4.0 - deps: update npm/brace-expansion to 2.1.4 Fix: CVE-2026-69192 & CVE-2026-54272 CVE-2026-69152 Resolves: RHEL-223914 RHEL-223798 - deps: update sqlite to 3.53.4 Fix: CVE-2026-11824, CVE-2026-11822 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) by rebasing npm's bundled tar to 7.5.19 - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion Fixes: CVE-2026-59873 CVE-2026-59874 CVE-2026-13149 Resolves: RHEL-212550 RHEL-193849 RHEL-193891 RHEL-208680 - Update to version 22.23.1 Resolves: RHEL-186622 RHEL-185998 RHEL-183669 Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-2026-48931 CVE-2026-48935 CVE-2026-42338 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163370 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to 22.22.0 Resolves: RHEL-118153 - Update to 22.19.0 Resolves: RHEL-111913 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Update to version 24.13.0 - Disable test-tls-session-cache.js as its not currently compatiable with RHEL environment - Update to version 24.11.1 - Add patch to prevent fips usage segfault - Rename nodejs-npm back to npm - Make nodejs-npm provide npm as well - Remove sqlite extension test - Switch to compilation using gcc-toolset-12 - Update to version 24.18.0 - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Update to version 24.13.0 - Disable test-tls-session-cache.js as its not currently compatiable with RHEL environment - Update to version 24.11.1 - Add patch to prevent fips usage segfault - Rename nodejs-npm back to npm - Make nodejs-npm provide npm as well - Remove sqlite extension test - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) in npm's bundled tar - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion - Update to version 24.18.0 - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Update to version 24.13.0 - Disable test-tls-session-cache.js as its not currently compatiable with RHEL environment - Update to version 24.11.1 - Add patch to prevent fips usage segfault - Rename nodejs-npm back to npm - Update brace-expansion from 5.0.6 to 5.0.9 to address CVE-2026-13149 (memory exhaustion via deeply chained brace groups). as well as CVE-2026-14257 (fixed in 5.0.8). - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - deps: update sqlite to 3.53.4 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) in npm's bundled tar - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion - Update to version 24.18.0 - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Update to version 24.13.0 - Disable test-tls-session-cache.js as its not currently compatiable with RHEL environment - Update to version 24.19.0 - Update brace-expansion from 5.0.6 to 5.0.9 to address CVE-2026-13149 (memory exhaustion via deeply chained brace groups). as well as CVE-2026-14257 (fixed in 5.0.8). - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - deps: update sqlite to 3.53.4 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) in npm's bundled tar - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion - Update to version 24.18.0 - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Update to version 24.13.0 - Update to version 24.21.0 - Update to version 24.19.0 - Update brace-expansion from 5.0.6 to 5.0.9 to address CVE-2026-13149 (memory exhaustion via deeply chained brace groups). as well as CVE-2026-14257 (fixed in 5.0.8). - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - deps: update sqlite to 3.53.4 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) in npm's bundled tar - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion - Update to version 24.18.0 - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Actually apply the patch for CVE-2024-27982 - Backport patch for CVE-2024-27982 - Use system OpenSSL configuration section - Backport patches for several CVEs. Fixes CVE-2024-22025 CVE-2024-25629 CVE-2024-27983 CVE-2024-28182 - Fix CVE-2024-22019 - Update version of bundled nghttp2 in spec file - Update bundled nghttp2 to 1.57.0 (CVE-2023-44487) - Rebase to 16.20.2 Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559 - Fix segfault that happens when processing fips-related options Resolves: BZ#2227796 - Rebase to 16.20.1 Resolves: rhbz#2188291 Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590 - Replace /usr/etc/npmrc symlink with builtin configuration Resolves: rhbz#2177781 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163369 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to 22.22.0 Resolves: RHEL-141879 - Update to 22.19.0 Resolves: RHEL-100426 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Update to 22.15.0 - Drop upstream patches - Patch fix for sqlite CVE-2025-31498 Resolves: RHEL-87320 - Update c-ares to newest version with fix for CVE-2025-31498 Resolves: RHEL-86587 - Remove obsolete lua pretransaction script from spec file Resolves: RHEL-81119 - Disable npm update notifications for users Resolves: RHEL-81079 - Update to version 22.13.1 Fixes CVE-2025-23083 CVE-2025-23085 CVE-2025-22150 Resolves: RHEL-76354 - Update to version 22.23.1 Resolves: RHEL-186622 RHEL-185998 RHEL-183669 Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-2026-48931 CVE-2026-48935 CVE-2026-42338 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163370 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to 22.22.0 Resolves: RHEL-118153 - Update to 22.19.0 Resolves: RHEL-111913 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Update to 22.15.0 - Drop upstream patches - Patch fix for sqlite CVE-2025-31498 Resolves: RHEL-87320 - Update c-ares to newest version with fix for CVE-2025-31498 Resolves: RHEL-86587 - Remove obsolete lua pretransaction script from spec file Resolves: RHEL-81119 - Disable npm update notifications for users Resolves: RHEL-81079 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) by rebasing npm's bundled tar to 7.5.19 - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion Fixes: CVE-2026-59873 CVE-2026-59874 CVE-2026-13149 Resolves: RHEL-212550 RHEL-193849 RHEL-193891 RHEL-208680 - Update to version 22.23.1 Resolves: RHEL-186622 RHEL-185998 RHEL-183669 Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-2026-48931 CVE-2026-48935 CVE-2026-42338 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163370 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to 22.22.0 Resolves: RHEL-118153 - Update to 22.19.0 Resolves: RHEL-111913 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Update to 22.15.0 - Drop upstream patches - Patch fix for sqlite CVE-2025-31498 Resolves: RHEL-87320 - Update c-ares to newest version with fix for CVE-2025-31498 Resolves: RHEL-86587 - deps: update npm/ip-address to 10.4.0 - deps: update npm/brace-expansion to 2.1.4 Fix: CVE-2026-69192 & CVE-2026-54272 CVE-2026-69152 Resolves: RHEL-223914 RHEL-223798 - deps: update sqlite to 3.53.4 Fix: CVE-2026-11824, CVE-2026-11822 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) by rebasing npm's bundled tar to 7.5.19 - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion Fixes: CVE-2026-59873 CVE-2026-59874 CVE-2026-13149 Resolves: RHEL-212550 RHEL-193849 RHEL-193891 RHEL-208680 - Update to version 22.23.1 Resolves: RHEL-186622 RHEL-185998 RHEL-183669 Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-2026-48931 CVE-2026-48935 CVE-2026-42338 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163370 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to 22.22.0 Resolves: RHEL-118153 - Update to 22.19.0 Resolves: RHEL-111913 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Update to 22.15.0 - Drop upstream patches - Update to version 22.23.2 Fixes: CVE-2026-56846 CVE-2026-56848 CVE-2026-58043 Resolves: RHEL-234381 RHEL-234831 RHEL-234896 - deps: update npm/ip-address to 10.4.0 - deps: update npm/brace-expansion to 2.1.4 Fix: CVE-2026-69192 & CVE-2026-54272 CVE-2026-69152 Resolves: RHEL-223914 RHEL-223798 - deps: update sqlite to 3.53.4 Fix: CVE-2026-11824, CVE-2026-11822 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) by rebasing npm's bundled tar to 7.5.19 - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion Fixes: CVE-2026-59873 CVE-2026-59874 CVE-2026-13149 Resolves: RHEL-212550 RHEL-193849 RHEL-193891 RHEL-208680 - Update to version 22.23.1 Resolves: RHEL-186622 RHEL-185998 RHEL-183669 Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-2026-48931 CVE-2026-48935 CVE-2026-42338 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163370 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to 22.22.0 Resolves: RHEL-118153 - Update to 22.19.0 Resolves: RHEL-111913 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Patches Pacote CVE and update undici to 6.28.1 Fixes: CVE-2026-9496 CVE-2026-19534 Resolves: RHEL-259889 RHEL-255272 - Update to version 22.23.2 Fixes: CVE-2026-56846 CVE-2026-56848 CVE-2026-58043 Resolves: RHEL-234381 RHEL-234831 RHEL-234896 - deps: update npm/ip-address to 10.4.0 - deps: update npm/brace-expansion to 2.1.4 Fix: CVE-2026-69192 & CVE-2026-54272 CVE-2026-69152 Resolves: RHEL-223914 RHEL-223798 - deps: update sqlite to 3.53.4 Fix: CVE-2026-11824, CVE-2026-11822 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) by rebasing npm's bundled tar to 7.5.19 - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion Fixes: CVE-2026-59873 CVE-2026-59874 CVE-2026-13149 Resolves: RHEL-212550 RHEL-193849 RHEL-193891 RHEL-208680 - Update to version 22.23.1 Resolves: RHEL-186622 RHEL-185998 RHEL-183669 Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-2026-48931 CVE-2026-48935 CVE-2026-42338 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163370 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to 22.22.0 Resolves: RHEL-118153 - Update to 22.19.0 Resolves: RHEL-111913 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Update to version 24.13.0 - Disable test-tls-session-cache.js as its not currently compatiable with RHEL environment - Update to version 24.11.1 - Add patch to prevent fips usage segfault - Rename nodejs-npm back to npm - Make nodejs-npm provide npm as well - Remove sqlite extension test - Switch to compilation using gcc-toolset-12 - Update to version 24.18.0 - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Update to version 24.13.0 - Disable test-tls-session-cache.js as its not currently compatiable with RHEL environment - Update to version 24.11.1 - Add patch to prevent fips usage segfault - Rename nodejs-npm back to npm - Make nodejs-npm provide npm as well - Remove sqlite extension test - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) in npm's bundled tar - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion - Update to version 24.18.0 - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Update to version 24.13.0 - Disable test-tls-session-cache.js as its not currently compatiable with RHEL environment - Update to version 24.11.1 - Add patch to prevent fips usage segfault - Rename nodejs-npm back to npm - Update brace-expansion from 5.0.6 to 5.0.9 to address CVE-2026-13149 (memory exhaustion via deeply chained brace groups). as well as CVE-2026-14257 (fixed in 5.0.8). - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - deps: update sqlite to 3.53.4 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) in npm's bundled tar - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion - Update to version 24.18.0 - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Update to version 24.13.0 - Disable test-tls-session-cache.js as its not currently compatiable with RHEL environment - Update to version 24.19.0 - Update brace-expansion from 5.0.6 to 5.0.9 to address CVE-2026-13149 (memory exhaustion via deeply chained brace groups). as well as CVE-2026-14257 (fixed in 5.0.8). - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - deps: update sqlite to 3.53.4 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) in npm's bundled tar - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion - Update to version 24.18.0 - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Update to version 24.13.0 - Update to version 24.21.0 - Update to version 24.19.0 - Update brace-expansion from 5.0.6 to 5.0.9 to address CVE-2026-13149 (memory exhaustion via deeply chained brace groups). as well as CVE-2026-14257 (fixed in 5.0.8). - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - deps: update sqlite to 3.53.4 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) in npm's bundled tar - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion - Update to version 24.18.0 - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Patch bundled glob-parent - Resolves: CVE-2021-35065 - Record CVE fixed in the current or previous upstream versions - Resolves: CVE-2021-44906 - Rebase to 2.0.20 Resolves: CVE-2022-3517 - Rebase to 2.0.19 Resolves: CVE-2022-33987 rhbz#2073156 CVE-2021-33502 CVE-2021-3807 CVE-2020-28469 Resolves: CVE-2020-7788 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebase to 3.0.1 - Resolves: CVE-2022-25883 - Patch bundled glob-parent - Resolves: CVE-2021-35065 - Rebase to 2.0.20 Resolves: CVE-2022-3517 - Resolves: RHBZ#2005419 - Resolves CVE-2020-28469 - Rebase to newest version - Change source to npmjs.com - Rebase to 3.0.1 - Resolves: CVE-2022-25883 - Patch bundled glob-parent - Resolves: CVE-2021-35065 - Rebase to 2.0.20 Resolves: CVE-2022-3517 - Resolves: RHBZ#2005419 - Resolves CVE-2020-28469 - Rebase to newest version - Change source to npmjs.com - Rebase to 3.0.1 - Resolves: CVE-2022-25883 - Patch bundled glob-parent - Resolves: CVE-2021-35065 - Rebase to 2.0.20 Resolves: CVE-2022-3517 - Resolves: RHBZ#2005419 - Resolves CVE-2020-28469 - Rebase to newest version - Change source to npmjs.com - Keep BR on just npm - Fix BR for nodejs-npm - Rebase to 3.1.14 - Change %setup -q /usr/bin/cat /builddir/build/SOURCES/0001-deps-glob-parent-Resolve-ReDoS-vulnerability-from-CV.patch | /usr/bin/patch -s --fuzz=0 --no-backup-if-mismatch - Resolves: RHEL-208677 - Correction to sources for 3.1.14. - Update to version 3.1.14 - Keep BR on just npm - Fix BR for nodejs-npm - Rebase to 3.1.14 - Change %setup -q /usr/bin/cat /builddir/build/SOURCES/0001-deps-glob-parent-Resolve-ReDoS-vulnerability-from-CV.patch | /usr/bin/patch -s --fuzz=0 --no-backup-if-mismatch - Resolves: RHEL-153975 RHEL-153974 - Rebase to 3.1.14 - Change %setup -q /usr/bin/cat /builddir/build/SOURCES/0001-deps-glob-parent-Resolve-ReDoS-vulnerability-from-CV.patch | /usr/bin/patch -s --fuzz=0 --no-backup-if-mismatch - Resolves: RHEL-153975 RHEL-153974 - Rebase to 3.1.14 - Change %setup -q /usr/bin/cat /builddir/build/SOURCES/0001-deps-glob-parent-Resolve-ReDoS-vulnerability-from-CV.patch | /usr/bin/patch -s --fuzz=0 --no-backup-if-mismatch - Resolves: RHEL-153975 RHEL-153974 - Rebase to 3.1.14 - Change %setup -q /usr/bin/cat /builddir/build/SOURCES/0001-deps-glob-parent-Resolve-ReDoS-vulnerability-from-CV.patch | /usr/bin/patch -s --fuzz=0 --no-backup-if-mismatch - Resolves: RHEL-153975 RHEL-153974 - Fix CVE-2026-69152 - brace-expansion - Correction to sources for 3.1.14. - Update to version 3.1.14 - Keep BR on just npm - Fix BR for nodejs-npm - NPM bundler: also find namespaced bundled dependencies - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Fix hard-coded output directory in the bundler - Update to 2021.06-1 - bundler: Handle archaic license metadata - bundler: Warn about bundled dependencies with no license metadata - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - nodejs-packaging-bundler improvements to handle uncommon characters - Add nodejs-packaging-bundler and update README.md - Move to dist-git as the upstream - Fix incorrect bundled library detection for Requires - Check node_modules_prod for bundled dependencies - Properly handle @group/package deps in nodejs-symlink-deps Resolves: RHEL-121581 - nodejs.req to properly detect bundled deps - Properly handle @group/package deps in nodejs-symlink-deps Resolves: RHEL-153905 - nodejs.req to properly detect bundled deps - Properly handle @group/package deps in nodejs-symlink-deps Resolves: RHEL-153905 - nodejs.req to properly detect bundled deps - NPM bundler: also find namespaced bundled dependencies - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Fix hard-coded output directory in the bundler - Update to 2021.06-1 - bundler: Handle archaic license metadata - bundler: Warn about bundled dependencies with no license metadata - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - nodejs-packaging-bundler improvements to handle uncommon characters - Add nodejs-packaging-bundler and update README.md - Move to dist-git as the upstream - Fix incorrect bundled library detection for Requires - Check node_modules_prod for bundled dependencies - Properly handle @group/package deps in nodejs-symlink-deps Resolves: RHEL-121581 - nodejs.req to properly detect bundled deps - Properly handle @group/package deps in nodejs-symlink-deps Resolves: RHEL-153905 - nodejs.req to properly detect bundled deps - Properly handle @group/package deps in nodejs-symlink-deps Resolves: RHEL-153905 - nodejs.req to properly detect bundled deps - Update to version 18.20.8 Resolves: RHEL-88884 RHEL-89802 - Disable npm's update-notifier Resolves: RHEL-81091 - Update to version 18.20.6 Resolves: RHEL-76801 Fixes: CVE-2025-23085 - Update to 18.20.4 Fixes: CVE-2024-22020 CVE-2024-28863 - Removes .ps1 files - Rebase to 18.20.2 - Fix: CVE-2024-27983, CVE-2024-28182, CVE-2024-27982, CVE-2024-25629 - Rebase to version 18.19.1 - Fixes: CVE-2024-21892 CVE-2024-22019 (high) - Fixes: CVE-2023-46809 (medium) - Rebase to version 18.19.0 Resolves: RHEL-21436 - Rebase to version 18.17.1 Resolves: rhbz#2228940 Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559 - Specify proper OpenSSL configuration section build Related: rhbz#2226726 - Fix segfault that happens when processing fips-related options Resolves: BZ#2226726 - Update to version 20.20.2 Patch nghttp2 to version 1.68.1 and disable tests which would fail due to this change. Resolves: RHEL-164336 Fixes: CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 CVE-2026-21710 - Update to version 20.20.0 Resolves: RHEL-141917 - Update to version 20.19.5 Resolves: RHEL-114749 - Update to version 20.19.2 Resolves: RHEL-92865 RHEL-88876 RHEL-91597 - Update to version 20.19.1 Resolves: RHEL-78764 - Update c-ares to 1.34.5 to address CVE-2025-31498 - Disable npm's update-notifier Resolves: RHEL-81078 - Update to version 20.18.2 Fixes: CVE-2025-23083 CVE-2025-23085 CVE-2025-22150 Resolves: RHEL-76363 RHEL-76554 RHEL-76540 - Update to version 20.18.1 - Update to 20.17.0 Resolves: RHEL-58721 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163369 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to 22.22.0 Resolves: RHEL-141879 - Update to 22.19.0 Resolves: RHEL-100426 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Update to 22.15.0 - Drop upstream patches - Patch fix for sqlite CVE-2025-31498 Resolves: RHEL-87320 - Update c-ares to newest version with fix for CVE-2025-31498 Resolves: RHEL-86587 - Remove obsolete lua pretransaction script from spec file Resolves: RHEL-81119 - Disable npm update notifications for users Resolves: RHEL-81079 - Update to version 22.13.1 Fixes CVE-2025-23083 CVE-2025-23085 CVE-2025-22150 Resolves: RHEL-76354 - Update to version 22.23.1 Resolves: RHEL-186622 RHEL-185998 RHEL-183669 Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-2026-48931 CVE-2026-48935 CVE-2026-42338 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163370 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to 22.22.0 Resolves: RHEL-118153 - Update to 22.19.0 Resolves: RHEL-111913 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Update to 22.15.0 - Drop upstream patches - Patch fix for sqlite CVE-2025-31498 Resolves: RHEL-87320 - Update c-ares to newest version with fix for CVE-2025-31498 Resolves: RHEL-86587 - Remove obsolete lua pretransaction script from spec file Resolves: RHEL-81119 - Disable npm update notifications for users Resolves: RHEL-81079 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) by rebasing npm's bundled tar to 7.5.19 - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion Fixes: CVE-2026-59873 CVE-2026-59874 CVE-2026-13149 Resolves: RHEL-212550 RHEL-193849 RHEL-193891 RHEL-208680 - Update to version 22.23.1 Resolves: RHEL-186622 RHEL-185998 RHEL-183669 Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-2026-48931 CVE-2026-48935 CVE-2026-42338 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163370 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to 22.22.0 Resolves: RHEL-118153 - Update to 22.19.0 Resolves: RHEL-111913 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Update to 22.15.0 - Drop upstream patches - Patch fix for sqlite CVE-2025-31498 Resolves: RHEL-87320 - Update c-ares to newest version with fix for CVE-2025-31498 Resolves: RHEL-86587 - deps: update npm/ip-address to 10.4.0 - deps: update npm/brace-expansion to 2.1.4 Fix: CVE-2026-69192 & CVE-2026-54272 CVE-2026-69152 Resolves: RHEL-223914 RHEL-223798 - deps: update sqlite to 3.53.4 Fix: CVE-2026-11824, CVE-2026-11822 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) by rebasing npm's bundled tar to 7.5.19 - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion Fixes: CVE-2026-59873 CVE-2026-59874 CVE-2026-13149 Resolves: RHEL-212550 RHEL-193849 RHEL-193891 RHEL-208680 - Update to version 22.23.1 Resolves: RHEL-186622 RHEL-185998 RHEL-183669 Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-2026-48931 CVE-2026-48935 CVE-2026-42338 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163370 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to 22.22.0 Resolves: RHEL-118153 - Update to 22.19.0 Resolves: RHEL-111913 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Update to 22.15.0 - Drop upstream patches - Update to version 22.23.2 Fixes: CVE-2026-56846 CVE-2026-56848 CVE-2026-58043 Resolves: RHEL-234381 RHEL-234831 RHEL-234896 - deps: update npm/ip-address to 10.4.0 - deps: update npm/brace-expansion to 2.1.4 Fix: CVE-2026-69192 & CVE-2026-54272 CVE-2026-69152 Resolves: RHEL-223914 RHEL-223798 - deps: update sqlite to 3.53.4 Fix: CVE-2026-11824, CVE-2026-11822 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) by rebasing npm's bundled tar to 7.5.19 - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion Fixes: CVE-2026-59873 CVE-2026-59874 CVE-2026-13149 Resolves: RHEL-212550 RHEL-193849 RHEL-193891 RHEL-208680 - Update to version 22.23.1 Resolves: RHEL-186622 RHEL-185998 RHEL-183669 Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-2026-48931 CVE-2026-48935 CVE-2026-42338 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163370 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to 22.22.0 Resolves: RHEL-118153 - Update to 22.19.0 Resolves: RHEL-111913 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Patches Pacote CVE and update undici to 6.28.1 Fixes: CVE-2026-9496 CVE-2026-19534 Resolves: RHEL-259889 RHEL-255272 - Update to version 22.23.2 Fixes: CVE-2026-56846 CVE-2026-56848 CVE-2026-58043 Resolves: RHEL-234381 RHEL-234831 RHEL-234896 - deps: update npm/ip-address to 10.4.0 - deps: update npm/brace-expansion to 2.1.4 Fix: CVE-2026-69192 & CVE-2026-54272 CVE-2026-69152 Resolves: RHEL-223914 RHEL-223798 - deps: update sqlite to 3.53.4 Fix: CVE-2026-11824, CVE-2026-11822 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) by rebasing npm's bundled tar to 7.5.19 - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion Fixes: CVE-2026-59873 CVE-2026-59874 CVE-2026-13149 Resolves: RHEL-212550 RHEL-193849 RHEL-193891 RHEL-208680 - Update to version 22.23.1 Resolves: RHEL-186622 RHEL-185998 RHEL-183669 Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-2026-48931 CVE-2026-48935 CVE-2026-42338 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163370 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to 22.22.0 Resolves: RHEL-118153 - Update to 22.19.0 Resolves: RHEL-111913 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Update to version 24.13.0 - Disable test-tls-session-cache.js as its not currently compatiable with RHEL environment - Update to version 24.11.1 - Add patch to prevent fips usage segfault - Rename nodejs-npm back to npm - Make nodejs-npm provide npm as well - Remove sqlite extension test - Switch to compilation using gcc-toolset-12 - Update to version 24.18.0 - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Update to version 24.13.0 - Disable test-tls-session-cache.js as its not currently compatiable with RHEL environment - Update to version 24.11.1 - Add patch to prevent fips usage segfault - Rename nodejs-npm back to npm - Make nodejs-npm provide npm as well - Remove sqlite extension test - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) in npm's bundled tar - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion - Update to version 24.18.0 - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Update to version 24.13.0 - Disable test-tls-session-cache.js as its not currently compatiable with RHEL environment - Update to version 24.11.1 - Add patch to prevent fips usage segfault - Rename nodejs-npm back to npm - Update brace-expansion from 5.0.6 to 5.0.9 to address CVE-2026-13149 (memory exhaustion via deeply chained brace groups). as well as CVE-2026-14257 (fixed in 5.0.8). - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - deps: update sqlite to 3.53.4 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) in npm's bundled tar - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion - Update to version 24.18.0 - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Update to version 24.13.0 - Disable test-tls-session-cache.js as its not currently compatiable with RHEL environment - Update to version 24.19.0 - Update brace-expansion from 5.0.6 to 5.0.9 to address CVE-2026-13149 (memory exhaustion via deeply chained brace groups). as well as CVE-2026-14257 (fixed in 5.0.8). - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - deps: update sqlite to 3.53.4 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) in npm's bundled tar - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion - Update to version 24.18.0 - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Update to version 24.13.0 - Update to version 24.21.0 - Update to version 24.19.0 - Update brace-expansion from 5.0.6 to 5.0.9 to address CVE-2026-13149 (memory exhaustion via deeply chained brace groups). as well as CVE-2026-14257 (fixed in 5.0.8). - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - deps: update sqlite to 3.53.4 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) in npm's bundled tar - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion - Update to version 24.18.0 - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Actually apply the patch for CVE-2024-27982 - Backport patch for CVE-2024-27982 - Use system OpenSSL configuration section - Backport patches for several CVEs. Fixes CVE-2024-22025 CVE-2024-25629 CVE-2024-27983 CVE-2024-28182 - Fix CVE-2024-22019 - Update version of bundled nghttp2 in spec file - Update bundled nghttp2 to 1.57.0 (CVE-2023-44487) - Rebase to 16.20.2 Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559 - Fix segfault that happens when processing fips-related options Resolves: BZ#2227796 - Rebase to 16.20.1 Resolves: rhbz#2188291 Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590 - Replace /usr/etc/npmrc symlink with builtin configuration Resolves: rhbz#2177781 - fix incomplete ml-kem pct patch. - fix regression in -5 bug fix - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - restore CONCATENATE functions accidentally removed in the last patch - fix big endian issue in tstclnt and selfserv in certificate compression - add fips required changes. - fix bugs found by QE - rebase to NSS 3.112 - add ml-kem-1024 support - add ml-dsa support - Allow RSA-OAEP in FIPS mode - Add SEC_OID_CURVE25519 to FIPS checks. - This will mark algorithms using it as FIPS unapproved. - fix pss issues (again) - fix pkcs12 defaults - fix pss issues - drop crmf - rebase fixes - restore rhel-9 dropping of pkcs12 and smime policy - restore mlkem aliases - add mlkem key lengths to the mechanism info - fix crash if you try to encapsulate with an unimported public key - restore distrusted certs to certdata.txt even though we never reference them to make tests happy. - rebase to upstream NSS 3.124 - backport ml-dsa support that is not upstream yet. - pick up in process patches upstream including eddsa - fix incomplete ml-kem pct patch. - fix regression in -5 bug fix - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - fix incomplete ml-kem pct patch. - fix regression in -5 bug fix - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - restore CONCATENATE functions accidentally removed in the last patch - fix big endian issue in tstclnt and selfserv in certificate compression - add fips required changes. - fix bugs found by QE - rebase to NSS 3.112 - add ml-kem-1024 support - add ml-dsa support - Allow RSA-OAEP in FIPS mode - Add SEC_OID_CURVE25519 to FIPS checks. - This will mark algorithms using it as FIPS unapproved. - fix pss issues (again) - fix pkcs12 defaults - fix pss issues - drop crmf - rebase fixes - restore rhel-9 dropping of pkcs12 and smime policy - restore mlkem aliases - add mlkem key lengths to the mechanism info - fix crash if you try to encapsulate with an unimported public key - restore distrusted certs to certdata.txt even though we never reference them to make tests happy. - rebase to upstream NSS 3.124 - backport ml-dsa support that is not upstream yet. - pick up in process patches upstream including eddsa - fix incomplete ml-kem pct patch. - fix regression in -5 bug fix - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - fix incomplete ml-kem pct patch. - fix regression in -5 bug fix - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - restore CONCATENATE functions accidentally removed in the last patch - fix big endian issue in tstclnt and selfserv in certificate compression - add fips required changes. - fix bugs found by QE - rebase to NSS 3.112 - add ml-kem-1024 support - add ml-dsa support - Allow RSA-OAEP in FIPS mode - Add SEC_OID_CURVE25519 to FIPS checks. - This will mark algorithms using it as FIPS unapproved. - fix pss issues (again) - fix pkcs12 defaults - fix pss issues - drop crmf - rebase fixes - restore rhel-9 dropping of pkcs12 and smime policy - restore mlkem aliases - add mlkem key lengths to the mechanism info - fix crash if you try to encapsulate with an unimported public key - restore distrusted certs to certdata.txt even though we never reference them to make tests happy. - rebase to upstream NSS 3.124 - backport ml-dsa support that is not upstream yet. - pick up in process patches upstream including eddsa - fix incomplete ml-kem pct patch. - fix regression in -5 bug fix - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - Pointless rebuild to re-trigger gating etc - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - fix incomplete ml-kem pct patch. - fix regression in -5 bug fix - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - restore CONCATENATE functions accidentally removed in the last patch - fix big endian issue in tstclnt and selfserv in certificate compression - add fips required changes. - fix bugs found by QE - rebase to NSS 3.112 - add ml-kem-1024 support - add ml-dsa support - Allow RSA-OAEP in FIPS mode - Add SEC_OID_CURVE25519 to FIPS checks. - This will mark algorithms using it as FIPS unapproved. - fix pss issues (again) - fix pkcs12 defaults - fix pss issues - drop crmf - rebase fixes - restore rhel-9 dropping of pkcs12 and smime policy - restore mlkem aliases - add mlkem key lengths to the mechanism info - fix crash if you try to encapsulate with an unimported public key - restore distrusted certs to certdata.txt even though we never reference them to make tests happy. - rebase to upstream NSS 3.124 - backport ml-dsa support that is not upstream yet. - pick up in process patches upstream including eddsa - fix incomplete ml-kem pct patch. - fix regression in -5 bug fix - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - fix incomplete ml-kem pct patch. - fix regression in -5 bug fix - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - restore CONCATENATE functions accidentally removed in the last patch - fix big endian issue in tstclnt and selfserv in certificate compression - add fips required changes. - fix bugs found by QE - rebase to NSS 3.112 - add ml-kem-1024 support - add ml-dsa support - Allow RSA-OAEP in FIPS mode - Add SEC_OID_CURVE25519 to FIPS checks. - This will mark algorithms using it as FIPS unapproved. - fix pss issues (again) - fix pkcs12 defaults - fix pss issues - drop crmf - rebase fixes - restore rhel-9 dropping of pkcs12 and smime policy - restore mlkem aliases - add mlkem key lengths to the mechanism info - fix crash if you try to encapsulate with an unimported public key - restore distrusted certs to certdata.txt even though we never reference them to make tests happy. - rebase to upstream NSS 3.124 - backport ml-dsa support that is not upstream yet. - pick up in process patches upstream including eddsa - fix incomplete ml-kem pct patch. - fix regression in -5 bug fix - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - fix incomplete ml-kem pct patch. - fix regression in -5 bug fix - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - restore CONCATENATE functions accidentally removed in the last patch - fix big endian issue in tstclnt and selfserv in certificate compression - add fips required changes. - fix bugs found by QE - rebase to NSS 3.112 - add ml-kem-1024 support - add ml-dsa support - Allow RSA-OAEP in FIPS mode - Add SEC_OID_CURVE25519 to FIPS checks. - This will mark algorithms using it as FIPS unapproved. - fix pss issues (again) - fix pkcs12 defaults - fix pss issues - drop crmf - rebase fixes - restore rhel-9 dropping of pkcs12 and smime policy - restore mlkem aliases - add mlkem key lengths to the mechanism info - fix crash if you try to encapsulate with an unimported public key - restore distrusted certs to certdata.txt even though we never reference them to make tests happy. - rebase to upstream NSS 3.124 - backport ml-dsa support that is not upstream yet. - pick up in process patches upstream including eddsa - fix incomplete ml-kem pct patch. - fix regression in -5 bug fix - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - fix incomplete ml-kem pct patch. - fix regression in -5 bug fix - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - restore CONCATENATE functions accidentally removed in the last patch - fix big endian issue in tstclnt and selfserv in certificate compression - add fips required changes. - fix bugs found by QE - rebase to NSS 3.112 - add ml-kem-1024 support - add ml-dsa support - Allow RSA-OAEP in FIPS mode - Add SEC_OID_CURVE25519 to FIPS checks. - This will mark algorithms using it as FIPS unapproved. - fix pss issues (again) - fix pkcs12 defaults - fix pss issues - drop crmf - rebase fixes - restore rhel-9 dropping of pkcs12 and smime policy - restore mlkem aliases - add mlkem key lengths to the mechanism info - fix crash if you try to encapsulate with an unimported public key - restore distrusted certs to certdata.txt even though we never reference them to make tests happy. - rebase to upstream NSS 3.124 - backport ml-dsa support that is not upstream yet. - pick up in process patches upstream including eddsa - fix incomplete ml-kem pct patch. - fix regression in -5 bug fix - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - fix incomplete ml-kem pct patch. - fix regression in -5 bug fix - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - restore CONCATENATE functions accidentally removed in the last patch - fix big endian issue in tstclnt and selfserv in certificate compression - add fips required changes. - fix bugs found by QE - rebase to NSS 3.112 - add ml-kem-1024 support - add ml-dsa support - Allow RSA-OAEP in FIPS mode - Add SEC_OID_CURVE25519 to FIPS checks. - This will mark algorithms using it as FIPS unapproved. - fix pss issues (again) - fix pkcs12 defaults - fix pss issues - drop crmf - rebase fixes - restore rhel-9 dropping of pkcs12 and smime policy - restore mlkem aliases - add mlkem key lengths to the mechanism info - fix crash if you try to encapsulate with an unimported public key - restore distrusted certs to certdata.txt even though we never reference them to make tests happy. - rebase to upstream NSS 3.124 - backport ml-dsa support that is not upstream yet. - pick up in process patches upstream including eddsa - fix incomplete ml-kem pct patch. - fix regression in -5 bug fix - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - fix incomplete ml-kem pct patch. - fix regression in -5 bug fix - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - restore CONCATENATE functions accidentally removed in the last patch - fix big endian issue in tstclnt and selfserv in certificate compression - add fips required changes. - fix bugs found by QE - rebase to NSS 3.112 - add ml-kem-1024 support - add ml-dsa support - Allow RSA-OAEP in FIPS mode - Add SEC_OID_CURVE25519 to FIPS checks. - This will mark algorithms using it as FIPS unapproved. - fix pss issues (again) - fix pkcs12 defaults - fix pss issues - drop crmf - rebase fixes - restore rhel-9 dropping of pkcs12 and smime policy - restore mlkem aliases - add mlkem key lengths to the mechanism info - fix crash if you try to encapsulate with an unimported public key - restore distrusted certs to certdata.txt even though we never reference them to make tests happy. - rebase to upstream NSS 3.124 - backport ml-dsa support that is not upstream yet. - pick up in process patches upstream including eddsa - fix incomplete ml-kem pct patch. - fix regression in -5 bug fix - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - fix incomplete ml-kem pct patch. - fix regression in -5 bug fix - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - restore CONCATENATE functions accidentally removed in the last patch - fix big endian issue in tstclnt and selfserv in certificate compression - add fips required changes. - fix bugs found by QE - rebase to NSS 3.112 - add ml-kem-1024 support - add ml-dsa support - Allow RSA-OAEP in FIPS mode - Add SEC_OID_CURVE25519 to FIPS checks. - This will mark algorithms using it as FIPS unapproved. - fix pss issues (again) - fix pkcs12 defaults - fix pss issues - drop crmf - rebase fixes - restore rhel-9 dropping of pkcs12 and smime policy - restore mlkem aliases - add mlkem key lengths to the mechanism info - fix crash if you try to encapsulate with an unimported public key - restore distrusted certs to certdata.txt even though we never reference them to make tests happy. - rebase to upstream NSS 3.124 - backport ml-dsa support that is not upstream yet. - pick up in process patches upstream including eddsa - fix incomplete ml-kem pct patch. - fix regression in -5 bug fix - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - fix incomplete ml-kem pct patch. - fix regression in -5 bug fix - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - restore CONCATENATE functions accidentally removed in the last patch - fix big endian issue in tstclnt and selfserv in certificate compression - add fips required changes. - fix bugs found by QE - rebase to NSS 3.112 - add ml-kem-1024 support - add ml-dsa support - Allow RSA-OAEP in FIPS mode - Add SEC_OID_CURVE25519 to FIPS checks. - This will mark algorithms using it as FIPS unapproved. - fix pss issues (again) - fix pkcs12 defaults - fix pss issues - drop crmf - rebase fixes - restore rhel-9 dropping of pkcs12 and smime policy - restore mlkem aliases - add mlkem key lengths to the mechanism info - fix crash if you try to encapsulate with an unimported public key - restore distrusted certs to certdata.txt even though we never reference them to make tests happy. - rebase to upstream NSS 3.124 - backport ml-dsa support that is not upstream yet. - pick up in process patches upstream including eddsa - fix incomplete ml-kem pct patch. - fix regression in -5 bug fix - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - fix incomplete ml-kem pct patch. - fix regression in -5 bug fix - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - restore CONCATENATE functions accidentally removed in the last patch - fix big endian issue in tstclnt and selfserv in certificate compression - add fips required changes. - fix bugs found by QE - rebase to NSS 3.112 - add ml-kem-1024 support - add ml-dsa support - Allow RSA-OAEP in FIPS mode - Add SEC_OID_CURVE25519 to FIPS checks. - This will mark algorithms using it as FIPS unapproved. - fix pss issues (again) - fix pkcs12 defaults - fix pss issues - drop crmf - rebase fixes - restore rhel-9 dropping of pkcs12 and smime policy - restore mlkem aliases - add mlkem key lengths to the mechanism info - fix crash if you try to encapsulate with an unimported public key - restore distrusted certs to certdata.txt even though we never reference them to make tests happy. - rebase to upstream NSS 3.124 - backport ml-dsa support that is not upstream yet. - pick up in process patches upstream including eddsa - fix incomplete ml-kem pct patch. - fix regression in -5 bug fix - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - related: rhbz#2139666 - Rebase to version 1.1.13 - resolves: rhbz#2139666 - Rebase to version 1.1.12 - resolves: rhbz#2028819 - Introduce nss_wrapper-libs package to allow install smaller footprint - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - related: rhbz#2139666 - Rebase to version 1.1.13 - resolves: rhbz#2139666 - Rebase to version 1.1.12 - resolves: rhbz#2028819 - Introduce nss_wrapper-libs package to allow install smaller footprint - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - switch dependency from ntp to ntpsec - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - update to 0.6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - ostree: move admindir to /etc/alternatives.admindir (RHEL-57665) - ci: fix `NEXT_VERSION` in Makefile - revert: releng: Enable Packit to handle Fedora updates - revert: releng: Convert to rpmautospec - Translated using Weblate (Korean) - Translated using Weblate (English (United Kingdom)) - alternatives: --keep-foreign incorrectly handles non-existent files - alternatives: isLink should return 0 in case of lstat error - Translated using Weblate (Swedish) - Translated using Weblate (Korean) - Translated using Weblate (Georgian) - Translated using Weblate (Finnish) - Translated using Weblate (Ukrainian) - Translated using Weblate (Polish) - Update translation files - Translated using Weblate (German) - doc: update translations - spec: remote changelog - migrate to SPDX license - Translated using Weblate (English (United Kingdom)) - Translated using Weblate (Japanese) - ci: Add locale linter - ci: update workflows - test: fix ShellCheck error[SC2070] - Bump redhat-plumbers-in-action/differential-shellcheck from 3 to 4 (#94) - releng: Packit remove extra job trigger - releng: Enable Packit to handle Fedora updates - releng: Convert to rpmautospec - ci: Add CodeQL to replace LGTM - alternatives: replace master/slave with leader/follower - chkconfig: use correct cmp function - Bump redhat-plumbers-in-action/differential-shellcheck from 2 to 3 - ci: Add Shell linter - Differential ShellCheck - ci: Use more inclusive terminology in workflows - ci: Update workflows, packit and dependabot - Translated using Weblate (Friulian) - Translated using Weblate (Swedish) - Translated using Weblate (Estonian) - Translated using Weblate (Georgian) - Translated using Weblate (Polish) - Translated using Weblate (Korean) - Translated using Weblate (Czech) - Translations update from Fedora Weblate (#77) - Translations update from Fedora Weblate (#75) - Translations update from Fedora Weblate (#74) - Translations update from Fedora Weblate (#73) - Translated using Weblate (Ukrainian) - Update translation files - Family mentioned for --set in both man and help - Translated using Weblate (French) - build-sys: Ensure `systemd-sysv-install` symlink does not have `//` - Translated using Weblate (German) - Add LGTM badges to README - Merge remote-tracking branch 'weblate/master' - Translated using Weblate (Indonesian) - Translated using Weblate (Finnish) - Translated using Weblate (Korean) - Translated using Weblate (Ukrainian) - Translated using Weblate (Turkish) - Translated using Weblate (Polish) - Translated using Weblate (Norwegian Nynorsk) - Update translation files - Translated using Weblate (Finnish) - Translated using Weblate (Czech) - Translated using Weblate (Swedish) - Translated using Weblate (Italian) - Translated using Weblate (Spanish) - Translated using Weblate (Chinese (Simplified)) - rebase to v2.0.19 - rebase to v2.0.18 - fix typo in memhog.8 - Dummy release to get s390x binary in errata - Rebuild the package for side-tag - Update to version v2.2.1 - Update to the v2.1.1 package - Update to the latest v2.0 package - Sync with the official 1.1.6 version - Rebuild for CentOS Stream - Update to version 1.1.6 - Update to version 1.1.4 - Upstream v1.0 official release - Upstream v1.0 Release Candidate 7 - Add noarch to ExclusiveArch - Disable building on i686 - Rebuild with regenerated Requires on Java - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Remove support for native profiling, see: https://github.com/ocaml/ocaml/pull/2314 - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.11 - simplify spec - Resolves: RHEL-86603 - rebuild - Resolves: RHEL-69918 - rebuild - Resolves: RHEL-35939 - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.10 - Related: RHEL-2112 - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.9 - Related: #2176063 - rebuild for CVE-2026-33811 Resolves: RHEL-187325 - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.11 - simplify spec - Resolves: RHEL-86603 - rebuild - Resolves: RHEL-69918 - rebuild - Resolves: RHEL-35939 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - update to 2.2.13 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fix build with gcc10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Drop Recommends for OCL implementations - Always set the home directory permissions according to HOME_MODE - Resolves: rhbz#2149988 - Add a non-default option to revert behavior for CVE-2020-10737 fix - Resolved: rhbz#2119265 - Fix stdin redirection in RPM scripts Resolves: rhbz#2041585 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - upstream release 0.34.7 - Always set the home directory permissions according to HOME_MODE - Resolves: rhbz#2149988 - Add a non-default option to revert behavior for CVE-2020-10737 fix - Resolved: rhbz#2119265 - Fix stdin redirection in RPM scripts Resolves: rhbz#2041585 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - upstream release 0.34.7 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Add CI tests - Enable gating - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebase to 1.9-beta1 - change of licences of ongres-scram and ongres-scram-javadoc to "BSD and MIT and ASL 2.0" - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Added junit dependency - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebase to 1.9-beta1 - change of licences of ongres-scram and ongres-scram-javadoc to "BSD and MIT and ASL 2.0" - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Added junit dependency - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebase to 13.0.10 [RHEL-144578] - Resolves: RHEL-144578 ([ESXi][RHEL9] open-vm-tools version 13.0.10 has been released - please rebase) - Rebase to 13.0.5 [RHEL-118505] - Resolves: RHEL-118505 ([ESXi][RHEL9] open-vm-tools version 13.0.5 has been released - please rebase) - ovt-Address-CVE-2025-41244.patch [RHEL-117392] - Resolves: RHEL-117392 ([CISA Major Incident] CVE-2025-41244 open-vm-tools: Local privilege escalation in open-vm-tools [rhel-9.8]) - Rebase to 13.0.0 [RHEL-99158] - Resolves: RHEL-99158 ([ESXi][RHEL9] open-vm-tools version 13.0.0 has been released - please rebase) - Rebase to 12.5.0 [RHEL-63096] - Resolves: RHEL-63096 ([ESXi][RHEL9] open-vm-tools version 12.5.0 has been released - please rebase) - Rebase to 12.4.5 [RHEL-45547] - Resolves: RHEL-45547 ([ESXi][RHEL9] open-vm-tools version 12.4.5 has been released - please rebase) - ovt-Require-dbus-tools.patch [RHEL-35543] - Resolves: RHEL-35543 ([ESXi][open-vm-tools]The open-vm-tools should depend on dbus-tools) - Rebase to 12.4.0 [RHEL-30341 - Resolves: RHEL-30341 ([ESXi][RHEL9]open-vm-tools version 12.4.0 has been released - please rebase) - Rebase to 13.0.10 [RHEL-144578] - Resolves: RHEL-144578 ([ESXi][RHEL9] open-vm-tools version 13.0.10 has been released - please rebase) - Rebase to 13.0.5 [RHEL-118505] - Resolves: RHEL-118505 ([ESXi][RHEL9] open-vm-tools version 13.0.5 has been released - please rebase) - ovt-Address-CVE-2025-41244.patch [RHEL-117392] - Resolves: RHEL-117392 ([CISA Major Incident] CVE-2025-41244 open-vm-tools: Local privilege escalation in open-vm-tools [rhel-9.8]) - Rebase to 13.0.0 [RHEL-99158] - Resolves: RHEL-99158 ([ESXi][RHEL9] open-vm-tools version 13.0.0 has been released - please rebase) - Rebase to 12.5.0 [RHEL-63096] - Resolves: RHEL-63096 ([ESXi][RHEL9] open-vm-tools version 12.5.0 has been released - please rebase) - Rebase to 12.4.5 [RHEL-45547] - Resolves: RHEL-45547 ([ESXi][RHEL9] open-vm-tools version 12.4.5 has been released - please rebase) - ovt-Require-dbus-tools.patch [RHEL-35543] - Resolves: RHEL-35543 ([ESXi][open-vm-tools]The open-vm-tools should depend on dbus-tools) - Rebase to 12.4.0 [RHEL-30341 - Resolves: RHEL-30341 ([ESXi][RHEL9]open-vm-tools version 12.4.0 has been released - please rebase) - Rebase to 13.0.10 [RHEL-144578] - Resolves: RHEL-144578 ([ESXi][RHEL9] open-vm-tools version 13.0.10 has been released - please rebase) - Rebase to 13.0.5 [RHEL-118505] - Resolves: RHEL-118505 ([ESXi][RHEL9] open-vm-tools version 13.0.5 has been released - please rebase) - ovt-Address-CVE-2025-41244.patch [RHEL-117392] - Resolves: RHEL-117392 ([CISA Major Incident] CVE-2025-41244 open-vm-tools: Local privilege escalation in open-vm-tools [rhel-9.8]) - Rebase to 13.0.0 [RHEL-99158] - Resolves: RHEL-99158 ([ESXi][RHEL9] open-vm-tools version 13.0.0 has been released - please rebase) - Rebase to 12.5.0 [RHEL-63096] - Resolves: RHEL-63096 ([ESXi][RHEL9] open-vm-tools version 12.5.0 has been released - please rebase) - Rebase to 12.4.5 [RHEL-45547] - Resolves: RHEL-45547 ([ESXi][RHEL9] open-vm-tools version 12.4.5 has been released - please rebase) - ovt-Require-dbus-tools.patch [RHEL-35543] - Resolves: RHEL-35543 ([ESXi][open-vm-tools]The open-vm-tools should depend on dbus-tools) - Rebase to 12.4.0 [RHEL-30341 - Resolves: RHEL-30341 ([ESXi][RHEL9]open-vm-tools version 12.4.0 has been released - please rebase) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Don't package some examples when SDL_sound is disabled - Only build SDL_sound support on Fedora and rhel < 9 - Resolves: rhbz#1989141 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Only build fluidsynth support on Fedora - Only build portaudio-backend on Fedora - Fix FTBFS (rhbz#1865148) - Set __cmake_in_source_build - BR qt5-qtbase-devel to keep the GUI frontend - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 0.3.29 - Resolves: RHEL-77185 - Re-include openblas.pc - Resolves: RHEL-20160 - Update to 0.3.26 - Resolves: RHEL-20160 - Update to 0.3.29 - Resolves: RHEL-77185 - Re-include openblas.pc - Resolves: RHEL-20160 - Update to 0.3.26 - Resolves: RHEL-20160 - Update to 0.3.29 - Resolves: RHEL-77185 - Re-include openblas.pc - Resolves: RHEL-20160 - Update to 0.3.26 - Resolves: RHEL-20160 - Update to 0.3.29 - Resolves: RHEL-77185 - Re-include openblas.pc - Resolves: RHEL-20160 - Update to 0.3.26 - Resolves: RHEL-20160 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Related: RHEL-114548 (Rebuild against samba 4.23) - Related: RHEL-89873 (Rebuild against samba 4.22) - Related: RHEL-59788 (Rebuild against samba 4.21) - Related: RHEL-33645 (Rebuild against samba 4.20) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update latest headers - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to latest upstream, pick up new extensions for OpenCL-CTS build fix - Rework CLHPP handling as file is not downloadable anymore - Bump CLHPP version to 2.0.12 - Update to latest upstream, pick up new extensions for OpenCL-CTS build fix - Bump CLHPP version to 2.0.11 - Update to latest upstream, pick up new extensions for OpenCL-CTS build fix - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to upstream 1.2.1 Related: RHEL-29803 - Don't package files in obsoleted /var/run Resolves: RHEL-4866 - Exclude i686 arch, as there's no OpenJDK 17 for this arch Resolves: RHEL-75905 - Use systemd-sysusers to create users Resolves: RHEL-75905 - fix CVE-2026-34588 - fix CVE-2026-27622 - fix CVE-2023-5481 (RHEL-23879) - fix CVE-2026-41142 - fix CVE-2026-42216 - fix CVE-2026-34588 - fix CVE-2026-27622 - fix CVE-2023-5481 (RHEL-23879) - fix CVE-2026-68515 - fix CVE-2026-41142 - fix CVE-2026-42216 - fix CVE-2026-34588 - fix CVE-2026-27622 - fix CVE-2023-5481 (RHEL-23879) - fix CVE-2026-59982 - fix CVE-2026-59184 - fix CVE-2026-59189 - fix CVE-2026-59981 - fix CVE-2026-34544 - fix CVE-2026-68515 - fix CVE-2026-41142 - fix CVE-2026-42216 - fix CVE-2026-34588 - fix CVE-2026-27622 - fix CVE-2023-5481 (RHEL-23879) - fix CVE-2026-34588 - fix CVE-2026-27622 - fix CVE-2023-5481 (RHEL-23879) - fix CVE-2026-41142 - fix CVE-2026-42216 - fix CVE-2026-34588 - fix CVE-2026-27622 - fix CVE-2023-5481 (RHEL-23879) - fix CVE-2026-68515 - fix CVE-2026-41142 - fix CVE-2026-42216 - fix CVE-2026-34588 - fix CVE-2026-27622 - fix CVE-2023-5481 (RHEL-23879) - fix CVE-2026-59982 - fix CVE-2026-59184 - fix CVE-2026-59189 - fix CVE-2026-59981 - fix CVE-2026-34544 - fix CVE-2026-68515 - fix CVE-2026-41142 - fix CVE-2026-42216 - fix CVE-2026-34588 - fix CVE-2026-27622 - fix CVE-2023-5481 (RHEL-23879) - fix two heap buffer overflows CVE-2024-56826 and CVE-2024-52827 (RHEL-72519,RHEL-72521) - Fix TLS connection timeout handling (RHEL-78297) - Migrate gating tests from STI to FMF (RHEL-71053) - Replace baseos-ci tests with osci (RHEL-71053) - Rebase to version 2.6.8 (RHEL-71053) - Avoid SSL context cleanup during library destruction (RHEL-56502) - Disable MD2 hash algorithm Resolves: RHEL-59715 - Use systemd-sysusers for ldap user and group Replace License with SPDX identifier Resolves: RHEL-5140 - The client tools parameters '-h' and '-p' are still deprecated, but this release brings back the client tools options that were removed during the previous rebase. Resolves: RHEL-19384 - Rebase OpenLDAP in RHEL 9.4 Resolves: RHEL-11306 - Rebase OpenLDAP to 2.6.3 Related: rhbz#2212983 - Increase Epoch tag - Resolves: rhbz#2159637, rhbz#2218121, rhbz#2216042 - Revert v4.1.5 - Bump version - Resolves: rhbz#2159637, rhbz#2218121, rhbz#2216042 - Revert v4.1.2 - Add Epoch tag - Resolves: rhbz#2055184 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Increase Epoch tag - Resolves: rhbz#2159637, rhbz#2218121, rhbz#2216042 - Revert v4.1.5 - Bump version - Resolves: rhbz#2159637, rhbz#2218121, rhbz#2216042 - Revert v4.1.2 - Add Epoch tag - Resolves: rhbz#2055184 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Increase Epoch tag - Resolves: rhbz#2159637, rhbz#2218121, rhbz#2216042 - Revert v4.1.5 - Bump version - Resolves: rhbz#2159637, rhbz#2218121, rhbz#2216042 - Revert v4.1.2 - Add Epoch tag - Resolves: rhbz#2055184 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add AlmaLinux definitions - Upgrade to the latest upstream release (RHEL-133976) - Fix Filepath and Pattern Fields inversion (RHEL-104073) - Fix verbose flag (RHEL-53859) - Upgrade to the latest upstream release (RHEL-88413) - Fix OSCAP_PROBE_IGNORE_PATHS handling - Upgrade to the latest upstream release (RHEL-76355) - Introduce "oscap-im", a tool for building hardened bootable container images - Fix RPM probes in bootable container images build environment (RHEL-55251) - Switch gating to tmt plan (RHEL-43241) - Explicitely disable dpkginfo probe - Rebase to the latest upstream version (RHEL-29172) - Fix OVAL results file name (RHEL-7050) - Add ability to define a limit of collected items (RHEL-4141) - Add ability to refine rules in autotailor (RHEL-1477) - Improve the formatting of Blueprint remediations (RHEL-1476) - Add AlmaLinux definitions - Upgrade to the latest upstream release (RHEL-167949) - Upgrade to the latest upstream release (RHEL-133976) - Fix Filepath and Pattern Fields inversion (RHEL-104073) - Fix verbose flag (RHEL-53859) - Upgrade to the latest upstream release (RHEL-88413) - Fix OSCAP_PROBE_IGNORE_PATHS handling - Upgrade to the latest upstream release (RHEL-76355) - Introduce "oscap-im", a tool for building hardened bootable container images - Fix RPM probes in bootable container images build environment (RHEL-55251) - Switch gating to tmt plan (RHEL-43241) - Add AlmaLinux definitions - Upgrade to the latest upstream release (RHEL-133976) - Fix Filepath and Pattern Fields inversion (RHEL-104073) - Fix verbose flag (RHEL-53859) - Upgrade to the latest upstream release (RHEL-88413) - Fix OSCAP_PROBE_IGNORE_PATHS handling - Upgrade to the latest upstream release (RHEL-76355) - Introduce "oscap-im", a tool for building hardened bootable container images - Fix RPM probes in bootable container images build environment (RHEL-55251) - Switch gating to tmt plan (RHEL-43241) - Explicitely disable dpkginfo probe - Rebase to the latest upstream version (RHEL-29172) - Fix OVAL results file name (RHEL-7050) - Add ability to define a limit of collected items (RHEL-4141) - Add ability to refine rules in autotailor (RHEL-1477) - Improve the formatting of Blueprint remediations (RHEL-1476) - Add AlmaLinux definitions - Upgrade to the latest upstream release (RHEL-167949) - Upgrade to the latest upstream release (RHEL-133976) - Fix Filepath and Pattern Fields inversion (RHEL-104073) - Fix verbose flag (RHEL-53859) - Upgrade to the latest upstream release (RHEL-88413) - Fix OSCAP_PROBE_IGNORE_PATHS handling - Upgrade to the latest upstream release (RHEL-76355) - Introduce "oscap-im", a tool for building hardened bootable container images - Fix RPM probes in bootable container images build environment (RHEL-55251) - Switch gating to tmt plan (RHEL-43241) - Add AlmaLinux definitions - Upgrade to the latest upstream release (RHEL-133976) - Fix Filepath and Pattern Fields inversion (RHEL-104073) - Fix verbose flag (RHEL-53859) - Upgrade to the latest upstream release (RHEL-88413) - Fix OSCAP_PROBE_IGNORE_PATHS handling - Upgrade to the latest upstream release (RHEL-76355) - Introduce "oscap-im", a tool for building hardened bootable container images - Fix RPM probes in bootable container images build environment (RHEL-55251) - Switch gating to tmt plan (RHEL-43241) - Explicitely disable dpkginfo probe - Rebase to the latest upstream version (RHEL-29172) - Fix OVAL results file name (RHEL-7050) - Add ability to define a limit of collected items (RHEL-4141) - Add ability to refine rules in autotailor (RHEL-1477) - Improve the formatting of Blueprint remediations (RHEL-1476) - Add AlmaLinux definitions - Upgrade to the latest upstream release (RHEL-167949) - Upgrade to the latest upstream release (RHEL-133976) - Fix Filepath and Pattern Fields inversion (RHEL-104073) - Fix verbose flag (RHEL-53859) - Upgrade to the latest upstream release (RHEL-88413) - Fix OSCAP_PROBE_IGNORE_PATHS handling - Upgrade to the latest upstream release (RHEL-76355) - Introduce "oscap-im", a tool for building hardened bootable container images - Fix RPM probes in bootable container images build environment (RHEL-55251) - Switch gating to tmt plan (RHEL-43241) - Add AlmaLinux definitions - Upgrade to the latest upstream release (RHEL-133976) - Fix Filepath and Pattern Fields inversion (RHEL-104073) - Fix verbose flag (RHEL-53859) - Upgrade to the latest upstream release (RHEL-88413) - Fix OSCAP_PROBE_IGNORE_PATHS handling - Upgrade to the latest upstream release (RHEL-76355) - Introduce "oscap-im", a tool for building hardened bootable container images - Fix RPM probes in bootable container images build environment (RHEL-55251) - Switch gating to tmt plan (RHEL-43241) - Explicitely disable dpkginfo probe - Rebase to the latest upstream version (RHEL-29172) - Fix OVAL results file name (RHEL-7050) - Add ability to define a limit of collected items (RHEL-4141) - Add ability to refine rules in autotailor (RHEL-1477) - Improve the formatting of Blueprint remediations (RHEL-1476) - Add AlmaLinux definitions - Upgrade to the latest upstream release (RHEL-167949) - Upgrade to the latest upstream release (RHEL-133976) - Fix Filepath and Pattern Fields inversion (RHEL-104073) - Fix verbose flag (RHEL-53859) - Upgrade to the latest upstream release (RHEL-88413) - Fix OSCAP_PROBE_IGNORE_PATHS handling - Upgrade to the latest upstream release (RHEL-76355) - Introduce "oscap-im", a tool for building hardened bootable container images - Fix RPM probes in bootable container images build environment (RHEL-55251) - Switch gating to tmt plan (RHEL-43241) - Add AlmaLinux definitions - Upgrade to the latest upstream release (RHEL-133976) - Fix Filepath and Pattern Fields inversion (RHEL-104073) - Fix verbose flag (RHEL-53859) - Upgrade to the latest upstream release (RHEL-88413) - Fix OSCAP_PROBE_IGNORE_PATHS handling - Upgrade to the latest upstream release (RHEL-76355) - Introduce "oscap-im", a tool for building hardened bootable container images - Fix RPM probes in bootable container images build environment (RHEL-55251) - Switch gating to tmt plan (RHEL-43241) - Explicitely disable dpkginfo probe - Rebase to the latest upstream version (RHEL-29172) - Fix OVAL results file name (RHEL-7050) - Add ability to define a limit of collected items (RHEL-4141) - Add ability to refine rules in autotailor (RHEL-1477) - Improve the formatting of Blueprint remediations (RHEL-1476) - Add AlmaLinux definitions - Upgrade to the latest upstream release (RHEL-167949) - Upgrade to the latest upstream release (RHEL-133976) - Fix Filepath and Pattern Fields inversion (RHEL-104073) - Fix verbose flag (RHEL-53859) - Upgrade to the latest upstream release (RHEL-88413) - Fix OSCAP_PROBE_IGNORE_PATHS handling - Upgrade to the latest upstream release (RHEL-76355) - Introduce "oscap-im", a tool for building hardened bootable container images - Fix RPM probes in bootable container images build environment (RHEL-55251) - Switch gating to tmt plan (RHEL-43241) - Add AlmaLinux definitions - Upgrade to the latest upstream release (RHEL-133976) - Fix Filepath and Pattern Fields inversion (RHEL-104073) - Fix verbose flag (RHEL-53859) - Upgrade to the latest upstream release (RHEL-88413) - Fix OSCAP_PROBE_IGNORE_PATHS handling - Upgrade to the latest upstream release (RHEL-76355) - Introduce "oscap-im", a tool for building hardened bootable container images - Fix RPM probes in bootable container images build environment (RHEL-55251) - Switch gating to tmt plan (RHEL-43241) - Explicitely disable dpkginfo probe - Rebase to the latest upstream version (RHEL-29172) - Fix OVAL results file name (RHEL-7050) - Add ability to define a limit of collected items (RHEL-4141) - Add ability to refine rules in autotailor (RHEL-1477) - Improve the formatting of Blueprint remediations (RHEL-1476) - Add AlmaLinux definitions - Upgrade to the latest upstream release (RHEL-167949) - Upgrade to the latest upstream release (RHEL-133976) - Fix Filepath and Pattern Fields inversion (RHEL-104073) - Fix verbose flag (RHEL-53859) - Upgrade to the latest upstream release (RHEL-88413) - Fix OSCAP_PROBE_IGNORE_PATHS handling - Upgrade to the latest upstream release (RHEL-76355) - Introduce "oscap-im", a tool for building hardened bootable container images - Fix RPM probes in bootable container images build environment (RHEL-55251) - Switch gating to tmt plan (RHEL-43241) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Explicitly disable use of deprecated SHA-1 algorithm Resolves: #1936621 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fix heap overwrite vulnerability, CVE-2019-5544 Resolves: #1780754 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Explicitly disable use of deprecated SHA-1 algorithm Resolves: #1936621 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fix heap overwrite vulnerability, CVE-2019-5544 Resolves: #1780754 - Unpatch Red Hat help message - CVE-2026-73283: Complete the fix of security bypass due to incorrect handling of forwarding and tunneling options Resolves: RHEL-245416 - CVE-2026-73281: Fix misinteraction between agent locking and the session-bind@openssh.com extension Resolves: RHEL-245424 - CVE-2026-73282: Fix information disclosure and data corruption via use-after-free in ssh client Resolves: RHEL-245419 - Fix CVE-2026-59995 OpenSSH: sftp client allows attacker to control downloaded file location Resolves: RHEL-236320 - Fix CVE-2026-59999 and CVE-2026-73283: Security bypass due to incorrect handling of forwarding and tunneling options Resolves: RHEL-236286 - CVE-2026-59996: Fix remote glob result of ".." causing files to be placed in unintended parent directories when scp performs remote-to-remote copy via the local host Resolves: RHEL-193178 - CVE-2026-60002: Fix use-after-free in cached hostkey during key re-exchange Resolves: RHEL-193024 - CVE-2026-55653: Fix double free in openssh DH-GEX client path during FIPS known-group validation that leads to client-side denial of service Resolves: RHEL-186439 - CVE-2026-55654: Fix heap out-of-bounds read during GSSAPI indicator cleanup due to missing NULL terminator Resolves: RHEL-185836 - CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket pre-binding Resolves: RHEL-185854 - CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode Resolves: RHEL-164753 - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode multiplexing sessions Resolves: RHEL-166250 - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms and HostbasedAcceptedAlgorithms with regard to ECDSA keys Resolves: RHEL-166234 - CVE-2026-35414: Fix mishandling of authorized_keys principals option Resolves: RHEL-166202 - CVE-2026-35386: Add validation rules to usernames and hostnames set for ProxyJump/-J on the commandline Resolves: RHEL-166218 - Version bump - CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155824 - Provide a way to skip unsupported ML-KEM hybrid algorithms in FIPS mode Resolves: RHEL-151580 - Enable support for DSA keys Resolves: RHEL-127624 - CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-133959 - CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-133960 - Unpatch Red Hat help message - CVE-2026-60001: Fix cases in GSSAPI and keyboard-interactive authentication where the minimum per-attempt delay was not being enforced Resolves: RHEL-258461 - CVE-2026-73283: Complete the fix of security bypass due to incorrect handling of forwarding and tunneling options Resolves: RHEL-245416 - CVE-2026-73281: Fix misinteraction between agent locking and the session-bind@openssh.com extension Resolves: RHEL-245424 - CVE-2026-73282: Fix information disclosure and data corruption via use-after-free in ssh client Resolves: RHEL-245419 - Fix CVE-2026-59995 OpenSSH: sftp client allows attacker to control downloaded file location Resolves: RHEL-236320 - Fix CVE-2026-59999 and CVE-2026-73283: Security bypass due to incorrect handling of forwarding and tunneling options Resolves: RHEL-236286 - CVE-2026-59996: Fix remote glob result of ".." causing files to be placed in unintended parent directories when scp performs remote-to-remote copy via the local host Resolves: RHEL-193178 - CVE-2026-60002: Fix use-after-free in cached hostkey during key re-exchange Resolves: RHEL-193024 - CVE-2026-55653: Fix double free in openssh DH-GEX client path during FIPS known-group validation that leads to client-side denial of service Resolves: RHEL-186439 - CVE-2026-55654: Fix heap out-of-bounds read during GSSAPI indicator cleanup due to missing NULL terminator Resolves: RHEL-185836 - CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket pre-binding Resolves: RHEL-185854 - CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode Resolves: RHEL-164753 - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode multiplexing sessions Resolves: RHEL-166250 - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms and HostbasedAcceptedAlgorithms with regard to ECDSA keys Resolves: RHEL-166234 - CVE-2026-35414: Fix mishandling of authorized_keys principals option Resolves: RHEL-166202 - CVE-2026-35386: Add validation rules to usernames and hostnames set for ProxyJump/-J on the commandline Resolves: RHEL-166218 - Version bump - CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155824 - Provide a way to skip unsupported ML-KEM hybrid algorithms in FIPS mode Resolves: RHEL-151580 - Unpatch Red Hat help message - CVE-2026-59998: Document caveat regarding GSSAPIStrictAcceptorCheck Resolves: RHEL-276221 - CVE-2026-59997: Fix internal-sftp server argument parsing limit Resolves: RHEL-276234 - CVE-2026-60000: Fix DoS via excessive GSSAPI authentication attempts Resolves: RHEL-276230 - CVE-2026-60001: Fix cases in GSSAPI and keyboard-interactive authentication where the minimum per-attempt delay was not being enforced Resolves: RHEL-258461 - CVE-2026-73283: Complete the fix of security bypass due to incorrect handling of forwarding and tunneling options Resolves: RHEL-245416 - CVE-2026-73281: Fix misinteraction between agent locking and the session-bind@openssh.com extension Resolves: RHEL-245424 - CVE-2026-73282: Fix information disclosure and data corruption via use-after-free in ssh client Resolves: RHEL-245419 - Fix CVE-2026-59995 OpenSSH: sftp client allows attacker to control downloaded file location Resolves: RHEL-236320 - Fix CVE-2026-59999 and CVE-2026-73283: Security bypass due to incorrect handling of forwarding and tunneling options Resolves: RHEL-236286 - CVE-2026-59996: Fix remote glob result of ".." causing files to be placed in unintended parent directories when scp performs remote-to-remote copy via the local host Resolves: RHEL-193178 - CVE-2026-60002: Fix use-after-free in cached hostkey during key re-exchange Resolves: RHEL-193024 - CVE-2026-55653: Fix double free in openssh DH-GEX client path during FIPS known-group validation that leads to client-side denial of service Resolves: RHEL-186439 - CVE-2026-55654: Fix heap out-of-bounds read during GSSAPI indicator cleanup due to missing NULL terminator Resolves: RHEL-185836 - CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket pre-binding Resolves: RHEL-185854 - CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode Resolves: RHEL-164753 - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode multiplexing sessions Resolves: RHEL-166250 - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms and HostbasedAcceptedAlgorithms with regard to ECDSA keys Resolves: RHEL-166234 - CVE-2026-35414: Fix mishandling of authorized_keys principals option Resolves: RHEL-166202 - CVE-2026-35386: Add validation rules to usernames and hostnames set for ProxyJump/-J on the commandline Resolves: RHEL-166218 - Version bump - CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155824 - Unpatch Red Hat help message - CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode Resolves: RHEL-164753 - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode multiplexing sessions Resolves: RHEL-166250 - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms and HostbasedAcceptedAlgorithms with regard to ECDSA keys Resolves: RHEL-166234 - CVE-2026-35414: Fix mishandling of authorized_keys principals option Resolves: RHEL-166202 - CVE-2026-35386: Add validation rules to usernames and hostnames set for ProxyJump/-J on the commandline Resolves: RHEL-166218 - Version bump - CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155824 - Provide a way to skip unsupported ML-KEM hybrid algorithms in FIPS mode Resolves: RHEL-151580 - Enable support for DSA keys Resolves: RHEL-127624 - CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-133959 - CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-133960 - Fix implicit destination path selection when source path ends with ".." Resolves: RHEL-119515 - Canonicalize username when matching a user Resolves: RHEL-118372 - Rebase to version 9.9 Resolves: RHEL-108912 - Move the redhat help message to debug1 log level Resolves: RHEL-104580 - Fix missing error codes set and invalid error code checks in OpenSSH. It prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465). Resolves: RHEL-78700 - Unpatch Red Hat help message - CVE-2026-59996: Fix remote glob result of ".." causing files to be placed in unintended parent directories when scp performs remote-to-remote copy via the local host Resolves: RHEL-193178 - CVE-2026-60002: Fix use-after-free in cached hostkey during key re-exchange Resolves: RHEL-193024 - CVE-2026-55653: Fix double free in openssh DH-GEX client path during FIPS known-group validation that leads to client-side denial of service Resolves: RHEL-186439 - CVE-2026-55654: Fix heap out-of-bounds read during GSSAPI indicator cleanup due to missing NULL terminator Resolves: RHEL-185836 - CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket pre-binding Resolves: RHEL-185854 - CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode Resolves: RHEL-164753 - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode multiplexing sessions Resolves: RHEL-166250 - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms and HostbasedAcceptedAlgorithms with regard to ECDSA keys Resolves: RHEL-166234 - CVE-2026-35414: Fix mishandling of authorized_keys principals option Resolves: RHEL-166202 - CVE-2026-35386: Add validation rules to usernames and hostnames set for ProxyJump/-J on the commandline Resolves: RHEL-166218 - Version bump - CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155824 - Provide a way to skip unsupported ML-KEM hybrid algorithms in FIPS mode Resolves: RHEL-151580 - Enable support for DSA keys Resolves: RHEL-127624 - CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-133959 - CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-133960 - Fix implicit destination path selection when source path ends with ".." Resolves: RHEL-119515 - Canonicalize username when matching a user Resolves: RHEL-118372 - Rebase to version 9.9 Resolves: RHEL-108912 - Fix CVE-2026-31790 Resolves: RHEL-161586 - Rebase to OpenSSL 3.5.5 Resolves: RHEL-136895 Resolves: RHEL-142004 Resolves: RHEL-142012 Resolves: RHEL-142020 Resolves: RHEL-142024 Resolves: RHEL-142028 Resolves: RHEL-142032 Resolves: RHEL-142036 Resolves: RHEL-142040 Resolves: RHEL-142044 Resolves: RHEL-142048 Resolves: RHEL-142052 Resolves: RHEL-142056 - Fix CVE-2025-9230 Resolves: RHEL-115928 - Fix globally disabled LTO Related: RHEL-111633 - Make openssl speed test signatures without errors Resolves: RHEL-95502 - Build tests in check and without LTO Resolves: RHEL-111633 - Add custom define to disable symbol versioning in downstream patched code Also add stricter Suggests for openssl-fips-provider Resolves: RHEL-104236 - Fix Requires/Provider to fix default install of fips providers Resolves: RHEL-104856 - Move fips.so to a seprate subpackage Reverts FIPS self test for SLH-DSA Add Suggests to try to prefer the openssl-fips-provider package over the fips-provider-next package by default Revolves: RHEL-102408 Related: RHEL-80854 - Rebasing to OpenSSL 3.5.1 Resolves: RHEL-97797 Resolves: RHEL-98723 Resolves: RHEL-99352 - Compact patches for better maintainability Related: RHEL-80854 - Make hybrid MLKEM work with our FIPS provider (3.0.7) Resolves: RHEL-95239 - Fix regressions caused by rebase to OpenSSL 3.5 Related: RHEL-80854 - Fix CVE-2026-28390 Resolves: RHEL-165870 - Fix CVE-2026-31790 Resolves: RHEL-161586 - Rebase to OpenSSL 3.5.5 Resolves: RHEL-136895 Resolves: RHEL-142004 Resolves: RHEL-142012 Resolves: RHEL-142020 Resolves: RHEL-142024 Resolves: RHEL-142028 Resolves: RHEL-142032 Resolves: RHEL-142036 Resolves: RHEL-142040 Resolves: RHEL-142044 Resolves: RHEL-142048 Resolves: RHEL-142052 Resolves: RHEL-142056 - Fix CVE-2025-9230 Resolves: RHEL-115928 - Fix globally disabled LTO Related: RHEL-111633 - Make openssl speed test signatures without errors Resolves: RHEL-95502 - Build tests in check and without LTO Resolves: RHEL-111633 - Add custom define to disable symbol versioning in downstream patched code Also add stricter Suggests for openssl-fips-provider Resolves: RHEL-104236 - Fix Requires/Provider to fix default install of fips providers Resolves: RHEL-104856 - Move fips.so to a seprate subpackage Reverts FIPS self test for SLH-DSA Add Suggests to try to prefer the openssl-fips-provider package over the fips-provider-next package by default Revolves: RHEL-102408 Related: RHEL-80854 - Rebasing to OpenSSL 3.5.1 Resolves: RHEL-97797 Resolves: RHEL-98723 Resolves: RHEL-99352 - Compact patches for better maintainability Related: RHEL-80854 - Make hybrid MLKEM work with our FIPS provider (3.0.7) Resolves: RHEL-95239 Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181, CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768, CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447, CVE-2026-34182. Resolves: RHEL-179274 Resolves: RHEL-179287 Resolves: RHEL-179539 Resolves: RHEL-179544 Resolves: RHEL-179547 Resolves: RHEL-179552 Resolves: RHEL-179556 Resolves: RHEL-179633 Resolves: RHEL-179661 Resolves: RHEL-179678 Resolves: RHEL-179684 Resolves: RHEL-179688 Resolves: RHEL-179691 Resolves: RHEL-179696 Resolves: RHEL-179699 - Fix CVE-2026-28390 Resolves: RHEL-165870 - Fix CVE-2026-31790 Resolves: RHEL-161586 - Rebase to OpenSSL 3.5.5 Resolves: RHEL-136895 Resolves: RHEL-142004 Resolves: RHEL-142012 Resolves: RHEL-142020 Resolves: RHEL-142024 Resolves: RHEL-142028 Resolves: RHEL-142032 Resolves: RHEL-142036 Resolves: RHEL-142040 Resolves: RHEL-142044 Resolves: RHEL-142048 Resolves: RHEL-142052 Resolves: RHEL-142056 - Fix CVE-2025-9230 Resolves: RHEL-115928 - Fix globally disabled LTO Related: RHEL-111633 - Make openssl speed test signatures without errors Resolves: RHEL-95502 - Build tests in check and without LTO Resolves: RHEL-111633 - Add custom define to disable symbol versioning in downstream patched code Also add stricter Suggests for openssl-fips-provider Resolves: RHEL-104236 - Fix Requires/Provider to fix default install of fips providers Resolves: RHEL-104856 - Move fips.so to a seprate subpackage Reverts FIPS self test for SLH-DSA Add Suggests to try to prefer the openssl-fips-provider package over the fips-provider-next package by default Revolves: RHEL-102408 Related: RHEL-80854 - Rebasing to OpenSSL 3.5.1 Resolves: RHEL-97797 Resolves: RHEL-98723 Resolves: RHEL-99352 - Patch asn1_d2i_read_bio to read headers without blocking Resolves: RHEL-178642 Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181, CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768, CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447, CVE-2026-34182. Resolves: RHEL-179274 Resolves: RHEL-179287 Resolves: RHEL-179539 Resolves: RHEL-179544 Resolves: RHEL-179547 Resolves: RHEL-179552 Resolves: RHEL-179556 Resolves: RHEL-179633 Resolves: RHEL-179661 Resolves: RHEL-179678 Resolves: RHEL-179684 Resolves: RHEL-179688 Resolves: RHEL-179691 Resolves: RHEL-179696 Resolves: RHEL-179699 - Fix CVE-2026-28390 Resolves: RHEL-165870 - Fix CVE-2026-31790 Resolves: RHEL-161586 - Rebase to OpenSSL 3.5.5 Resolves: RHEL-136895 Resolves: RHEL-142004 Resolves: RHEL-142012 Resolves: RHEL-142020 Resolves: RHEL-142024 Resolves: RHEL-142028 Resolves: RHEL-142032 Resolves: RHEL-142036 Resolves: RHEL-142040 Resolves: RHEL-142044 Resolves: RHEL-142048 Resolves: RHEL-142052 Resolves: RHEL-142056 - Fix CVE-2025-9230 Resolves: RHEL-115928 - Fix globally disabled LTO Related: RHEL-111633 - Make openssl speed test signatures without errors Resolves: RHEL-95502 - Build tests in check and without LTO Resolves: RHEL-111633 - Add custom define to disable symbol versioning in downstream patched code Also add stricter Suggests for openssl-fips-provider Resolves: RHEL-104236 - Fix Requires/Provider to fix default install of fips providers Resolves: RHEL-104856 - Move fips.so to a seprate subpackage Reverts FIPS self test for SLH-DSA Add Suggests to try to prefer the openssl-fips-provider package over the fips-provider-next package by default Revolves: RHEL-102408 Related: RHEL-80854 - Patch asn1_d2i_read_bio to not raise NOT_ENOUGH_DATA at object boundary Resolves: RHEL-210862 - Patch asn1_d2i_read_bio to read headers without blocking Resolves: RHEL-178642 Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181, CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768, CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447, CVE-2026-34182. Resolves: RHEL-179274 Resolves: RHEL-179287 Resolves: RHEL-179539 Resolves: RHEL-179544 Resolves: RHEL-179547 Resolves: RHEL-179552 Resolves: RHEL-179556 Resolves: RHEL-179633 Resolves: RHEL-179661 Resolves: RHEL-179678 Resolves: RHEL-179684 Resolves: RHEL-179688 Resolves: RHEL-179691 Resolves: RHEL-179696 Resolves: RHEL-179699 - Fix CVE-2026-28390 Resolves: RHEL-165870 - Fix CVE-2026-31790 Resolves: RHEL-161586 - Rebase to OpenSSL 3.5.5 Resolves: RHEL-136895 Resolves: RHEL-142004 Resolves: RHEL-142012 Resolves: RHEL-142020 Resolves: RHEL-142024 Resolves: RHEL-142028 Resolves: RHEL-142032 Resolves: RHEL-142036 Resolves: RHEL-142040 Resolves: RHEL-142044 Resolves: RHEL-142048 Resolves: RHEL-142052 Resolves: RHEL-142056 - Fix CVE-2025-9230 Resolves: RHEL-115928 - Fix globally disabled LTO Related: RHEL-111633 - Make openssl speed test signatures without errors Resolves: RHEL-95502 - Build tests in check and without LTO Resolves: RHEL-111633 - Add custom define to disable symbol versioning in downstream patched code Also add stricter Suggests for openssl-fips-provider Resolves: RHEL-104236 - Fix Requires/Provider to fix default install of fips providers Resolves: RHEL-104856 - Rebase to OpenSSL 3.5.8 Resolves: RHEL-242945 Resolves: RHEL-246260 Resolves: RHEL-246284 Resolves: RHEL-246319 Resolves: RHEL-246439 Resolves: RHEL-246443 Resolves: RHEL-246447 Resolves: RHEL-246451 Resolves: RHEL-246455 - Backport the "HollowByte" hardening patch Resolves: RHEL-232828 - Patch asn1_d2i_read_bio to not raise NOT_ENOUGH_DATA at object boundary Resolves: RHEL-210862 - Patch asn1_d2i_read_bio to read headers without blocking Resolves: RHEL-178642 Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181, CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768, CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447, CVE-2026-34182. Resolves: RHEL-179274 Resolves: RHEL-179287 Resolves: RHEL-179539 Resolves: RHEL-179544 Resolves: RHEL-179547 Resolves: RHEL-179552 Resolves: RHEL-179556 Resolves: RHEL-179633 Resolves: RHEL-179661 Resolves: RHEL-179678 Resolves: RHEL-179684 Resolves: RHEL-179688 Resolves: RHEL-179691 Resolves: RHEL-179696 Resolves: RHEL-179699 - Fix CVE-2026-28390 Resolves: RHEL-165870 - Fix CVE-2026-31790 Resolves: RHEL-161586 - Rebase to OpenSSL 3.5.5 Resolves: RHEL-136895 Resolves: RHEL-142004 Resolves: RHEL-142012 Resolves: RHEL-142020 Resolves: RHEL-142024 Resolves: RHEL-142028 Resolves: RHEL-142032 Resolves: RHEL-142036 Resolves: RHEL-142040 Resolves: RHEL-142044 Resolves: RHEL-142048 Resolves: RHEL-142052 Resolves: RHEL-142056 - Fix CVE-2025-9230 Resolves: RHEL-115928 - Fix globally disabled LTO Related: RHEL-111633 - Fixed DTLS Retransmits Handshake Messages From a Stale Buffer Offset (CVE-2026-84782) Resolves: RHEL-264479 - Rebase to OpenSSL 3.5.8 Resolves: RHEL-242945 Resolves: RHEL-246260 Resolves: RHEL-246284 Resolves: RHEL-246319 Resolves: RHEL-246439 Resolves: RHEL-246443 Resolves: RHEL-246447 Resolves: RHEL-246451 Resolves: RHEL-246455 - Backport the "HollowByte" hardening patch Resolves: RHEL-232828 - Patch asn1_d2i_read_bio to not raise NOT_ENOUGH_DATA at object boundary Resolves: RHEL-210862 - Patch asn1_d2i_read_bio to read headers without blocking Resolves: RHEL-178642 Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181, CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768, CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447, CVE-2026-34182. Resolves: RHEL-179274 Resolves: RHEL-179287 Resolves: RHEL-179539 Resolves: RHEL-179544 Resolves: RHEL-179547 Resolves: RHEL-179552 Resolves: RHEL-179556 Resolves: RHEL-179633 Resolves: RHEL-179661 Resolves: RHEL-179678 Resolves: RHEL-179684 Resolves: RHEL-179688 Resolves: RHEL-179691 Resolves: RHEL-179696 Resolves: RHEL-179699 - Fix CVE-2026-28390 Resolves: RHEL-165870 - Fix CVE-2026-31790 Resolves: RHEL-161586 - Rebase to OpenSSL 3.5.5 Resolves: RHEL-136895 Resolves: RHEL-142004 Resolves: RHEL-142012 Resolves: RHEL-142020 Resolves: RHEL-142024 Resolves: RHEL-142028 Resolves: RHEL-142032 Resolves: RHEL-142036 Resolves: RHEL-142040 Resolves: RHEL-142044 Resolves: RHEL-142048 Resolves: RHEL-142052 Resolves: RHEL-142056 - Fix CVE-2025-9230 Resolves: RHEL-115928 - Fix CVE-2026-31790 Resolves: RHEL-161586 - Rebase to OpenSSL 3.5.5 Resolves: RHEL-136895 Resolves: RHEL-142004 Resolves: RHEL-142012 Resolves: RHEL-142020 Resolves: RHEL-142024 Resolves: RHEL-142028 Resolves: RHEL-142032 Resolves: RHEL-142036 Resolves: RHEL-142040 Resolves: RHEL-142044 Resolves: RHEL-142048 Resolves: RHEL-142052 Resolves: RHEL-142056 - Fix CVE-2025-9230 Resolves: RHEL-115928 - Fix globally disabled LTO Related: RHEL-111633 - Make openssl speed test signatures without errors Resolves: RHEL-95502 - Build tests in check and without LTO Resolves: RHEL-111633 - Add custom define to disable symbol versioning in downstream patched code Also add stricter Suggests for openssl-fips-provider Resolves: RHEL-104236 - Fix Requires/Provider to fix default install of fips providers Resolves: RHEL-104856 - Move fips.so to a seprate subpackage Reverts FIPS self test for SLH-DSA Add Suggests to try to prefer the openssl-fips-provider package over the fips-provider-next package by default Revolves: RHEL-102408 Related: RHEL-80854 - Rebasing to OpenSSL 3.5.1 Resolves: RHEL-97797 Resolves: RHEL-98723 Resolves: RHEL-99352 - Compact patches for better maintainability Related: RHEL-80854 - Make hybrid MLKEM work with our FIPS provider (3.0.7) Resolves: RHEL-95239 - Fix regressions caused by rebase to OpenSSL 3.5 Related: RHEL-80854 - Fix CVE-2026-28390 Resolves: RHEL-165870 - Fix CVE-2026-31790 Resolves: RHEL-161586 - Rebase to OpenSSL 3.5.5 Resolves: RHEL-136895 Resolves: RHEL-142004 Resolves: RHEL-142012 Resolves: RHEL-142020 Resolves: RHEL-142024 Resolves: RHEL-142028 Resolves: RHEL-142032 Resolves: RHEL-142036 Resolves: RHEL-142040 Resolves: RHEL-142044 Resolves: RHEL-142048 Resolves: RHEL-142052 Resolves: RHEL-142056 - Fix CVE-2025-9230 Resolves: RHEL-115928 - Fix globally disabled LTO Related: RHEL-111633 - Make openssl speed test signatures without errors Resolves: RHEL-95502 - Build tests in check and without LTO Resolves: RHEL-111633 - Add custom define to disable symbol versioning in downstream patched code Also add stricter Suggests for openssl-fips-provider Resolves: RHEL-104236 - Fix Requires/Provider to fix default install of fips providers Resolves: RHEL-104856 - Move fips.so to a seprate subpackage Reverts FIPS self test for SLH-DSA Add Suggests to try to prefer the openssl-fips-provider package over the fips-provider-next package by default Revolves: RHEL-102408 Related: RHEL-80854 - Rebasing to OpenSSL 3.5.1 Resolves: RHEL-97797 Resolves: RHEL-98723 Resolves: RHEL-99352 - Compact patches for better maintainability Related: RHEL-80854 - Make hybrid MLKEM work with our FIPS provider (3.0.7) Resolves: RHEL-95239 Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181, CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768, CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447, CVE-2026-34182. Resolves: RHEL-179274 Resolves: RHEL-179287 Resolves: RHEL-179539 Resolves: RHEL-179544 Resolves: RHEL-179547 Resolves: RHEL-179552 Resolves: RHEL-179556 Resolves: RHEL-179633 Resolves: RHEL-179661 Resolves: RHEL-179678 Resolves: RHEL-179684 Resolves: RHEL-179688 Resolves: RHEL-179691 Resolves: RHEL-179696 Resolves: RHEL-179699 - Fix CVE-2026-28390 Resolves: RHEL-165870 - Fix CVE-2026-31790 Resolves: RHEL-161586 - Rebase to OpenSSL 3.5.5 Resolves: RHEL-136895 Resolves: RHEL-142004 Resolves: RHEL-142012 Resolves: RHEL-142020 Resolves: RHEL-142024 Resolves: RHEL-142028 Resolves: RHEL-142032 Resolves: RHEL-142036 Resolves: RHEL-142040 Resolves: RHEL-142044 Resolves: RHEL-142048 Resolves: RHEL-142052 Resolves: RHEL-142056 - Fix CVE-2025-9230 Resolves: RHEL-115928 - Fix globally disabled LTO Related: RHEL-111633 - Make openssl speed test signatures without errors Resolves: RHEL-95502 - Build tests in check and without LTO Resolves: RHEL-111633 - Add custom define to disable symbol versioning in downstream patched code Also add stricter Suggests for openssl-fips-provider Resolves: RHEL-104236 - Fix Requires/Provider to fix default install of fips providers Resolves: RHEL-104856 - Move fips.so to a seprate subpackage Reverts FIPS self test for SLH-DSA Add Suggests to try to prefer the openssl-fips-provider package over the fips-provider-next package by default Revolves: RHEL-102408 Related: RHEL-80854 - Rebasing to OpenSSL 3.5.1 Resolves: RHEL-97797 Resolves: RHEL-98723 Resolves: RHEL-99352 - Patch asn1_d2i_read_bio to read headers without blocking Resolves: RHEL-178642 Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181, CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768, CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447, CVE-2026-34182. Resolves: RHEL-179274 Resolves: RHEL-179287 Resolves: RHEL-179539 Resolves: RHEL-179544 Resolves: RHEL-179547 Resolves: RHEL-179552 Resolves: RHEL-179556 Resolves: RHEL-179633 Resolves: RHEL-179661 Resolves: RHEL-179678 Resolves: RHEL-179684 Resolves: RHEL-179688 Resolves: RHEL-179691 Resolves: RHEL-179696 Resolves: RHEL-179699 - Fix CVE-2026-28390 Resolves: RHEL-165870 - Fix CVE-2026-31790 Resolves: RHEL-161586 - Rebase to OpenSSL 3.5.5 Resolves: RHEL-136895 Resolves: RHEL-142004 Resolves: RHEL-142012 Resolves: RHEL-142020 Resolves: RHEL-142024 Resolves: RHEL-142028 Resolves: RHEL-142032 Resolves: RHEL-142036 Resolves: RHEL-142040 Resolves: RHEL-142044 Resolves: RHEL-142048 Resolves: RHEL-142052 Resolves: RHEL-142056 - Fix CVE-2025-9230 Resolves: RHEL-115928 - Fix globally disabled LTO Related: RHEL-111633 - Make openssl speed test signatures without errors Resolves: RHEL-95502 - Build tests in check and without LTO Resolves: RHEL-111633 - Add custom define to disable symbol versioning in downstream patched code Also add stricter Suggests for openssl-fips-provider Resolves: RHEL-104236 - Fix Requires/Provider to fix default install of fips providers Resolves: RHEL-104856 - Move fips.so to a seprate subpackage Reverts FIPS self test for SLH-DSA Add Suggests to try to prefer the openssl-fips-provider package over the fips-provider-next package by default Revolves: RHEL-102408 Related: RHEL-80854 - Patch asn1_d2i_read_bio to not raise NOT_ENOUGH_DATA at object boundary Resolves: RHEL-210862 - Patch asn1_d2i_read_bio to read headers without blocking Resolves: RHEL-178642 Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181, CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768, CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447, CVE-2026-34182. Resolves: RHEL-179274 Resolves: RHEL-179287 Resolves: RHEL-179539 Resolves: RHEL-179544 Resolves: RHEL-179547 Resolves: RHEL-179552 Resolves: RHEL-179556 Resolves: RHEL-179633 Resolves: RHEL-179661 Resolves: RHEL-179678 Resolves: RHEL-179684 Resolves: RHEL-179688 Resolves: RHEL-179691 Resolves: RHEL-179696 Resolves: RHEL-179699 - Fix CVE-2026-28390 Resolves: RHEL-165870 - Fix CVE-2026-31790 Resolves: RHEL-161586 - Rebase to OpenSSL 3.5.5 Resolves: RHEL-136895 Resolves: RHEL-142004 Resolves: RHEL-142012 Resolves: RHEL-142020 Resolves: RHEL-142024 Resolves: RHEL-142028 Resolves: RHEL-142032 Resolves: RHEL-142036 Resolves: RHEL-142040 Resolves: RHEL-142044 Resolves: RHEL-142048 Resolves: RHEL-142052 Resolves: RHEL-142056 - Fix CVE-2025-9230 Resolves: RHEL-115928 - Fix globally disabled LTO Related: RHEL-111633 - Make openssl speed test signatures without errors Resolves: RHEL-95502 - Build tests in check and without LTO Resolves: RHEL-111633 - Add custom define to disable symbol versioning in downstream patched code Also add stricter Suggests for openssl-fips-provider Resolves: RHEL-104236 - Fix Requires/Provider to fix default install of fips providers Resolves: RHEL-104856 - Rebase to OpenSSL 3.5.8 Resolves: RHEL-242945 Resolves: RHEL-246260 Resolves: RHEL-246284 Resolves: RHEL-246319 Resolves: RHEL-246439 Resolves: RHEL-246443 Resolves: RHEL-246447 Resolves: RHEL-246451 Resolves: RHEL-246455 - Backport the "HollowByte" hardening patch Resolves: RHEL-232828 - Patch asn1_d2i_read_bio to not raise NOT_ENOUGH_DATA at object boundary Resolves: RHEL-210862 - Patch asn1_d2i_read_bio to read headers without blocking Resolves: RHEL-178642 Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181, CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768, CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447, CVE-2026-34182. Resolves: RHEL-179274 Resolves: RHEL-179287 Resolves: RHEL-179539 Resolves: RHEL-179544 Resolves: RHEL-179547 Resolves: RHEL-179552 Resolves: RHEL-179556 Resolves: RHEL-179633 Resolves: RHEL-179661 Resolves: RHEL-179678 Resolves: RHEL-179684 Resolves: RHEL-179688 Resolves: RHEL-179691 Resolves: RHEL-179696 Resolves: RHEL-179699 - Fix CVE-2026-28390 Resolves: RHEL-165870 - Fix CVE-2026-31790 Resolves: RHEL-161586 - Rebase to OpenSSL 3.5.5 Resolves: RHEL-136895 Resolves: RHEL-142004 Resolves: RHEL-142012 Resolves: RHEL-142020 Resolves: RHEL-142024 Resolves: RHEL-142028 Resolves: RHEL-142032 Resolves: RHEL-142036 Resolves: RHEL-142040 Resolves: RHEL-142044 Resolves: RHEL-142048 Resolves: RHEL-142052 Resolves: RHEL-142056 - Fix CVE-2025-9230 Resolves: RHEL-115928 - Fix globally disabled LTO Related: RHEL-111633 - Fixed DTLS Retransmits Handshake Messages From a Stale Buffer Offset (CVE-2026-84782) Resolves: RHEL-264479 - Rebase to OpenSSL 3.5.8 Resolves: RHEL-242945 Resolves: RHEL-246260 Resolves: RHEL-246284 Resolves: RHEL-246319 Resolves: RHEL-246439 Resolves: RHEL-246443 Resolves: RHEL-246447 Resolves: RHEL-246451 Resolves: RHEL-246455 - Backport the "HollowByte" hardening patch Resolves: RHEL-232828 - Patch asn1_d2i_read_bio to not raise NOT_ENOUGH_DATA at object boundary Resolves: RHEL-210862 - Patch asn1_d2i_read_bio to read headers without blocking Resolves: RHEL-178642 Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181, CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768, CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447, CVE-2026-34182. Resolves: RHEL-179274 Resolves: RHEL-179287 Resolves: RHEL-179539 Resolves: RHEL-179544 Resolves: RHEL-179547 Resolves: RHEL-179552 Resolves: RHEL-179556 Resolves: RHEL-179633 Resolves: RHEL-179661 Resolves: RHEL-179678 Resolves: RHEL-179684 Resolves: RHEL-179688 Resolves: RHEL-179691 Resolves: RHEL-179696 Resolves: RHEL-179699 - Fix CVE-2026-28390 Resolves: RHEL-165870 - Fix CVE-2026-31790 Resolves: RHEL-161586 - Rebase to OpenSSL 3.5.5 Resolves: RHEL-136895 Resolves: RHEL-142004 Resolves: RHEL-142012 Resolves: RHEL-142020 Resolves: RHEL-142024 Resolves: RHEL-142028 Resolves: RHEL-142032 Resolves: RHEL-142036 Resolves: RHEL-142040 Resolves: RHEL-142044 Resolves: RHEL-142048 Resolves: RHEL-142052 Resolves: RHEL-142056 - Fix CVE-2025-9230 Resolves: RHEL-115928 - Update to Go v1.26.2, go-jose v4.1.4, go-grcp v1.79.3 - Addresses CVE-2026-25679, CVE-2026-33186, CVE-2026-34986, CVE-2026-32282, CVE-2026-32283, CVE-2026-32280, CVE-2026-33810 Resolves: RHEL-158777, RHEL-160842, RHEL-165038, RHEL-166685, RHEL-167683, RHEL-167395, RHEL-166351 - Update to v0.144.0 - Addresses CVE-2025-61726, CVE-2025-68121 Resolves: RHEL-148516 - Update Go to 1.25.5 - Addresses CVE-2025-61729 Resolves: RHEL-140554 - Update Expr to v1.17.7 - Addresses CVE-2025-68156 Resolves: RHEL-136447 - Version bump to 0.135.0 - Add systemd-journal group to Requires(pre) - Bump go-tpm-keyfiles Resolves: RHEL-119812 - Bump revision - Go version update to v1.24.4 - Update addresses CVE-2025-4673 Resolves: RHEL-105058 - Collector version update - Go version update to v1.23.9 - Update addresses CVE-2025-22871 Resolves: RHEL-90050 - Bump revision - Update golang-jwt v5.2.1 to v5.2.2 - Update addresses CVE-2025-30204 Resolves: RHEL-85033 - Bump revision - Update go-jose v4.0.2 to v4.0.5 - Update testify v1.9.0 to v1.10.0 - Update addresses CVE-2025-27144 Resolves: RHEL-82967 - Bump revision - Update expr v1.16.9 to v1.17.0 - Remove explicit go toolchain dependency - Update addresses CVE-2025-29786 Resolves: RHEL-83841 - Update to v0.152.1 - Addresses CVE-2026-39821, CVE-2026-42154, CVE-2026-33811, CVE-2026-42151, CVE-2026-27145, CVE-2026-25681, CVE-2026-27136 Resolves: RHEL-183842, RHEL-185027, RHEL-187332, RHEL-189294, RHEL-190006, RHEL-191128, RHEL-191580 - Update to Go v1.26.2, go-jose v4.1.4, go-grcp v1.79.3 - Addresses CVE-2026-25679, CVE-2026-33186, CVE-2026-34986, CVE-2026-32282, CVE-2026-32283, CVE-2026-32280, CVE-2026-33810 Resolves: RHEL-158777, RHEL-160842, RHEL-165038, RHEL-166685, RHEL-167683, RHEL-167395, RHEL-166351 - Update to v0.144.0 - Addresses CVE-2025-61726, CVE-2025-68121 Resolves: RHEL-148516 - Update Go to 1.25.5 - Addresses CVE-2025-61729 Resolves: RHEL-140554 - Update Expr to v1.17.7 - Addresses CVE-2025-68156 Resolves: RHEL-136447 - Version bump to 0.135.0 - Add systemd-journal group to Requires(pre) - Bump go-tpm-keyfiles Resolves: RHEL-119812 - Bump revision - Go version update to v1.24.4 - Update addresses CVE-2025-4673 Resolves: RHEL-105058 - Collector version update - Go version update to v1.23.9 - Update addresses CVE-2025-22871 Resolves: RHEL-90050 - Bump revision - Update golang-jwt v5.2.1 to v5.2.2 - Update addresses CVE-2025-30204 Resolves: RHEL-85033 - Bump revision - Update go-jose v4.0.2 to v4.0.5 - Update testify v1.9.0 to v1.10.0 - Update addresses CVE-2025-27144 Resolves: RHEL-82967 - Rebuild with updated golang and otel - Update addresses CVE-2026-39820, CVE-2026-42499, CVE-2026-42504, CVE-2026-56860, CVE-2026-56859, CVE-2026-41178, CVE-2026-56862, CVE-2026-56858, CVE-2026-33818, CVE-2026-56853 Resolves: RHEL-251748, RHEL-251889, RHEL-251125, RHEL-241785, RHEL-241974, RHEL-239856, RHEL-241392, RHEL-241297, RHEL-241635, RHEL-241176 - Update to v0.152.1 - Addresses CVE-2026-39821, CVE-2026-42154, CVE-2026-33811, CVE-2026-42151, CVE-2026-27145, CVE-2026-25681, CVE-2026-27136 Resolves: RHEL-183842, RHEL-185027, RHEL-187332, RHEL-189294, RHEL-190006, RHEL-191128, RHEL-191580 - Update to Go v1.26.2, go-jose v4.1.4, go-grcp v1.79.3 - Addresses CVE-2026-25679, CVE-2026-33186, CVE-2026-34986, CVE-2026-32282, CVE-2026-32283, CVE-2026-32280, CVE-2026-33810 Resolves: RHEL-158777, RHEL-160842, RHEL-165038, RHEL-166685, RHEL-167683, RHEL-167395, RHEL-166351 - Update to v0.144.0 - Addresses CVE-2025-61726, CVE-2025-68121 Resolves: RHEL-148516 - Update Go to 1.25.5 - Addresses CVE-2025-61729 Resolves: RHEL-140554 - Update Expr to v1.17.7 - Addresses CVE-2025-68156 Resolves: RHEL-136447 - Version bump to 0.135.0 - Add systemd-journal group to Requires(pre) - Bump go-tpm-keyfiles Resolves: RHEL-119812 - Bump revision - Go version update to v1.24.4 - Update addresses CVE-2025-4673 Resolves: RHEL-105058 - Collector version update - Go version update to v1.23.9 - Update addresses CVE-2025-22871 Resolves: RHEL-90050 - Bump revision - Update golang-jwt v5.2.1 to v5.2.2 - Update addresses CVE-2025-30204 Resolves: RHEL-85033 - Update to v0.158.0 - Addresses CVE-2026-84445 - Resolves: RHEL-262073 - Rebuild with updated golang and otel - Update addresses CVE-2026-39820, CVE-2026-42499, CVE-2026-42504, CVE-2026-56860, CVE-2026-56859, CVE-2026-41178, CVE-2026-56862, CVE-2026-56858, CVE-2026-33818, CVE-2026-56853 Resolves: RHEL-251748, RHEL-251889, RHEL-251125, RHEL-241785, RHEL-241974, RHEL-239856, RHEL-241392, RHEL-241297, RHEL-241635, RHEL-241176 - Update to v0.152.1 - Addresses CVE-2026-39821, CVE-2026-42154, CVE-2026-33811, CVE-2026-42151, CVE-2026-27145, CVE-2026-25681, CVE-2026-27136 Resolves: RHEL-183842, RHEL-185027, RHEL-187332, RHEL-189294, RHEL-190006, RHEL-191128, RHEL-191580 - Update to Go v1.26.2, go-jose v4.1.4, go-grcp v1.79.3 - Addresses CVE-2026-25679, CVE-2026-33186, CVE-2026-34986, CVE-2026-32282, CVE-2026-32283, CVE-2026-32280, CVE-2026-33810 Resolves: RHEL-158777, RHEL-160842, RHEL-165038, RHEL-166685, RHEL-167683, RHEL-167395, RHEL-166351 - Update to v0.144.0 - Addresses CVE-2025-61726, CVE-2025-68121 Resolves: RHEL-148516 - Update Go to 1.25.5 - Addresses CVE-2025-61729 Resolves: RHEL-140554 - Update Expr to v1.17.7 - Addresses CVE-2025-68156 Resolves: RHEL-136447 - Version bump to 0.135.0 - Add systemd-journal group to Requires(pre) - Bump go-tpm-keyfiles Resolves: RHEL-119812 - Bump revision - Go version update to v1.24.4 - Update addresses CVE-2025-4673 Resolves: RHEL-105058 - Collector version update - Go version update to v1.23.9 - Update addresses CVE-2025-22871 Resolves: RHEL-90050 - Add noarch to ExclusiveArch - Disable building on i686 - Rebuild with regenerated Requires on Java - Support added for post-quantum cryptography Resolves: RHEL-127516 - Fix bogus 'sscg' arguments Related: RHEL-118292 - Update to openwsman-2.8.1 Resolves: RHEL-97643 - Add libwsman-client.so.4 for backward compatibility Related: RHEL-97643 - Update OpenSSL certificates set up Resolves: RHEL-118292 - Support added for post-quantum cryptography Resolves: RHEL-127516 - Fix bogus 'sscg' arguments Related: RHEL-118292 - Update to openwsman-2.8.1 Resolves: RHEL-97643 - Add libwsman-client.so.4 for backward compatibility Related: RHEL-97643 - Update OpenSSL certificates set up Resolves: RHEL-118292 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Re-enable LTO as upstream GCC target/96939 has been fixed - Disable LTO for now - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Bump version for upgrade with z-stream - Resolves: RHEL-50700 - Add patch for CVE-2024-40897 - Resolves: RHEL-50700 - Bump version for upgrade with z-stream - Resolves: RHEL-50700 - Add patch for CVE-2024-40897 - Resolves: RHEL-50700 - Bump version for upgrade with z-stream - Resolves: RHEL-50700 - Add patch for CVE-2024-40897 - Resolves: RHEL-50700 - Update to 40.3 Resolves: #2089169 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 40.0 - Update to 40.rc - Update to 40.beta - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 3.38.2 - Update to 3.38.1 - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - Add AlmaLinux repositories - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - Add AlmaLinux repositories - Bump release - Update to 165.1 - go.mod: update osbuild/images to v0.245.1, adding the PQC keys to the rhel-9 and rhel-10 rolling distribution repository configs - go.mod: update osbuild/images to 61b16700, enabling bootupd metadata generation for edge-commits including 9.6+ images - Test repository definitions are left at their upstream values - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - Add AlmaLinux repositories - Update to 165.1 - go.mod: update osbuild/images to v0.245.1, adding the PQC keys to the rhel-9 and rhel-10 rolling distribution repository configs - go.mod: update osbuild/images to 61b16700, enabling bootupd metadata generation for edge-commits including 9.6+ images - Test repository definitions are left at their upstream values - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - Add AlmaLinux repositories - go.mod: bump indirect golang.org/x/net dependency to v0.56.0 (CVE-2026-25681, CVE-2026-27136, CVE-2026-42502) - go.mod: update github.com/labstack/echo/v4 to v4.15.3 (CVE-2026-55677) - go.mod: update go.opentelemetry.io/otel to v1.44.0 (CVE-2026-41178) - Bump release - Update to 165.1 - go.mod: update osbuild/images to v0.245.1, adding the PQC keys to the rhel-9 and rhel-10 rolling distribution repository configs - go.mod: update osbuild/images to 61b16700, enabling bootupd metadata generation for edge-commits including 9.6+ images - Test repository definitions are left at their upstream values - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - Add AlmaLinux repositories - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - Add AlmaLinux repositories - Bump release - Update to 165.1 - go.mod: update osbuild/images to v0.245.1, adding the PQC keys to the rhel-9 and rhel-10 rolling distribution repository configs - go.mod: update osbuild/images to 61b16700, enabling bootupd metadata generation for edge-commits including 9.6+ images - Test repository definitions are left at their upstream values - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - Add AlmaLinux repositories - Update to 165.1 - go.mod: update osbuild/images to v0.245.1, adding the PQC keys to the rhel-9 and rhel-10 rolling distribution repository configs - go.mod: update osbuild/images to 61b16700, enabling bootupd metadata generation for edge-commits including 9.6+ images - Test repository definitions are left at their upstream values - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - Add AlmaLinux repositories - go.mod: bump indirect golang.org/x/net dependency to v0.56.0 (CVE-2026-25681, CVE-2026-27136, CVE-2026-42502) - go.mod: update github.com/labstack/echo/v4 to v4.15.3 (CVE-2026-55677) - go.mod: update go.opentelemetry.io/otel to v1.44.0 (CVE-2026-41178) - Bump release - Update to 165.1 - go.mod: update osbuild/images to v0.245.1, adding the PQC keys to the rhel-9 and rhel-10 rolling distribution repository configs - go.mod: update osbuild/images to 61b16700, enabling bootupd metadata generation for edge-commits including 9.6+ images - Test repository definitions are left at their upstream values - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - Add AlmaLinux repositories - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - Add AlmaLinux repositories - Bump release - Update to 165.1 - go.mod: update osbuild/images to v0.245.1, adding the PQC keys to the rhel-9 and rhel-10 rolling distribution repository configs - go.mod: update osbuild/images to 61b16700, enabling bootupd metadata generation for edge-commits including 9.6+ images - Test repository definitions are left at their upstream values - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - Add AlmaLinux repositories - Update to 165.1 - go.mod: update osbuild/images to v0.245.1, adding the PQC keys to the rhel-9 and rhel-10 rolling distribution repository configs - go.mod: update osbuild/images to 61b16700, enabling bootupd metadata generation for edge-commits including 9.6+ images - Test repository definitions are left at their upstream values - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - Add AlmaLinux repositories - go.mod: bump indirect golang.org/x/net dependency to v0.56.0 (CVE-2026-25681, CVE-2026-27136, CVE-2026-42502) - go.mod: update github.com/labstack/echo/v4 to v4.15.3 (CVE-2026-55677) - go.mod: update go.opentelemetry.io/otel to v1.44.0 (CVE-2026-41178) - Bump release - Update to 165.1 - go.mod: update osbuild/images to v0.245.1, adding the PQC keys to the rhel-9 and rhel-10 rolling distribution repository configs - go.mod: update osbuild/images to 61b16700, enabling bootupd metadata generation for edge-commits including 9.6+ images - Test repository definitions are left at their upstream values - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - Fix Patch18 name (RHEL-40367) - Re-fix checksums in FIPS mode (RHEL-40367) - Add missing chunk for PR_227 patch file (RHEL-40367) - Fix checksums in FIPS mode (RHEL-40367) - Update translations (rhbz#2189526) - Fix tar file extraction (rhbz#2218875) - Fix conflict of tftp package with "network servers" group (rhbz#2172264) - Update translations Resolves: rhbz#2139667 Resolves: rhbz#2150877 - Fix a reaction to invalid content URI Resolves: rhbz#2148508 - Fix regression introduced when fixing content archive input Resolves: rhbz#2129008 - Fix problems with handling multi-datastream archives Resolves: rhbz#2129846 - Fix a crash when compulsively clicking in the GUI Resolves: rhbz#2127502 - Add rhel-10.2 and rhel-9.8 prerelease Resolves: rhbz#RHEL-144809 - Update to new release (v20250606) Resolves: rhbz#RHEL-95251 - Update to new release (v20250124) Resolves: rhbz#RHEL-76320 - Add rhel 10.0 and rhel-10-unknown metadata Related: rhbz#RHEL-56790 - Fix changelog Related: rhbz#RHEL-52519 - Update to new release (v20240701) Resolves: rhbz#RHEL-52519 Resolves: rhbz#RHEL-38636 - Update to 1.10.0 release Related: rhbz#2149601 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 1.9.0 release - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebase to 2025.7 Backport https://github.com/ostreedev/ostree/pull/3555 Resolves: #RHEL-129049 - Backport https://github.com/ostreedev/ostree/pull/3555 Resolves: #RHEL-131656 - Update to 2025.6 Resolves: #RHEL-113644 - Update to 2025.5 - Backport https://github.com/ostreedev/ostree/pull/3493 Resolves: #RHEL-107855 - Rebase to https://github.com/ostreedev/ostree/releases/tag/v2025.4 Resolves: #RHEL-104888 - Rebase to https://github.com/ostreedev/ostree/releases/tag/v2025.2 Resolves: #RHEL-84765 - Rebase to https://github.com/ostreedev/ostree/releases/tag/v2025.1 Resolves: #RHEL-73827 - Rebase to https://github.com/ostreedev/ostree/releases/tag/v2024.9 Resolves: #RHEL-62769 - Rebase to https://github.com/ostreedev/ostree/releases/tag/v2024.8 Resolves: #RHEL-62769 - Rebase to 2025.7 Backport https://github.com/ostreedev/ostree/pull/3555 Resolves: #RHEL-129049 - Backport https://github.com/ostreedev/ostree/pull/3555 Resolves: #RHEL-131656 - Update to 2025.6 Resolves: #RHEL-113644 - Update to 2025.5 - Backport https://github.com/ostreedev/ostree/pull/3493 Resolves: #RHEL-107855 - Rebase to https://github.com/ostreedev/ostree/releases/tag/v2025.4 Resolves: #RHEL-104888 - Rebase to https://github.com/ostreedev/ostree/releases/tag/v2025.2 Resolves: #RHEL-84765 - Rebase to https://github.com/ostreedev/ostree/releases/tag/v2025.1 Resolves: #RHEL-73827 - Rebase to https://github.com/ostreedev/ostree/releases/tag/v2024.9 Resolves: #RHEL-62769 - Rebase to https://github.com/ostreedev/ostree/releases/tag/v2024.8 Resolves: #RHEL-62769 - Rebase to 2025.7 Backport https://github.com/ostreedev/ostree/pull/3555 Resolves: #RHEL-129049 - Backport https://github.com/ostreedev/ostree/pull/3555 Resolves: #RHEL-131656 - Update to 2025.6 Resolves: #RHEL-113644 - Update to 2025.5 - Backport https://github.com/ostreedev/ostree/pull/3493 Resolves: #RHEL-107855 - Rebase to https://github.com/ostreedev/ostree/releases/tag/v2025.4 Resolves: #RHEL-104888 - Rebase to https://github.com/ostreedev/ostree/releases/tag/v2025.2 Resolves: #RHEL-84765 - Rebase to https://github.com/ostreedev/ostree/releases/tag/v2025.1 Resolves: #RHEL-73827 - Rebase to https://github.com/ostreedev/ostree/releases/tag/v2024.9 Resolves: #RHEL-62769 - Rebase to https://github.com/ostreedev/ostree/releases/tag/v2024.8 Resolves: #RHEL-62769 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves:rhbz#1961999 - Add gating tests - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - fix incorrect fontconfig file (thanks to lazybvr) - update to 3.0.4 - Add junit to BR - Rebase to 0.26.2 Resolves: RHEL-147825 - Rebase to 0.26.1 Resolves: RHEL-139075, RHEL-118361, RHEL-126132 - Update to new upstream release 0.25.10 Resolves: RHEL-115453 - Fix regression in trust where file creation fails for long cert labels Resolves: RHEL-58899 - Fix usage message in p11-kit list-tokens command Resolves: RHEL-31810 - Rebase to 0.26.2 Resolves: RHEL-147825 - Rebase to 0.26.1 Resolves: RHEL-139075, RHEL-118361, RHEL-126132 - Update to new upstream release 0.25.10 Resolves: RHEL-115453 - Fix regression in trust where file creation fails for long cert labels Resolves: RHEL-58899 - Fix usage message in p11-kit list-tokens command Resolves: RHEL-31810 - Rebase to 0.26.2 Resolves: RHEL-147825 - Rebase to 0.26.1 Resolves: RHEL-139075, RHEL-118361, RHEL-126132 - Update to new upstream release 0.25.10 Resolves: RHEL-115453 - Fix regression in trust where file creation fails for long cert labels Resolves: RHEL-58899 - Fix usage message in p11-kit list-tokens command Resolves: RHEL-31810 - Rebase to 0.26.2 Resolves: RHEL-147825 - Rebase to 0.26.1 Resolves: RHEL-139075, RHEL-118361, RHEL-126132 - Update to new upstream release 0.25.10 Resolves: RHEL-115453 - Fix regression in trust where file creation fails for long cert labels Resolves: RHEL-58899 - Fix usage message in p11-kit list-tokens command Resolves: RHEL-31810 - Handle large timeouts correctly in crm_resource --wait - Do not try to connect to subdaemons before they're respawned - Don't evict IPC clients as long as they're still processing messages - Don't overwhelm the FSA queue with repeated CIB queries - Resolves: RHEL-45869 - Resolves: RHEL-87484 - Resolves: RHEL-114894 - Rebase on upstream 2.1.10-rc1 release - Use dbus to detect completion of systemd resource start/stop actions - Add an option for controlling remote node fencing behavior - Related: RHEL-89134 - Resolves: RHEL-86143 - Resolves: RHEL-84018 - Rebase on upstream 2.1.9 final release - Use async communication to establish TLS connections - Fix regression in adding alerts to CIB - Fix a crash in command line tools when stderr is closed - Resolves: RHEL-61382 - Resolves: RHEL-34276 - Resolves: RHEL-55458 - Resolves: RHEL-59043 - Rebase on upstream 2.1.8 final release - Resolves: RHEL-38540 - Rebase on upstream 2.1.8-rc4 release - Add ability to immediately shutdown system with PCMK_panic_action= - Fix a memory leak in the attribute daemon - Add ability to list options and parameters as parseable metadata - crm_verify now reports invalid fence level indexes - Fix an error in node ID handling in `crm_node -i` - Fix regression in attrd_updater output - Resolves: RHEL-39057 - Resolves: RHEL-40117 - Resolves: RHEL-23401 - Resolves: RHEL-2996 - Resolves: RHEL-47249 - Resolves: RHEL-45935 - Rebase on upstream 2.1.8-rc1 release - Fix a typo in the help output of pacemaker-fenced - Fix escaping characters in XML attribute output - Resolves: RHEL-25819 - Resolves: RHEL-30822 - Fix upgrading to this package on multilib systems - Resolves: RHEL-28999 - Properly validate attribute set type in pacemaker-attrd - Fix `crm_attribute -t nodes --node localhost` - Resolves: RHEL-13216 - Resolves: RHEL-17225 - Resolves: RHEL-23498 - Rebase on upstream 2.1.7 final release - Fix documentation for Pacemaker Remote schema transfers - Do not check CIB feature set version when CIB_file is set - Consolidate attrd cache handling - Avoid duplicating option metadata across daemons - Related: RHEL-7665 - Related: RHEL-13216 - Resolves: RHEL-7702 - Rebase on upstream 2.1.7-rc4 release - Use systemd-sysusers to create user/group - Pacemaker Remote nodes can validate against later schema versions - Related: RHEL-17225 - Resolves: RHEL-7665 - Fix integer overflows in remote message decompression code (CVE-2026-10649) - Resolves: RHEL-181150 - Handle large timeouts correctly in crm_resource --wait - Do not try to connect to subdaemons before they're respawned - Don't evict IPC clients as long as they're still processing messages - Don't overwhelm the FSA queue with repeated CIB queries - Resolves: RHEL-45869 - Resolves: RHEL-87484 - Resolves: RHEL-114894 - Rebase on upstream 2.1.10-rc1 release - Use dbus to detect completion of systemd resource start/stop actions - Add an option for controlling remote node fencing behavior - Related: RHEL-89134 - Resolves: RHEL-86143 - Resolves: RHEL-84018 - Rebase on upstream 2.1.9 final release - Use async communication to establish TLS connections - Fix regression in adding alerts to CIB - Fix a crash in command line tools when stderr is closed - Resolves: RHEL-61382 - Resolves: RHEL-34276 - Resolves: RHEL-55458 - Resolves: RHEL-59043 - Rebase on upstream 2.1.8 final release - Resolves: RHEL-38540 - Rebase on upstream 2.1.8-rc4 release - Add ability to immediately shutdown system with PCMK_panic_action= - Fix a memory leak in the attribute daemon - Add ability to list options and parameters as parseable metadata - crm_verify now reports invalid fence level indexes - Fix an error in node ID handling in `crm_node -i` - Fix regression in attrd_updater output - Resolves: RHEL-39057 - Resolves: RHEL-40117 - Resolves: RHEL-23401 - Resolves: RHEL-2996 - Resolves: RHEL-47249 - Resolves: RHEL-45935 - Handle large timeouts correctly in crm_resource --wait - Do not try to connect to subdaemons before they're respawned - Don't evict IPC clients as long as they're still processing messages - Don't overwhelm the FSA queue with repeated CIB queries - Resolves: RHEL-45869 - Resolves: RHEL-87484 - Resolves: RHEL-114894 - Rebase on upstream 2.1.10-rc1 release - Use dbus to detect completion of systemd resource start/stop actions - Add an option for controlling remote node fencing behavior - Related: RHEL-89134 - Resolves: RHEL-86143 - Resolves: RHEL-84018 - Rebase on upstream 2.1.9 final release - Use async communication to establish TLS connections - Fix regression in adding alerts to CIB - Fix a crash in command line tools when stderr is closed - Resolves: RHEL-61382 - Resolves: RHEL-34276 - Resolves: RHEL-55458 - Resolves: RHEL-59043 - Rebase on upstream 2.1.8 final release - Resolves: RHEL-38540 - Rebase on upstream 2.1.8-rc4 release - Add ability to immediately shutdown system with PCMK_panic_action= - Fix a memory leak in the attribute daemon - Add ability to list options and parameters as parseable metadata - crm_verify now reports invalid fence level indexes - Fix an error in node ID handling in `crm_node -i` - Fix regression in attrd_updater output - Resolves: RHEL-39057 - Resolves: RHEL-40117 - Resolves: RHEL-23401 - Resolves: RHEL-2996 - Resolves: RHEL-47249 - Resolves: RHEL-45935 - Rebase on upstream 2.1.8-rc1 release - Fix a typo in the help output of pacemaker-fenced - Fix escaping characters in XML attribute output - Resolves: RHEL-25819 - Resolves: RHEL-30822 - Fix upgrading to this package on multilib systems - Resolves: RHEL-28999 - Properly validate attribute set type in pacemaker-attrd - Fix `crm_attribute -t nodes --node localhost` - Resolves: RHEL-13216 - Resolves: RHEL-17225 - Resolves: RHEL-23498 - Rebase on upstream 2.1.7 final release - Fix documentation for Pacemaker Remote schema transfers - Do not check CIB feature set version when CIB_file is set - Consolidate attrd cache handling - Avoid duplicating option metadata across daemons - Related: RHEL-7665 - Related: RHEL-13216 - Resolves: RHEL-7702 - Rebase on upstream 2.1.7-rc4 release - Use systemd-sysusers to create user/group - Pacemaker Remote nodes can validate against later schema versions - Related: RHEL-17225 - Resolves: RHEL-7665 - Fix integer overflows in remote message decompression code (CVE-2026-10649) - Resolves: RHEL-181150 - Handle large timeouts correctly in crm_resource --wait - Do not try to connect to subdaemons before they're respawned - Don't evict IPC clients as long as they're still processing messages - Don't overwhelm the FSA queue with repeated CIB queries - Resolves: RHEL-45869 - Resolves: RHEL-87484 - Resolves: RHEL-114894 - Rebase on upstream 2.1.10-rc1 release - Use dbus to detect completion of systemd resource start/stop actions - Add an option for controlling remote node fencing behavior - Related: RHEL-89134 - Resolves: RHEL-86143 - Resolves: RHEL-84018 - Rebase on upstream 2.1.9 final release - Use async communication to establish TLS connections - Fix regression in adding alerts to CIB - Fix a crash in command line tools when stderr is closed - Resolves: RHEL-61382 - Resolves: RHEL-34276 - Resolves: RHEL-55458 - Resolves: RHEL-59043 - Rebase on upstream 2.1.8 final release - Resolves: RHEL-38540 - Rebase on upstream 2.1.8-rc4 release - Add ability to immediately shutdown system with PCMK_panic_action= - Fix a memory leak in the attribute daemon - Add ability to list options and parameters as parseable metadata - crm_verify now reports invalid fence level indexes - Fix an error in node ID handling in `crm_node -i` - Fix regression in attrd_updater output - Resolves: RHEL-39057 - Resolves: RHEL-40117 - Resolves: RHEL-23401 - Resolves: RHEL-2996 - Resolves: RHEL-47249 - Resolves: RHEL-45935 - Handle large timeouts correctly in crm_resource --wait - Do not try to connect to subdaemons before they're respawned - Don't evict IPC clients as long as they're still processing messages - Don't overwhelm the FSA queue with repeated CIB queries - Resolves: RHEL-45869 - Resolves: RHEL-87484 - Resolves: RHEL-114894 - Rebase on upstream 2.1.10-rc1 release - Use dbus to detect completion of systemd resource start/stop actions - Add an option for controlling remote node fencing behavior - Related: RHEL-89134 - Resolves: RHEL-86143 - Resolves: RHEL-84018 - Rebase on upstream 2.1.9 final release - Use async communication to establish TLS connections - Fix regression in adding alerts to CIB - Fix a crash in command line tools when stderr is closed - Resolves: RHEL-61382 - Resolves: RHEL-34276 - Resolves: RHEL-55458 - Resolves: RHEL-59043 - Rebase on upstream 2.1.8 final release - Resolves: RHEL-38540 - Rebase on upstream 2.1.8-rc4 release - Add ability to immediately shutdown system with PCMK_panic_action= - Fix a memory leak in the attribute daemon - Add ability to list options and parameters as parseable metadata - crm_verify now reports invalid fence level indexes - Fix an error in node ID handling in `crm_node -i` - Fix regression in attrd_updater output - Resolves: RHEL-39057 - Resolves: RHEL-40117 - Resolves: RHEL-23401 - Resolves: RHEL-2996 - Resolves: RHEL-47249 - Resolves: RHEL-45935 - Rebase on upstream 2.1.8-rc1 release - Fix a typo in the help output of pacemaker-fenced - Fix escaping characters in XML attribute output - Resolves: RHEL-25819 - Resolves: RHEL-30822 - Fix upgrading to this package on multilib systems - Resolves: RHEL-28999 - Properly validate attribute set type in pacemaker-attrd - Fix `crm_attribute -t nodes --node localhost` - Resolves: RHEL-13216 - Resolves: RHEL-17225 - Resolves: RHEL-23498 - Rebase on upstream 2.1.7 final release - Fix documentation for Pacemaker Remote schema transfers - Do not check CIB feature set version when CIB_file is set - Consolidate attrd cache handling - Avoid duplicating option metadata across daemons - Related: RHEL-7665 - Related: RHEL-13216 - Resolves: RHEL-7702 - Rebase on upstream 2.1.7-rc4 release - Use systemd-sysusers to create user/group - Pacemaker Remote nodes can validate against later schema versions - Related: RHEL-17225 - Resolves: RHEL-7665 - Fix integer overflows in remote message decompression code (CVE-2026-10649) - Resolves: RHEL-181150 - Handle large timeouts correctly in crm_resource --wait - Do not try to connect to subdaemons before they're respawned - Don't evict IPC clients as long as they're still processing messages - Don't overwhelm the FSA queue with repeated CIB queries - Resolves: RHEL-45869 - Resolves: RHEL-87484 - Resolves: RHEL-114894 - Rebase on upstream 2.1.10-rc1 release - Use dbus to detect completion of systemd resource start/stop actions - Add an option for controlling remote node fencing behavior - Related: RHEL-89134 - Resolves: RHEL-86143 - Resolves: RHEL-84018 - Rebase on upstream 2.1.9 final release - Use async communication to establish TLS connections - Fix regression in adding alerts to CIB - Fix a crash in command line tools when stderr is closed - Resolves: RHEL-61382 - Resolves: RHEL-34276 - Resolves: RHEL-55458 - Resolves: RHEL-59043 - Rebase on upstream 2.1.8 final release - Resolves: RHEL-38540 - Rebase on upstream 2.1.8-rc4 release - Add ability to immediately shutdown system with PCMK_panic_action= - Fix a memory leak in the attribute daemon - Add ability to list options and parameters as parseable metadata - crm_verify now reports invalid fence level indexes - Fix an error in node ID handling in `crm_node -i` - Fix regression in attrd_updater output - Resolves: RHEL-39057 - Resolves: RHEL-40117 - Resolves: RHEL-23401 - Resolves: RHEL-2996 - Resolves: RHEL-47249 - Resolves: RHEL-45935 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Upstream 5.0 Release - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Upstream 5.0 Release - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Upstream 5.0 Release - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - pam_faillock: skip clearing user's failed attempt. Resolves: RHEL-130875 - pam_unix: sync expiry checks with shadow. Resolves: RHEL-70519, RHEL-95475, RHEL-96955 and RHEL-96973 - pam.conf: remove tallylog. Resolves: RHEL-15324 - pam_namespace: fix potential privilege escalation. Resolves: CVE-2025-6020 and RHEL-96727 - pam_access: rework resolving of tokens as hostname. Resolves: CVE-2024-10963 and RHEL-66244 - pam_unix: always run the helper to obtain shadow password file entries. CVE-2024-10041. Resolves: RHEL-62879 - pam_access: always match local address and clarify LOCAL keyword behaviour. Resolves: RHEL-23631 and RHEL-39943 - libpam: support long lines in service files. Resolves: RHEL-40705 - pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS situations. CVE-2024-22365. Resolves: RHEL-21244 - libpam: use getlogin() from libc and not utmp. Resolves: RHEL-16727 - pam_access: handle hostnames in access.conf. Resolves: RHEL-22300 - pam_faillock: create tallydir before creating tallyfile. Resolves: RHEL-20943 - pam_userdb: fix password comparison timing leak. Resolves: CVE-2026-54411 and RHEL-191702 - pam_faillock: skip clearing user's failed attempt. Resolves: RHEL-130875 - pam_unix: sync expiry checks with shadow. Resolves: RHEL-70519, RHEL-95475, RHEL-96955 and RHEL-96973 - pam.conf: remove tallylog. Resolves: RHEL-15324 - pam_namespace: fix potential privilege escalation. Resolves: CVE-2025-6020 and RHEL-96727 - pam_access: rework resolving of tokens as hostname. Resolves: CVE-2024-10963 and RHEL-66244 - pam_unix: always run the helper to obtain shadow password file entries. CVE-2024-10041. Resolves: RHEL-62879 - pam_access: always match local address and clarify LOCAL keyword behaviour. Resolves: RHEL-23631 and RHEL-39943 - pam_faillock: skip clearing user's failed attempt. Resolves: RHEL-130875 - pam_unix: sync expiry checks with shadow. Resolves: RHEL-70519, RHEL-95475, RHEL-96955 and RHEL-96973 - pam.conf: remove tallylog. Resolves: RHEL-15324 - pam_namespace: fix potential privilege escalation. Resolves: CVE-2025-6020 and RHEL-96727 - pam_access: rework resolving of tokens as hostname. Resolves: CVE-2024-10963 and RHEL-66244 - pam_unix: always run the helper to obtain shadow password file entries. CVE-2024-10041. Resolves: RHEL-62879 - pam_access: always match local address and clarify LOCAL keyword behaviour. Resolves: RHEL-23631 and RHEL-39943 - libpam: support long lines in service files. Resolves: RHEL-40705 - pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS situations. CVE-2024-22365. Resolves: RHEL-21244 - libpam: use getlogin() from libc and not utmp. Resolves: RHEL-16727 - pam_access: handle hostnames in access.conf. Resolves: RHEL-22300 - pam_faillock: create tallydir before creating tallyfile. Resolves: RHEL-20943 - pam_userdb: fix password comparison timing leak. Resolves: CVE-2026-54411 and RHEL-191702 - pam_faillock: skip clearing user's failed attempt. Resolves: RHEL-130875 - pam_unix: sync expiry checks with shadow. Resolves: RHEL-70519, RHEL-95475, RHEL-96955 and RHEL-96973 - pam.conf: remove tallylog. Resolves: RHEL-15324 - pam_namespace: fix potential privilege escalation. Resolves: CVE-2025-6020 and RHEL-96727 - pam_access: rework resolving of tokens as hostname. Resolves: CVE-2024-10963 and RHEL-66244 - pam_unix: always run the helper to obtain shadow password file entries. CVE-2024-10041. Resolves: RHEL-62879 - pam_access: always match local address and clarify LOCAL keyword behaviour. Resolves: RHEL-23631 and RHEL-39943 - resolves: RHEL-146305 - Enable debug logs in cifs.upcall - resolves: RHEL-131406 - fix regression with cifscreds(1) - resolves: RHEL-82680 - Update to version 7.2 - Fix damaged test filename - resolves: RHEL-61732 - Update to version 7.1 - Implement CLDAP Ping to find the closest site - Resolves: RHELPLAN-17597 - mount.cifs.rst: add missing reference for sssd - mount.cifs.rst: update section about xattr/acl support - Resolves: RHEL-22495 - pam_cifscreds: fix NULL arg warning passed to pam_syslog() - Resolves: RHEL-28050 - cifs.upcall: fix UAF in get_cachename_from_process_env() - Resolves: RHEL-28047 - resolves: RHEL-192982 - fix krb5 mount regression - Update to version 7.6 - resolves: RHEL-185761 - CVE-2026-12505 cifs-utils: LPE via cifs.spnego - resolves: RHEL-127499 - Enable debug logs in cifs.upcall - resolves: RHEL-110765 - fix regression with cifscreds(1) - resolves: RHEL-82680 - Update to version 7.2 - Fix damaged test filename - resolves: RHEL-61732 - Update to version 7.1 - resolves: RHEL-247580 - fix krb5 regression with --trust-dns - resolves: RHEL-192982 - fix krb5 mount regression - Update to version 7.6 - resolves: RHEL-185761 - CVE-2026-12505 cifs-utils: LPE via cifs.spnego - resolves: RHEL-127499 - Enable debug logs in cifs.upcall - resolves: RHEL-110765 - fix regression with cifscreds(1) - resolves: RHEL-82680 - Update to version 7.2 - Fix damaged test filename - resolves: RHEL-61732 - Update to version 7.1 - Unpatch Red Hat help message - CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode Resolves: RHEL-164753 - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode multiplexing sessions Resolves: RHEL-166250 - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms and HostbasedAcceptedAlgorithms with regard to ECDSA keys Resolves: RHEL-166234 - CVE-2026-35414: Fix mishandling of authorized_keys principals option Resolves: RHEL-166202 - CVE-2026-35386: Add validation rules to usernames and hostnames set for ProxyJump/-J on the commandline Resolves: RHEL-166218 - Version bump - CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155824 - Provide a way to skip unsupported ML-KEM hybrid algorithms in FIPS mode Resolves: RHEL-151580 - Enable support for DSA keys Resolves: RHEL-127624 - CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-133959 - CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-133960 - Fix implicit destination path selection when source path ends with ".." Resolves: RHEL-119515 - Canonicalize username when matching a user Resolves: RHEL-118372 - Rebase to version 9.9 Resolves: RHEL-108912 - Move the redhat help message to debug1 log level Resolves: RHEL-104580 - Fix missing error codes set and invalid error code checks in OpenSSH. It prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465). Resolves: RHEL-78700 - Unpatch Red Hat help message - CVE-2026-59996: Fix remote glob result of ".." causing files to be placed in unintended parent directories when scp performs remote-to-remote copy via the local host Resolves: RHEL-193178 - CVE-2026-60002: Fix use-after-free in cached hostkey during key re-exchange Resolves: RHEL-193024 - CVE-2026-55653: Fix double free in openssh DH-GEX client path during FIPS known-group validation that leads to client-side denial of service Resolves: RHEL-186439 - CVE-2026-55654: Fix heap out-of-bounds read during GSSAPI indicator cleanup due to missing NULL terminator Resolves: RHEL-185836 - CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket pre-binding Resolves: RHEL-185854 - CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode Resolves: RHEL-164753 - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode multiplexing sessions Resolves: RHEL-166250 - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms and HostbasedAcceptedAlgorithms with regard to ECDSA keys Resolves: RHEL-166234 - CVE-2026-35414: Fix mishandling of authorized_keys principals option Resolves: RHEL-166202 - CVE-2026-35386: Add validation rules to usernames and hostnames set for ProxyJump/-J on the commandline Resolves: RHEL-166218 - Version bump - CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155824 - Provide a way to skip unsupported ML-KEM hybrid algorithms in FIPS mode Resolves: RHEL-151580 - Enable support for DSA keys Resolves: RHEL-127624 - CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-133959 - CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-133960 - Fix implicit destination path selection when source path ends with ".." Resolves: RHEL-119515 - Canonicalize username when matching a user Resolves: RHEL-118372 - Rebase to version 9.9 Resolves: RHEL-108912 - Unpatch Red Hat help message - CVE-2026-73283: Complete the fix of security bypass due to incorrect handling of forwarding and tunneling options Resolves: RHEL-245416 - CVE-2026-73281: Fix misinteraction between agent locking and the session-bind@openssh.com extension Resolves: RHEL-245424 - CVE-2026-73282: Fix information disclosure and data corruption via use-after-free in ssh client Resolves: RHEL-245419 - Fix CVE-2026-59995 OpenSSH: sftp client allows attacker to control downloaded file location Resolves: RHEL-236320 - Fix CVE-2026-59999 and CVE-2026-73283: Security bypass due to incorrect handling of forwarding and tunneling options Resolves: RHEL-236286 - CVE-2026-59996: Fix remote glob result of ".." causing files to be placed in unintended parent directories when scp performs remote-to-remote copy via the local host Resolves: RHEL-193178 - CVE-2026-60002: Fix use-after-free in cached hostkey during key re-exchange Resolves: RHEL-193024 - CVE-2026-55653: Fix double free in openssh DH-GEX client path during FIPS known-group validation that leads to client-side denial of service Resolves: RHEL-186439 - CVE-2026-55654: Fix heap out-of-bounds read during GSSAPI indicator cleanup due to missing NULL terminator Resolves: RHEL-185836 - CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket pre-binding Resolves: RHEL-185854 - CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode Resolves: RHEL-164753 - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode multiplexing sessions Resolves: RHEL-166250 - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms and HostbasedAcceptedAlgorithms with regard to ECDSA keys Resolves: RHEL-166234 - CVE-2026-35414: Fix mishandling of authorized_keys principals option Resolves: RHEL-166202 - CVE-2026-35386: Add validation rules to usernames and hostnames set for ProxyJump/-J on the commandline Resolves: RHEL-166218 - Version bump - CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155824 - Provide a way to skip unsupported ML-KEM hybrid algorithms in FIPS mode Resolves: RHEL-151580 - Enable support for DSA keys Resolves: RHEL-127624 - CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-133959 - CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-133960 - Unpatch Red Hat help message - CVE-2026-60001: Fix cases in GSSAPI and keyboard-interactive authentication where the minimum per-attempt delay was not being enforced Resolves: RHEL-258461 - CVE-2026-73283: Complete the fix of security bypass due to incorrect handling of forwarding and tunneling options Resolves: RHEL-245416 - CVE-2026-73281: Fix misinteraction between agent locking and the session-bind@openssh.com extension Resolves: RHEL-245424 - CVE-2026-73282: Fix information disclosure and data corruption via use-after-free in ssh client Resolves: RHEL-245419 - Fix CVE-2026-59995 OpenSSH: sftp client allows attacker to control downloaded file location Resolves: RHEL-236320 - Fix CVE-2026-59999 and CVE-2026-73283: Security bypass due to incorrect handling of forwarding and tunneling options Resolves: RHEL-236286 - CVE-2026-59996: Fix remote glob result of ".." causing files to be placed in unintended parent directories when scp performs remote-to-remote copy via the local host Resolves: RHEL-193178 - CVE-2026-60002: Fix use-after-free in cached hostkey during key re-exchange Resolves: RHEL-193024 - CVE-2026-55653: Fix double free in openssh DH-GEX client path during FIPS known-group validation that leads to client-side denial of service Resolves: RHEL-186439 - CVE-2026-55654: Fix heap out-of-bounds read during GSSAPI indicator cleanup due to missing NULL terminator Resolves: RHEL-185836 - CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket pre-binding Resolves: RHEL-185854 - CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode Resolves: RHEL-164753 - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode multiplexing sessions Resolves: RHEL-166250 - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms and HostbasedAcceptedAlgorithms with regard to ECDSA keys Resolves: RHEL-166234 - CVE-2026-35414: Fix mishandling of authorized_keys principals option Resolves: RHEL-166202 - CVE-2026-35386: Add validation rules to usernames and hostnames set for ProxyJump/-J on the commandline Resolves: RHEL-166218 - Version bump - CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155824 - Provide a way to skip unsupported ML-KEM hybrid algorithms in FIPS mode Resolves: RHEL-151580 - Unpatch Red Hat help message - CVE-2026-59998: Document caveat regarding GSSAPIStrictAcceptorCheck Resolves: RHEL-276221 - CVE-2026-59997: Fix internal-sftp server argument parsing limit Resolves: RHEL-276234 - CVE-2026-60000: Fix DoS via excessive GSSAPI authentication attempts Resolves: RHEL-276230 - CVE-2026-60001: Fix cases in GSSAPI and keyboard-interactive authentication where the minimum per-attempt delay was not being enforced Resolves: RHEL-258461 - CVE-2026-73283: Complete the fix of security bypass due to incorrect handling of forwarding and tunneling options Resolves: RHEL-245416 - CVE-2026-73281: Fix misinteraction between agent locking and the session-bind@openssh.com extension Resolves: RHEL-245424 - CVE-2026-73282: Fix information disclosure and data corruption via use-after-free in ssh client Resolves: RHEL-245419 - Fix CVE-2026-59995 OpenSSH: sftp client allows attacker to control downloaded file location Resolves: RHEL-236320 - Fix CVE-2026-59999 and CVE-2026-73283: Security bypass due to incorrect handling of forwarding and tunneling options Resolves: RHEL-236286 - CVE-2026-59996: Fix remote glob result of ".." causing files to be placed in unintended parent directories when scp performs remote-to-remote copy via the local host Resolves: RHEL-193178 - CVE-2026-60002: Fix use-after-free in cached hostkey during key re-exchange Resolves: RHEL-193024 - CVE-2026-55653: Fix double free in openssh DH-GEX client path during FIPS known-group validation that leads to client-side denial of service Resolves: RHEL-186439 - CVE-2026-55654: Fix heap out-of-bounds read during GSSAPI indicator cleanup due to missing NULL terminator Resolves: RHEL-185836 - CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket pre-binding Resolves: RHEL-185854 - CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode Resolves: RHEL-164753 - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode multiplexing sessions Resolves: RHEL-166250 - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms and HostbasedAcceptedAlgorithms with regard to ECDSA keys Resolves: RHEL-166234 - CVE-2026-35414: Fix mishandling of authorized_keys principals option Resolves: RHEL-166202 - CVE-2026-35386: Add validation rules to usernames and hostnames set for ProxyJump/-J on the commandline Resolves: RHEL-166218 - Version bump - CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155824 - Update pango-emoji-table.h for emoji 14 support - Add pango-update-emoji.patch - Resolves: #2119674 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 1.48.7 (#1981720) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 1.48.4 - Update to 1.48.3 - Disable gtk-doc support as we don't have gi-docgen in Fedora yet - Update to 1.48.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.48.1 - Update to 1.48.0 - Update pango-emoji-table.h for emoji 14 support - Add pango-update-emoji.patch - Resolves: #2119674 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 1.48.7 (#1981720) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 1.48.4 - Update to 1.48.3 - Disable gtk-doc support as we don't have gi-docgen in Fedora yet - Update to 1.48.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.48.1 - Update to 1.48.0 - Update to 2.46.1 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Use pkgconfig to BR the required cairomm API/ABI version 1.0 (vs. 1.16); use cairomm1.0, which may be a virtual Provides, in the manual lib Requires - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 2.42.2 - Update source URLs - Switch to meson build system - Tighten soname globs - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 2.42.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebase to papi 7.2.0 - Update license tag to BSD-3-Clause - Remove old patches and add new patches for 7.2.0 compatibility - Update configure options and package files - Resolves: RHEL-121673 - Update papi event presets (RHEL-9333, RHEL-9334, RHEL-9335) - genpapifdef: Resolve install conflict between i686 and x86_64 papi-devel RPMs Backport of upstream icl-utk-edu/papi commit fb6d3924b807: sort the defs and presets hash keys so the generated Fortran headers are byte-identical across architectures. - Rebase to papi 7.2.0 - Update license tag to BSD-3-Clause - Remove old patches and add new patches for 7.2.0 compatibility - Update configure options and package files - Resolves: RHEL-121673 - Rebase to papi 7.2.0 - Update license tag to BSD-3-Clause - Remove old patches and add new patches for 7.2.0 compatibility - Update configure options and package files - Resolves: RHEL-121673 - Update papi event presets (RHEL-9333, RHEL-9334, RHEL-9335) - genpapifdef: Resolve install conflict between i686 and x86_64 papi-devel RPMs Backport of upstream icl-utk-edu/papi commit fb6d3924b807: sort the defs and presets hash keys so the generated Fortran headers are byte-identical across architectures. - Rebase to papi 7.2.0 - Update license tag to BSD-3-Clause - Remove old patches and add new patches for 7.2.0 compatibility - Update configure options and package files - Resolves: RHEL-121673 - Rebase to papi 7.2.0 - Update license tag to BSD-3-Clause - Remove old patches and add new patches for 7.2.0 compatibility - Update configure options and package files - Resolves: RHEL-121673 - Update papi event presets (RHEL-9333, RHEL-9334, RHEL-9335) - genpapifdef: Resolve install conflict between i686 and x86_64 papi-devel RPMs Backport of upstream icl-utk-edu/papi commit fb6d3924b807: sort the defs and presets hash keys so the generated Fortran headers are byte-identical across architectures. - Rebase to papi 7.2.0 - Update license tag to BSD-3-Clause - Remove old patches and add new patches for 7.2.0 compatibility - Update configure options and package files - Resolves: RHEL-121673 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - New upstream release. Resolves: rhbz#1254352 - Sub-package texttopaps with old code. - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Resolves: RHEL-169637 RHEL-169639 RHEL-169648 - Resolves: RHEL-137588 RHEL-136313 - Resolves: RHEL-136313 RHEL-136461 RHEL-137439 RHEL-137588 - Resolves: RHEL-134942 RHEL-134943 - Resolves: RHEL-134119 - Resolves: RHEL-123376 RHEL-123438 - Resolves: RHEL-106326 - Resolves: RHEL-84283 - Resolves: RHEL-84283 - Resolves: RHEL-79787 - Resolves: RHEL-184106 RHEL-183990 - Resolves: RHEL-169637 RHEL-169639 RHEL-169648 - Resolves: RHEL-137588 RHEL-136313 - Resolves: RHEL-136313 RHEL-136461 RHEL-137439 RHEL-137588 - Resolves: RHEL-134942 RHEL-134943 - Resolves: RHEL-134119 - Resolves: RHEL-123376 RHEL-123438 - Resolves: RHEL-106326 - Resolves: RHEL-84283 - Resolves: RHEL-84283 - Resolves: RHEL-216654 - Resolves: RHEL-184106 RHEL-183990 - Resolves: RHEL-169637 RHEL-169639 RHEL-169648 - Resolves: RHEL-137588 RHEL-136313 - Resolves: RHEL-136313 RHEL-136461 RHEL-137439 RHEL-137588 - Resolves: RHEL-134942 RHEL-134943 - Resolves: RHEL-134119 - Resolves: RHEL-123376 RHEL-123438 - Resolves: RHEL-106326 - Resolves: RHEL-84283 - Resolves: RHEL-261244 - Resolves: RHEL-216654 - Resolves: RHEL-184106 RHEL-183990 - Resolves: RHEL-169637 RHEL-169639 RHEL-169648 - Resolves: RHEL-137588 RHEL-136313 - Resolves: RHEL-136313 RHEL-136461 RHEL-137439 RHEL-137588 - Resolves: RHEL-134942 RHEL-134943 - Resolves: RHEL-134119 - Resolves: RHEL-123376 RHEL-123438 - Resolves: RHEL-106326 - Resolves: RHEL-169637 RHEL-169639 RHEL-169648 - Resolves: RHEL-137588 RHEL-136313 - Resolves: RHEL-136313 RHEL-136461 RHEL-137439 RHEL-137588 - Resolves: RHEL-134942 RHEL-134943 - Resolves: RHEL-134119 - Resolves: RHEL-123376 RHEL-123438 - Resolves: RHEL-106326 - Resolves: RHEL-84283 - Resolves: RHEL-84283 - Resolves: RHEL-79787 - Resolves: RHEL-184106 RHEL-183990 - Resolves: RHEL-169637 RHEL-169639 RHEL-169648 - Resolves: RHEL-137588 RHEL-136313 - Resolves: RHEL-136313 RHEL-136461 RHEL-137439 RHEL-137588 - Resolves: RHEL-134942 RHEL-134943 - Resolves: RHEL-134119 - Resolves: RHEL-123376 RHEL-123438 - Resolves: RHEL-106326 - Resolves: RHEL-84283 - Resolves: RHEL-84283 - Resolves: RHEL-216654 - Resolves: RHEL-184106 RHEL-183990 - Resolves: RHEL-169637 RHEL-169639 RHEL-169648 - Resolves: RHEL-137588 RHEL-136313 - Resolves: RHEL-136313 RHEL-136461 RHEL-137439 RHEL-137588 - Resolves: RHEL-134942 RHEL-134943 - Resolves: RHEL-134119 - Resolves: RHEL-123376 RHEL-123438 - Resolves: RHEL-106326 - Resolves: RHEL-84283 - Resolves: RHEL-261244 - Resolves: RHEL-216654 - Resolves: RHEL-184106 RHEL-183990 - Resolves: RHEL-169637 RHEL-169639 RHEL-169648 - Resolves: RHEL-137588 RHEL-136313 - Resolves: RHEL-136313 RHEL-136461 RHEL-137439 RHEL-137588 - Resolves: RHEL-134942 RHEL-134943 - Resolves: RHEL-134119 - Resolves: RHEL-123376 RHEL-123438 - Resolves: RHEL-106326 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Fix build - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 0.4.2. - 0.4.0. - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fix crash on Ctrl-Q using a patch from upstream gitlab (RH #1725150) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - update to 1.1.13 + spec cleanup and modernization fixes rhbz#1297158 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - add support for cxl1.1 device link status information (#RHEL-29162) - add PCIe 6.0 data rate (64 GT/s) support (#RHEL-61959) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix the SAST reports described in RHEL-32492 and RHEL-32488 - Fix the SAST reports described in RHEL-32492 and RHEL-32488 - Fix the SAST reports described in RHEL-32492 and RHEL-32488 - Fix the SAST reports described in RHEL-32492 and RHEL-32488 - Fix SEGFAULT caused by dereferencing subject when length==0 on aarch64 - Resolves: RHEL-51866 - Rebuilt for added pcre2-tools into CRB - Fix an issue with restoring originally unset entries in recursion - Resolves: BZ#2248133 - Fix issue in the backtracking optimization of character in JIT - Backport multiple CVE fixes - CVE-2026-86145, CVE-2026-89156, CVE-2026-89157, CVE-2026-89158, CVE-2026-89160, CVE-2026-89161 - Fix SEGFAULT caused by dereferencing subject when length==0 on aarch64 - Resolves: RHEL-51866 - Rebuilt for added pcre2-tools into CRB - Fix an issue with restoring originally unset entries in recursion - Resolves: BZ#2248133 - Fix issue in the backtracking optimization of character in JIT - Backport multiple CVE fixes - CVE-2026-86145, CVE-2026-89156, CVE-2026-89157, CVE-2026-89158, CVE-2026-89160, CVE-2026-89161 - Fix SEGFAULT caused by dereferencing subject when length==0 on aarch64 - Resolves: RHEL-51866 - Rebuilt for added pcre2-tools into CRB - Fix an issue with restoring originally unset entries in recursion - Resolves: BZ#2248133 - Fix issue in the backtracking optimization of character in JIT - Backport multiple CVE fixes - CVE-2026-86145, CVE-2026-89156, CVE-2026-89157, CVE-2026-89158, CVE-2026-89160, CVE-2026-89161 - Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable backports (SOURCES/1100-1196) - Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto authencesn/algif) - Keep the smb cifs.spnego ahead-fix (retained as 1197) - RHEL changelog for 687.6.1..687.10.1 follows: - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163} - RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128} - usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607} - can: raw: fix ro->uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401} - powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125] - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742] - Revert "lpfc: don't use file->f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742] - drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822] - drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853] - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404] - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402} - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741} - smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988] - ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378] - RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966] - net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207] - ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095] - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766} - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766} - rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075} - Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable backports (SOURCES/1198-1252) - RHEL changelog for 687.11.1..687.12.1 follows: - dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110} - Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020} - crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914] - proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653} - proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653} - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470] - mm/page_alloc: clear page->private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303} - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158} - redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927] - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859] - ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829] - ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829] - ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179] - ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257] - dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442] - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378] - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684} - cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701] - ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701] - ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701] - ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701] - drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179] - nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089} - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724} - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183} - i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312] - ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182] - ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185] - Revert "mm: pcp: increase pcp->free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464] - netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392} - Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269) - RHEL changelog for 687.13.1 follows: - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243} - s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472] - s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472] - s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472] - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745] - nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745] - Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786} - crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167] - crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167] - smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613} - mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778] - mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778] - mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778] - mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778] - mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778] - mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778] - mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778] - mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778] - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.18.1..687.19.1 follows: - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176} - init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183] - update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183] - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183] - work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183] - compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183] - powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183] - sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776] - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189} - sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273] - netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273] - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993] - iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993] - iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993] - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993] - iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993] - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057] - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057] - IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057] - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057] - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057] - net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057] - net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057] - net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057] - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057] - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057] - net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057] - net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057] - net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057] - net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057] - net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057] - net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057] - net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057] - net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057] - net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057] - net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057] - net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057] - mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057] - net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057] - net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057] - net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057] - net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057] - net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057] - net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057] - net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057] - net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057] - net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057] - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057] - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057] - mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057] - net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057] - net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057] - net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057] - net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057] - net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057] - net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057] - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057] - net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057] - net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057] - net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057] - net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057] - net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057] - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057] - net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057] - net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057] - net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057] - net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057] - net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057] - net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057] - net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057] - net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057] - net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057] - net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057] - eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057] - net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057] - net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057] - net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057] - net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057] - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057] - RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057] - net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057] - net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057] - net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057] - net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057] - net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057] - net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057] - net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057] - net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057] - net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057] - net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057] - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057] - net: Fix typos (Kamal Heib) [RHEL-169057] - net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057] - net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057] - net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057] - net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057] - net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057] - net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057] - net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057] - net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057] - net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057] - net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057] - net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057] - eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Kamal Heib) [RHEL-169057] - net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057] - net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057] - net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057] - net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057] - net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057] - net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057] - net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057] - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057] - net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057] - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057] - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057] - net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057] - net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057] - net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057] - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057] - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444] - ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444] - ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444] - ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488} - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329} - Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312) - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.19.1..687.20.1 follows: - crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540] - crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540] - crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540] - crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540] - tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198} - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739} - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760] - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760] - scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886] - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411} - Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.18.1..687.19.1 follows: - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176} - init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183] - update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183] - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183] - work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183] - compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183] - powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183] - sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776] - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189} - sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273] - netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273] - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993] - iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993] - iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993] - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993] - iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993] - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057] - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057] - IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057] - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057] - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057] - net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057] - net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057] - net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057] - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057] - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057] - net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057] - net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057] - net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057] - net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057] - net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057] - net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057] - net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057] - net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057] - net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057] - net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057] - net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057] - mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057] - net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057] - net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057] - net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057] - net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057] - net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057] - net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057] - net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057] - net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057] - net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057] - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057] - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057] - mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057] - net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057] - net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057] - net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057] - net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057] - net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057] - net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057] - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057] - net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057] - net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057] - net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057] - net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057] - net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057] - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057] - net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057] - net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057] - net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057] - net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057] - net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057] - net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057] - net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057] - net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057] - net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057] - net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057] - eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057] - net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057] - net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057] - net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057] - net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057] - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057] - RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057] - net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057] - net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057] - net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057] - net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057] - net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057] - net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057] - net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057] - net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057] - net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057] - net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057] - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057] - net: Fix typos (Kamal Heib) [RHEL-169057] - net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057] - net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057] - net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057] - net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057] - net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057] - net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057] - net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057] - net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057] - net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057] - net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057] - net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057] - eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Kamal Heib) [RHEL-169057] - net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057] - net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057] - net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057] - net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057] - net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057] - net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057] - net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057] - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057] - net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057] - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057] - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057] - net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057] - net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057] - net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057] - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057] - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444] - ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444] - ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444] - ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488} - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329} - Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312) - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735) - Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll ep_remove use-after-free CVE-2026-46242 (1712) - RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux ahead-patch (1312) is retained and RHEL's duplicate copy omitted - CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263) - RHEL changelog for 687.21.1..687.22.1 follows: - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041] - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116} - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263} - KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316} - netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227} - nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966] - Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755) - The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by RHEL's eventpoll series carrying the same fix and is dropped - Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738) - RHEL changelog for 687.23.1 follows: - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1756, 1757) are superseded by RHEL's copies and dropped - RHEL changelog for 687.25.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770) - RHEL changelog for 687.26.1 follows: - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1756, 1757) are superseded by RHEL's copies and dropped - RHEL changelog for 687.25.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041] - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116} - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619] - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619] - Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762] - Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762] - Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762] - Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762] - Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762] - Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762] - Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762] - Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762] - nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489] - pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489] - net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508] - cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548] - spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129] - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431) - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619] - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619] - Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762] - Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762] - Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762] - Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762] - Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762] - Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762] - Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762] - Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762] - nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489] - net: skbuff: propagate shared-frag marker through frag-transfer helpers (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300 "Fragnesia") - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431) - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (Mohammadfaiz Bawa) [RHEL-243814] {CVE-2026-72288} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275058] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275076] {CVE-2026-93228} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270929] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270929] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271453] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268122] {CVE-2026-74705} - net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CKI Backport Bot) [RHEL-270908] {CVE-2026-81003} - wifi: cfg80211: use wiphy work for socket owner autodisconnect (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-263788] {CVE-2026-68409} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (Jose Ignacio Tornos Martinez) [RHEL-259560] {CVE-2026-64030} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261686] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260511] {CVE-2026-68140} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261293] {CVE-2026-72320} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256448] {CVE-2026-74641} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-237219] {CVE-2026-68377} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229654] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226490] {CVE-2026-53011} - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net: always dissect GSO packets in __virtio_net_hdr_to_skb() (Davide Caratti) [RHEL-284987] - ipv4: validate checksum_start before completing checksum (CKI Backport Bot) [RHEL-284987] {CVE-2026-99999} - smb: client: reject a tree connect response whose byte count is too small (Alisher Mazhirinov) [RHEL-271284] {CVE-2026-89631} - exec: Cleanup POSIX timers right after de_thread() (Luiz Capitulino) [RHEL-282063] {CVE-2026-98260} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271871] {CVE-2026-93817} - smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (Frank Sorenson) [RHEL-271487] {CVE-2026-89633} - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270747] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256697] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256697] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256697] - bridge: mcast: Fix a possible use-after-free when removing a bridge port (Jakub Ramaseuski) [RHEL-232528] {CVE-2026-64032} - net: bridge: Flush multicast groups when snooping is disabled (Jakub Ramaseuski) [RHEL-232528] - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Antoine Tenart) [RHEL-231693] {CVE-2026-64024} - ipv4: fib: free fib_alias with kfree_rcu() on insert error path (Jamie Bainbridge) [RHEL-233131] {CVE-2026-64572} - inet: frags: strip GSO state from fragments before reassembly (Jamie Bainbridge) [RHEL-254224] {CVE-2026-80590} - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Jamie Bainbridge) [RHEL-225452] {CVE-2026-64114} - usb: typec: ucsi: validate connector number in ucsi_connector_change() (Desnes Nunes) [RHEL-259429] {CVE-2026-63958} - usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO (Desnes Nunes) [RHEL-259429] - usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (Desnes Nunes) [RHEL-259429] {CVE-2026-63962} - usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (Desnes Nunes) [RHEL-259429] {CVE-2026-63963} - usb: typec: altmodes/displayport: validate count before reading Status Update VDO (Desnes Nunes) [RHEL-259429] {CVE-2026-63961} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63899} - Bluetooth: hci_sync: Fix advertising data UAFs (CKI Backport Bot) [RHEL-254674] {CVE-2026-74509} - openvswitch: vport: fix self-deadlock on release of tunnel ports (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222958] {CVE-2026-52935} - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (Mohammadfaiz Bawa) [RHEL-243814] {CVE-2026-72288} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275058] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275076] {CVE-2026-93228} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270929] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270929] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271453] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268122] {CVE-2026-74705} - net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CKI Backport Bot) [RHEL-270908] {CVE-2026-81003} - wifi: cfg80211: use wiphy work for socket owner autodisconnect (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-263788] {CVE-2026-68409} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (Jose Ignacio Tornos Martinez) [RHEL-259560] {CVE-2026-64030} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261686] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260511] {CVE-2026-68140} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261293] {CVE-2026-72320} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256448] {CVE-2026-74641} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-237219] {CVE-2026-68377} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229654] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226490] {CVE-2026-53011} - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: skbuff: propagate shared-frag marker in skb_zerocopy() - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - xfs: bounds-check buffer log item's dirty bitmap (Pavel Reichl) [RHEL-253366] {CVE-2026-80536} - ovl: check access to copy_file_range source with src mounter creds (Miklos Szeredi) [RHEL-238870] {CVE-2026-68448} - ALSA: seq: close a re-opened queue timer in the destructor (CKI Backport Bot) [RHEL-263709] {CVE-2026-68202} - calipso: unlock rcu before returning -EAFNOSUPPORT (CKI Backport Bot) [RHEL-257685] {CVE-2025-38147} - calipso: Don't call calipso functions for AF_INET sk. (CKI Backport Bot) [RHEL-257685] {CVE-2025-38147} - netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (CKI Backport Bot) [RHEL-257666] {CVE-2025-22063} - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (CKI Backport Bot) [RHEL-255258] {CVE-2026-80530} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252811] {CVE-2026-68299} - ALSA: hda/cs35l41: Fix firmware load work teardown (CKI Backport Bot) [RHEL-234099] {CVE-2026-64481} - rtla: Fix segfault on multiple SIGINTs (Tomas Glozar) [RHEL-193029] - net: always dissect GSO packets in __virtio_net_hdr_to_skb() (Davide Caratti) [RHEL-284987] - ipv4: validate checksum_start before completing checksum (CKI Backport Bot) [RHEL-284987] {CVE-2026-99999} - smb: client: reject a tree connect response whose byte count is too small (Alisher Mazhirinov) [RHEL-271284] {CVE-2026-89631} - exec: Cleanup POSIX timers right after de_thread() (Luiz Capitulino) [RHEL-282063] {CVE-2026-98260} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271871] {CVE-2026-93817} - smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (Frank Sorenson) [RHEL-271487] {CVE-2026-89633} - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270747] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256697] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256697] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256697] - bridge: mcast: Fix a possible use-after-free when removing a bridge port (Jakub Ramaseuski) [RHEL-232528] {CVE-2026-64032} - net: bridge: Flush multicast groups when snooping is disabled (Jakub Ramaseuski) [RHEL-232528] - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Antoine Tenart) [RHEL-231693] {CVE-2026-64024} - ipv4: fib: free fib_alias with kfree_rcu() on insert error path (Jamie Bainbridge) [RHEL-233131] {CVE-2026-64572} - inet: frags: strip GSO state from fragments before reassembly (Jamie Bainbridge) [RHEL-254224] {CVE-2026-80590} - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Jamie Bainbridge) [RHEL-225452] {CVE-2026-64114} - usb: typec: ucsi: validate connector number in ucsi_connector_change() (Desnes Nunes) [RHEL-259429] {CVE-2026-63958} - usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO (Desnes Nunes) [RHEL-259429] - usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (Desnes Nunes) [RHEL-259429] {CVE-2026-63962} - usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (Desnes Nunes) [RHEL-259429] {CVE-2026-63963} - usb: typec: altmodes/displayport: validate count before reading Status Update VDO (Desnes Nunes) [RHEL-259429] {CVE-2026-63961} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63899} - Bluetooth: hci_sync: Fix advertising data UAFs (CKI Backport Bot) [RHEL-254674] {CVE-2026-74509} - openvswitch: vport: fix self-deadlock on release of tunnel ports (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222958] {CVE-2026-52935} - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (Mohammadfaiz Bawa) [RHEL-243814] {CVE-2026-72288} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275058] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275076] {CVE-2026-93228} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270929] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270929] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271453] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268122] {CVE-2026-74705} - net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CKI Backport Bot) [RHEL-270908] {CVE-2026-81003} - wifi: cfg80211: use wiphy work for socket owner autodisconnect (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-263788] {CVE-2026-68409} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (Jose Ignacio Tornos Martinez) [RHEL-259560] {CVE-2026-64030} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261686] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260511] {CVE-2026-68140} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261293] {CVE-2026-72320} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256448] {CVE-2026-74641} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-237219] {CVE-2026-68377} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229654] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226490] {CVE-2026-53011} - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - net: skbuff: propagate shared-frag marker in skb_zerocopy() - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - netfilter: flowtable: hold reference on ct until flow is released (CKI Backport Bot) [RHEL-280075] {CVE-2026-98320} - vfio/pci: clear vdev->msi_perm after freeing it on init failure (Rodolfo Vick) [RHEL-270901] {CVE-2026-89777} - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278089] {CVE-2026-93262} - KEYS: encrypted: fix integer overflow of datablob_len (Bruno Meneguele) [RHEL-279504] {CVE-2026-98222} - KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (CKI Backport Bot) [RHEL-277620] {CVE-2026-74515} - smb: client: guard against tailsz underflow in wdata_send_pages() (Paulo Alcantara) [RHEL-257205] - smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-257205] - smb: client: fix rlist race and missing initialization (Paulo Alcantara) [RHEL-257205] {CVE-2026-98174} - smb: client: cancel reconnect work in clean_demultiplex_info() (Paulo Alcantara) [RHEL-257205] {CVE-2026-98175} - smb/client: send lease break ACKs thru correct session for multiuser mounts (Paulo Alcantara) [RHEL-257205] - smb: client: fix cifsFileInfo reference leak in deferred close (Paulo Alcantara) [RHEL-257205] {CVE-2026-97558} - smb: client: avoid leaking refcount when cifs_sb_tlink() fails (Paulo Alcantara) [RHEL-257205] {CVE-2026-97556} - smb: client: avoid leaking refcount in cifs_queue_oplock_break() (Paulo Alcantara) [RHEL-257205] {CVE-2026-97557} - smb: client: fix data corruption with concurrent writes and O_TRUNC (Paulo Alcantara) [RHEL-257205] - cifs: don't update i_size in cifs_do_truncate without a cached handle (Paulo Alcantara) [RHEL-257205] - smb: client: invalidate fscache for fallocate range operations (Paulo Alcantara) [RHEL-257205] {CVE-2026-98124} - smb: client: fix stale page cache in insert/collapse range (Paulo Alcantara) [RHEL-257205] {CVE-2026-98125} - smb: client: fix integer truncation in collapse range (Paulo Alcantara) [RHEL-257205] - smb: client: fix data corruption in emulated insert range (Paulo Alcantara) [RHEL-257205] - smb/client: mark file sparse before emulating insert range (Paulo Alcantara) [RHEL-257205] - smb/client: validate new EOF for zero range (Paulo Alcantara) [RHEL-257205] {CVE-2026-98126} - smb/client: validate new EOF for insert range (Paulo Alcantara) [RHEL-257205] {CVE-2026-98127} - cifs: add revalidation on FSCTL failure in smb2_duplicate_extents() (Paulo Alcantara) [RHEL-257205] - cifs: fix loff_t underflow in cifs_remap_file_range() when len == 0 (Paulo Alcantara) [RHEL-257205] {CVE-2026-89640} - cifs: call pagecache_isize_extended() in cifs_setsize() when extending (Paulo Alcantara) [RHEL-257205] {CVE-2026-89642} - cifs: clear tcon after cifsFileInfo_put() in cifs_file_set_size() (Paulo Alcantara) [RHEL-257205] {CVE-2026-89641} - smb/client: decode reparse metadata using its payload type (Paulo Alcantara) [RHEL-257205] - smb/client: preserve open info type across compound queries (Paulo Alcantara) [RHEL-257205] - smb/client: mark missing nlink values as unknown (Paulo Alcantara) [RHEL-257205] - smb/client: fix nlink of an overwritten open file (Paulo Alcantara) [RHEL-257205] - cifs: remove dead size-update blocks in cifs_setattr_unix/nounix (Paulo Alcantara) [RHEL-257205] - cifs: remove redundant size-update block in cifs_remap_file_range() (Paulo Alcantara) [RHEL-257205] - cifs: add cifs_resize_file_locked() to guard fscache_resize_cookie() under i_rwsem (Paulo Alcantara) [RHEL-257205] - cifs: use cifs_invalidate_cache() in cifs_do_truncate() for O_TRUNC (Paulo Alcantara) [RHEL-257205] {CVE-2026-89639} - cifs: add fscache_resize_cookie() to cifs_setsize() (Paulo Alcantara) [RHEL-257205] - smb: client: simplify cifs_fscache_get_super_cookie() (Paulo Alcantara) [RHEL-257205] - smb/client: flush dirty data before punching a hole (Paulo Alcantara) [RHEL-257205] {CVE-2026-93794} - smb/client: refresh allocation after EOF-extending fallocate (Paulo Alcantara) [RHEL-257205] - smb/client: emulate small EOF-extending mode 0 fallocate ranges (Paulo Alcantara) [RHEL-257205] - smb/client: reduce fallocate zero buffer allocation (Paulo Alcantara) [RHEL-257205] - smb/client: refresh allocation size after duplicate extents (Paulo Alcantara) [RHEL-257205] - smb: client: use kvzalloc() for megabyte buffer in simple fallocate (Paulo Alcantara) [RHEL-257205] - smb/client: fix incorrect nlink returned by fstat() (Paulo Alcantara) [RHEL-257205] - smb/client: zero-initialize stack-allocated cifs_open_info_data (Paulo Alcantara) [RHEL-257205] {CVE-2026-93801} - smb/client: pass cifs_open_info_data to SMB2_open() (Paulo Alcantara) [RHEL-257205] - smb/client: use stack-allocated smb2_file_all_info in smb3_query_mf_symlink() (Paulo Alcantara) [RHEL-257205] - smb: client: refactor cifs_revalidate_mapping() to use clear_and_wake_up_bit() (Paulo Alcantara) [RHEL-257205] - smb/client: do not account EOF extension as allocation (Paulo Alcantara) [RHEL-257205] - smb/client: preserve errors from smb2_set_sparse() (Paulo Alcantara) [RHEL-257205] - smb/client: name the default fallocate mode (Paulo Alcantara) [RHEL-257205] - smb/client: update i_blocks after contiguous writes (Paulo Alcantara) [RHEL-257205] - smb: client: fix races in cifsd thread creation (Paulo Alcantara) [RHEL-257205] {CVE-2026-93829} - cifs: invalidate cfid on unlink/rename/rmdir (Paulo Alcantara) [RHEL-257205] - cifs: abort open_cached_dir if we don't request leases (Paulo Alcantara) [RHEL-257205] - cifs: change_conf needs to be called for session setup (Paulo Alcantara) [RHEL-257205] - smb: client: fix generic/694 due to wrong ->i_blocks (Paulo Alcantara) [RHEL-257205] - smb: client: fix open handle lookup in cifs_open() (Paulo Alcantara) [RHEL-257205] - smb: client: fix in-place encryption corruption in SMB2_write() (Paulo Alcantara) [RHEL-257205] {CVE-2026-43362} - smb: client: fix atomic open with O_DIRECT & O_SYNC (Paulo Alcantara) [RHEL-257205] - cifs: Scripted clean up fs/smb/client/cifsglob.h (Paulo Alcantara) [RHEL-257205] - cifs: Scripted clean up fs/smb/client/fscache.h (Paulo Alcantara) [RHEL-257205] - cifs: Scripted clean up fs/smb/client/cifsfs.h (Paulo Alcantara) [RHEL-257205] - cifs: Scripted clean up fs/smb/client/cifsproto.h (Paulo Alcantara) [RHEL-257205] - udp: Deal with race between UDP socket address change and rehash (Jamie Bainbridge) [RHEL-257635] {CVE-2024-57974} - smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (CKI Backport Bot) [RHEL-271257] {CVE-2026-89638} - net/handshake: Drain pending requests at net namespace exit (Xin Long) [RHEL-232134] {CVE-2026-63978} - net/handshake: Use spin_lock_bh for hn_lock (Xin Long) [RHEL-232134] - net/handshake: hand off the pinned file reference to accept_doit (Xin Long) [RHEL-230363] {CVE-2026-63979} - net/handshake: Take a long-lived file reference at submit (Xin Long) [RHEL-234159] {CVE-2026-64523} - fuse: re-lock request before replacing page cache folio (Miklos Szeredi) [RHEL-226093] {CVE-2026-53388} - fuse: release pipe buf after last use (Miklos Szeredi) [RHEL-226093] {CVE-2026-53388} - fuse: fix page stealing (Miklos Szeredi) [RHEL-226093] {CVE-2026-53388} - ipvs: reload ip header after head reallocation (Phil Sutter) [RHEL-263800] {CVE-2026-68476} - selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() (CKI Backport Bot) [RHEL-243225] {CVE-2026-72242} - usb: usbfs: fix use-after-free of usb_device in usbdev_release() (CKI Backport Bot) [RHEL-258557] {CVE-2026-80824} - fuse: re-lock request before returning from fuse_ref_folio() (CKI Backport Bot) [RHEL-234250] {CVE-2026-64266} - xfs: bounds-check buffer log item's dirty bitmap (Pavel Reichl) [RHEL-253366] {CVE-2026-80536} - ovl: check access to copy_file_range source with src mounter creds (Miklos Szeredi) [RHEL-238870] {CVE-2026-68448} - ALSA: seq: close a re-opened queue timer in the destructor (CKI Backport Bot) [RHEL-263709] {CVE-2026-68202} - calipso: unlock rcu before returning -EAFNOSUPPORT (CKI Backport Bot) [RHEL-257685] {CVE-2025-38147} - calipso: Don't call calipso functions for AF_INET sk. (CKI Backport Bot) [RHEL-257685] {CVE-2025-38147} - netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (CKI Backport Bot) [RHEL-257666] {CVE-2025-22063} - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (CKI Backport Bot) [RHEL-255258] {CVE-2026-80530} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252811] {CVE-2026-68299} - ALSA: hda/cs35l41: Fix firmware load work teardown (CKI Backport Bot) [RHEL-234099] {CVE-2026-64481} - rtla: Fix segfault on multiple SIGINTs (Tomas Glozar) [RHEL-193029] - net: always dissect GSO packets in __virtio_net_hdr_to_skb() (Davide Caratti) [RHEL-284987] - ipv4: validate checksum_start before completing checksum (CKI Backport Bot) [RHEL-284987] {CVE-2026-99999} - smb: client: reject a tree connect response whose byte count is too small (Alisher Mazhirinov) [RHEL-271284] {CVE-2026-89631} - exec: Cleanup POSIX timers right after de_thread() (Luiz Capitulino) [RHEL-282063] {CVE-2026-98260} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271871] {CVE-2026-93817} - smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (Frank Sorenson) [RHEL-271487] {CVE-2026-89633} - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270747] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256697] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256697] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256697] - bridge: mcast: Fix a possible use-after-free when removing a bridge port (Jakub Ramaseuski) [RHEL-232528] {CVE-2026-64032} - net: bridge: Flush multicast groups when snooping is disabled (Jakub Ramaseuski) [RHEL-232528] - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Antoine Tenart) [RHEL-231693] {CVE-2026-64024} - ipv4: fib: free fib_alias with kfree_rcu() on insert error path (Jamie Bainbridge) [RHEL-233131] {CVE-2026-64572} - inet: frags: strip GSO state from fragments before reassembly (Jamie Bainbridge) [RHEL-254224] {CVE-2026-80590} - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Jamie Bainbridge) [RHEL-225452] {CVE-2026-64114} - usb: typec: ucsi: validate connector number in ucsi_connector_change() (Desnes Nunes) [RHEL-259429] {CVE-2026-63958} - usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO (Desnes Nunes) [RHEL-259429] - usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (Desnes Nunes) [RHEL-259429] {CVE-2026-63962} - usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (Desnes Nunes) [RHEL-259429] {CVE-2026-63963} - usb: typec: altmodes/displayport: validate count before reading Status Update VDO (Desnes Nunes) [RHEL-259429] {CVE-2026-63961} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63899} - Bluetooth: hci_sync: Fix advertising data UAFs (CKI Backport Bot) [RHEL-254674] {CVE-2026-74509} - openvswitch: vport: fix self-deadlock on release of tunnel ports (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222958] {CVE-2026-52935} - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (Mohammadfaiz Bawa) [RHEL-243814] {CVE-2026-72288} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275058] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275076] {CVE-2026-93228} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270929] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270929] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271453] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268122] {CVE-2026-74705} - net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CKI Backport Bot) [RHEL-270908] {CVE-2026-81003} - wifi: cfg80211: use wiphy work for socket owner autodisconnect (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-263788] {CVE-2026-68409} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (Jose Ignacio Tornos Martinez) [RHEL-259560] {CVE-2026-64030} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261686] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260511] {CVE-2026-68140} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261293] {CVE-2026-72320} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256448] {CVE-2026-74641} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-237219] {CVE-2026-68377} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229654] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226490] {CVE-2026-53011} - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.201 - Speed up LCS when $keyGen is undef (CPAN RT#101105) - Update to 1.200 - New release with no new features, just preparing for a series of bugfix releases - Specify all build dependencies - Drop redundant buildroot cleaning in %install section - Simplify find command using -delete - Fix permissions verbosely - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Patch the code to use https instead of http (CVE-2024-45321) - Resolves: RHEL-56520 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 re-rebuild of bootstrapped packages - 2.38 bump - Increase release to favour standalone package - Do not require non-core IO::Compress::Xz and IO::Uncompress::UnXz modules on bootstrapping - 2.36 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fix CVE-2026-42496: validate symlink and hardlink targets in secure extract mode - Resolves: RHEL-181662 - Fix CVE-2026-9538: add $MAX_FILE_SIZE cap for tar entry size during read to prevent memory allocation DoS - Resolves: RHEL-191917 - Fix CVE-2026-42496: validate symlink and hardlink targets in secure extract mode - Resolves: RHEL-181662 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Remove an unused build-time dependency on Test::MockModule - Perl 5.32 rebuild - 1.68 bump - Use make_* macros - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - 1.67 bump - 1.66 bump - 1.65 bump - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Specify all dependencies - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Correct a spelling - Use make_build macro - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Package tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 4.51 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 re-rebuild of bootstrapped packages - Perl 5.32 rebuild - 4.50 bump - 4.49 bump - Resolves: RHEL-77187 - Update man page - Resolves: RHEL-77187 - Fix permission for creating site directories - Resolves: rhbz#2218907 - Fix CVE-2023-31484 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Spec clean-up - Use author-independent source URL - Specify all build dependencies - Use %{make_build} and %{make_install} - Fix permissions of installed files - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 re-rebuild of bootstrapped packages - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - 6.08 bump - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Update to 0.45 - Bump B::COW requirement to fix big-endian issue - Re-enable tests - Update to 0.44 - Support Perls with COW disabled - Bump B::COW requirement for testing - Disable tests until B::COW is packaged - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 2.28 bump - Perl 5.32 re-rebuild of bootstrapped packages - Perl 5.32 rebuild - A dummy release to overcome a Koji failure - 2.27 bump - NO_PERLLOCAL=1 needs a recent ExtUtils::MakeMaker - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Fix dependencies for ELN - Package tests - 2.101 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 2.100 bump - 2.096 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 2.095 bump - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 2.101 (no changes) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 2.100 - Expose liblzma's 'preset_dict' feature - Trim whitespace - Update to 2.096 (no changes) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 2.095 (no changes) - Modernize spec using %{make_build} and %{make_install} - Update to 2.094 - Fix issue with Append mode and SvOOK (GH#4) - Perl 5.32 rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Fix dependencies for ELN - Package tests - 2.101 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 2.100 bump - 2.096 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 2.095 bump - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 0.33 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Indeed upgrade to 0.32 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Fix unsafe decoding in indef case (CVE-2013-7488) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Quote a substituted number of processors in the test script - Modernize spec file - Package upstream tests - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Use make_build macro - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - New version 0.33 supporting passphrase protected keys Resolves: RHEL-38780 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Use make_build macro - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Create directory structure under /var using tmpfiles.d Resolves: RHEL-129881 - Remove sscg option --package from cyrus-imapd-init.service Resolves: RHEL-132242 - tls: enable automatic DH parameter selection Resolves: RHEL-70762 - Update to 3.4.8, fixing CVE-2024-34055 - Resolves: RHEL-20925 - Seen/Unseen Flag not working correctly for shared mailboxes - cyrus-imapd.spec: rename patches to correspond with others - Resolves: RHEL-85011 - Resolves: RHEL-123525 - Fix MYSQL OPT_RECONNECT warning - Resolves: RHEL-53861, RHEL-77083 - Update check for SSL connection - Enable testing - Resolves: RHEL-132443 - Skip the ssl tests if MySQL does not provide have_ssl - Resolves: RHEL-123525 - Fix MYSQL OPT_RECONNECT warning - Resolves: RHEL-53861, RHEL-77083 - Update check for SSL connection - Enable testing - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - rebuild for libpq ABI fix rhbz#1908268 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 3.14.2 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 3.14.0 bump - Perl 5.32 rebuild - 3.13.0 bump - 3.12.3 bump - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update DBD-SQLite-1.60-Unbundle-Test-NoWarnings.patch - Do not build-require unused Test::FailWarnings - Update the description - 1.66 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Spec file cleanups: Use make_build and make_install macros - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Initialize filename variable in sqlite_db_filename() - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 re-rebuild of bootstrapped packages - Perl 5.32 rebuild - Add BR: perl(FileHandle) - Build-require blib for tests - 1.643 bump - Spec file cleanups: Use make_build and make_install macros - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake - Fix possible stack overflow and buffer overflow in DBI.xs (CVE-2026-9698) - Resolves: RHEL-184984 - Fix unsafe string eval in DBI::Profile (CVE-2026-14380) - Resolves: RHEL-211149 - Set a hard limit of 99999 on '?' placeholders (CVE-2026-14739) - Resolves: RHEL-193306 - Fix possible stack overflow and buffer overflow in DBI.xs (CVE-2026-9698) - Resolves: RHEL-184984 - Use Module::Load for safer package loading in DBI::Profile (CVE-2026-19546) Related: RHEL-236831 - Fix unsafe string eval in DBI::Profile (CVE-2026-14380) - Resolves: RHEL-211149 - Set a hard limit of 99999 on '?' placeholders (CVE-2026-14739) - Resolves: RHEL-193306 - Fix possible stack overflow and buffer overflow in DBI.xs (CVE-2026-9698) - Resolves: RHEL-184984 - Force placeholder limit on :# and :p# too (CVE-2026-73194) Related: RHEL-247327 - Use Module::Load for safer package loading in DBI::Profile (CVE-2026-19546) Related: RHEL-236831 - Fix unsafe string eval in DBI::Profile (CVE-2026-14380) - Resolves: RHEL-211149 - Set a hard limit of 99999 on '?' placeholders (CVE-2026-14739) - Resolves: RHEL-193306 - Fix possible stack overflow and buffer overflow in DBI.xs (CVE-2026-9698) - Resolves: RHEL-184984 - CVE-2026-88815 perl-DBI: perl-DBI: Denial of Service via invalid memory read during numeric type casting memory read during numeric type casting Resolves: RHEL-271974 - Force placeholder limit on :# and :p# too (CVE-2026-73194) Related: RHEL-247327 - Use Module::Load for safer package loading in DBI::Profile (CVE-2026-19546) Related: RHEL-236831 - Fix unsafe string eval in DBI::Profile (CVE-2026-14380) - Resolves: RHEL-211149 - Set a hard limit of 99999 on '?' placeholders (CVE-2026-14739) - Resolves: RHEL-193306 - Fix possible stack overflow and buffer overflow in DBI.xs (CVE-2026-9698) - Resolves: RHEL-184984 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 1.855 bump - 1.854 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - 1.853 bump - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Fix a memory leak when a magic throws an exception - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Modernize the spec file - Use make_build macro - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - 1933868 - Rebase to upstream version 6.85. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Specify all dependendencies - 1902872 - Rebase to upstream version 6.83. - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - 1842524 - Rebase to upstream version 6.82. - 1827253 - Rebase to upstream version 6.81. - Fix CVE-2026-60075: prevent ReDoS via long whitespace runs in date/time parsing Related: RHEL-239797 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 3.62 bump - 3.60 bump - 3.59 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 re-rebuild of bootstrapped packages - Perl 5.32 rebuild - 3.58 bump - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Spec file cleanups: Use make_build and make_install macros - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 1.19 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Modernize a spec file - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 2.58 bump - Correct a license tag to "(GPL+ or Artistic) and RSA" - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Modernize a spec file - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Spec file cleanups: Use make_build and make_install macros - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Resolves: rhbz#1984005, CVE-2021-36770 - mitigate @INC pollution when loading ConfigLocal - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 3.08 bump - 3.07 bump - Increase release to favour standalone package - 3.06 bump - 3.05 bump - 3.04 bump - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Modernize a spec file - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Resolves: rhbz#1984005, CVE-2021-36770 - mitigate @INC pollution when loading ConfigLocal - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 3.08 bump - 3.07 bump - Increase release to favour standalone package - 3.06 bump - 3.05 bump - 3.04 bump - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - BR: perl(blib) for t/00-compile.t - Update to 0.17029 - Rebuild for order of 'NAME' and 'VERSION' sections in the generated POD documentation (VERSION used to appear before NAME) - Update to 0.17028 - Moved the VCS repo to https://github.com/shlomif/perl-error.pm - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - 5.74 bump - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Update to 1.002002 - Fix bug in handling regexps in import lists; Exporter::Tiny allowed regexps like /foo/i but not /foo/; having trailing flags is now optional! (GH#6) - Tests would fail if 'PERL5OPT=-Mfeature=:5.18' environment variable was set; this is because bareword '-default' was being interpreted as the Perl 'default' keyword (GH#5) - Unbundle newly-bundled test modules - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Resolves: RHEL-131157 - Update tests for Image Mode - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - 7.60 bump - Package tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 7.58 bump - 7.56 bump - 7.54 bump - 7.52 bump - 7.50 bump - 7.48 bump - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 2.20 bump - 2.18 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 re-rebuild of bootstrapped packages - 2.16 bump - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - 7.60 bump - Package tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 7.58 bump - 7.56 bump - 7.54 bump - 7.52 bump - 7.50 bump - 7.48 bump - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - 7.60 bump - Package tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 7.58 bump - 7.56 bump - 7.54 bump - 7.52 bump - 7.50 bump - 7.48 bump - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 1.73 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fix CVE-2025-40907 (integer overflow when parsing FastCGI parameters) - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 re-rebuild of bootstrapped packages - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 1.00 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - update to 1.006 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 6.14 bump - 6.11 bump - 6.07 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 2.18 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 2.17 bump - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 1.118 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 9999.32. - Perl 5.32 rebuild - Update to 9999.30. - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 9999.29. - Update to 9999.28. - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 0.2311 bump - 0.2310 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 1.60 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Build-require Perl debugger for the tests - Spec file cleanups: Use make_build and make_install macros - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Upgrade to 0.96 as provided in perl-5.32.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Resolves: rhbz#1994263 - Fix a crash in gss_release_oid() when destructing out_mech - Resolves: rhbz#1994263 - Fix comparison of OID structure - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Spec file cleanups: Use make_build and make_install macros - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 2.52 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - 2.51 bump - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - update to 2.52.0 - Resolves: RHEL-118147 - update to 2.47.3 - Resolves: RHEL-102449, RHEL-102463, RHEL-102675, RHEL-102681 - add the option to sanitize sideband channel messages - Resolves: RHEL-84513 - update to 2.47.1 - Resolves: RHEL-63964 - Update to 2.43.5 - Resolves: RHEL-36353, RHEL-36357, RHEL-36371, RHEL-36383, RHEL-36387 - update to 2.52.0 - Resolves: RHEL-118147 - update to 2.47.3 - Resolves: RHEL-102449, RHEL-102463, RHEL-102675, RHEL-102681 - add the option to sanitize sideband channel messages - Resolves: RHEL-84513 - update to 2.47.1 - Resolves: RHEL-63964 - Update to 2.43.5 - Resolves: RHEL-36353, RHEL-36357, RHEL-36371, RHEL-36383, RHEL-36387 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - 3.76 bump - Package tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Always build-require HTTP::Headers - 3.75 bump - 3.73 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 re-rebuild of bootstrapped packages - Perl 5.32 rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 re-rebuild of bootstrapped packages - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 6.10 bump - 6.09 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - 6.08 bump - 6.07 bump - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - 6.05 bump - 6.04 bump - 6.03 bump - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - 6.29 bump - 6.28 bump - Package tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 6.27 bump - 6.26 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 re-rebuild - Perl 5.32 re-rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update man page for CVE-2023-31486 - Changes the verify_SSL default parameter from 0 to 1 - CVE-2023-31486 - Resolves: rhbz#2228412 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Package tests - 2.102 bump - 2.101 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 2.100 bump - Use %{make_build} and %{make_install} - 2.096 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 2.095 bump - Fix CVE-2026-48962: remove use of eval in File::GlobMapper - Resolves: RHEL-180418 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Disable optional tests on ELN - Update to 2.101 (no changes) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 2.100 - Trim whitespace - Avoid indirect calls - Fix typo - Update to 2.096 - Add test for Zip with XZ compression - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 2.095 (no changes) - Update to 2.094 (no changes) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 1.004 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Spec tidy-up - Use author-independent source URL - Specify all build dependencies - Drop redundant buildroot cleaning in %install section - Simplify find command using -delete - Fix permissions verbosely - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Spec tidy-up - Use author-independent source URL - Specify all build dependencies - Simplify find command using -delete - Fix permissions verbosely - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Create Makefile.PL, use ExtUtils::MakeMaker instead of Module::Build - 0.41 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Resolves: RHEL-40746 - Fixed test fail with OpenSSL 3.2 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Specfile autogenerated by cpanspec 1.78. - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 2.09 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 re-rebuild of bootstrapped packages - 2.08 bump - Increase release to favour standalone package - Modernize the spec file - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Update to 1.30 - On MSWin32, make Win32::Process a prerequisite - Update to 1.29 - Improved handling of shell commands on Windows, which should get us closer to resolving Win32-related issues; there should be no change of functionality on Unix-like platforms - Better workaround for bug in perl-5.8.9 (GH#23) - Add t/args.t - Modify t/win32.t - Added Travis and AppVeyor configuration files - Eliminated use of Dist::Zilla for build, using older, but more reliable and better understood (by maintainer) ExtUtils::MakeMaker-based configuration - Move author testing to xt/ directory - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 1.26 - BUILD: Update FAIL_POSIX warning message (GH#28) - TEST: t/07_taint.t: Use executable name as source of taintedness (GH#21) - OTHER: Typographic corrections (CPAN RT#60211, CPAN RT#86403) - Add Travis configuration - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 0.026 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Package tests manually - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 4.03 - Use %{make_install} instead of "make pure_install" - Use %{make_build} instead of make - Replace calls to %{__perl} with /usr/bin/perl - Pass NO_PACKLIST and NO_PERLLOCAL to Makefile.PL - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Specify all dependencies - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 4.06 - Fix return values of boolean_values for compatibility - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 4.05 - No code changes - Modify tests for Perl 7 - Perl 5.32 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Fix resolving localhost on loopback-only machines (https://github.com/perl-ldap/perl-ldap/pull/60) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 0.68 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fix tests subpackage test script - Fix a shell bang in a certificate generator script - Package tests - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 6.10 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Remove unused build-time dependencies - 6.09 bump - Perl 5.32 rebuild - Disable tests that need the Internet by default - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 0.430 - Fix failing installation in parallel make (GH#38) - Infrastructure improvements and tooling updates, lots of author tests with corresponding fixes added - Added slide and slideatatime functions - Documentation fixes (GH#21, GH#33, GH#34, CPAN RT#126029, CPAN RT#132043, CPAN RT#132940) - Bump List::MoreUtils::XS requirement to 0.430 - Use author-independent source URL - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Do not run optional test on RHEL (bug #1947387) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 0.430 - Fix parts of CPAN RT#123989: more $a/$b/$_ refcounting bugs - Since some bugs are simply reported wrong, dealing with them breaks more (including running code) than it solves - way too heavy to feel better... - Introduce functions slide and slideatatime - Toolchain fixes - Fix LANG=nb_NO.utf8 related str tests fails (CPAN RT#133128) - Fix typo (GH#7) - Fix parts of CPAN RT#132043: listcmp misbehave in XS implementation - Use author-independent source URL - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 3.16 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Modernize a spec file - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 2.20210112 (RHBZ#1915573) - Update to 1.20200824.1 (RHBZ#1871904) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Update to 1.20200331.1 (RHBZ#1825822) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 1.20200108 (RHBZ#1789387). - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.20200907 - Update to 1.20200824 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.20200724 - Update to 1.20200708 - Perl 5.32 rebuild - Update to 1.20200513.1 - Tage LICENSE as %license - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - 1.999818 bump - 1.999817 bump - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Increase release to favour standalone package - Spec file cleanups: Use make_build and make_install macros - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - 0.5009 bump - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Disable optional tests on RHEL - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 re-rebuild of bootstrapped packages - Perl 5.32 rebuild - BR: perl(blib), needed for t/xs.t - 0.4231 bump - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Resolves: RHEL-5539 - 5.20240609 bump - Resolves: RHEL-5539 - 5.20240609 bump - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 0.36 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 0.74 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 re-rebuild updated packages - 0.72 bump - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 0.70 - Protect ourselves from Module::Metadata parsing problems (CPAN RT#130939) - Use author-independent source URL - Fix permissions verbosely - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 1.000037 - Add decode_pod option for automatic =encoding handling - Update to 0.88 - Update PAUSE keys to 2022 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Perl 5.34 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 0.87 - Skip 3-verify.t on Crypt::OpenPGP installations - Perl 5.32 re-rebuild updated packages - Update to 0.86 - Update PAUSE and ANDK keys to 2020 - Update documentation pertaining to SHA1 - Fix compatibility with Crypt::OpenPGP - Use mktemp to create temporary GPG directory - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - 20200520 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Remove useless shebangs from the module files (CPAN RT#132167) - Specify all dependencies - Modernize spec file - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - New version 0.22- fix for incorrect ip address handling - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Spec tidy-up - Use author-independent source URL - Use %{make_build} and %{make_install} - Fix permissions verbosely - Resolves: rhbz#2126689 - Related: rhbz#2126689 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 1.29 bump - 1.28 bump - Drop erroneous UTF-8 encoding conversion of Changes file (#1869049) - Fix CVE-2026-81928: Unbounded recursion when re-encoding message with misplaced TSIG - Resolves: RHEL-256275 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - 6.21 bump - Package tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 6.20 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Disable network tests in 200_tcp_ping - Specfile autogenerated by cpanspec 1.78. - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Resolves: RHEL-92846 - Fix typo in macro - Fix test suite to work with OpenSSL 3.4.0 and newer Resolves: RHEL-92846 - Resolves: RHEL-40758 - Update to 1.94 - Net::SSLeay now officially supports all stable releases of OpenSSL 3.1 and 3.2, and LibreSSL 3.5-3.8 - Many noisy compiler warnings have been silenced - if SSLeay.xs fails to compile, it should now be much easier to identify the cause - libcrypto's OPENSSL_init_crypto() function and libssl's OPENSSL_init_ssl() function are now exposed, enabling fine-grained control over the initialisation and configuration of both libraries - libssl functions implementing TLS 1.3 PSK authentication are now exposed, in particular SSL_CTX_set_psk_find_session_callback() (on the server side) and SSL_CTX_set_psk_use_session_callback() (on the client side) - libssl functions implementing server-side TLS 1.2 PSK authentication are now exposed, in particular SSL_CTX_set_psk_server_callback() - libssl's SSL_CTX_set_client_hello_cb() function is now exposed, allowing a TLS server to set a callback function that is executed when the server processes a ClientHello message - Many more libcrypto/libssl constants and functions are now exposed; see the release notes for the 1.93 developer releases for a full list - Package tests - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Disable optional run-requires for build - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - 0.009 bump - Specfile autogenerated by cpanspec 1.78. - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Spec tidy-up - Use author-independent source URL - Specify all build requirements - Drop support for building with Test::More < 0.88 - Drop redundant buildroot cleaning in %install section - Simplify find command using -delete - Fix permissions verbosely - Use %license macro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Spec tidy-up - Use author-independent source URL - Specify all build dependencies - Simplify find command using -delete - Fix permissions verbosely - Make %files list more explicit - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Filter out redundant unversioned R:perl(XSLoader). - Upstream update. - Reflect Source0:-URL having changed. - Rework BRs. - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 0.43 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - 0.42 bump - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Fix an off-by-one in bsd_realpath() - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Increase release to favour standalone package - Spec file cleanups: Use make_build and make_install macros - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 0.09 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 1.74 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Specify all dependencies - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Build-require blib module for tests (bug #1739463) - Fix searching for builtins in perlop POD (bug #1739463) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 3.42 bump - update to 3.41 - I left release at the artificially high value in case it was needed - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - update to 3.40 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 2.01 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - 1.70 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fix implied indenting in XS - Resolves: RHEL-28962 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 2.031 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 2.030 bump - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Spec file cleanups: Use make_build and make_install macros, use NO_PACKLIST=1 - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 re-rebuild of bootstrapped packages - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Upgrade to 3.21 as provided in perl-5.32.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fix a buffer overflow when processing a vstring longer than 2^31-1 (Perl GH#17306) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - BR: perl(blib) for t/00-compile.t - Use author-independent source URL - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 re-rebuild of bootstrapped packages - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fix build for AlmaLinux - Avoid permission denied for yum/dnf cache - Enable building for ppc64le - Ignore blank disks in Windows drive mapping resolves: RHEL-108803 - Generate correct osinfo for SLES >= 15 resolves: RHEL-95791 - Remove duplicate root mountpoints in /etc/fstab resolves: RHEL-90168 - Run the fstrim command twice resolves: RHEL-88508 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87493 - Include host kernel information in libguestfs debugging output resolves: RHEL-83025 - Add new APIs to allow command output > 4MB resolves: RHEL-80159 - Rebase to libguestfs 1.54.0 resolves: RHEL-56809 - Fix osinfo for Windows Server 2025 resolves: RHEL-62935 - Replace Jansson with json-c resolves: RHEL-65292 - Update to libguestfs 1.50.2 resolves: RHEL-46775 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Modernize a spec file - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Spec file cleanups: Use make_build, make_install macros, and use NO_PACKLIST=1 - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - 0.36 bump - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - 5.01 bump - 5.00 bump - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Modernize a spec file - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Unbundle Object::HashBase - 0.015 bump - 0.014 bump - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Spec file cleanups: Use make_build and make_install macros - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.302183 - Avoid closing over scalar in BEGIN block in cmp_ok eval - Demote Module::Pluggable hard dependency to Suggests level - Update to 1.302182 - Fix 5.6 support - Fix fragile %INC handling in a test - Update to 1.302181 - Put try_sig_mask back where it goes (and add test to prevent this in the future) - Drop new List::Util requirement back down - Update to 1.302180 - Move try_sig_mask to the only module that uses it - Inherit warnings bitmask in cmp_ok string eval - Update copyright date - Improved API for intercept {} and what it returns - Bump minimum List::Util version (for uniq) - Update to 1.302177 - Minor fix to author downstream test - No significant changes since the last trial - Fix Test::More's $TODO inside intercept (#862) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 2.04 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, and aarch64 flags Relates: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - update to 1.59 - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - update to 1.58 - update to 1.57 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Upgrade to 3.14 as provided in perl-5.32.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Specfile autogenerated by cpanspec 1.78. - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Introduce an epoch not to regress comparing to RHEL (bug #1895852) - Use an upstream release - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Upgrade to 1.9764 as provided in perl-5.32.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - 1.30 bump - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - 2.33 bump - 2.32 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - 2.31 bump - Adjust tests to pass 4-digit years to Time::Local (CPAN RT#124509) - Modernize a spec file - Enable building with FreeType support - Package tests - Resolves: RHEL-25202 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - 5.09 bump - Package tests - 5.08 bump - 5.07 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 5.06 bump - 5.05 bump - Modernize a spec file - Perl 5.32 re-rebuild of bootstrapped packages - CVE-2026-19953 perl-URI: URI (for Perl): Security bypass due to incorrect hostname encoding via missing Unicode normalization incorrect hostname encoding via missing Unicode normalization Resolves: RHEL-275730 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 1.29 bump - 1.28 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Increase release to favour standalone package - Spec file cleanups: Use make_build and make_install macros - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Specify all dependencies - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Modernize a spec file - Apply a forgotten Unicode-Normalize-1.25-Upgrade-to-1.27.patch patch - Upgrade to 1.27 as provided in perl-5.32.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Spec file cleanups: Use make_build, make_install macros, and use NO_PACKLIST=1 - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Modernize a spec file - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Replace using of Alien::Libxml2 with pkg-config - 2.0206 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - 2.0205 bump - 2.0204 bump - 2.0203 bump - Fix out-of-bounds UTF-8 heap read in node name validation (CVE-2026-8177) - Resolves: RHEL-186532 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fix CVE-2006-10002, CVE-2006-10003 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Resolves: rhbz#1989824 - Enable gating - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Do not run optional test on RHEL - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 re-rebuild of bootstrapped packages - Perl 5.32 rebuild - Remove non-free test file t/load-slides.t (#1813197, GH#219) - Update to 1.30 - Breaking Change: Set $YAML::LoadBlessed default to false to make it more secure - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 2.34 bump - 2.33 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - 2.32 bump - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Resolves: rhbz#1984005, CVE-2021-36770 - mitigate @INC pollution when loading ConfigLocal - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 3.08 bump - 3.07 bump - Increase release to favour standalone package - 3.06 bump - 3.05 bump - 3.04 bump - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - 0.022 bump - 0.021 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Resolves: RHEL-5537 - 1.13 bump - Package tests - Rebase to Fedora Rawhide resolves: RHEL-56803 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.32 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Spec file cleanups: Use make_build and make_install macros - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 3.13 bump - 3.12 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Package talk-to-ourself script with the tests - 6.53 bump - Package tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 6.52 bump - 6.51 bump - 6.50 bump - 6.49 bump - 6.48 bump - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Increase release to favour standalone package - Update to 0.238 - Move the prerequisite Test::More from being a runtime prerequisite to a test time / build time prerequisite (GH#11) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Resolves: RHEL-5538 - 5.20210520 bump - Package tests - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - 4.14 bump - 4.13 bump - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Disable perl_bootstrap for perl 5.32 rebuild - Disable perl_bootstrap for perl 5.32 rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Upgrade to 2.25 as provided in perl-5.32.0 - Specify all dependencies - Spec file cleanups: Use make_build and make_install macros - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Upgrade to 1.61 as provided in perl-5.32.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 0.9928 bump - 0.9927 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 re-rebuild of bootstrapped packages - Increase release to favour standalone package - Spec file cleanups: Use make_build and make_install macros - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2026-13221 - Don't create a trie that would overflow - Resolves: RHEL-96651 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fix chmod invocation - Resolves: CVE-2022-3560 - Deprecate pesign-authorize and drop ACL use - Resolves: CVE-2022-3560 - Detect presence of rpm-sign when checking for rhel-ness - Resolves: #2044886 - Correct handling of rhel and centos macros - Resolves: #2044886 - Add -D_GLIBCXX_ASSERTIONS - Resolves: #2044886 - New upstream version (115) - Resolves: #2044886 - Fix explicit NULL deref when daemonizing - Resolves: #2049320 - Rebuild; no code changes - Resolves: #2049320 - Fix build on aarch64 - Resolves: #2049320 - New upstream version (114) - Resolves: #2049320 - Add missing ACC200 (VRB1) data files (#2178689) - Rebuilt after adding gating - Update to 22.11 - Initial import (fedora#2101769) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Build jit based on what postgresql server does Related: #1933048 - Rebase to upstream release 1.4.6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Initial packaging - Add new build dependencies to fix build with lz4 enabled - Related: RHEL-47350 - Update to version 1.4.8 - Postgresql 15 is supported - Related: #2128410 - Update to v1.5.1 - Add new build dependencies to fix build with lz4 enabled - Related: RHEL-47604 - Resolves: RHEL-3636 - Initial import for PG 16 module - Update to v1.5.1 - Add new build dependencies to fix build with lz4 enabled - Related: RHEL-47604 - Resolves: RHEL-3636 - Initial import for PG 16 module - Update to 1.5.3 - Initial import for postgresql18 - Update to v1.5.1 - Add new build dependencies to fix build with lz4 enabled - Related: RHEL-47604 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Remove llvmjit parts Resolves: #1951268 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - rebuild for libpq ABI fix rhbz#1908268 - Update to 1.5.0 for PostgreSQL 13 support - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.4.0 for PostgreSQL 12 support - Rebuild for PostgreSQL 12 - Initial import for postgresql 15 module - Update to 1.7.0 - Support postgresql 15 - Related: #2128410 - Update to 16.0 - Support postgresql 16 - Initial import for PG 16 module - Resolves: RHEL-3635 - Update to 18.0 - Initial import for postgresql18 - Enable Portable build - Resolves: RHEL-84405 - Initial packaging - Update to 0.8.1 - Initial import for postgresql18 - Enable Portable build - Resolves: RHEL-84405 - Initial packaging - Update to 0.8.7 - Fixes CVE-2026-103484 (out-of-bounds write during IVFFlat index build, which could lead to arbitrary code execution) - Enable Portable build - Resolves: RHEL-84405 - Update to 0.8.7 - Fixes CVE-2026-103484 (out-of-bounds write during IVFFlat index build, which could lead to arbitrary code execution) - Update to 0.8.1 - Initial import for postgresql18 - Enable Portable build - Resolves: RHEL-84405 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fix Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682 - Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - rebase to 8.1.32 - rebase to 8.1.30 RHEL-64144 - rebase to 8.1.27 RHEL-19093 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.1.32 - rebase to 8.1.30 RHEL-64144 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.35 - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.36 - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fix Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682 - Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - rebase to 8.1.32 - rebase to 8.1.30 RHEL-64144 - rebase to 8.1.27 RHEL-19093 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.1.32 - rebase to 8.1.30 RHEL-64144 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.35 - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.36 - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fix Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682 - Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - rebase to 8.1.32 - rebase to 8.1.30 RHEL-64144 - rebase to 8.1.27 RHEL-19093 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.1.32 - rebase to 8.1.30 RHEL-64144 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.35 - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.36 - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fix Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682 - Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - rebase to 8.1.32 - rebase to 8.1.30 RHEL-64144 - rebase to 8.1.27 RHEL-19093 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.1.32 - rebase to 8.1.30 RHEL-64144 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.35 - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.36 - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fix Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682 - Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - rebase to 8.1.32 - rebase to 8.1.30 RHEL-64144 - rebase to 8.1.27 RHEL-19093 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.1.32 - rebase to 8.1.30 RHEL-64144 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.35 - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.36 - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fix Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682 - Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - rebase to 8.1.32 - rebase to 8.1.30 RHEL-64144 - rebase to 8.1.27 RHEL-19093 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.1.32 - rebase to 8.1.30 RHEL-64144 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.35 - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.36 - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fix Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682 - Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - rebase to 8.1.32 - rebase to 8.1.30 RHEL-64144 - rebase to 8.1.27 RHEL-19093 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.1.32 - rebase to 8.1.30 RHEL-64144 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.35 - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.36 - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fix Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682 - Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - rebase to 8.1.32 - rebase to 8.1.30 RHEL-64144 - rebase to 8.1.27 RHEL-19093 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.1.32 - rebase to 8.1.30 RHEL-64144 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.35 - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.36 - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fix Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682 - Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - rebase to 8.1.32 - rebase to 8.1.30 RHEL-64144 - rebase to 8.1.27 RHEL-19093 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.1.32 - rebase to 8.1.30 RHEL-64144 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.35 - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.36 - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fix Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682 - Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - rebase to 8.1.32 - rebase to 8.1.30 RHEL-64144 - rebase to 8.1.27 RHEL-19093 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.1.32 - rebase to 8.1.30 RHEL-64144 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.35 - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.36 - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fix Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682 - Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - rebase to 8.1.32 - rebase to 8.1.30 RHEL-64144 - rebase to 8.1.27 RHEL-19093 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.1.32 - rebase to 8.1.30 RHEL-64144 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.35 - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.36 - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fix Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682 - Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - rebase to 8.1.32 - rebase to 8.1.30 RHEL-64144 - rebase to 8.1.27 RHEL-19093 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.1.32 - rebase to 8.1.30 RHEL-64144 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.35 - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.36 - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fix Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682 - Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - rebase to 8.1.32 - rebase to 8.1.30 RHEL-64144 - rebase to 8.1.27 RHEL-19093 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.1.32 - rebase to 8.1.30 RHEL-64144 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.35 - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.36 - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fix Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682 - Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - rebase to 8.1.32 - rebase to 8.1.30 RHEL-64144 - rebase to 8.1.27 RHEL-19093 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.1.32 - rebase to 8.1.30 RHEL-64144 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.35 - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.36 - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fix Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682 - Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - rebase to 8.1.32 - rebase to 8.1.30 RHEL-64144 - rebase to 8.1.27 RHEL-19093 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.1.32 - rebase to 8.1.30 RHEL-64144 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.35 - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.36 - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fix Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682 - Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - rebase to 8.1.32 - rebase to 8.1.30 RHEL-64144 - rebase to 8.1.27 RHEL-19093 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.1.32 - rebase to 8.1.30 RHEL-64144 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.35 - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.36 - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fix Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682 - Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - rebase to 8.1.32 - rebase to 8.1.30 RHEL-64144 - rebase to 8.1.27 RHEL-19093 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.1.32 - rebase to 8.1.30 RHEL-64144 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.35 - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.36 - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fix Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682 - Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - rebase to 8.1.32 - rebase to 8.1.30 RHEL-64144 - rebase to 8.1.27 RHEL-19093 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.1.32 - rebase to 8.1.30 RHEL-64144 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.35 - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.36 - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fix Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682 - Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - rebase to 8.1.32 - rebase to 8.1.30 RHEL-64144 - rebase to 8.1.27 RHEL-19093 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.1.32 - rebase to 8.1.30 RHEL-64144 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.35 - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.36 - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fix Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682 - Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - rebase to 8.1.32 - rebase to 8.1.30 RHEL-64144 - rebase to 8.1.27 RHEL-19093 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.1.32 - rebase to 8.1.30 RHEL-64144 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.35 - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.36 - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - update PEAR to 1.10.14 RHEL-17392 - update PEAR to 1.10.13 #2032448 - update Archive_Tar to 1.4.14 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for PHP 8. Related rhbz#1949319 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - update to 5.1.20 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - update to 5.1.19 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - update to 5.1.18 - update to 5.1.21 for PHP 8.1 #2070040 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for PHP 8. Related rhbz#1949319 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - update to 5.1.20 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - update to 5.1.19 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - update to 5.1.23 for PHP 8.2 RHEL-14699 - update to 5.1.21 for PHP 8.1 #2070040 - update to 5.1.23 for PHP 8.2 RHEL-14699 - update to 5.1.21 for PHP 8.1 #2070040 - update to 5.1.23 for PHP 8.2 RHEL-14699 - update to 5.1.21 for PHP 8.1 #2070040 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for PHP 8. Related rhbz#1949319 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - update to 5.1.20 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - update to 5.1.19 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - update to 5.1.18 - update to 5.1.21 for PHP 8.1 #2070040 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for PHP 8. Related rhbz#1949319 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - update to 5.1.20 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - update to 5.1.19 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - update to 5.1.23 for PHP 8.2 RHEL-14699 - update to 5.1.21 for PHP 8.1 #2070040 - update to 5.1.23 for PHP 8.2 RHEL-14699 - update to 5.1.21 for PHP 8.1 #2070040 - update to 5.1.23 for PHP 8.2 RHEL-14699 - update to 5.1.21 for PHP 8.1 #2070040 - ignore 1 ONLINE test - RHEL build - update to 6.1.0 - drop patch merged upstream - update to 6.1.0RC2 - fix test suite with redis 6.2 using patch from https://github.com/phpredis/phpredis/pull/2555 - cleanup and modernize spec file - use valkey on Fedora 41 - add upstream patch for PHP 8.4 - update to 6.0.2 - update to 6.0.1 - cleanup SCL stuff for Fedora review - update to 6.0.0 - use valkey for tests - ignore 1 ONLINE test - RHEL build - update to 6.1.0 - drop patch merged upstream - update to 6.1.0RC2 - fix test suite with redis 6.2 using patch from https://github.com/phpredis/phpredis/pull/2555 - cleanup and modernize spec file - use valkey on Fedora 41 - add upstream patch for PHP 8.4 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - update to 2.0.3 - update to 2.0.2 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - rebuild for https://fedoraproject.org/wiki/Changes/php74 - build for PHP 8.1 #2070040 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - update to 2.0.3 - update to 2.0.2 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - build for PHP 8.1 #2070040 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - update to 2.0.3 - update to 2.0.2 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - build for PHP 8.1 #2070040 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - update to 2.0.3 - update to 2.0.2 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - build for PHP 8.1 #2070040 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - update to 2.0.3 - update to 2.0.2 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - update to 3.1.2 rhbz#2030322 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - ignore tests relying on DNS #1979841 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - update to 3.0.4 - rebuild for https://fedoraproject.org/wiki/Changes/php80 - update to 3.0.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - update to 3.0.2 - update to 3.0.1 - update to 3.1.4 for PHP 8.1 #2070040 - update to 3.1.2 rhbz#2030322 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - ignore tests relying on DNS #1979841 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - update to 3.0.4 - rebuild for https://fedoraproject.org/wiki/Changes/php80 - update to 3.0.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - update to 3.0.2 - drop inet_ntoa usage using upstream patch - update to 3.2.2 for PHP 8.2 RHEL-14699 - update to 3.1.4 for PHP 8.1 #2070040 - update to 3.1.2 rhbz#2030322 - update to 3.3.1 for PHP 8.3 - drop inet_ntoa usage using upstream patch - update to 3.2.2 for PHP 8.2 RHEL-14699 - update to 3.3.1 for PHP 8.3 - drop inet_ntoa usage using upstream patch - update to 3.2.2 for PHP 8.2 RHEL-14699 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for PHP 8. Related rhbz#1949319 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - update to 1.19.2 - update to 1.19.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - update to 1.19.0 - update to 1.18.2 - update to 1.20.1 for PHP 8.1 #2070040 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for PHP 8. Related rhbz#1949319 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - update to 1.19.2 - update to 1.19.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - update to 1.19.0 - update to 1.22.3 for PHP 8.2 RHEL-14699 - update to 1.20.1 for PHP 8.1 #2070040 - update to 1.22.3 for PHP 8.2 RHEL-14699 - update to 1.20.1 for PHP 8.1 #2070040 - update to 1.22.3 for PHP 8.2 RHEL-14699 - update to 1.20.1 for PHP 8.1 #2070040 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fix Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682 - Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - rebase to 8.1.32 - rebase to 8.1.30 RHEL-64144 - rebase to 8.1.27 RHEL-19093 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.1.32 - rebase to 8.1.30 RHEL-64144 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.35 - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.36 - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fix Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682 - Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - rebase to 8.1.32 - rebase to 8.1.30 RHEL-64144 - rebase to 8.1.27 RHEL-19093 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.1.32 - rebase to 8.1.30 RHEL-64144 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.35 - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.36 - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fix Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682 - Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - rebase to 8.1.32 - rebase to 8.1.30 RHEL-64144 - rebase to 8.1.27 RHEL-19093 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.1.32 - rebase to 8.1.30 RHEL-64144 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.35 - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.36 - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fix Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682 - Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - rebase to 8.1.32 - rebase to 8.1.30 RHEL-64144 - rebase to 8.1.27 RHEL-19093 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.1.32 - rebase to 8.1.30 RHEL-64144 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.35 - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.36 - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix FILTER_SANITIZE_ENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison CVE-2026-91768 - Fix Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN mismatch CVE-2026-91769 - Fix Heap buffer overflow in php_openssl_matches_wildcard_name() on crafted server certificate wildcard CN CVE-2026-91767 - Fix Integer overflow in phar_tar_number() allowing TAR archive entry injection CVE-2026-6103 - Fix Unbounded recursion in server-side cleanup_xml_node() CVE-2026-91765 - Fix Integer overflow to buffer overflow in SOAP HTTP parsing CVE-2025-14181 - Fix Out-of-bounds read in convert.* stream filters when line-break-chars contains NUL CVE-2026-92842 - Fix Cross-origin credential leak in HTTP stream wrapper redirects CVE-2026-91766 - Fix Out-of-bounds read in the HTTP stream wrapper when following a redirect with an empty Location header CVE-2026-93682 - Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - Fix leak on double DatePeriod::__construct() call - Fixed SQL injection via E'...' backslash breakout CVE-2026-17543 - Fixed GHSA-vc5h-9ppw-p5f3 Crash via recursive symlinks CVE-2026-7260 - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD CVE-2026-14355 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - rebase to 8.1.32 - rebase to 8.1.30 RHEL-64144 - rebase to 8.1.27 RHEL-19093 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.1.32 - rebase to 8.1.30 RHEL-64144 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.35 - rebase to 8.2.33 - rebase to 8.2.32 - rebase to 8.2.31 - rebase to 8.2.30 - rebase to 8.2.28 - rebase to 8.2.25 RHEL-65837 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - Fix state corruption via bailout CVE-2026-109618 (GHSA-w8hw-w9fx-j79w) CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp) - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.36 - rebase to 8.3.33 - rebase to 8.3.32 - drop capstone dependency on i686 - rebase to 8.3.31 - rebase to 8.3.29 - rebase to 8.3.26 - rebase to 8.3.19 - rebase to 8.3.15 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Honor the disabled rpath - Sync final version of coverity patches from upstream (#1938729) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Address few more minor issues reported by coverity - Fix issues reported by coverity - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Move pinentry-tty to separate subpackage (#1782442) - Update the wrapper selecting the appropriate version (#1918969) - New upstream release (#1919127) - enable pinentry-tty - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Honor the disabled rpath - Sync final version of coverity patches from upstream (#1938729) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Address few more minor issues reported by coverity - Fix issues reported by coverity - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Move pinentry-tty to separate subpackage (#1782442) - Update the wrapper selecting the appropriate version (#1918969) - New upstream release (#1919127) - enable pinentry-tty - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Honor the disabled rpath - Sync final version of coverity patches from upstream (#1938729) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Address few more minor issues reported by coverity - Fix issues reported by coverity - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Move pinentry-tty to separate subpackage (#1782442) - Update the wrapper selecting the appropriate version (#1918969) - New upstream release (#1919127) - enable pinentry-tty - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fixed FTBFS - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fix CVE-2026-14324: limit RTSP Content-Length in RAOP client Resolves: RHEL-249297 - Fix stack exhaustion via unbounded alloca in pulse-server (CVE-2026-14330) Resolves: RHEL-249317 - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164828 - Rebase to 1.4.9 Resolves: RHEL-123614 - Rebase to 1.4.6 Resolves: DESKTOP-2312 - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164830 - Rebase to 1.4.9 Resolves: RHEL-123614 - Rebase to 1.4.6 Resolves: DESKTOP-2312 - Rebase to 1.0.7 - Rebase to 1.4.9 Resolves: RHEL-123614 - Rebase to 1.4.6 Resolves: DESKTOP-2312 - Rebase to 1.0.7 - Update to version 1.0.1 - Add patch to revert timestamps - Resolves: RHEL-17641, RHEL-21900 - Fix install conflict with older versions. - Resolves: RHEL-17641 - Update to version 1.0.0 - Add patch to avoid crash in deviceprovider. - Resolves: RHEL-17641 - Fix CVE-2026-14324: limit RTSP Content-Length in RAOP client Resolves: RHEL-249297 - Fix stack exhaustion via unbounded alloca in pulse-server (CVE-2026-14330) Resolves: RHEL-249317 - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164828 - Rebase to 1.4.9 Resolves: RHEL-123614 - Rebase to 1.4.6 Resolves: DESKTOP-2312 - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164830 - Rebase to 1.4.9 Resolves: RHEL-123614 - Rebase to 1.4.6 Resolves: DESKTOP-2312 - Rebase to 1.0.7 - Rebase to 1.4.9 Resolves: RHEL-123614 - Rebase to 1.4.6 Resolves: DESKTOP-2312 - Rebase to 1.0.7 - Update to version 1.0.1 - Add patch to revert timestamps - Resolves: RHEL-17641, RHEL-21900 - Fix install conflict with older versions. - Resolves: RHEL-17641 - Update to version 1.0.0 - Add patch to avoid crash in deviceprovider. - Resolves: RHEL-17641 - Fix CVE-2026-14324: limit RTSP Content-Length in RAOP client Resolves: RHEL-249297 - Fix stack exhaustion via unbounded alloca in pulse-server (CVE-2026-14330) Resolves: RHEL-249317 - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164828 - Rebase to 1.4.9 Resolves: RHEL-123614 - Rebase to 1.4.6 Resolves: DESKTOP-2312 - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164830 - Rebase to 1.4.9 Resolves: RHEL-123614 - Rebase to 1.4.6 Resolves: DESKTOP-2312 - Rebase to 1.0.7 - Rebase to 1.4.9 Resolves: RHEL-123614 - Rebase to 1.4.6 Resolves: DESKTOP-2312 - Rebase to 1.0.7 - Update to version 1.0.1 - Add patch to revert timestamps - Resolves: RHEL-17641, RHEL-21900 - Fix install conflict with older versions. - Resolves: RHEL-17641 - Update to version 1.0.0 - Add patch to avoid crash in deviceprovider. - Resolves: RHEL-17641 - Fix CVE-2026-14324: limit RTSP Content-Length in RAOP client Resolves: RHEL-249297 - Fix stack exhaustion via unbounded alloca in pulse-server (CVE-2026-14330) Resolves: RHEL-249317 - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164828 - Rebase to 1.4.9 Resolves: RHEL-123614 - Rebase to 1.4.6 Resolves: DESKTOP-2312 - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164830 - Rebase to 1.4.9 Resolves: RHEL-123614 - Rebase to 1.4.6 Resolves: DESKTOP-2312 - Rebase to 1.0.7 - Rebase to 1.4.9 Resolves: RHEL-123614 - Rebase to 1.4.6 Resolves: DESKTOP-2312 - Rebase to 1.0.7 - Update to version 1.0.1 - Add patch to revert timestamps - Resolves: RHEL-17641, RHEL-21900 - Fix install conflict with older versions. - Resolves: RHEL-17641 - Update to version 1.0.0 - Add patch to avoid crash in deviceprovider. - Resolves: RHEL-17641 - Fix CVE-2026-14324: limit RTSP Content-Length in RAOP client Resolves: RHEL-249297 - Fix stack exhaustion via unbounded alloca in pulse-server (CVE-2026-14330) Resolves: RHEL-249317 - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164828 - Rebase to 1.4.9 Resolves: RHEL-123614 - Rebase to 1.4.6 Resolves: DESKTOP-2312 - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164830 - Rebase to 1.4.9 Resolves: RHEL-123614 - Rebase to 1.4.6 Resolves: DESKTOP-2312 - Rebase to 1.0.7 - Rebase to 1.4.9 Resolves: RHEL-123614 - Rebase to 1.4.6 Resolves: DESKTOP-2312 - Rebase to 1.0.7 - Update to version 1.0.1 - Add patch to revert timestamps - Resolves: RHEL-17641, RHEL-21900 - Fix install conflict with older versions. - Resolves: RHEL-17641 - Update to version 1.0.0 - Add patch to avoid crash in deviceprovider. - Resolves: RHEL-17641 - Fix CVE-2026-14324: limit RTSP Content-Length in RAOP client Resolves: RHEL-249297 - Fix stack exhaustion via unbounded alloca in pulse-server (CVE-2026-14330) Resolves: RHEL-249317 - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164828 - Rebase to 1.4.9 Resolves: RHEL-123614 - Rebase to 1.4.6 Resolves: DESKTOP-2312 - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164830 - Rebase to 1.4.9 Resolves: RHEL-123614 - Rebase to 1.4.6 Resolves: DESKTOP-2312 - Rebase to 1.0.7 - Rebase to 1.4.9 Resolves: RHEL-123614 - Rebase to 1.4.6 Resolves: DESKTOP-2312 - Rebase to 1.0.7 - Update to version 1.0.1 - Add patch to revert timestamps - Resolves: RHEL-17641, RHEL-21900 - Fix install conflict with older versions. - Resolves: RHEL-17641 - Update to version 1.0.0 - Add patch to avoid crash in deviceprovider. - Resolves: RHEL-17641 - Fix CVE-2026-14324: limit RTSP Content-Length in RAOP client Resolves: RHEL-249297 - Fix stack exhaustion via unbounded alloca in pulse-server (CVE-2026-14330) Resolves: RHEL-249317 - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164828 - Rebase to 1.4.9 Resolves: RHEL-123614 - Rebase to 1.4.6 Resolves: DESKTOP-2312 - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164830 - Rebase to 1.4.9 Resolves: RHEL-123614 - Rebase to 1.4.6 Resolves: DESKTOP-2312 - Rebase to 1.0.7 - Rebase to 1.4.9 Resolves: RHEL-123614 - Rebase to 1.4.6 Resolves: DESKTOP-2312 - Rebase to 1.0.7 - Update to version 1.0.1 - Add patch to revert timestamps - Resolves: RHEL-17641, RHEL-21900 - Fix install conflict with older versions. - Resolves: RHEL-17641 - Update to version 1.0.0 - Add patch to avoid crash in deviceprovider. - Resolves: RHEL-17641 - Fix CVE-2026-14324: limit RTSP Content-Length in RAOP client Resolves: RHEL-249297 - Fix stack exhaustion via unbounded alloca in pulse-server (CVE-2026-14330) Resolves: RHEL-249317 - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164828 - Rebase to 1.4.9 Resolves: RHEL-123614 - Rebase to 1.4.6 Resolves: DESKTOP-2312 - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164830 - Rebase to 1.4.9 Resolves: RHEL-123614 - Rebase to 1.4.6 Resolves: DESKTOP-2312 - Rebase to 1.0.7 - Rebase to 1.4.9 Resolves: RHEL-123614 - Rebase to 1.4.6 Resolves: DESKTOP-2312 - Rebase to 1.0.7 - Update to version 1.0.1 - Add patch to revert timestamps - Resolves: RHEL-17641, RHEL-21900 - Fix install conflict with older versions. - Resolves: RHEL-17641 - Update to version 1.0.0 - Add patch to avoid crash in deviceprovider. - Resolves: RHEL-17641 - Fix CVE-2026-14324: limit RTSP Content-Length in RAOP client Resolves: RHEL-249297 - Fix stack exhaustion via unbounded alloca in pulse-server (CVE-2026-14330) Resolves: RHEL-249317 - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164828 - Rebase to 1.4.9 Resolves: RHEL-123614 - Rebase to 1.4.6 Resolves: DESKTOP-2312 - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164830 - Rebase to 1.4.9 Resolves: RHEL-123614 - Rebase to 1.4.6 Resolves: DESKTOP-2312 - Rebase to 1.0.7 - Rebase to 1.4.9 Resolves: RHEL-123614 - Rebase to 1.4.6 Resolves: DESKTOP-2312 - Rebase to 1.0.7 - Update to version 1.0.1 - Add patch to revert timestamps - Resolves: RHEL-17641, RHEL-21900 - Fix install conflict with older versions. - Resolves: RHEL-17641 - Update to version 1.0.0 - Add patch to avoid crash in deviceprovider. - Resolves: RHEL-17641 - Fix CVE-2026-14324: limit RTSP Content-Length in RAOP client Resolves: RHEL-249297 - Fix stack exhaustion via unbounded alloca in pulse-server (CVE-2026-14330) Resolves: RHEL-249317 - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164828 - Rebase to 1.4.9 Resolves: RHEL-123614 - Rebase to 1.4.6 Resolves: DESKTOP-2312 - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164830 - Rebase to 1.4.9 Resolves: RHEL-123614 - Rebase to 1.4.6 Resolves: DESKTOP-2312 - Rebase to 1.0.7 - Rebase to 1.4.9 Resolves: RHEL-123614 - Rebase to 1.4.6 Resolves: DESKTOP-2312 - Rebase to 1.0.7 - Update to version 1.0.1 - Add patch to revert timestamps - Resolves: RHEL-17641, RHEL-21900 - Fix install conflict with older versions. - Resolves: RHEL-17641 - Update to version 1.0.0 - Add patch to avoid crash in deviceprovider. - Resolves: RHEL-17641 - Fix CVE-2026-14324: limit RTSP Content-Length in RAOP client Resolves: RHEL-249297 - Fix stack exhaustion via unbounded alloca in pulse-server (CVE-2026-14330) Resolves: RHEL-249317 - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164828 - Rebase to 1.4.9 Resolves: RHEL-123614 - Rebase to 1.4.6 Resolves: DESKTOP-2312 - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164830 - Rebase to 1.4.9 Resolves: RHEL-123614 - Rebase to 1.4.6 Resolves: DESKTOP-2312 - Rebase to 1.0.7 - Rebase to 1.4.9 Resolves: RHEL-123614 - Rebase to 1.4.6 Resolves: DESKTOP-2312 - Rebase to 1.0.7 - Update to version 1.0.1 - Add patch to revert timestamps - Resolves: RHEL-17641, RHEL-21900 - Fix install conflict with older versions. - Resolves: RHEL-17641 - Update to version 1.0.0 - Add patch to avoid crash in deviceprovider. - Resolves: RHEL-17641 - Backport fix for CVE-2022-44638 - Backport fix for CVE-2022-44638 - Update to version 2.19.1 - Resolves: RHEL-100233 - Update to version 2.21 - Resolves: RHEL-188300 - Update to version 2.19.1 - Resolves: RHEL-100233 - Update to version 2.19.1 - Resolves: RHEL-103636 - Update to version 2.21.4 - Resolves: RHEL-188300 - Update to version 2.19.1 - Resolves: RHEL-103636 - Resolves: RHEL-286626 - CVE-2026-89425 jackson-core: Jackson-core: Denial of Service via unbounded StringBuilder growth during malformed token processing unbounded StringBuilder growth during malformed token processing - Resolves: RHEL-272199 - Fix CVE-2026-89407 - Rebase to version 2.21.6 - Resolves: RHEL-259227 - Update to version 2.21.4 - Resolves: RHEL-188300 - Update to version 2.19.1 - Resolves: RHEL-103636 - Rebase to version 2.21.6 - Resolves: RHEL-259228 - Update to version 2.21.4 - Resolves: RHEL-188300 - Update to version 2.19.1 - Resolves: RHEL-103636 - Update to version 2.19.1 - Resolves: RHEL-100233 - Update to version 2.21.4 - Resolves: RHEL-188300 - Update to version 2.19.1 - Resolves: RHEL-100233 - Resolves: RHEL-276419 - Fix CVE-2026-91777 - Rebase to version 2.21.6 - Resolves: RHEL-259227 - Update to version 2.21.4 - Resolves: RHEL-188300 - Update to version 2.19.1 - Resolves: RHEL-100233 - Rebase to version 2.21.6 - Resolves: RHEL-259228 - Update to version 2.21.4 - Resolves: RHEL-188300 - Update to version 2.19.1 - Resolves: RHEL-100233 - Update to version 2.19.1 - Resolves: RHEL-100239 - Update to version 2.21.4 - Resolves: RHEL-190937 - Update to version 2.19.1 - Resolves: RHEL-100239 - Rebase to version 2.21.6 - Resolves: RHEL-259228 - Update to version 2.21.4 - Resolves: RHEL-190937 - Update to version 2.19.1 - Resolves: RHEL-100239 - Update to version 2.19.1 - Resolves: RHEL-100239 - Update to version 2.21.4 - Resolves: RHEL-190937 - Update to version 2.19.1 - Resolves: RHEL-100239 - Rebase to version 2.21.6 - Resolves: RHEL-259228 - Update to version 2.21.4 - Resolves: RHEL-190937 - Update to version 2.19.1 - Resolves: RHEL-100239 - Update to version 2.19.1 - Resolves: RHEL-100245 - Update to version 2.21.4 - Resolves: RHEL-190947 - Update to version 2.19.1 - Resolves: RHEL-100245 - Rebase to version 2.21.6 - Resolves: RHEL-259228 - Update to version 2.21.4 - Resolves: RHEL-190947 - Update to version 2.19.1 - Resolves: RHEL-100245 - Fix CVE-2026-89058: CorsFilter Reflects Arbitrary Origin with Credentials under Wildcard Config - Fix CVE-2026-89059: IIOImageProvider Unbounded Image Decode (Decompression-Bomb DoS) - Resolves: RHEL-278032 - Resolves: RHEL-277999 - Fix CVE-2026-17615: SourceProvider remote unauthenticated file read Resolves: RHEL-251553 - Fix CVE-2026-17615: SourceProvider remote unauthenticated file read Resolves: RHEL-251553 - Fix CVE-2026-89058: CorsFilter Reflects Arbitrary Origin with Credentials under Wildcard Config - Fix CVE-2026-89059: IIOImageProvider Unbounded Image Decode (Decompression-Bomb DoS) - Resolves: RHEL-278032 - Resolves: RHEL-277999 - Fix CVE-2026-17615: SourceProvider remote unauthenticated file read Resolves: RHEL-251553 - Fix CVE-2026-17615: SourceProvider remote unauthenticated file read Resolves: RHEL-251553 - Fix CVE-2026-89058: CorsFilter Reflects Arbitrary Origin with Credentials under Wildcard Config - Fix CVE-2026-89059: IIOImageProvider Unbounded Image Decode (Decompression-Bomb DoS) - Resolves: RHEL-278032 - Resolves: RHEL-277999 - Fix CVE-2026-17615: SourceProvider remote unauthenticated file read Resolves: RHEL-251553 - Fix CVE-2026-17615: SourceProvider remote unauthenticated file read Resolves: RHEL-251553 - Fix CVE-2026-89058: CorsFilter Reflects Arbitrary Origin with Credentials under Wildcard Config - Fix CVE-2026-89059: IIOImageProvider Unbounded Image Decode (Decompression-Bomb DoS) - Resolves: RHEL-278032 - Resolves: RHEL-277999 - Fix CVE-2026-17615: SourceProvider remote unauthenticated file read Resolves: RHEL-251553 - Fix CVE-2026-17615: SourceProvider remote unauthenticated file read Resolves: RHEL-251553 - Resolves: RHEL-124509 pki-servlet-engine: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-91744 pki-servlet-engine: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-71715 pki-servlet-engine: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) - Resolves: RHEL-60105 pki-servlet-engine: Denial of service in tomcat (CVE-2024-38286) - Resolves: RHEL-124509 pki-servlet-engine: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-91744 pki-servlet-engine: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-71715 pki-servlet-engine: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) - Resolves: RHEL-60105 pki-servlet-engine: Denial of service in tomcat (CVE-2024-38286) - Add noarch to ExclusiveArch - Disable building on i686 - Rebuild with regenerated Requires on Java - Rebuild to regenerate auto-requires - Update javapackages test plan to f42 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Rebuilt for java-21-openjdk as system jdk - Update Java source/target to 1.8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild to regenerate auto-Requires on java - Rebuild - Use implicit maven toolchains - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuild to regenerate auto-requires - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Update to upstream version 2.0 - Rebuilt for java-17-openjdk as system jdk - Rebuild to regenerate auto-requires - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Add missing test dependency on JUnit 4 - Rebuilt for java-17-openjdk as system jdk - Add noarch to ExclusiveArch - Disable building on i686 - Rebuild with regenerated Requires on Java - Rebuild to regenerate auto-requires - Update javapackages test plan to f42 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Rebuilt for java-21-openjdk as system jdk - bump of release for for java-21-openjdk as system jdk - Update to upstream version 2.8.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild to regenerate auto-Requires on java - Convert License tag to SPDX format - Update to upstream version 2.7.0 - Add noarch to ExclusiveArch - Disable building on i686 - Rebuild with regenerated Requires on Java - Rebuild to regenerate auto-requires - Rebuild to regenerate auto-requires - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Update to upstream version 2.1.1 - Rebuilt for java-17-openjdk as system jdk - Update javapackages test plan to f42 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Rebuilt for java-21-openjdk as system jdk - bump of release for for java-21-openjdk as system jdk - Update to upstream version 2.2.0 - Drop obsolete plexus-containers-container-default - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild to regenerate auto-Requires on java - Rebuild - Use implicit maven toolchains - Rebuild to regenerate auto-requires - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Add missing test dependency on JUnit 4 - Rebuilt for java-17-openjdk as system jdk - Add noarch to ExclusiveArch - Disable building on i686 - Fix patch usage - Rebuild with regenerated Requires on Java - Rebuild to regenerate auto-requires - Update javapackages test plan to f42 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Rebuilt for java-21-openjdk as system jdk - bump of release for for java-21-openjdk as system jdk - Update to upstream version 1.27 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild to regenerate auto-Requires on java - Rebuild - Use implicit maven toolchains - Add noarch to ExclusiveArch - Disable building on i686 - Fix patch usage - Rebuild with regenerated Requires on Java - Rebuild to regenerate auto-requires - Update javapackages test plan to f42 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Rebuilt for java-21-openjdk as system jdk - bump of release for for java-21-openjdk as system jdk - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild to regenerate auto-Requires on java - Convert License tag to SPDX format - Build with default JDK 17 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuild to regenerate auto-requires - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Rebuilt for java-17-openjdk as system jdk - Rebuild to regenerate auto-requires - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Rebuilt for java-17-openjdk as system jdk - Add noarch to ExclusiveArch - Disable building on i686 - Rebuild with regenerated Requires on Java - Rebuild to regenerate auto-requires - Fix CVE-2025-67030: Directory Traversal in Expand.extractFile - Add noarch to ExclusiveArch - Disable building on i686 - Rebuild with regenerated Requires on Java - Update javapackages test plan to f42 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Rebuilt for java-21-openjdk as system jdk - bump of release for for java-21-openjdk as system jdk - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild to regenerate auto-Requires on java - Convert License tag to SPDX format - Update to upstream version 3.5.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Fix CVE-2025-67030: Directory Traversal in Expand.extractFile - Update javapackages test plan to f42 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Rebuilt for java-21-openjdk as system jdk - bump of release for for java-21-openjdk as system jdk - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild to regenerate auto-Requires on java - Convert License tag to SPDX format - Update to upstream version 3.5.1 - Fixed build flags [2044887] - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Add in the symlink for fedora-gdm-logo.png to watermark.png in the spinner theme directory to ensure the AlmaLinux watermark is displayed in plymouth. - Ship plymouth-devel in AppStream Resolves: RHEL-120220 - Add in the symlink for fedora-gdm-logo.png to watermark.png in the spinner theme directory to ensure the AlmaLinux watermark is displayed in plymouth. - Ship plymouth-devel in AppStream Resolves: RHEL-120220 - Add in the symlink for fedora-gdm-logo.png to watermark.png in the spinner theme directory to ensure the AlmaLinux watermark is displayed in plymouth. - Ship plymouth-devel in AppStream Resolves: RHEL-120220 - Add in the symlink for fedora-gdm-logo.png to watermark.png in the spinner theme directory to ensure the AlmaLinux watermark is displayed in plymouth. - Ship plymouth-devel in AppStream Resolves: RHEL-120220 - Add in the symlink for fedora-gdm-logo.png to watermark.png in the spinner theme directory to ensure the AlmaLinux watermark is displayed in plymouth. - Ship plymouth-devel in AppStream Resolves: RHEL-120220 - Add in the symlink for fedora-gdm-logo.png to watermark.png in the spinner theme directory to ensure the AlmaLinux watermark is displayed in plymouth. - Ship plymouth-devel in AppStream Resolves: RHEL-120220 - Add in the symlink for fedora-gdm-logo.png to watermark.png in the spinner theme directory to ensure the AlmaLinux watermark is displayed in plymouth. - Ship plymouth-devel in AppStream Resolves: RHEL-120220 - Add in the symlink for fedora-gdm-logo.png to watermark.png in the spinner theme directory to ensure the AlmaLinux watermark is displayed in plymouth. - Ship plymouth-devel in AppStream Resolves: RHEL-120220 - Add in the symlink for fedora-gdm-logo.png to watermark.png in the spinner theme directory to ensure the AlmaLinux watermark is displayed in plymouth. - Ship plymouth-devel in AppStream Resolves: RHEL-120220 - Add in the symlink for fedora-gdm-logo.png to watermark.png in the spinner theme directory to ensure the AlmaLinux watermark is displayed in plymouth. - Ship plymouth-devel in AppStream Resolves: RHEL-120220 - Add in the symlink for fedora-gdm-logo.png to watermark.png in the spinner theme directory to ensure the AlmaLinux watermark is displayed in plymouth. - Ship plymouth-devel in AppStream Resolves: RHEL-120220 - Add in the symlink for fedora-gdm-logo.png to watermark.png in the spinner theme directory to ensure the AlmaLinux watermark is displayed in plymouth. - Ship plymouth-devel in AppStream Resolves: RHEL-120220 - Add in the symlink for fedora-gdm-logo.png to watermark.png in the spinner theme directory to ensure the AlmaLinux watermark is displayed in plymouth. - Ship plymouth-devel in AppStream Resolves: RHEL-120220 - Add in the symlink for fedora-gdm-logo.png to watermark.png in the spinner theme directory to ensure the AlmaLinux watermark is displayed in plymouth. - Ship plymouth-devel in AppStream Resolves: RHEL-120220 - Add in the symlink for fedora-gdm-logo.png to watermark.png in the spinner theme directory to ensure the AlmaLinux watermark is displayed in plymouth. - Ship plymouth-devel in AppStream Resolves: RHEL-120220 - Add in the symlink for fedora-gdm-logo.png to watermark.png in the spinner theme directory to ensure the AlmaLinux watermark is displayed in plymouth. - Ship plymouth-devel in AppStream Resolves: RHEL-120220 - Add in the symlink for fedora-gdm-logo.png to watermark.png in the spinner theme directory to ensure the AlmaLinux watermark is displayed in plymouth. - Ship plymouth-devel in AppStream Resolves: RHEL-120220 - Add pmix_test - Resolves: RHEL-3693 - Fix CVE-2023-41915 - Resolves: RHEL-3693 - Add pmix_test - Resolves: RHEL-3693 - Fix CVE-2023-41915 - Resolves: RHEL-3693 - Add pmix_test - Resolves: RHEL-3693 - Fix CVE-2023-41915 - Resolves: RHEL-3693 - Add pmix_test - Resolves: RHEL-3693 - Fix CVE-2023-41915 - Resolves: RHEL-3693 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - make is no longer in buildroot by default - fix argument reading for non x86_64 archs - use int instead of char - add foomatic as a dependency, because pnm2ppa drivers are not available as a driver without it - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - FTBFS with GCC 10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165040 - revert sequoia - only available in RHEL10 - Related: RHEL-164019 - enable sequoia - Resolves: RHEL-164019 - update to https://github.com/containers/podman/releases/tag/v5.8.1 - fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day] - Resolves: RHEL-157746 - update to https://github.com/containers/podman/releases/tag/v5.8.0 - Related: RHEL-111919 - update to rhel-9.7.z version of podman - Resolves: RHEL-142896 - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel (https://github.com/containers/podman/commit/56f1962) - fixes "Work on RHEL 9.7 packaging" - Related: RHEL-80816 - update to the latest content of https://github.com/containers/podman/tree/v5.6 (https://github.com/containers/podman/commit/d46b857) - fixes "Work on RHEL 9.7 packaging" - Related: RHEL-80816 - update to https://github.com/containers/podman/releases/tag/v5.6.0 - Related: RHEL-80816 - update to https://github.com/containers/podman/releases/tag/v5.5.2 - Related: RHEL-80816 - Rebuild for CVE-2026-32283 - Resolves: RHEL-167685 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158781 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165040 - revert sequoia - only available in RHEL10 - Related: RHEL-164019 - enable sequoia - Resolves: RHEL-164019 - update to https://github.com/containers/podman/releases/tag/v5.8.1 - fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day] - Resolves: RHEL-157746 - update to https://github.com/containers/podman/releases/tag/v5.8.0 - Related: RHEL-111919 - update to rhel-9.7.z version of podman - Resolves: RHEL-142896 - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel (https://github.com/containers/podman/commit/56f1962) - fixes "Work on RHEL 9.7 packaging" - Related: RHEL-80816 - update to the latest content of https://github.com/containers/podman/tree/v5.6 (https://github.com/containers/podman/commit/d46b857) - fixes "Work on RHEL 9.7 packaging" - Related: RHEL-80816 - bump to upstream commit a476c2b2 fixing CVE-2026-39835 CVE-2026-39829 CVE-2026-39832 CVE-2026-42508 CVE-2026-27136 CVE-2026-25681 CVE-2026-57231 and podman-remote save regression - Rebuild for CVE-2026-32283 - Resolves: RHEL-167685 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158781 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165040 - revert sequoia - only available in RHEL10 - Related: RHEL-164019 - enable sequoia - Resolves: RHEL-164019 - update to https://github.com/containers/podman/releases/tag/v5.8.1 - fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day] - Resolves: RHEL-157746 - update to https://github.com/containers/podman/releases/tag/v5.8.0 - Related: RHEL-111919 - update to rhel-9.7.z version of podman - Resolves: RHEL-142896 - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel (https://github.com/containers/podman/commit/56f1962) - fixes "Work on RHEL 9.7 packaging" - Related: RHEL-80816 - rebuild for CVE-2026-39822 - Resolves: RHEL-193646 - bump to upstream commit a476c2b2 fixing CVE-2026-39835 CVE-2026-39829 CVE-2026-39832 CVE-2026-42508 CVE-2026-27136 CVE-2026-25681 CVE-2026-57231 and podman-remote save regression - Rebuild for CVE-2026-32283 - Resolves: RHEL-167685 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158781 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165040 - revert sequoia - only available in RHEL10 - Related: RHEL-164019 - enable sequoia - Resolves: RHEL-164019 - update to https://github.com/containers/podman/releases/tag/v5.8.1 - fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day] - Resolves: RHEL-157746 - update to https://github.com/containers/podman/releases/tag/v5.8.0 - Related: RHEL-111919 - update to rhel-9.7.z version of podman - Resolves: RHEL-142896 - vendor in mirror fallback for container image pulls - Resolves: RHEL-242409 - rebuild for CVE-2026-39822 - Resolves: RHEL-193646 - bump to upstream commit a476c2b2 fixing CVE-2026-39835 CVE-2026-39829 CVE-2026-39832 CVE-2026-42508 CVE-2026-27136 CVE-2026-25681 CVE-2026-57231 and podman-remote save regression - Rebuild for CVE-2026-32283 - Resolves: RHEL-167685 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158781 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165040 - revert sequoia - only available in RHEL10 - Related: RHEL-164019 - enable sequoia - Resolves: RHEL-164019 - update to https://github.com/containers/podman/releases/tag/v5.8.1 - fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day] - Resolves: RHEL-157746 - update to https://github.com/containers/podman/releases/tag/v5.8.0 - Related: RHEL-111919 - update to the latest upstream commit 66780e9b - rebuild with golang-1.26.7 fixing CVE-2026-33818 CVE-2026-56860 CVE-2026-56859 CVE-2026-56858 CVE-2026-56862 CVE-2026-56853 CVE-2026-19730 CVE-2026-39830 CVE-2026-17106 - Resolves: RHEL-241579 - Resolves: RHEL-241720 - Resolves: RHEL-241983 - Resolves: RHEL-242126 - Resolves: RHEL-242282 - Resolves: RHEL-240089 - Resolves: RHEL-186270 - Resolves: RHEL-241172 - Resolves: RHEL-252466 - vendor in mirror fallback for container image pulls - Resolves: RHEL-242409 - rebuild for CVE-2026-39822 - Resolves: RHEL-193646 - bump to upstream commit a476c2b2 fixing CVE-2026-39835 CVE-2026-39829 CVE-2026-39832 CVE-2026-42508 CVE-2026-27136 CVE-2026-25681 CVE-2026-57231 and podman-remote save regression - Rebuild for CVE-2026-32283 - Resolves: RHEL-167685 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158781 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165040 - revert sequoia - only available in RHEL10 - Related: RHEL-164019 - enable sequoia - Resolves: RHEL-164019 - update to https://github.com/containers/podman/releases/tag/v5.8.1 - fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day] - Resolves: RHEL-157746 - Rebuild for CVE-2026-78667 and CVE-2026-111943 - Resolves: RHEL-279015 - Resolves: RHEL-287513 - update to the latest upstream commit 66780e9b - rebuild with golang-1.26.7 fixing CVE-2026-33818 CVE-2026-56860 CVE-2026-56859 CVE-2026-56858 CVE-2026-56862 CVE-2026-56853 CVE-2026-19730 CVE-2026-39830 CVE-2026-17106 - Resolves: RHEL-241579 - Resolves: RHEL-241720 - Resolves: RHEL-241983 - Resolves: RHEL-242126 - Resolves: RHEL-242282 - Resolves: RHEL-240089 - Resolves: RHEL-186270 - Resolves: RHEL-241172 - Resolves: RHEL-252466 - vendor in mirror fallback for container image pulls - Resolves: RHEL-242409 - rebuild for CVE-2026-39822 - Resolves: RHEL-193646 - bump to upstream commit a476c2b2 fixing CVE-2026-39835 CVE-2026-39829 CVE-2026-39832 CVE-2026-42508 CVE-2026-27136 CVE-2026-25681 CVE-2026-57231 and podman-remote save regression - Rebuild for CVE-2026-32283 - Resolves: RHEL-167685 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158781 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165040 - revert sequoia - only available in RHEL10 - Related: RHEL-164019 - enable sequoia - Resolves: RHEL-164019 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165040 - revert sequoia - only available in RHEL10 - Related: RHEL-164019 - enable sequoia - Resolves: RHEL-164019 - update to https://github.com/containers/podman/releases/tag/v5.8.1 - fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day] - Resolves: RHEL-157746 - update to https://github.com/containers/podman/releases/tag/v5.8.0 - Related: RHEL-111919 - update to rhel-9.7.z version of podman - Resolves: RHEL-142896 - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel (https://github.com/containers/podman/commit/56f1962) - fixes "Work on RHEL 9.7 packaging" - Related: RHEL-80816 - update to the latest content of https://github.com/containers/podman/tree/v5.6 (https://github.com/containers/podman/commit/d46b857) - fixes "Work on RHEL 9.7 packaging" - Related: RHEL-80816 - update to https://github.com/containers/podman/releases/tag/v5.6.0 - Related: RHEL-80816 - update to https://github.com/containers/podman/releases/tag/v5.5.2 - Related: RHEL-80816 - Rebuild for CVE-2026-32283 - Resolves: RHEL-167685 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158781 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165040 - revert sequoia - only available in RHEL10 - Related: RHEL-164019 - enable sequoia - Resolves: RHEL-164019 - update to https://github.com/containers/podman/releases/tag/v5.8.1 - fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day] - Resolves: RHEL-157746 - update to https://github.com/containers/podman/releases/tag/v5.8.0 - Related: RHEL-111919 - update to rhel-9.7.z version of podman - Resolves: RHEL-142896 - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel (https://github.com/containers/podman/commit/56f1962) - fixes "Work on RHEL 9.7 packaging" - Related: RHEL-80816 - update to the latest content of https://github.com/containers/podman/tree/v5.6 (https://github.com/containers/podman/commit/d46b857) - fixes "Work on RHEL 9.7 packaging" - Related: RHEL-80816 - bump to upstream commit a476c2b2 fixing CVE-2026-39835 CVE-2026-39829 CVE-2026-39832 CVE-2026-42508 CVE-2026-27136 CVE-2026-25681 CVE-2026-57231 and podman-remote save regression - Rebuild for CVE-2026-32283 - Resolves: RHEL-167685 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158781 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165040 - revert sequoia - only available in RHEL10 - Related: RHEL-164019 - enable sequoia - Resolves: RHEL-164019 - update to https://github.com/containers/podman/releases/tag/v5.8.1 - fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day] - Resolves: RHEL-157746 - update to https://github.com/containers/podman/releases/tag/v5.8.0 - Related: RHEL-111919 - update to rhel-9.7.z version of podman - Resolves: RHEL-142896 - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel (https://github.com/containers/podman/commit/56f1962) - fixes "Work on RHEL 9.7 packaging" - Related: RHEL-80816 - rebuild for CVE-2026-39822 - Resolves: RHEL-193646 - bump to upstream commit a476c2b2 fixing CVE-2026-39835 CVE-2026-39829 CVE-2026-39832 CVE-2026-42508 CVE-2026-27136 CVE-2026-25681 CVE-2026-57231 and podman-remote save regression - Rebuild for CVE-2026-32283 - Resolves: RHEL-167685 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158781 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165040 - revert sequoia - only available in RHEL10 - Related: RHEL-164019 - enable sequoia - Resolves: RHEL-164019 - update to https://github.com/containers/podman/releases/tag/v5.8.1 - fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day] - Resolves: RHEL-157746 - update to https://github.com/containers/podman/releases/tag/v5.8.0 - Related: RHEL-111919 - update to rhel-9.7.z version of podman - Resolves: RHEL-142896 - vendor in mirror fallback for container image pulls - Resolves: RHEL-242409 - rebuild for CVE-2026-39822 - Resolves: RHEL-193646 - bump to upstream commit a476c2b2 fixing CVE-2026-39835 CVE-2026-39829 CVE-2026-39832 CVE-2026-42508 CVE-2026-27136 CVE-2026-25681 CVE-2026-57231 and podman-remote save regression - Rebuild for CVE-2026-32283 - Resolves: RHEL-167685 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158781 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165040 - revert sequoia - only available in RHEL10 - Related: RHEL-164019 - enable sequoia - Resolves: RHEL-164019 - update to https://github.com/containers/podman/releases/tag/v5.8.1 - fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day] - Resolves: RHEL-157746 - update to https://github.com/containers/podman/releases/tag/v5.8.0 - Related: RHEL-111919 - update to the latest upstream commit 66780e9b - rebuild with golang-1.26.7 fixing CVE-2026-33818 CVE-2026-56860 CVE-2026-56859 CVE-2026-56858 CVE-2026-56862 CVE-2026-56853 CVE-2026-19730 CVE-2026-39830 CVE-2026-17106 - Resolves: RHEL-241579 - Resolves: RHEL-241720 - Resolves: RHEL-241983 - Resolves: RHEL-242126 - Resolves: RHEL-242282 - Resolves: RHEL-240089 - Resolves: RHEL-186270 - Resolves: RHEL-241172 - Resolves: RHEL-252466 - vendor in mirror fallback for container image pulls - Resolves: RHEL-242409 - rebuild for CVE-2026-39822 - Resolves: RHEL-193646 - bump to upstream commit a476c2b2 fixing CVE-2026-39835 CVE-2026-39829 CVE-2026-39832 CVE-2026-42508 CVE-2026-27136 CVE-2026-25681 CVE-2026-57231 and podman-remote save regression - Rebuild for CVE-2026-32283 - Resolves: RHEL-167685 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158781 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165040 - revert sequoia - only available in RHEL10 - Related: RHEL-164019 - enable sequoia - Resolves: RHEL-164019 - update to https://github.com/containers/podman/releases/tag/v5.8.1 - fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day] - Resolves: RHEL-157746 - Rebuild for CVE-2026-78667 and CVE-2026-111943 - Resolves: RHEL-279015 - Resolves: RHEL-287513 - update to the latest upstream commit 66780e9b - rebuild with golang-1.26.7 fixing CVE-2026-33818 CVE-2026-56860 CVE-2026-56859 CVE-2026-56858 CVE-2026-56862 CVE-2026-56853 CVE-2026-19730 CVE-2026-39830 CVE-2026-17106 - Resolves: RHEL-241579 - Resolves: RHEL-241720 - Resolves: RHEL-241983 - Resolves: RHEL-242126 - Resolves: RHEL-242282 - Resolves: RHEL-240089 - Resolves: RHEL-186270 - Resolves: RHEL-241172 - Resolves: RHEL-252466 - vendor in mirror fallback for container image pulls - Resolves: RHEL-242409 - rebuild for CVE-2026-39822 - Resolves: RHEL-193646 - bump to upstream commit a476c2b2 fixing CVE-2026-39835 CVE-2026-39829 CVE-2026-39832 CVE-2026-42508 CVE-2026-27136 CVE-2026-25681 CVE-2026-57231 and podman-remote save regression - Rebuild for CVE-2026-32283 - Resolves: RHEL-167685 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158781 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165040 - revert sequoia - only available in RHEL10 - Related: RHEL-164019 - enable sequoia - Resolves: RHEL-164019 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165040 - revert sequoia - only available in RHEL10 - Related: RHEL-164019 - enable sequoia - Resolves: RHEL-164019 - update to https://github.com/containers/podman/releases/tag/v5.8.1 - fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day] - Resolves: RHEL-157746 - update to https://github.com/containers/podman/releases/tag/v5.8.0 - Related: RHEL-111919 - update to rhel-9.7.z version of podman - Resolves: RHEL-142896 - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel (https://github.com/containers/podman/commit/56f1962) - fixes "Work on RHEL 9.7 packaging" - Related: RHEL-80816 - update to the latest content of https://github.com/containers/podman/tree/v5.6 (https://github.com/containers/podman/commit/d46b857) - fixes "Work on RHEL 9.7 packaging" - Related: RHEL-80816 - update to https://github.com/containers/podman/releases/tag/v5.6.0 - Related: RHEL-80816 - update to https://github.com/containers/podman/releases/tag/v5.5.2 - Related: RHEL-80816 - Rebuild for CVE-2026-32283 - Resolves: RHEL-167685 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158781 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165040 - revert sequoia - only available in RHEL10 - Related: RHEL-164019 - enable sequoia - Resolves: RHEL-164019 - update to https://github.com/containers/podman/releases/tag/v5.8.1 - fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day] - Resolves: RHEL-157746 - update to https://github.com/containers/podman/releases/tag/v5.8.0 - Related: RHEL-111919 - update to rhel-9.7.z version of podman - Resolves: RHEL-142896 - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel (https://github.com/containers/podman/commit/56f1962) - fixes "Work on RHEL 9.7 packaging" - Related: RHEL-80816 - update to the latest content of https://github.com/containers/podman/tree/v5.6 (https://github.com/containers/podman/commit/d46b857) - fixes "Work on RHEL 9.7 packaging" - Related: RHEL-80816 - bump to upstream commit a476c2b2 fixing CVE-2026-39835 CVE-2026-39829 CVE-2026-39832 CVE-2026-42508 CVE-2026-27136 CVE-2026-25681 CVE-2026-57231 and podman-remote save regression - Rebuild for CVE-2026-32283 - Resolves: RHEL-167685 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158781 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165040 - revert sequoia - only available in RHEL10 - Related: RHEL-164019 - enable sequoia - Resolves: RHEL-164019 - update to https://github.com/containers/podman/releases/tag/v5.8.1 - fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day] - Resolves: RHEL-157746 - update to https://github.com/containers/podman/releases/tag/v5.8.0 - Related: RHEL-111919 - update to rhel-9.7.z version of podman - Resolves: RHEL-142896 - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel (https://github.com/containers/podman/commit/56f1962) - fixes "Work on RHEL 9.7 packaging" - Related: RHEL-80816 - rebuild for CVE-2026-39822 - Resolves: RHEL-193646 - bump to upstream commit a476c2b2 fixing CVE-2026-39835 CVE-2026-39829 CVE-2026-39832 CVE-2026-42508 CVE-2026-27136 CVE-2026-25681 CVE-2026-57231 and podman-remote save regression - Rebuild for CVE-2026-32283 - Resolves: RHEL-167685 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158781 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165040 - revert sequoia - only available in RHEL10 - Related: RHEL-164019 - enable sequoia - Resolves: RHEL-164019 - update to https://github.com/containers/podman/releases/tag/v5.8.1 - fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day] - Resolves: RHEL-157746 - update to https://github.com/containers/podman/releases/tag/v5.8.0 - Related: RHEL-111919 - update to rhel-9.7.z version of podman - Resolves: RHEL-142896 - vendor in mirror fallback for container image pulls - Resolves: RHEL-242409 - rebuild for CVE-2026-39822 - Resolves: RHEL-193646 - bump to upstream commit a476c2b2 fixing CVE-2026-39835 CVE-2026-39829 CVE-2026-39832 CVE-2026-42508 CVE-2026-27136 CVE-2026-25681 CVE-2026-57231 and podman-remote save regression - Rebuild for CVE-2026-32283 - Resolves: RHEL-167685 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158781 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165040 - revert sequoia - only available in RHEL10 - Related: RHEL-164019 - enable sequoia - Resolves: RHEL-164019 - update to https://github.com/containers/podman/releases/tag/v5.8.1 - fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day] - Resolves: RHEL-157746 - update to https://github.com/containers/podman/releases/tag/v5.8.0 - Related: RHEL-111919 - update to the latest upstream commit 66780e9b - rebuild with golang-1.26.7 fixing CVE-2026-33818 CVE-2026-56860 CVE-2026-56859 CVE-2026-56858 CVE-2026-56862 CVE-2026-56853 CVE-2026-19730 CVE-2026-39830 CVE-2026-17106 - Resolves: RHEL-241579 - Resolves: RHEL-241720 - Resolves: RHEL-241983 - Resolves: RHEL-242126 - Resolves: RHEL-242282 - Resolves: RHEL-240089 - Resolves: RHEL-186270 - Resolves: RHEL-241172 - Resolves: RHEL-252466 - vendor in mirror fallback for container image pulls - Resolves: RHEL-242409 - rebuild for CVE-2026-39822 - Resolves: RHEL-193646 - bump to upstream commit a476c2b2 fixing CVE-2026-39835 CVE-2026-39829 CVE-2026-39832 CVE-2026-42508 CVE-2026-27136 CVE-2026-25681 CVE-2026-57231 and podman-remote save regression - Rebuild for CVE-2026-32283 - Resolves: RHEL-167685 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158781 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165040 - revert sequoia - only available in RHEL10 - Related: RHEL-164019 - enable sequoia - Resolves: RHEL-164019 - update to https://github.com/containers/podman/releases/tag/v5.8.1 - fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day] - Resolves: RHEL-157746 - Rebuild for CVE-2026-78667 and CVE-2026-111943 - Resolves: RHEL-279015 - Resolves: RHEL-287513 - update to the latest upstream commit 66780e9b - rebuild with golang-1.26.7 fixing CVE-2026-33818 CVE-2026-56860 CVE-2026-56859 CVE-2026-56858 CVE-2026-56862 CVE-2026-56853 CVE-2026-19730 CVE-2026-39830 CVE-2026-17106 - Resolves: RHEL-241579 - Resolves: RHEL-241720 - Resolves: RHEL-241983 - Resolves: RHEL-242126 - Resolves: RHEL-242282 - Resolves: RHEL-240089 - Resolves: RHEL-186270 - Resolves: RHEL-241172 - Resolves: RHEL-252466 - vendor in mirror fallback for container image pulls - Resolves: RHEL-242409 - rebuild for CVE-2026-39822 - Resolves: RHEL-193646 - bump to upstream commit a476c2b2 fixing CVE-2026-39835 CVE-2026-39829 CVE-2026-39832 CVE-2026-42508 CVE-2026-27136 CVE-2026-25681 CVE-2026-57231 and podman-remote save regression - Rebuild for CVE-2026-32283 - Resolves: RHEL-167685 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158781 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165040 - revert sequoia - only available in RHEL10 - Related: RHEL-164019 - enable sequoia - Resolves: RHEL-164019 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165040 - revert sequoia - only available in RHEL10 - Related: RHEL-164019 - enable sequoia - Resolves: RHEL-164019 - update to https://github.com/containers/podman/releases/tag/v5.8.1 - fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day] - Resolves: RHEL-157746 - update to https://github.com/containers/podman/releases/tag/v5.8.0 - Related: RHEL-111919 - update to rhel-9.7.z version of podman - Resolves: RHEL-142896 - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel (https://github.com/containers/podman/commit/56f1962) - fixes "Work on RHEL 9.7 packaging" - Related: RHEL-80816 - update to the latest content of https://github.com/containers/podman/tree/v5.6 (https://github.com/containers/podman/commit/d46b857) - fixes "Work on RHEL 9.7 packaging" - Related: RHEL-80816 - update to https://github.com/containers/podman/releases/tag/v5.6.0 - Related: RHEL-80816 - update to https://github.com/containers/podman/releases/tag/v5.5.2 - Related: RHEL-80816 - Rebuild for CVE-2026-32283 - Resolves: RHEL-167685 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158781 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165040 - revert sequoia - only available in RHEL10 - Related: RHEL-164019 - enable sequoia - Resolves: RHEL-164019 - update to https://github.com/containers/podman/releases/tag/v5.8.1 - fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day] - Resolves: RHEL-157746 - update to https://github.com/containers/podman/releases/tag/v5.8.0 - Related: RHEL-111919 - update to rhel-9.7.z version of podman - Resolves: RHEL-142896 - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel (https://github.com/containers/podman/commit/56f1962) - fixes "Work on RHEL 9.7 packaging" - Related: RHEL-80816 - update to the latest content of https://github.com/containers/podman/tree/v5.6 (https://github.com/containers/podman/commit/d46b857) - fixes "Work on RHEL 9.7 packaging" - Related: RHEL-80816 - bump to upstream commit a476c2b2 fixing CVE-2026-39835 CVE-2026-39829 CVE-2026-39832 CVE-2026-42508 CVE-2026-27136 CVE-2026-25681 CVE-2026-57231 and podman-remote save regression - Rebuild for CVE-2026-32283 - Resolves: RHEL-167685 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158781 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165040 - revert sequoia - only available in RHEL10 - Related: RHEL-164019 - enable sequoia - Resolves: RHEL-164019 - update to https://github.com/containers/podman/releases/tag/v5.8.1 - fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day] - Resolves: RHEL-157746 - update to https://github.com/containers/podman/releases/tag/v5.8.0 - Related: RHEL-111919 - update to rhel-9.7.z version of podman - Resolves: RHEL-142896 - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel (https://github.com/containers/podman/commit/56f1962) - fixes "Work on RHEL 9.7 packaging" - Related: RHEL-80816 - rebuild for CVE-2026-39822 - Resolves: RHEL-193646 - bump to upstream commit a476c2b2 fixing CVE-2026-39835 CVE-2026-39829 CVE-2026-39832 CVE-2026-42508 CVE-2026-27136 CVE-2026-25681 CVE-2026-57231 and podman-remote save regression - Rebuild for CVE-2026-32283 - Resolves: RHEL-167685 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158781 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165040 - revert sequoia - only available in RHEL10 - Related: RHEL-164019 - enable sequoia - Resolves: RHEL-164019 - update to https://github.com/containers/podman/releases/tag/v5.8.1 - fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day] - Resolves: RHEL-157746 - update to https://github.com/containers/podman/releases/tag/v5.8.0 - Related: RHEL-111919 - update to rhel-9.7.z version of podman - Resolves: RHEL-142896 - vendor in mirror fallback for container image pulls - Resolves: RHEL-242409 - rebuild for CVE-2026-39822 - Resolves: RHEL-193646 - bump to upstream commit a476c2b2 fixing CVE-2026-39835 CVE-2026-39829 CVE-2026-39832 CVE-2026-42508 CVE-2026-27136 CVE-2026-25681 CVE-2026-57231 and podman-remote save regression - Rebuild for CVE-2026-32283 - Resolves: RHEL-167685 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158781 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165040 - revert sequoia - only available in RHEL10 - Related: RHEL-164019 - enable sequoia - Resolves: RHEL-164019 - update to https://github.com/containers/podman/releases/tag/v5.8.1 - fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day] - Resolves: RHEL-157746 - update to https://github.com/containers/podman/releases/tag/v5.8.0 - Related: RHEL-111919 - update to the latest upstream commit 66780e9b - rebuild with golang-1.26.7 fixing CVE-2026-33818 CVE-2026-56860 CVE-2026-56859 CVE-2026-56858 CVE-2026-56862 CVE-2026-56853 CVE-2026-19730 CVE-2026-39830 CVE-2026-17106 - Resolves: RHEL-241579 - Resolves: RHEL-241720 - Resolves: RHEL-241983 - Resolves: RHEL-242126 - Resolves: RHEL-242282 - Resolves: RHEL-240089 - Resolves: RHEL-186270 - Resolves: RHEL-241172 - Resolves: RHEL-252466 - vendor in mirror fallback for container image pulls - Resolves: RHEL-242409 - rebuild for CVE-2026-39822 - Resolves: RHEL-193646 - bump to upstream commit a476c2b2 fixing CVE-2026-39835 CVE-2026-39829 CVE-2026-39832 CVE-2026-42508 CVE-2026-27136 CVE-2026-25681 CVE-2026-57231 and podman-remote save regression - Rebuild for CVE-2026-32283 - Resolves: RHEL-167685 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158781 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165040 - revert sequoia - only available in RHEL10 - Related: RHEL-164019 - enable sequoia - Resolves: RHEL-164019 - update to https://github.com/containers/podman/releases/tag/v5.8.1 - fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day] - Resolves: RHEL-157746 - Rebuild for CVE-2026-78667 and CVE-2026-111943 - Resolves: RHEL-279015 - Resolves: RHEL-287513 - update to the latest upstream commit 66780e9b - rebuild with golang-1.26.7 fixing CVE-2026-33818 CVE-2026-56860 CVE-2026-56859 CVE-2026-56858 CVE-2026-56862 CVE-2026-56853 CVE-2026-19730 CVE-2026-39830 CVE-2026-17106 - Resolves: RHEL-241579 - Resolves: RHEL-241720 - Resolves: RHEL-241983 - Resolves: RHEL-242126 - Resolves: RHEL-242282 - Resolves: RHEL-240089 - Resolves: RHEL-186270 - Resolves: RHEL-241172 - Resolves: RHEL-252466 - vendor in mirror fallback for container image pulls - Resolves: RHEL-242409 - rebuild for CVE-2026-39822 - Resolves: RHEL-193646 - bump to upstream commit a476c2b2 fixing CVE-2026-39835 CVE-2026-39829 CVE-2026-39832 CVE-2026-42508 CVE-2026-27136 CVE-2026-25681 CVE-2026-57231 and podman-remote save regression - Rebuild for CVE-2026-32283 - Resolves: RHEL-167685 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158781 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165040 - revert sequoia - only available in RHEL10 - Related: RHEL-164019 - enable sequoia - Resolves: RHEL-164019 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165040 - revert sequoia - only available in RHEL10 - Related: RHEL-164019 - enable sequoia - Resolves: RHEL-164019 - update to https://github.com/containers/podman/releases/tag/v5.8.1 - fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day] - Resolves: RHEL-157746 - update to https://github.com/containers/podman/releases/tag/v5.8.0 - Related: RHEL-111919 - update to rhel-9.7.z version of podman - Resolves: RHEL-142896 - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel (https://github.com/containers/podman/commit/56f1962) - fixes "Work on RHEL 9.7 packaging" - Related: RHEL-80816 - update to the latest content of https://github.com/containers/podman/tree/v5.6 (https://github.com/containers/podman/commit/d46b857) - fixes "Work on RHEL 9.7 packaging" - Related: RHEL-80816 - update to https://github.com/containers/podman/releases/tag/v5.6.0 - Related: RHEL-80816 - update to https://github.com/containers/podman/releases/tag/v5.5.2 - Related: RHEL-80816 - Rebuild for CVE-2026-32283 - Resolves: RHEL-167685 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158781 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165040 - revert sequoia - only available in RHEL10 - Related: RHEL-164019 - enable sequoia - Resolves: RHEL-164019 - update to https://github.com/containers/podman/releases/tag/v5.8.1 - fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day] - Resolves: RHEL-157746 - update to https://github.com/containers/podman/releases/tag/v5.8.0 - Related: RHEL-111919 - update to rhel-9.7.z version of podman - Resolves: RHEL-142896 - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel (https://github.com/containers/podman/commit/56f1962) - fixes "Work on RHEL 9.7 packaging" - Related: RHEL-80816 - update to the latest content of https://github.com/containers/podman/tree/v5.6 (https://github.com/containers/podman/commit/d46b857) - fixes "Work on RHEL 9.7 packaging" - Related: RHEL-80816 - bump to upstream commit a476c2b2 fixing CVE-2026-39835 CVE-2026-39829 CVE-2026-39832 CVE-2026-42508 CVE-2026-27136 CVE-2026-25681 CVE-2026-57231 and podman-remote save regression - Rebuild for CVE-2026-32283 - Resolves: RHEL-167685 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158781 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165040 - revert sequoia - only available in RHEL10 - Related: RHEL-164019 - enable sequoia - Resolves: RHEL-164019 - update to https://github.com/containers/podman/releases/tag/v5.8.1 - fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day] - Resolves: RHEL-157746 - update to https://github.com/containers/podman/releases/tag/v5.8.0 - Related: RHEL-111919 - update to rhel-9.7.z version of podman - Resolves: RHEL-142896 - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel (https://github.com/containers/podman/commit/56f1962) - fixes "Work on RHEL 9.7 packaging" - Related: RHEL-80816 - rebuild for CVE-2026-39822 - Resolves: RHEL-193646 - bump to upstream commit a476c2b2 fixing CVE-2026-39835 CVE-2026-39829 CVE-2026-39832 CVE-2026-42508 CVE-2026-27136 CVE-2026-25681 CVE-2026-57231 and podman-remote save regression - Rebuild for CVE-2026-32283 - Resolves: RHEL-167685 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158781 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165040 - revert sequoia - only available in RHEL10 - Related: RHEL-164019 - enable sequoia - Resolves: RHEL-164019 - update to https://github.com/containers/podman/releases/tag/v5.8.1 - fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day] - Resolves: RHEL-157746 - update to https://github.com/containers/podman/releases/tag/v5.8.0 - Related: RHEL-111919 - update to rhel-9.7.z version of podman - Resolves: RHEL-142896 - vendor in mirror fallback for container image pulls - Resolves: RHEL-242409 - rebuild for CVE-2026-39822 - Resolves: RHEL-193646 - bump to upstream commit a476c2b2 fixing CVE-2026-39835 CVE-2026-39829 CVE-2026-39832 CVE-2026-42508 CVE-2026-27136 CVE-2026-25681 CVE-2026-57231 and podman-remote save regression - Rebuild for CVE-2026-32283 - Resolves: RHEL-167685 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158781 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165040 - revert sequoia - only available in RHEL10 - Related: RHEL-164019 - enable sequoia - Resolves: RHEL-164019 - update to https://github.com/containers/podman/releases/tag/v5.8.1 - fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day] - Resolves: RHEL-157746 - update to https://github.com/containers/podman/releases/tag/v5.8.0 - Related: RHEL-111919 - update to the latest upstream commit 66780e9b - rebuild with golang-1.26.7 fixing CVE-2026-33818 CVE-2026-56860 CVE-2026-56859 CVE-2026-56858 CVE-2026-56862 CVE-2026-56853 CVE-2026-19730 CVE-2026-39830 CVE-2026-17106 - Resolves: RHEL-241579 - Resolves: RHEL-241720 - Resolves: RHEL-241983 - Resolves: RHEL-242126 - Resolves: RHEL-242282 - Resolves: RHEL-240089 - Resolves: RHEL-186270 - Resolves: RHEL-241172 - Resolves: RHEL-252466 - vendor in mirror fallback for container image pulls - Resolves: RHEL-242409 - rebuild for CVE-2026-39822 - Resolves: RHEL-193646 - bump to upstream commit a476c2b2 fixing CVE-2026-39835 CVE-2026-39829 CVE-2026-39832 CVE-2026-42508 CVE-2026-27136 CVE-2026-25681 CVE-2026-57231 and podman-remote save regression - Rebuild for CVE-2026-32283 - Resolves: RHEL-167685 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158781 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165040 - revert sequoia - only available in RHEL10 - Related: RHEL-164019 - enable sequoia - Resolves: RHEL-164019 - update to https://github.com/containers/podman/releases/tag/v5.8.1 - fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day] - Resolves: RHEL-157746 - Rebuild for CVE-2026-78667 and CVE-2026-111943 - Resolves: RHEL-279015 - Resolves: RHEL-287513 - update to the latest upstream commit 66780e9b - rebuild with golang-1.26.7 fixing CVE-2026-33818 CVE-2026-56860 CVE-2026-56859 CVE-2026-56858 CVE-2026-56862 CVE-2026-56853 CVE-2026-19730 CVE-2026-39830 CVE-2026-17106 - Resolves: RHEL-241579 - Resolves: RHEL-241720 - Resolves: RHEL-241983 - Resolves: RHEL-242126 - Resolves: RHEL-242282 - Resolves: RHEL-240089 - Resolves: RHEL-186270 - Resolves: RHEL-241172 - Resolves: RHEL-252466 - vendor in mirror fallback for container image pulls - Resolves: RHEL-242409 - rebuild for CVE-2026-39822 - Resolves: RHEL-193646 - bump to upstream commit a476c2b2 fixing CVE-2026-39835 CVE-2026-39829 CVE-2026-39832 CVE-2026-42508 CVE-2026-27136 CVE-2026-25681 CVE-2026-57231 and podman-remote save regression - Rebuild for CVE-2026-32283 - Resolves: RHEL-167685 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158781 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165040 - revert sequoia - only available in RHEL10 - Related: RHEL-164019 - enable sequoia - Resolves: RHEL-164019 - sandbox/seunshare: Replace system() with execv() to prevent shell injection - seunshare: fix the frail tmpdir cleanup - semanage: Reset active value when deleting boolean customizations - restorecond: always add '\0' to ut_user - semanage: Allow modifying records on "add" - semanage: Do not sort local fcontext definitions - sandbox/seunshare: Replace system() with execv() to prevent shell injection - seunshare: fix the frail tmpdir cleanup - semanage: Reset active value when deleting boolean customizations - restorecond: always add '\0' to ut_user - semanage: Allow modifying records on "add" - semanage: Do not sort local fcontext definitions - sandbox/seunshare: Replace system() with execv() to prevent shell injection - seunshare: fix the frail tmpdir cleanup - semanage: Reset active value when deleting boolean customizations - restorecond: always add '\0' to ut_user - semanage: Allow modifying records on "add" - semanage: Do not sort local fcontext definitions - sandbox/seunshare: Replace system() with execv() to prevent shell injection - seunshare: fix the frail tmpdir cleanup - semanage: Reset active value when deleting boolean customizations - restorecond: always add '\0' to ut_user - semanage: Allow modifying records on "add" - semanage: Do not sort local fcontext definitions - sandbox/seunshare: Replace system() with execv() to prevent shell injection - seunshare: fix the frail tmpdir cleanup - semanage: Reset active value when deleting boolean customizations - restorecond: always add '\0' to ut_user - semanage: Allow modifying records on "add" - semanage: Do not sort local fcontext definitions - aarch64: test failure with undefined symbol: __aarch64_ldadd4_acq_rel - Resolves: RHEL-98662 - session-monitor: watch sessions only - PolkitPermission: react on really changed sessions - allow polkit-pkla-compat to be uninstalled if no .pkla rules - Resolves: RHEL-39063 - pkttyagent: EOF in passwd results in coredump - Resolves: RHEL-5772 - aarch64: test failure with undefined symbol: __aarch64_ldadd4_acq_rel - Resolves: RHEL-98662 - session-monitor: watch sessions only - PolkitPermission: react on really changed sessions - allow polkit-pkla-compat to be uninstalled if no .pkla rules - Resolves: RHEL-39063 - pkttyagent: EOF in passwd results in coredump - Resolves: RHEL-5772 - Fix pdfsig's man page - Resolves: RHEL-126070 - Bump release for build inheritance - Resolves: RHEL-131792 - Check bitmap in combine() - Resolves: RHEL-131795, RHEL-131792 - Fix crash in broken documents when using -dests - Resolves: RHEL-44333 - Fix a crash during signing - Resolves: RHEL-31934 - Fix integer overflow in tilingPatternFill (CVE-2026-10118) - Resolves: RHEL-180580 - Fix pdfsig's man page - Resolves: RHEL-126070 - Bump release for build inheritance - Resolves: RHEL-131792 - Check bitmap in combine() - Resolves: RHEL-131795, RHEL-131792 - Fix crash in broken documents when using -dests - Resolves: RHEL-44333 - Fix pdfsig's man page - Resolves: RHEL-126070 - Bump release for build inheritance - Resolves: RHEL-131792 - Check bitmap in combine() - Resolves: RHEL-131795, RHEL-131792 - Fix crash in broken documents when using -dests - Resolves: RHEL-44333 - Fix a crash during signing - Resolves: RHEL-31934 - Fix integer overflow in tilingPatternFill (CVE-2026-10118) - Resolves: RHEL-180580 - Fix pdfsig's man page - Resolves: RHEL-126070 - Bump release for build inheritance - Resolves: RHEL-131792 - Check bitmap in combine() - Resolves: RHEL-131795, RHEL-131792 - Fix crash in broken documents when using -dests - Resolves: RHEL-44333 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fix pdfsig's man page - Resolves: RHEL-126070 - Bump release for build inheritance - Resolves: RHEL-131792 - Check bitmap in combine() - Resolves: RHEL-131795, RHEL-131792 - Fix crash in broken documents when using -dests - Resolves: RHEL-44333 - Fix a crash during signing - Resolves: RHEL-31934 - Fix integer overflow in tilingPatternFill (CVE-2026-10118) - Resolves: RHEL-180580 - Fix pdfsig's man page - Resolves: RHEL-126070 - Bump release for build inheritance - Resolves: RHEL-131792 - Check bitmap in combine() - Resolves: RHEL-131795, RHEL-131792 - Fix crash in broken documents when using -dests - Resolves: RHEL-44333 - Fix pdfsig's man page - Resolves: RHEL-126070 - Bump release for build inheritance - Resolves: RHEL-131792 - Check bitmap in combine() - Resolves: RHEL-131795, RHEL-131792 - Fix crash in broken documents when using -dests - Resolves: RHEL-44333 - Fix a crash during signing - Resolves: RHEL-31934 - Fix integer overflow in tilingPatternFill (CVE-2026-10118) - Resolves: RHEL-180580 - Fix pdfsig's man page - Resolves: RHEL-126070 - Bump release for build inheritance - Resolves: RHEL-131792 - Check bitmap in combine() - Resolves: RHEL-131795, RHEL-131792 - Fix crash in broken documents when using -dests - Resolves: RHEL-44333 - Fix pdfsig's man page - Resolves: RHEL-126070 - Bump release for build inheritance - Resolves: RHEL-131792 - Check bitmap in combine() - Resolves: RHEL-131795, RHEL-131792 - Fix crash in broken documents when using -dests - Resolves: RHEL-44333 - Fix a crash during signing - Resolves: RHEL-31934 - Fix integer overflow in tilingPatternFill (CVE-2026-10118) - Resolves: RHEL-180580 - Fix pdfsig's man page - Resolves: RHEL-126070 - Bump release for build inheritance - Resolves: RHEL-131792 - Check bitmap in combine() - Resolves: RHEL-131795, RHEL-131792 - Fix crash in broken documents when using -dests - Resolves: RHEL-44333 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add gating.yaml - Address important covscan issues (#1938846) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Conditionalize static subpackage during build-time - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to popt 1.18 final (no changes from rc1) - Rebase to popt 1.18-rc1 - Update URLs to the new upstream - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning. RHEL-128018 - New version Resolves: RHEL-20023 - Dropped upstreamed patches - Fix for CVE-2026-43964: buffer over-read via malformed enhanced status code. Resolves: RHEL-176550 - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning. RHEL-128018 - New version Resolves: RHEL-20023 - Dropped upstreamed patches - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning. RHEL-128018 - New version Resolves: RHEL-20023 - Dropped upstreamed patches - Fix for CVE-2026-43964: buffer over-read via malformed enhanced status code. Resolves: RHEL-176550 - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning. RHEL-128018 - New version Resolves: RHEL-20023 - Dropped upstreamed patches - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning. RHEL-128018 - New version Resolves: RHEL-20023 - Dropped upstreamed patches - Fix for CVE-2026-43964: buffer over-read via malformed enhanced status code. Resolves: RHEL-176550 - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning. RHEL-128018 - New version Resolves: RHEL-20023 - Dropped upstreamed patches - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning. RHEL-128018 - New version Resolves: RHEL-20023 - Dropped upstreamed patches - Fix for CVE-2026-43964: buffer over-read via malformed enhanced status code. Resolves: RHEL-176550 - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning. RHEL-128018 - New version Resolves: RHEL-20023 - Dropped upstreamed patches - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning. RHEL-128018 - New version Resolves: RHEL-20023 - Dropped upstreamed patches - Fix for CVE-2026-43964: buffer over-read via malformed enhanced status code. Resolves: RHEL-176550 - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning. RHEL-128018 - New version Resolves: RHEL-20023 - Dropped upstreamed patches - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning. RHEL-128018 - New version Resolves: RHEL-20023 - Dropped upstreamed patches - Fix for CVE-2026-43964: buffer over-read via malformed enhanced status code. Resolves: RHEL-176550 - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning. RHEL-128018 - New version Resolves: RHEL-20023 - Dropped upstreamed patches - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning. RHEL-128018 - New version Resolves: RHEL-20023 - Dropped upstreamed patches - Fix for CVE-2026-43964: buffer over-read via malformed enhanced status code. Resolves: RHEL-176550 - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning. RHEL-128018 - New version Resolves: RHEL-20023 - Dropped upstreamed patches - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning. RHEL-128018 - New version Resolves: RHEL-20023 - Dropped upstreamed patches - Fix for CVE-2026-43964: buffer over-read via malformed enhanced status code. Resolves: RHEL-176550 - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning. RHEL-128018 - New version Resolves: RHEL-20023 - Dropped upstreamed patches - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning. RHEL-128018 - New version Resolves: RHEL-20023 - Dropped upstreamed patches - Fix for CVE-2026-43964: buffer over-read via malformed enhanced status code. Resolves: RHEL-176550 - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning. RHEL-128018 - New version Resolves: RHEL-20023 - Dropped upstreamed patches - Rebuild for adding tmt metadata - Avoid perl(Pg) dependency on RHEL, from the Fedora spec change from yselkowi@redhat.com - Rebuild (gdal) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to 3.5.3 - Rebuild (SFCGAL) - Update to 3.5.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 3.5.1 - Rebuild (GDAL) - Fix CVE-2026-73515 - Fix CVE-2026-73515 - Rebuild for adding tmt metadata - Avoid perl(Pg) dependency on RHEL, from the Fedora spec change from yselkowi@redhat.com - Rebuild (gdal) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to 3.5.3 - Rebuild (SFCGAL) - Update to 3.5.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 3.6.1 - Initial import for postgresql18 - Avoid perl(Pg) dependency on RHEL - Rebuild (gdal) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to 3.5.3 - Rebuild (SFCGAL) - Update to 3.5.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 3.5.1 - Rebuild (GDAL) - Rebuild (gdal) - Fix backport regression in ST_FromFlatGeobufToTable (CVE-2026-73515 patch) - Backported a patch to fix a security vulnerability (CVE-2026-73515) - Update to 3.6.1 - Initial import for postgresql18 - Avoid perl(Pg) dependency on RHEL - Rebuild (gdal) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to 3.5.3 - Rebuild (SFCGAL) - Update to 3.5.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 3.5.1 - Rebuild for adding tmt metadata - Avoid perl(Pg) dependency on RHEL, from the Fedora spec change from yselkowi@redhat.com - Rebuild (gdal) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to 3.5.3 - Rebuild (SFCGAL) - Update to 3.5.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 3.5.1 - Rebuild (GDAL) - Fix CVE-2026-73515 - Fix CVE-2026-73515 - Rebuild for adding tmt metadata - Avoid perl(Pg) dependency on RHEL, from the Fedora spec change from yselkowi@redhat.com - Rebuild (gdal) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to 3.5.3 - Rebuild (SFCGAL) - Update to 3.5.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 3.6.1 - Initial import for postgresql18 - Avoid perl(Pg) dependency on RHEL - Rebuild (gdal) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to 3.5.3 - Rebuild (SFCGAL) - Update to 3.5.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 3.5.1 - Rebuild (GDAL) - Rebuild (gdal) - Fix backport regression in ST_FromFlatGeobufToTable (CVE-2026-73515 patch) - Backported a patch to fix a security vulnerability (CVE-2026-73515) - Update to 3.6.1 - Initial import for postgresql18 - Avoid perl(Pg) dependency on RHEL - Rebuild (gdal) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to 3.5.3 - Rebuild (SFCGAL) - Update to 3.5.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 3.5.1 - Rebuild for adding tmt metadata - Avoid perl(Pg) dependency on RHEL, from the Fedora spec change from yselkowi@redhat.com - Rebuild (gdal) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to 3.5.3 - Rebuild (SFCGAL) - Update to 3.5.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 3.5.1 - Rebuild (GDAL) - Fix CVE-2026-73515 - Fix CVE-2026-73515 - Rebuild for adding tmt metadata - Avoid perl(Pg) dependency on RHEL, from the Fedora spec change from yselkowi@redhat.com - Rebuild (gdal) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to 3.5.3 - Rebuild (SFCGAL) - Update to 3.5.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 3.6.1 - Initial import for postgresql18 - Avoid perl(Pg) dependency on RHEL - Rebuild (gdal) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to 3.5.3 - Rebuild (SFCGAL) - Update to 3.5.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 3.5.1 - Rebuild (GDAL) - Rebuild (gdal) - Fix backport regression in ST_FromFlatGeobufToTable (CVE-2026-73515 patch) - Backported a patch to fix a security vulnerability (CVE-2026-73515) - Update to 3.6.1 - Initial import for postgresql18 - Avoid perl(Pg) dependency on RHEL - Rebuild (gdal) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to 3.5.3 - Rebuild (SFCGAL) - Update to 3.5.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 3.5.1 - Rebuild for adding tmt metadata - Avoid perl(Pg) dependency on RHEL, from the Fedora spec change from yselkowi@redhat.com - Rebuild (gdal) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to 3.5.3 - Rebuild (SFCGAL) - Update to 3.5.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 3.5.1 - Rebuild (GDAL) - Fix CVE-2026-73515 - Fix CVE-2026-73515 - Rebuild for adding tmt metadata - Avoid perl(Pg) dependency on RHEL, from the Fedora spec change from yselkowi@redhat.com - Rebuild (gdal) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to 3.5.3 - Rebuild (SFCGAL) - Update to 3.5.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 3.6.1 - Initial import for postgresql18 - Avoid perl(Pg) dependency on RHEL - Rebuild (gdal) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to 3.5.3 - Rebuild (SFCGAL) - Update to 3.5.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 3.5.1 - Rebuild (GDAL) - Rebuild (gdal) - Fix backport regression in ST_FromFlatGeobufToTable (CVE-2026-73515 patch) - Backported a patch to fix a security vulnerability (CVE-2026-73515) - Update to 3.6.1 - Initial import for postgresql18 - Avoid perl(Pg) dependency on RHEL - Rebuild (gdal) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to 3.5.3 - Rebuild (SFCGAL) - Update to 3.5.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 3.5.1 - Rebuild for adding tmt metadata - Avoid perl(Pg) dependency on RHEL, from the Fedora spec change from yselkowi@redhat.com - Rebuild (gdal) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to 3.5.3 - Rebuild (SFCGAL) - Update to 3.5.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 3.5.1 - Rebuild (GDAL) - Fix CVE-2026-73515 - Fix CVE-2026-73515 - Rebuild for adding tmt metadata - Avoid perl(Pg) dependency on RHEL, from the Fedora spec change from yselkowi@redhat.com - Rebuild (gdal) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to 3.5.3 - Rebuild (SFCGAL) - Update to 3.5.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 3.6.1 - Initial import for postgresql18 - Avoid perl(Pg) dependency on RHEL - Rebuild (gdal) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to 3.5.3 - Rebuild (SFCGAL) - Update to 3.5.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 3.5.1 - Rebuild (GDAL) - Rebuild (gdal) - Fix backport regression in ST_FromFlatGeobufToTable (CVE-2026-73515 patch) - Backported a patch to fix a security vulnerability (CVE-2026-73515) - Update to 3.6.1 - Initial import for postgresql18 - Avoid perl(Pg) dependency on RHEL - Rebuild (gdal) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to 3.5.3 - Rebuild (SFCGAL) - Update to 3.5.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 3.5.1 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Build jit based on what postgresql server does Related: #1933048 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to new release 1.4.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for protobuf 3.14 - Rebuilt for protobuf 3.13 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for protobuf 3.12 - Update to 1.1.0.Final - Iitial import for postgresql 15 stream - Related: #2128410 - Initial import for postgresql 16 stream - Related: RHEL-3635 - Update to 3.3.1.Final - Initial import for postgresql18 - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Define tmpfiles.d to enable ostree and bootc support - Update to 13.22 - Update to 13.18 - Backport fix for CVE-2026-6478 from PostgreSQL 14.23 - Backport fixes for CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 - Resolves: RHEL-179799 - Resolves: RHEL-181866 - Resolves: RHEL-181950 - Resolves: RHEL-181964 - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Define tmpfiles.d to enable ostree and bootc support - Update to 13.22 - Update to 13.18 - Apply patch for CVE-2026-6479 in prep section - Resolves: CVE-2026-6479 - Backport fix for CVE-2026-6479 from PostgreSQL 14.23 (SSL/GSS init causes denial of service via uncontrolled recursion) - Resolves: CVE-2026-6479 - Backport fix for CVE-2026-6478 from PostgreSQL 14.23 - Backport fixes for CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 - Resolves: RHEL-179799 - Resolves: RHEL-181866 - Resolves: RHEL-181950 - Resolves: RHEL-181964 - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Define tmpfiles.d to enable ostree and bootc support - Update to 13.22 - Update to 13.18 - Fix CVE-2026-14662 - Fix CVE-2026-14664 - Fix CVE-2026-14668 - Fix CVE-2026-14669 - Fix CVE-2026-14670 - Fix CVE-2026-14671 - Fix CVE-2026-14677 - Fix CVE-2026-14679 - Fix CVE-2026-14680 - Fix CVE-2026-15742 - Fix CVE-2026-16239 - Fix CVE-2026-18408 - Fix CVE-2026-19385 - Fix CVE-2026-6464 - Fix CVE-2026-6471 - Resolves: RHEL-248127 - Resolves: RHEL-248130 - Resolves: RHEL-248131 - Resolves: RHEL-248748 - Resolves: RHEL-249060 - Resolves: RHEL-249109 - Resolves: RHEL-249172 - Resolves: RHEL-249204 - Resolves: RHEL-249672 - Resolves: RHEL-249796 - Resolves: RHEL-250158 - Resolves: RHEL-250772 - Resolves: RHEL-250857 - Resolves: RHEL-250907 - Resolves: RHEL-251008 - Resolves: RHEL-251380 - Resolves: RHEL-251426 - Apply patch for CVE-2026-6479 in prep section - Resolves: CVE-2026-6479 - Backport fix for CVE-2026-6479 from PostgreSQL 14.23 (SSL/GSS init causes denial of service via uncontrolled recursion) - Resolves: CVE-2026-6479 - Backport fix for CVE-2026-6478 from PostgreSQL 14.23 - Backport fixes for CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 - Resolves: RHEL-179799 - Resolves: RHEL-181866 - Resolves: RHEL-181950 - Resolves: RHEL-181964 - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Define tmpfiles.d to enable ostree and bootc support - Update to 13.22 - Update to 13.18 - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration and generate tmpfiles.d dynamically - Resolves: RHEL-133896 - Update to 15.15 - Resolves: RHEL-128813 (CVE-2025-12818) - Update to 15.14 - Update to 15.12 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Fix build on 15.8 - Update to 15.8 - Remove /var/run/postgresql - Related: RHEL-51271 - Enable lz4 and zstd support - Update to 15.18 - Fix CVE-2026-6478 - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration and generate tmpfiles.d dynamically - Update to 15.15 - Resolves: RHEL-128816 (CVE-2025-12818) - Update to 15.12 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Fix build on 15.8 - Update to 15.8 - Remove /var/run/postgresql - Related: RHEL-51271 - Enable lz4 and zstd support - Update to 15.19 - Update to 15.18 - Fix CVE-2026-6478 - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration and generate tmpfiles.d dynamically - Update to 15.15 - Resolves: RHEL-128816 (CVE-2025-12818) - Update to 15.12 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149371 RHEL-149404 RHEL-149338 - Update to 16.11 - Resolves: RHEL-128820 (CVE-2025-12818) - Update to 16.10 - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 16.4 - Fix CVE-2024-7348 - Update to 16.14 - Fix CVE-2026-6478 - Update to 16.13 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration for PostgreSQL 16 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Fix build on 16.4 - Update to 16.4 - Remove /var/run/postgresql - Related: RHEL-51275 - Enable lz4 and zstd support - Update to 16.15 - Update to 16.14 - Fix CVE-2026-6478 - Update to 16.13 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration for PostgreSQL 16 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 18.3 - Enable pltcl - bash-profile fix for imagemode - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - Update to 18.1 - Initial import of 18.0 - Enable pltcl subpackage - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Update to 18.1 - Initial import of 18.0 - Update to 18.4 - Fix CVE-2026-6478 - Enable pltcl subpackage - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Update to 18.1 - Initial import of 18.0 - Update to 18.6 - Update to 18.4 - Fix CVE-2026-6478 - Enable pltcl subpackage - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Update to 18.1 - Initial import of 18.0 - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Define tmpfiles.d to enable ostree and bootc support - Update to 13.22 - Update to 13.18 - Backport fix for CVE-2026-6478 from PostgreSQL 14.23 - Backport fixes for CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 - Resolves: RHEL-179799 - Resolves: RHEL-181866 - Resolves: RHEL-181950 - Resolves: RHEL-181964 - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Define tmpfiles.d to enable ostree and bootc support - Update to 13.22 - Update to 13.18 - Apply patch for CVE-2026-6479 in prep section - Resolves: CVE-2026-6479 - Backport fix for CVE-2026-6479 from PostgreSQL 14.23 (SSL/GSS init causes denial of service via uncontrolled recursion) - Resolves: CVE-2026-6479 - Backport fix for CVE-2026-6478 from PostgreSQL 14.23 - Backport fixes for CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 - Resolves: RHEL-179799 - Resolves: RHEL-181866 - Resolves: RHEL-181950 - Resolves: RHEL-181964 - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Define tmpfiles.d to enable ostree and bootc support - Update to 13.22 - Update to 13.18 - Fix CVE-2026-14662 - Fix CVE-2026-14664 - Fix CVE-2026-14668 - Fix CVE-2026-14669 - Fix CVE-2026-14670 - Fix CVE-2026-14671 - Fix CVE-2026-14677 - Fix CVE-2026-14679 - Fix CVE-2026-14680 - Fix CVE-2026-15742 - Fix CVE-2026-16239 - Fix CVE-2026-18408 - Fix CVE-2026-19385 - Fix CVE-2026-6464 - Fix CVE-2026-6471 - Resolves: RHEL-248127 - Resolves: RHEL-248130 - Resolves: RHEL-248131 - Resolves: RHEL-248748 - Resolves: RHEL-249060 - Resolves: RHEL-249109 - Resolves: RHEL-249172 - Resolves: RHEL-249204 - Resolves: RHEL-249672 - Resolves: RHEL-249796 - Resolves: RHEL-250158 - Resolves: RHEL-250772 - Resolves: RHEL-250857 - Resolves: RHEL-250907 - Resolves: RHEL-251008 - Resolves: RHEL-251380 - Resolves: RHEL-251426 - Apply patch for CVE-2026-6479 in prep section - Resolves: CVE-2026-6479 - Backport fix for CVE-2026-6479 from PostgreSQL 14.23 (SSL/GSS init causes denial of service via uncontrolled recursion) - Resolves: CVE-2026-6479 - Backport fix for CVE-2026-6478 from PostgreSQL 14.23 - Backport fixes for CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 - Resolves: RHEL-179799 - Resolves: RHEL-181866 - Resolves: RHEL-181950 - Resolves: RHEL-181964 - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Define tmpfiles.d to enable ostree and bootc support - Update to 13.22 - Update to 13.18 - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration and generate tmpfiles.d dynamically - Resolves: RHEL-133896 - Update to 15.15 - Resolves: RHEL-128813 (CVE-2025-12818) - Update to 15.14 - Update to 15.12 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Fix build on 15.8 - Update to 15.8 - Remove /var/run/postgresql - Related: RHEL-51271 - Enable lz4 and zstd support - Update to 15.18 - Fix CVE-2026-6478 - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration and generate tmpfiles.d dynamically - Update to 15.15 - Resolves: RHEL-128816 (CVE-2025-12818) - Update to 15.12 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Fix build on 15.8 - Update to 15.8 - Remove /var/run/postgresql - Related: RHEL-51271 - Enable lz4 and zstd support - Update to 15.19 - Update to 15.18 - Fix CVE-2026-6478 - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration and generate tmpfiles.d dynamically - Update to 15.15 - Resolves: RHEL-128816 (CVE-2025-12818) - Update to 15.12 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149371 RHEL-149404 RHEL-149338 - Update to 16.11 - Resolves: RHEL-128820 (CVE-2025-12818) - Update to 16.10 - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 16.4 - Fix CVE-2024-7348 - Update to 16.14 - Fix CVE-2026-6478 - Update to 16.13 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration for PostgreSQL 16 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Fix build on 16.4 - Update to 16.4 - Remove /var/run/postgresql - Related: RHEL-51275 - Enable lz4 and zstd support - Update to 16.15 - Update to 16.14 - Fix CVE-2026-6478 - Update to 16.13 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration for PostgreSQL 16 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 18.3 - Enable pltcl - bash-profile fix for imagemode - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - Update to 18.1 - Initial import of 18.0 - Enable pltcl subpackage - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Update to 18.1 - Initial import of 18.0 - Update to 18.4 - Fix CVE-2026-6478 - Enable pltcl subpackage - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Update to 18.1 - Initial import of 18.0 - Update to 18.6 - Update to 18.4 - Fix CVE-2026-6478 - Enable pltcl subpackage - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Update to 18.1 - Initial import of 18.0 - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration and generate tmpfiles.d dynamically - Resolves: RHEL-133896 - Update to 15.15 - Resolves: RHEL-128813 (CVE-2025-12818) - Update to 15.14 - Update to 15.12 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Fix build on 15.8 - Update to 15.8 - Remove /var/run/postgresql - Related: RHEL-51271 - Enable lz4 and zstd support - Update to 15.18 - Fix CVE-2026-6478 - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration and generate tmpfiles.d dynamically - Update to 15.15 - Resolves: RHEL-128816 (CVE-2025-12818) - Update to 15.12 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Fix build on 15.8 - Update to 15.8 - Remove /var/run/postgresql - Related: RHEL-51271 - Enable lz4 and zstd support - Update to 15.19 - Update to 15.18 - Fix CVE-2026-6478 - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration and generate tmpfiles.d dynamically - Update to 15.15 - Resolves: RHEL-128816 (CVE-2025-12818) - Update to 15.12 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149371 RHEL-149404 RHEL-149338 - Update to 16.11 - Resolves: RHEL-128820 (CVE-2025-12818) - Update to 16.10 - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 16.4 - Fix CVE-2024-7348 - Update to 16.14 - Fix CVE-2026-6478 - Update to 16.13 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration for PostgreSQL 16 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Fix build on 16.4 - Update to 16.4 - Remove /var/run/postgresql - Related: RHEL-51275 - Enable lz4 and zstd support - Update to 16.15 - Update to 16.14 - Fix CVE-2026-6478 - Update to 16.13 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration for PostgreSQL 16 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 18.3 - Enable pltcl - bash-profile fix for imagemode - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - Update to 18.1 - Initial import of 18.0 - Enable pltcl subpackage - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Update to 18.1 - Initial import of 18.0 - Update to 18.4 - Fix CVE-2026-6478 - Enable pltcl subpackage - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Update to 18.1 - Initial import of 18.0 - Update to 18.6 - Update to 18.4 - Fix CVE-2026-6478 - Enable pltcl subpackage - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Update to 18.1 - Initial import of 18.0 - Bundle shaded ongres-* dependencies - rebase to 42.2.28 - fix for CVE-2024-1597 - Add tests for CVE-2026-42198 - Fix CVE-2026-42198: limit SCRAM PBKDF2 iterations to prevent DoS - Resolves: RHEL-173489 - Bundle shaded ongres-* dependencies - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - rebuild for libpq ABI fix rhbz#1908268 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebase to upstream release 12.02.0000 - Rebase to upstream release 12.01.0000 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Define tmpfiles.d to enable ostree and bootc support - Update to 13.22 - Update to 13.18 - Backport fix for CVE-2026-6478 from PostgreSQL 14.23 - Backport fixes for CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 - Resolves: RHEL-179799 - Resolves: RHEL-181866 - Resolves: RHEL-181950 - Resolves: RHEL-181964 - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Define tmpfiles.d to enable ostree and bootc support - Update to 13.22 - Update to 13.18 - Apply patch for CVE-2026-6479 in prep section - Resolves: CVE-2026-6479 - Backport fix for CVE-2026-6479 from PostgreSQL 14.23 (SSL/GSS init causes denial of service via uncontrolled recursion) - Resolves: CVE-2026-6479 - Backport fix for CVE-2026-6478 from PostgreSQL 14.23 - Backport fixes for CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 - Resolves: RHEL-179799 - Resolves: RHEL-181866 - Resolves: RHEL-181950 - Resolves: RHEL-181964 - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Define tmpfiles.d to enable ostree and bootc support - Update to 13.22 - Update to 13.18 - Fix CVE-2026-14662 - Fix CVE-2026-14664 - Fix CVE-2026-14668 - Fix CVE-2026-14669 - Fix CVE-2026-14670 - Fix CVE-2026-14671 - Fix CVE-2026-14677 - Fix CVE-2026-14679 - Fix CVE-2026-14680 - Fix CVE-2026-15742 - Fix CVE-2026-16239 - Fix CVE-2026-18408 - Fix CVE-2026-19385 - Fix CVE-2026-6464 - Fix CVE-2026-6471 - Resolves: RHEL-248127 - Resolves: RHEL-248130 - Resolves: RHEL-248131 - Resolves: RHEL-248748 - Resolves: RHEL-249060 - Resolves: RHEL-249109 - Resolves: RHEL-249172 - Resolves: RHEL-249204 - Resolves: RHEL-249672 - Resolves: RHEL-249796 - Resolves: RHEL-250158 - Resolves: RHEL-250772 - Resolves: RHEL-250857 - Resolves: RHEL-250907 - Resolves: RHEL-251008 - Resolves: RHEL-251380 - Resolves: RHEL-251426 - Apply patch for CVE-2026-6479 in prep section - Resolves: CVE-2026-6479 - Backport fix for CVE-2026-6479 from PostgreSQL 14.23 (SSL/GSS init causes denial of service via uncontrolled recursion) - Resolves: CVE-2026-6479 - Backport fix for CVE-2026-6478 from PostgreSQL 14.23 - Backport fixes for CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 - Resolves: RHEL-179799 - Resolves: RHEL-181866 - Resolves: RHEL-181950 - Resolves: RHEL-181964 - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Define tmpfiles.d to enable ostree and bootc support - Update to 13.22 - Update to 13.18 - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration and generate tmpfiles.d dynamically - Resolves: RHEL-133896 - Update to 15.15 - Resolves: RHEL-128813 (CVE-2025-12818) - Update to 15.14 - Update to 15.12 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Fix build on 15.8 - Update to 15.8 - Remove /var/run/postgresql - Related: RHEL-51271 - Enable lz4 and zstd support - Update to 15.18 - Fix CVE-2026-6478 - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration and generate tmpfiles.d dynamically - Update to 15.15 - Resolves: RHEL-128816 (CVE-2025-12818) - Update to 15.12 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Fix build on 15.8 - Update to 15.8 - Remove /var/run/postgresql - Related: RHEL-51271 - Enable lz4 and zstd support - Update to 15.19 - Update to 15.18 - Fix CVE-2026-6478 - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration and generate tmpfiles.d dynamically - Update to 15.15 - Resolves: RHEL-128816 (CVE-2025-12818) - Update to 15.12 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149371 RHEL-149404 RHEL-149338 - Update to 16.11 - Resolves: RHEL-128820 (CVE-2025-12818) - Update to 16.10 - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 16.4 - Fix CVE-2024-7348 - Update to 16.14 - Fix CVE-2026-6478 - Update to 16.13 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration for PostgreSQL 16 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Fix build on 16.4 - Update to 16.4 - Remove /var/run/postgresql - Related: RHEL-51275 - Enable lz4 and zstd support - Update to 16.15 - Update to 16.14 - Fix CVE-2026-6478 - Update to 16.13 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration for PostgreSQL 16 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 18.3 - Enable pltcl - bash-profile fix for imagemode - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - Update to 18.1 - Initial import of 18.0 - Enable pltcl subpackage - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Update to 18.1 - Initial import of 18.0 - Update to 18.4 - Fix CVE-2026-6478 - Enable pltcl subpackage - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Update to 18.1 - Initial import of 18.0 - Update to 18.6 - Update to 18.4 - Fix CVE-2026-6478 - Enable pltcl subpackage - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Update to 18.1 - Initial import of 18.0 - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Define tmpfiles.d to enable ostree and bootc support - Update to 13.22 - Update to 13.18 - Backport fix for CVE-2026-6478 from PostgreSQL 14.23 - Backport fixes for CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 - Resolves: RHEL-179799 - Resolves: RHEL-181866 - Resolves: RHEL-181950 - Resolves: RHEL-181964 - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Define tmpfiles.d to enable ostree and bootc support - Update to 13.22 - Update to 13.18 - Apply patch for CVE-2026-6479 in prep section - Resolves: CVE-2026-6479 - Backport fix for CVE-2026-6479 from PostgreSQL 14.23 (SSL/GSS init causes denial of service via uncontrolled recursion) - Resolves: CVE-2026-6479 - Backport fix for CVE-2026-6478 from PostgreSQL 14.23 - Backport fixes for CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 - Resolves: RHEL-179799 - Resolves: RHEL-181866 - Resolves: RHEL-181950 - Resolves: RHEL-181964 - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Define tmpfiles.d to enable ostree and bootc support - Update to 13.22 - Update to 13.18 - Fix CVE-2026-14662 - Fix CVE-2026-14664 - Fix CVE-2026-14668 - Fix CVE-2026-14669 - Fix CVE-2026-14670 - Fix CVE-2026-14671 - Fix CVE-2026-14677 - Fix CVE-2026-14679 - Fix CVE-2026-14680 - Fix CVE-2026-15742 - Fix CVE-2026-16239 - Fix CVE-2026-18408 - Fix CVE-2026-19385 - Fix CVE-2026-6464 - Fix CVE-2026-6471 - Resolves: RHEL-248127 - Resolves: RHEL-248130 - Resolves: RHEL-248131 - Resolves: RHEL-248748 - Resolves: RHEL-249060 - Resolves: RHEL-249109 - Resolves: RHEL-249172 - Resolves: RHEL-249204 - Resolves: RHEL-249672 - Resolves: RHEL-249796 - Resolves: RHEL-250158 - Resolves: RHEL-250772 - Resolves: RHEL-250857 - Resolves: RHEL-250907 - Resolves: RHEL-251008 - Resolves: RHEL-251380 - Resolves: RHEL-251426 - Apply patch for CVE-2026-6479 in prep section - Resolves: CVE-2026-6479 - Backport fix for CVE-2026-6479 from PostgreSQL 14.23 (SSL/GSS init causes denial of service via uncontrolled recursion) - Resolves: CVE-2026-6479 - Backport fix for CVE-2026-6478 from PostgreSQL 14.23 - Backport fixes for CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 - Resolves: RHEL-179799 - Resolves: RHEL-181866 - Resolves: RHEL-181950 - Resolves: RHEL-181964 - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Define tmpfiles.d to enable ostree and bootc support - Update to 13.22 - Update to 13.18 - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration and generate tmpfiles.d dynamically - Resolves: RHEL-133896 - Update to 15.15 - Resolves: RHEL-128813 (CVE-2025-12818) - Update to 15.14 - Update to 15.12 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Fix build on 15.8 - Update to 15.8 - Remove /var/run/postgresql - Related: RHEL-51271 - Enable lz4 and zstd support - Update to 15.18 - Fix CVE-2026-6478 - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration and generate tmpfiles.d dynamically - Update to 15.15 - Resolves: RHEL-128816 (CVE-2025-12818) - Update to 15.12 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Fix build on 15.8 - Update to 15.8 - Remove /var/run/postgresql - Related: RHEL-51271 - Enable lz4 and zstd support - Update to 15.19 - Update to 15.18 - Fix CVE-2026-6478 - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration and generate tmpfiles.d dynamically - Update to 15.15 - Resolves: RHEL-128816 (CVE-2025-12818) - Update to 15.12 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149371 RHEL-149404 RHEL-149338 - Update to 16.11 - Resolves: RHEL-128820 (CVE-2025-12818) - Update to 16.10 - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 16.4 - Fix CVE-2024-7348 - Update to 16.14 - Fix CVE-2026-6478 - Update to 16.13 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration for PostgreSQL 16 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Fix build on 16.4 - Update to 16.4 - Remove /var/run/postgresql - Related: RHEL-51275 - Enable lz4 and zstd support - Update to 16.15 - Update to 16.14 - Fix CVE-2026-6478 - Update to 16.13 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration for PostgreSQL 16 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 18.3 - Enable pltcl - bash-profile fix for imagemode - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - Update to 18.1 - Initial import of 18.0 - Enable pltcl subpackage - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Update to 18.1 - Initial import of 18.0 - Update to 18.4 - Fix CVE-2026-6478 - Enable pltcl subpackage - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Update to 18.1 - Initial import of 18.0 - Update to 18.6 - Update to 18.4 - Fix CVE-2026-6478 - Enable pltcl subpackage - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Update to 18.1 - Initial import of 18.0 - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Define tmpfiles.d to enable ostree and bootc support - Update to 13.22 - Update to 13.18 - Backport fix for CVE-2026-6478 from PostgreSQL 14.23 - Backport fixes for CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 - Resolves: RHEL-179799 - Resolves: RHEL-181866 - Resolves: RHEL-181950 - Resolves: RHEL-181964 - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Define tmpfiles.d to enable ostree and bootc support - Update to 13.22 - Update to 13.18 - Apply patch for CVE-2026-6479 in prep section - Resolves: CVE-2026-6479 - Backport fix for CVE-2026-6479 from PostgreSQL 14.23 (SSL/GSS init causes denial of service via uncontrolled recursion) - Resolves: CVE-2026-6479 - Backport fix for CVE-2026-6478 from PostgreSQL 14.23 - Backport fixes for CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 - Resolves: RHEL-179799 - Resolves: RHEL-181866 - Resolves: RHEL-181950 - Resolves: RHEL-181964 - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Define tmpfiles.d to enable ostree and bootc support - Update to 13.22 - Update to 13.18 - Fix CVE-2026-14662 - Fix CVE-2026-14664 - Fix CVE-2026-14668 - Fix CVE-2026-14669 - Fix CVE-2026-14670 - Fix CVE-2026-14671 - Fix CVE-2026-14677 - Fix CVE-2026-14679 - Fix CVE-2026-14680 - Fix CVE-2026-15742 - Fix CVE-2026-16239 - Fix CVE-2026-18408 - Fix CVE-2026-19385 - Fix CVE-2026-6464 - Fix CVE-2026-6471 - Resolves: RHEL-248127 - Resolves: RHEL-248130 - Resolves: RHEL-248131 - Resolves: RHEL-248748 - Resolves: RHEL-249060 - Resolves: RHEL-249109 - Resolves: RHEL-249172 - Resolves: RHEL-249204 - Resolves: RHEL-249672 - Resolves: RHEL-249796 - Resolves: RHEL-250158 - Resolves: RHEL-250772 - Resolves: RHEL-250857 - Resolves: RHEL-250907 - Resolves: RHEL-251008 - Resolves: RHEL-251380 - Resolves: RHEL-251426 - Apply patch for CVE-2026-6479 in prep section - Resolves: CVE-2026-6479 - Backport fix for CVE-2026-6479 from PostgreSQL 14.23 (SSL/GSS init causes denial of service via uncontrolled recursion) - Resolves: CVE-2026-6479 - Backport fix for CVE-2026-6478 from PostgreSQL 14.23 - Backport fixes for CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 - Resolves: RHEL-179799 - Resolves: RHEL-181866 - Resolves: RHEL-181950 - Resolves: RHEL-181964 - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Define tmpfiles.d to enable ostree and bootc support - Update to 13.22 - Update to 13.18 - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration and generate tmpfiles.d dynamically - Resolves: RHEL-133896 - Update to 15.15 - Resolves: RHEL-128813 (CVE-2025-12818) - Update to 15.14 - Update to 15.12 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Fix build on 15.8 - Update to 15.8 - Remove /var/run/postgresql - Related: RHEL-51271 - Enable lz4 and zstd support - Update to 15.18 - Fix CVE-2026-6478 - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration and generate tmpfiles.d dynamically - Update to 15.15 - Resolves: RHEL-128816 (CVE-2025-12818) - Update to 15.12 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Fix build on 15.8 - Update to 15.8 - Remove /var/run/postgresql - Related: RHEL-51271 - Enable lz4 and zstd support - Update to 15.19 - Update to 15.18 - Fix CVE-2026-6478 - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration and generate tmpfiles.d dynamically - Update to 15.15 - Resolves: RHEL-128816 (CVE-2025-12818) - Update to 15.12 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149371 RHEL-149404 RHEL-149338 - Update to 16.11 - Resolves: RHEL-128820 (CVE-2025-12818) - Update to 16.10 - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 16.4 - Fix CVE-2024-7348 - Update to 16.14 - Fix CVE-2026-6478 - Update to 16.13 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration for PostgreSQL 16 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Fix build on 16.4 - Update to 16.4 - Remove /var/run/postgresql - Related: RHEL-51275 - Enable lz4 and zstd support - Update to 16.15 - Update to 16.14 - Fix CVE-2026-6478 - Update to 16.13 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration for PostgreSQL 16 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 18.3 - Enable pltcl - bash-profile fix for imagemode - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - Update to 18.1 - Initial import of 18.0 - Enable pltcl subpackage - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Update to 18.1 - Initial import of 18.0 - Update to 18.4 - Fix CVE-2026-6478 - Enable pltcl subpackage - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Update to 18.1 - Initial import of 18.0 - Update to 18.6 - Update to 18.4 - Fix CVE-2026-6478 - Enable pltcl subpackage - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Update to 18.1 - Initial import of 18.0 - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration and generate tmpfiles.d dynamically - Resolves: RHEL-133896 - Update to 15.15 - Resolves: RHEL-128813 (CVE-2025-12818) - Update to 15.14 - Update to 15.12 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Fix build on 15.8 - Update to 15.8 - Remove /var/run/postgresql - Related: RHEL-51271 - Enable lz4 and zstd support - Update to 15.18 - Fix CVE-2026-6478 - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration and generate tmpfiles.d dynamically - Update to 15.15 - Resolves: RHEL-128816 (CVE-2025-12818) - Update to 15.12 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Fix build on 15.8 - Update to 15.8 - Remove /var/run/postgresql - Related: RHEL-51271 - Enable lz4 and zstd support - Update to 15.19 - Update to 15.18 - Fix CVE-2026-6478 - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration and generate tmpfiles.d dynamically - Update to 15.15 - Resolves: RHEL-128816 (CVE-2025-12818) - Update to 15.12 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149371 RHEL-149404 RHEL-149338 - Update to 16.11 - Resolves: RHEL-128820 (CVE-2025-12818) - Update to 16.10 - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 16.4 - Fix CVE-2024-7348 - Update to 16.14 - Fix CVE-2026-6478 - Update to 16.13 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration for PostgreSQL 16 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Fix build on 16.4 - Update to 16.4 - Remove /var/run/postgresql - Related: RHEL-51275 - Enable lz4 and zstd support - Update to 16.15 - Update to 16.14 - Fix CVE-2026-6478 - Update to 16.13 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration for PostgreSQL 16 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 18.3 - Enable pltcl - bash-profile fix for imagemode - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - Update to 18.1 - Initial import of 18.0 - Enable pltcl subpackage - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Update to 18.1 - Initial import of 18.0 - Update to 18.4 - Fix CVE-2026-6478 - Enable pltcl subpackage - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Update to 18.1 - Initial import of 18.0 - Update to 18.6 - Update to 18.4 - Fix CVE-2026-6478 - Enable pltcl subpackage - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Update to 18.1 - Initial import of 18.0 - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Define tmpfiles.d to enable ostree and bootc support - Update to 13.22 - Update to 13.18 - Backport fix for CVE-2026-6478 from PostgreSQL 14.23 - Backport fixes for CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 - Resolves: RHEL-179799 - Resolves: RHEL-181866 - Resolves: RHEL-181950 - Resolves: RHEL-181964 - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Define tmpfiles.d to enable ostree and bootc support - Update to 13.22 - Update to 13.18 - Apply patch for CVE-2026-6479 in prep section - Resolves: CVE-2026-6479 - Backport fix for CVE-2026-6479 from PostgreSQL 14.23 (SSL/GSS init causes denial of service via uncontrolled recursion) - Resolves: CVE-2026-6479 - Backport fix for CVE-2026-6478 from PostgreSQL 14.23 - Backport fixes for CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 - Resolves: RHEL-179799 - Resolves: RHEL-181866 - Resolves: RHEL-181950 - Resolves: RHEL-181964 - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Define tmpfiles.d to enable ostree and bootc support - Update to 13.22 - Update to 13.18 - Fix CVE-2026-14662 - Fix CVE-2026-14664 - Fix CVE-2026-14668 - Fix CVE-2026-14669 - Fix CVE-2026-14670 - Fix CVE-2026-14671 - Fix CVE-2026-14677 - Fix CVE-2026-14679 - Fix CVE-2026-14680 - Fix CVE-2026-15742 - Fix CVE-2026-16239 - Fix CVE-2026-18408 - Fix CVE-2026-19385 - Fix CVE-2026-6464 - Fix CVE-2026-6471 - Resolves: RHEL-248127 - Resolves: RHEL-248130 - Resolves: RHEL-248131 - Resolves: RHEL-248748 - Resolves: RHEL-249060 - Resolves: RHEL-249109 - Resolves: RHEL-249172 - Resolves: RHEL-249204 - Resolves: RHEL-249672 - Resolves: RHEL-249796 - Resolves: RHEL-250158 - Resolves: RHEL-250772 - Resolves: RHEL-250857 - Resolves: RHEL-250907 - Resolves: RHEL-251008 - Resolves: RHEL-251380 - Resolves: RHEL-251426 - Apply patch for CVE-2026-6479 in prep section - Resolves: CVE-2026-6479 - Backport fix for CVE-2026-6479 from PostgreSQL 14.23 (SSL/GSS init causes denial of service via uncontrolled recursion) - Resolves: CVE-2026-6479 - Backport fix for CVE-2026-6478 from PostgreSQL 14.23 - Backport fixes for CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 - Resolves: RHEL-179799 - Resolves: RHEL-181866 - Resolves: RHEL-181950 - Resolves: RHEL-181964 - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Define tmpfiles.d to enable ostree and bootc support - Update to 13.22 - Update to 13.18 - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration and generate tmpfiles.d dynamically - Resolves: RHEL-133896 - Update to 15.15 - Resolves: RHEL-128813 (CVE-2025-12818) - Update to 15.14 - Update to 15.12 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Fix build on 15.8 - Update to 15.8 - Remove /var/run/postgresql - Related: RHEL-51271 - Enable lz4 and zstd support - Update to 15.18 - Fix CVE-2026-6478 - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration and generate tmpfiles.d dynamically - Update to 15.15 - Resolves: RHEL-128816 (CVE-2025-12818) - Update to 15.12 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Fix build on 15.8 - Update to 15.8 - Remove /var/run/postgresql - Related: RHEL-51271 - Enable lz4 and zstd support - Update to 15.19 - Update to 15.18 - Fix CVE-2026-6478 - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration and generate tmpfiles.d dynamically - Update to 15.15 - Resolves: RHEL-128816 (CVE-2025-12818) - Update to 15.12 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149371 RHEL-149404 RHEL-149338 - Update to 16.11 - Resolves: RHEL-128820 (CVE-2025-12818) - Update to 16.10 - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 16.4 - Fix CVE-2024-7348 - Update to 16.14 - Fix CVE-2026-6478 - Update to 16.13 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration for PostgreSQL 16 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Fix build on 16.4 - Update to 16.4 - Remove /var/run/postgresql - Related: RHEL-51275 - Enable lz4 and zstd support - Update to 16.15 - Update to 16.14 - Fix CVE-2026-6478 - Update to 16.13 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration for PostgreSQL 16 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 18.3 - Enable pltcl - bash-profile fix for imagemode - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - Update to 18.1 - Initial import of 18.0 - Enable pltcl subpackage - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Update to 18.1 - Initial import of 18.0 - Update to 18.4 - Fix CVE-2026-6478 - Enable pltcl subpackage - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Update to 18.1 - Initial import of 18.0 - Update to 18.6 - Update to 18.4 - Fix CVE-2026-6478 - Enable pltcl subpackage - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Update to 18.1 - Initial import of 18.0 - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Define tmpfiles.d to enable ostree and bootc support - Update to 13.22 - Update to 13.18 - Backport fix for CVE-2026-6478 from PostgreSQL 14.23 - Backport fixes for CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 - Resolves: RHEL-179799 - Resolves: RHEL-181866 - Resolves: RHEL-181950 - Resolves: RHEL-181964 - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Define tmpfiles.d to enable ostree and bootc support - Update to 13.22 - Update to 13.18 - Apply patch for CVE-2026-6479 in prep section - Resolves: CVE-2026-6479 - Backport fix for CVE-2026-6479 from PostgreSQL 14.23 (SSL/GSS init causes denial of service via uncontrolled recursion) - Resolves: CVE-2026-6479 - Backport fix for CVE-2026-6478 from PostgreSQL 14.23 - Backport fixes for CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 - Resolves: RHEL-179799 - Resolves: RHEL-181866 - Resolves: RHEL-181950 - Resolves: RHEL-181964 - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Define tmpfiles.d to enable ostree and bootc support - Update to 13.22 - Update to 13.18 - Fix CVE-2026-14662 - Fix CVE-2026-14664 - Fix CVE-2026-14668 - Fix CVE-2026-14669 - Fix CVE-2026-14670 - Fix CVE-2026-14671 - Fix CVE-2026-14677 - Fix CVE-2026-14679 - Fix CVE-2026-14680 - Fix CVE-2026-15742 - Fix CVE-2026-16239 - Fix CVE-2026-18408 - Fix CVE-2026-19385 - Fix CVE-2026-6464 - Fix CVE-2026-6471 - Resolves: RHEL-248127 - Resolves: RHEL-248130 - Resolves: RHEL-248131 - Resolves: RHEL-248748 - Resolves: RHEL-249060 - Resolves: RHEL-249109 - Resolves: RHEL-249172 - Resolves: RHEL-249204 - Resolves: RHEL-249672 - Resolves: RHEL-249796 - Resolves: RHEL-250158 - Resolves: RHEL-250772 - Resolves: RHEL-250857 - Resolves: RHEL-250907 - Resolves: RHEL-251008 - Resolves: RHEL-251380 - Resolves: RHEL-251426 - Apply patch for CVE-2026-6479 in prep section - Resolves: CVE-2026-6479 - Backport fix for CVE-2026-6479 from PostgreSQL 14.23 (SSL/GSS init causes denial of service via uncontrolled recursion) - Resolves: CVE-2026-6479 - Backport fix for CVE-2026-6478 from PostgreSQL 14.23 - Backport fixes for CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 - Resolves: RHEL-179799 - Resolves: RHEL-181866 - Resolves: RHEL-181950 - Resolves: RHEL-181964 - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Define tmpfiles.d to enable ostree and bootc support - Update to 13.22 - Update to 13.18 - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration and generate tmpfiles.d dynamically - Resolves: RHEL-133896 - Update to 15.15 - Resolves: RHEL-128813 (CVE-2025-12818) - Update to 15.14 - Update to 15.12 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Fix build on 15.8 - Update to 15.8 - Remove /var/run/postgresql - Related: RHEL-51271 - Enable lz4 and zstd support - Update to 15.18 - Fix CVE-2026-6478 - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration and generate tmpfiles.d dynamically - Update to 15.15 - Resolves: RHEL-128816 (CVE-2025-12818) - Update to 15.12 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Fix build on 15.8 - Update to 15.8 - Remove /var/run/postgresql - Related: RHEL-51271 - Enable lz4 and zstd support - Update to 15.19 - Update to 15.18 - Fix CVE-2026-6478 - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration and generate tmpfiles.d dynamically - Update to 15.15 - Resolves: RHEL-128816 (CVE-2025-12818) - Update to 15.12 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149371 RHEL-149404 RHEL-149338 - Update to 16.11 - Resolves: RHEL-128820 (CVE-2025-12818) - Update to 16.10 - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 16.4 - Fix CVE-2024-7348 - Update to 16.14 - Fix CVE-2026-6478 - Update to 16.13 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration for PostgreSQL 16 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Fix build on 16.4 - Update to 16.4 - Remove /var/run/postgresql - Related: RHEL-51275 - Enable lz4 and zstd support - Update to 16.15 - Update to 16.14 - Fix CVE-2026-6478 - Update to 16.13 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration for PostgreSQL 16 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 18.3 - Enable pltcl - bash-profile fix for imagemode - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - Update to 18.1 - Initial import of 18.0 - Enable pltcl subpackage - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Update to 18.1 - Initial import of 18.0 - Update to 18.4 - Fix CVE-2026-6478 - Enable pltcl subpackage - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Update to 18.1 - Initial import of 18.0 - Update to 18.6 - Update to 18.4 - Fix CVE-2026-6478 - Enable pltcl subpackage - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Update to 18.1 - Initial import of 18.0 - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration and generate tmpfiles.d dynamically - Resolves: RHEL-133896 - Update to 15.15 - Resolves: RHEL-128813 (CVE-2025-12818) - Update to 15.14 - Update to 15.12 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Fix build on 15.8 - Update to 15.8 - Remove /var/run/postgresql - Related: RHEL-51271 - Enable lz4 and zstd support - Update to 15.18 - Fix CVE-2026-6478 - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration and generate tmpfiles.d dynamically - Update to 15.15 - Resolves: RHEL-128816 (CVE-2025-12818) - Update to 15.12 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Fix build on 15.8 - Update to 15.8 - Remove /var/run/postgresql - Related: RHEL-51271 - Enable lz4 and zstd support - Update to 15.19 - Update to 15.18 - Fix CVE-2026-6478 - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration and generate tmpfiles.d dynamically - Update to 15.15 - Resolves: RHEL-128816 (CVE-2025-12818) - Update to 15.12 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149371 RHEL-149404 RHEL-149338 - Update to 16.11 - Resolves: RHEL-128820 (CVE-2025-12818) - Update to 16.10 - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 16.4 - Fix CVE-2024-7348 - Update to 16.14 - Fix CVE-2026-6478 - Update to 16.13 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration for PostgreSQL 16 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Fix build on 16.4 - Update to 16.4 - Remove /var/run/postgresql - Related: RHEL-51275 - Enable lz4 and zstd support - Update to 16.15 - Update to 16.14 - Fix CVE-2026-6478 - Update to 16.13 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration for PostgreSQL 16 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 18.3 - Enable pltcl - bash-profile fix for imagemode - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - Update to 18.1 - Initial import of 18.0 - Enable pltcl subpackage - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Update to 18.1 - Initial import of 18.0 - Update to 18.4 - Fix CVE-2026-6478 - Enable pltcl subpackage - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Update to 18.1 - Initial import of 18.0 - Update to 18.6 - Update to 18.4 - Fix CVE-2026-6478 - Enable pltcl subpackage - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Update to 18.1 - Initial import of 18.0 - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration and generate tmpfiles.d dynamically - Resolves: RHEL-133896 - Update to 15.15 - Resolves: RHEL-128813 (CVE-2025-12818) - Update to 15.14 - Update to 15.12 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Fix build on 15.8 - Update to 15.8 - Remove /var/run/postgresql - Related: RHEL-51271 - Enable lz4 and zstd support - Update to 15.18 - Fix CVE-2026-6478 - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration and generate tmpfiles.d dynamically - Update to 15.15 - Resolves: RHEL-128816 (CVE-2025-12818) - Update to 15.12 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Fix build on 15.8 - Update to 15.8 - Remove /var/run/postgresql - Related: RHEL-51271 - Enable lz4 and zstd support - Update to 15.19 - Update to 15.18 - Fix CVE-2026-6478 - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration and generate tmpfiles.d dynamically - Update to 15.15 - Resolves: RHEL-128816 (CVE-2025-12818) - Update to 15.12 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149371 RHEL-149404 RHEL-149338 - Update to 16.11 - Resolves: RHEL-128820 (CVE-2025-12818) - Update to 16.10 - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 16.4 - Fix CVE-2024-7348 - Update to 16.14 - Fix CVE-2026-6478 - Update to 16.13 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration for PostgreSQL 16 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Fix build on 16.4 - Update to 16.4 - Remove /var/run/postgresql - Related: RHEL-51275 - Enable lz4 and zstd support - Update to 16.15 - Update to 16.14 - Fix CVE-2026-6478 - Update to 16.13 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration for PostgreSQL 16 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 18.3 - Enable pltcl - bash-profile fix for imagemode - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - Update to 18.1 - Initial import of 18.0 - Enable pltcl subpackage - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Update to 18.1 - Initial import of 18.0 - Update to 18.4 - Fix CVE-2026-6478 - Enable pltcl subpackage - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Update to 18.1 - Initial import of 18.0 - Update to 18.6 - Update to 18.4 - Fix CVE-2026-6478 - Enable pltcl subpackage - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Update to 18.1 - Initial import of 18.0 - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration and generate tmpfiles.d dynamically - Resolves: RHEL-133896 - Update to 15.15 - Resolves: RHEL-128813 (CVE-2025-12818) - Update to 15.14 - Update to 15.12 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Fix build on 15.8 - Update to 15.8 - Remove /var/run/postgresql - Related: RHEL-51271 - Enable lz4 and zstd support - Update to 15.18 - Fix CVE-2026-6478 - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration and generate tmpfiles.d dynamically - Update to 15.15 - Resolves: RHEL-128816 (CVE-2025-12818) - Update to 15.12 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Fix build on 15.8 - Update to 15.8 - Remove /var/run/postgresql - Related: RHEL-51271 - Enable lz4 and zstd support - Update to 15.19 - Update to 15.18 - Fix CVE-2026-6478 - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration and generate tmpfiles.d dynamically - Update to 15.15 - Resolves: RHEL-128816 (CVE-2025-12818) - Update to 15.12 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149371 RHEL-149404 RHEL-149338 - Update to 16.11 - Resolves: RHEL-128820 (CVE-2025-12818) - Update to 16.10 - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 16.4 - Fix CVE-2024-7348 - Update to 16.14 - Fix CVE-2026-6478 - Update to 16.13 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration for PostgreSQL 16 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Fix build on 16.4 - Update to 16.4 - Remove /var/run/postgresql - Related: RHEL-51275 - Enable lz4 and zstd support - Update to 16.15 - Update to 16.14 - Fix CVE-2026-6478 - Update to 16.13 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration for PostgreSQL 16 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 18.3 - Enable pltcl - bash-profile fix for imagemode - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - Update to 18.1 - Initial import of 18.0 - Enable pltcl subpackage - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Update to 18.1 - Initial import of 18.0 - Update to 18.4 - Fix CVE-2026-6478 - Enable pltcl subpackage - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Update to 18.1 - Initial import of 18.0 - Update to 18.6 - Update to 18.4 - Fix CVE-2026-6478 - Enable pltcl subpackage - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Update to 18.1 - Initial import of 18.0 - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration and generate tmpfiles.d dynamically - Resolves: RHEL-133896 - Update to 15.15 - Resolves: RHEL-128813 (CVE-2025-12818) - Update to 15.14 - Update to 15.12 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Fix build on 15.8 - Update to 15.8 - Remove /var/run/postgresql - Related: RHEL-51271 - Enable lz4 and zstd support - Update to 15.18 - Fix CVE-2026-6478 - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration and generate tmpfiles.d dynamically - Update to 15.15 - Resolves: RHEL-128816 (CVE-2025-12818) - Update to 15.12 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Fix build on 15.8 - Update to 15.8 - Remove /var/run/postgresql - Related: RHEL-51271 - Enable lz4 and zstd support - Update to 15.19 - Update to 15.18 - Fix CVE-2026-6478 - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration and generate tmpfiles.d dynamically - Update to 15.15 - Resolves: RHEL-128816 (CVE-2025-12818) - Update to 15.12 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149371 RHEL-149404 RHEL-149338 - Update to 16.11 - Resolves: RHEL-128820 (CVE-2025-12818) - Update to 16.10 - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 16.4 - Fix CVE-2024-7348 - Update to 16.14 - Fix CVE-2026-6478 - Update to 16.13 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration for PostgreSQL 16 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Fix build on 16.4 - Update to 16.4 - Remove /var/run/postgresql - Related: RHEL-51275 - Enable lz4 and zstd support - Update to 16.15 - Update to 16.14 - Fix CVE-2026-6478 - Update to 16.13 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration for PostgreSQL 16 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 18.3 - Enable pltcl - bash-profile fix for imagemode - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - Update to 18.1 - Initial import of 18.0 - Enable pltcl subpackage - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Update to 18.1 - Initial import of 18.0 - Update to 18.4 - Fix CVE-2026-6478 - Enable pltcl subpackage - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Update to 18.1 - Initial import of 18.0 - Update to 18.6 - Update to 18.4 - Fix CVE-2026-6478 - Enable pltcl subpackage - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Update to 18.1 - Initial import of 18.0 - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Define tmpfiles.d to enable ostree and bootc support - Update to 13.22 - Update to 13.18 - Backport fix for CVE-2026-6478 from PostgreSQL 14.23 - Backport fixes for CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 - Resolves: RHEL-179799 - Resolves: RHEL-181866 - Resolves: RHEL-181950 - Resolves: RHEL-181964 - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Define tmpfiles.d to enable ostree and bootc support - Update to 13.22 - Update to 13.18 - Apply patch for CVE-2026-6479 in prep section - Resolves: CVE-2026-6479 - Backport fix for CVE-2026-6479 from PostgreSQL 14.23 (SSL/GSS init causes denial of service via uncontrolled recursion) - Resolves: CVE-2026-6479 - Backport fix for CVE-2026-6478 from PostgreSQL 14.23 - Backport fixes for CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 - Resolves: RHEL-179799 - Resolves: RHEL-181866 - Resolves: RHEL-181950 - Resolves: RHEL-181964 - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Define tmpfiles.d to enable ostree and bootc support - Update to 13.22 - Update to 13.18 - Fix CVE-2026-14662 - Fix CVE-2026-14664 - Fix CVE-2026-14668 - Fix CVE-2026-14669 - Fix CVE-2026-14670 - Fix CVE-2026-14671 - Fix CVE-2026-14677 - Fix CVE-2026-14679 - Fix CVE-2026-14680 - Fix CVE-2026-15742 - Fix CVE-2026-16239 - Fix CVE-2026-18408 - Fix CVE-2026-19385 - Fix CVE-2026-6464 - Fix CVE-2026-6471 - Resolves: RHEL-248127 - Resolves: RHEL-248130 - Resolves: RHEL-248131 - Resolves: RHEL-248748 - Resolves: RHEL-249060 - Resolves: RHEL-249109 - Resolves: RHEL-249172 - Resolves: RHEL-249204 - Resolves: RHEL-249672 - Resolves: RHEL-249796 - Resolves: RHEL-250158 - Resolves: RHEL-250772 - Resolves: RHEL-250857 - Resolves: RHEL-250907 - Resolves: RHEL-251008 - Resolves: RHEL-251380 - Resolves: RHEL-251426 - Apply patch for CVE-2026-6479 in prep section - Resolves: CVE-2026-6479 - Backport fix for CVE-2026-6479 from PostgreSQL 14.23 (SSL/GSS init causes denial of service via uncontrolled recursion) - Resolves: CVE-2026-6479 - Backport fix for CVE-2026-6478 from PostgreSQL 14.23 - Backport fixes for CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 - Resolves: RHEL-179799 - Resolves: RHEL-181866 - Resolves: RHEL-181950 - Resolves: RHEL-181964 - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Define tmpfiles.d to enable ostree and bootc support - Update to 13.22 - Update to 13.18 - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration and generate tmpfiles.d dynamically - Resolves: RHEL-133896 - Update to 15.15 - Resolves: RHEL-128813 (CVE-2025-12818) - Update to 15.14 - Update to 15.12 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Fix build on 15.8 - Update to 15.8 - Remove /var/run/postgresql - Related: RHEL-51271 - Enable lz4 and zstd support - Update to 15.18 - Fix CVE-2026-6478 - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration and generate tmpfiles.d dynamically - Update to 15.15 - Resolves: RHEL-128816 (CVE-2025-12818) - Update to 15.12 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Fix build on 15.8 - Update to 15.8 - Remove /var/run/postgresql - Related: RHEL-51271 - Enable lz4 and zstd support - Update to 15.19 - Update to 15.18 - Fix CVE-2026-6478 - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration and generate tmpfiles.d dynamically - Update to 15.15 - Resolves: RHEL-128816 (CVE-2025-12818) - Update to 15.12 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149371 RHEL-149404 RHEL-149338 - Update to 16.11 - Resolves: RHEL-128820 (CVE-2025-12818) - Update to 16.10 - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 16.4 - Fix CVE-2024-7348 - Update to 16.14 - Fix CVE-2026-6478 - Update to 16.13 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration for PostgreSQL 16 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Fix build on 16.4 - Update to 16.4 - Remove /var/run/postgresql - Related: RHEL-51275 - Enable lz4 and zstd support - Update to 16.15 - Update to 16.14 - Fix CVE-2026-6478 - Update to 16.13 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration for PostgreSQL 16 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 18.3 - Enable pltcl - bash-profile fix for imagemode - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - Update to 18.1 - Initial import of 18.0 - Enable pltcl subpackage - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Update to 18.1 - Initial import of 18.0 - Update to 18.4 - Fix CVE-2026-6478 - Enable pltcl subpackage - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Update to 18.1 - Initial import of 18.0 - Update to 18.6 - Update to 18.4 - Fix CVE-2026-6478 - Enable pltcl subpackage - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Update to 18.1 - Initial import of 18.0 - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration and generate tmpfiles.d dynamically - Resolves: RHEL-133896 - Update to 15.15 - Resolves: RHEL-128813 (CVE-2025-12818) - Update to 15.14 - Update to 15.12 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Fix build on 15.8 - Update to 15.8 - Remove /var/run/postgresql - Related: RHEL-51271 - Enable lz4 and zstd support - Update to 15.18 - Fix CVE-2026-6478 - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration and generate tmpfiles.d dynamically - Update to 15.15 - Resolves: RHEL-128816 (CVE-2025-12818) - Update to 15.12 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Fix build on 15.8 - Update to 15.8 - Remove /var/run/postgresql - Related: RHEL-51271 - Enable lz4 and zstd support - Update to 15.19 - Update to 15.18 - Fix CVE-2026-6478 - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration and generate tmpfiles.d dynamically - Update to 15.15 - Resolves: RHEL-128816 (CVE-2025-12818) - Update to 15.12 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149371 RHEL-149404 RHEL-149338 - Update to 16.11 - Resolves: RHEL-128820 (CVE-2025-12818) - Update to 16.10 - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 16.4 - Fix CVE-2024-7348 - Update to 16.14 - Fix CVE-2026-6478 - Update to 16.13 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration for PostgreSQL 16 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Fix build on 16.4 - Update to 16.4 - Remove /var/run/postgresql - Related: RHEL-51275 - Enable lz4 and zstd support - Update to 16.15 - Update to 16.14 - Fix CVE-2026-6478 - Update to 16.13 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Add sysusers configuration for PostgreSQL 16 - Add tmpfiles.d configuration - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 18.3 - Enable pltcl - bash-profile fix for imagemode - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - Update to 18.1 - Initial import of 18.0 - Enable pltcl subpackage - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Update to 18.1 - Initial import of 18.0 - Update to 18.4 - Fix CVE-2026-6478 - Enable pltcl subpackage - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Update to 18.1 - Initial import of 18.0 - Update to 18.6 - Update to 18.4 - Fix CVE-2026-6478 - Enable pltcl subpackage - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Update to 18.1 - Initial import of 18.0 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 1.16. - Update to 0.21 - Support multi-drivers mode and amdgpu - Support dynamically adjusts amd-pstate EPP values between battery and AC modes. - Resolves: RHEL-23395 - Update date to 0.13 - Support for AMD P-State - Resolves: rhbz#2226568 + power-profiles-daemon-0.11.1-1 - Update to 0.11.1 - Resolves: rhbz#2080280 - New version Resolves: rhbz#2044132 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - New version Resolves: rhbz#1880071 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fixed man page and typo in the built-in help - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - fixup tmpfile to use /run instead of /var/run - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Release bump to push it into compose - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Release bump to push it into compose - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Release bump to push it into compose - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Release bump to push it into compose - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Release bump to push it into compose - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Release bump to push it into compose - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Release bump to push it into compose - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Release bump to push it into compose - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Release bump to push it into compose - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Release bump to push it into compose - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Release bump to push it into compose - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Release bump to push it into compose - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Release bump to push it into compose - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Release bump to push it into compose - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Release bump to push it into compose - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Release bump to push it into compose - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Release bump to push it into compose - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Release bump to push it into compose - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Release bump to push it into compose - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Release bump to push it into compose - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Release bump to push it into compose - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Release bump to push it into compose - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Release bump to push it into compose - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Release bump to push it into compose - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Release bump to push it into compose - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Release bump to push it into compose - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Release bump to push it into compose - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Release bump to push it into compose - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Release bump to push it into compose - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Release bump to push it into compose - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Release bump to push it into compose - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Release bump to push it into compose - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Release bump to push it into compose - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Release bump to push it into compose - Update to 9.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.5.1 - Fix CVE-2026-0994: nested Any messages bypassing recursion depth limits - Rebuild - Rebuild - Applied patch for CVE-2022-1941 (#RHEL-40872) - Applied patch to make emacs dependency optional (#RHEL-40572) - Fix CVE-2026-0994: nested Any messages bypassing recursion depth limits - Rebuild - Rebuild - Applied patch for CVE-2022-1941 (#RHEL-40872) - Applied patch to make emacs dependency optional (#RHEL-40572) - output is not redirected when ps_mem is killed - cmdline unwanted blank spaces fixed - Resolves: rhbz#2033997 - Resolves: rhbz#2049743 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves:rhbz#1962000 - Add missing gating tests - Resolves:rhbz#1962000 - Add gating tests from rhel-8 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 20141121-18 - Fix this spec file to build for F33+ - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 20141121-16 🐞 Workaround Fedora problems created by rpm commit 93604e2 - 20141121-15 💥 Actually rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are valid - 20141121-14 👻 Rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are valid - unset writable-by-group permission bit on the license file - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Recent revision - 20210518 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuild for autostart fix Resolves: RHEL-40601 - Rebuild for autostart fix Resolves: RHEL-40601 - Rebuild for autostart fix Resolves: RHEL-40601 - Rebuild for autostart fix Resolves: RHEL-40601 - Rebuild for autostart fix Resolves: RHEL-40601 - Rebuild for autostart fix Resolves: RHEL-40601 - Rebuild for autostart fix Resolves: RHEL-40601 - workflows: run tests using only python 3.9 (bcl) Related: RHEL-75659 - workflows: Switch to using ubuntu-latest (bcl) Related: RHEL-75659 - Do not remove "md" prefix from RAID names (vtrefny) Resolves: RHEL-75659 - Update %certificate section documentation (rvykydal) Related: RHEL-61432 - Make %certificate section option --dir mandatory. (rvykydal) Resolves: RHEL-76501 - Switch to using tmt based tests and running unit tests during build Related: RHEL-61432 - Add support for inline certificates with `%certificate` section (k.koukiou) Resolves: RHEL-61432 - tox: Only run unit tests for python 3.6 (bcl) Related: RHEL-17662 - Add conflict test between ostree sources (#2125655) (jkonecny) Related: RHEL-17662 - Fix missing seen check for output generation (#2125655) (jkonecny) Related: RHEL-17662 - Add new ostreecontainer command (#2125655) (jkonecny) Resolves: RHEL-17662 - Check the conflicting commands automatically (vponcova) Related: RHEL-17662 - Fix tests for conflicting commands (vponcova) Related: RHEL-17662 - Add conflicting commands support (bcl) Related: RHEL-17662 - %pyproject_extras_subpkg: Only %ghost the dist-info directory, not the content - That way, accidentally unpackaged files within are reported as errors - %pyproject_save_files: Also save top level typing stub files (.pyi) - Don't exit from pyproject-srpm-macros implementation of %pyproject_buildrequires - Fixes: rhbz#2391290 - On RPM 4.20+ don't put pyproject-macros-specific files in %buildsubdir - Works around https://github.com/rpm-software-management/rpm/issues/3890 - Speed %pyproject_save_files up significantly - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - %pyproject_buildrequires: Do not generate BuildRequires from Requires core metadata fields - That field is deprecated and should include importable module names, not distribution packages - Related: rhbz#2378463 - Fix handling of config_settings in %pyproject_buildrequires - Fix reverted conditional in %pyproject_buildrequires -t/-e Fedora version comparison - Make %pyproject_buildrequires -t/-e and %tox fail when no suitable tox configuration exists - The %pyproject_buildrequires -t/-e case is temporarily allowed on Fedora 40-42 - Requires tox-current-env >= 0.0.16 - Add the -M flag to %pyproject_save_files - The flag can be used to indicate no Python modules should be saved - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Deprecate the provisional -w flag for %pyproject_buildrequires - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - fix invalid delete (upstream ticket #11) - make is no longer in buildroot by default - use smaller git-core instead of git - 1873385 - ignore driverless utilities during tags creation - use %python3_sitearch in filter_provides_in, otherwise the package fails to build - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for Python 3.9 - 2.0.1, fixes #1816107 - 5.15.9 Resolves: bz#2175758 - 5.15.6 + sync with Fedora Resolves: bz#2061728 - Rebuild (Qt 5.15.3) Resolves: bz#2061728 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - %python_extras_subpkg: Add option -a to include BuildArch: noarch - Update macros from Fedora and add pathfix.py into python-rpm-macros - Resolves: RHEL-6107 - %python_extras_subpkg: Add option -a to include BuildArch: noarch - Update macros from Fedora and add pathfix.py into python-rpm-macros - Resolves: RHEL-6107 - Security fix for CVE-2026-15308 Resolves: RHEL-193786 - Fix ssl.SSLError: [ASN1: NOT_ENOUGH_DATA] not enough data with OpenSSL 3.5.7+ Resolves: RHEL-194207 - Security fixes for CVE-2026-4786 and CVE-2026-6100 Resolves: RHEL-167919, RHEL-168161 - Security fix for CVE-2026-4519 Resolves: RHEL-158117 - Rebuilding previous fixes for different build target Related: RHEL-143117, RHEL-143174, RHEL-144897 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143117 Resolves: RHEL-143174 Resolves: RHEL-144897 - Security fix for CVE-2025-12084 Resolves: RHEL-135897 - Move _sysconfigdata_d_linux*.py to the debug subpackage - Update to Python 3.9.25 - Update to Python 3.9.24 - Security fix for CVE-2026-11940 Resolves: RHEL-227228 - Security fix for CVE-2026-15308 Resolves: RHEL-193786 - Fix ssl.SSLError: [ASN1: NOT_ENOUGH_DATA] not enough data with OpenSSL 3.5.7+ Resolves: RHEL-194207 - Security fixes for CVE-2026-4786 and CVE-2026-6100 Resolves: RHEL-167919, RHEL-168161 - Security fix for CVE-2026-4519 Resolves: RHEL-158117 - Rebuilding previous fixes for different build target Related: RHEL-143117, RHEL-143174, RHEL-144897 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143117 Resolves: RHEL-143174 Resolves: RHEL-144897 - Security fix for CVE-2025-12084 Resolves: RHEL-135897 - Move _sysconfigdata_d_linux*.py to the debug subpackage - Update to Python 3.9.25 - CVE-2026-19553 python3.9: python: Certificate verification bypass via missing server_hostname validation in SSLContext.wrap_bio() Resolves: RHEL-274143 - CVE-2026-19445 python3.9: Use-after-free of a server-side SSLContext when sni_callback switches contexts Resolves: RHEL-276263 - CVE-2026-12345 python3.9: python: Arbitrary file deletion via race condition during temporary directory cleanup Resolves: RHEL-272937 - Security fix for CVE-2026-11940 Resolves: RHEL-227228 - Security fix for CVE-2026-15308 Resolves: RHEL-193786 - Fix ssl.SSLError: [ASN1: NOT_ENOUGH_DATA] not enough data with OpenSSL 3.5.7+ Resolves: RHEL-194207 - Security fixes for CVE-2026-4786 and CVE-2026-6100 Resolves: RHEL-167919, RHEL-168161 - Security fix for CVE-2026-4519 Resolves: RHEL-158117 - Rebuilding previous fixes for different build target Related: RHEL-143117, RHEL-143174, RHEL-144897 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143117 Resolves: RHEL-143174 Resolves: RHEL-144897 - Security fixes for CVE-2026-4786 and CVE-2026-6100 Resolves: RHEL-167919, RHEL-168161 - Security fix for CVE-2026-4519 Resolves: RHEL-158117 - Rebuilding previous fixes for different build target Related: RHEL-143117, RHEL-143174, RHEL-144897 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143117 Resolves: RHEL-143174 Resolves: RHEL-144897 - Security fix for CVE-2025-12084 Resolves: RHEL-135897 - Move _sysconfigdata_d_linux*.py to the debug subpackage - Update to Python 3.9.25 - Update to Python 3.9.24 - Security fix for CVE-2025-8194 Resolves: RHEL-106374 - Update to 3.9.23 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98051, RHEL-98024, RHEL-98242, RHEL-98193, RHEL-98218 - Add gating configuration and a simple smoke test - Related: rhbz#1950291 - Add automatically generated Obsoletes tag with the python39- prefix for smoother upgrade from RHEL8 - Related: rhbz#1990421 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 0.10.1 (#1877703) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 0.10.0 - Rebuilt for Python 3.9 - Add python-alembic to RHEL-9 Resolves: rhbz#2084557 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild - Update to 1.7.5. Fixes rhbz#2022454 - Update to 1.7.4. Fixes rhbz#2011425 - Update to 1.7.3. Fixes rhbz#2005403 - Drop redundant manually specified dependencies - Add the dist tag again - Update to 1.7.1. Fixes rhbz#1999176 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Update to 1.6.5. Fixes rhbz#1964163 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.4.4 (#1834175) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Subpackage python2-appdirs has been removed See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal - Reduce Python 2 build time dependencies - Rebuilt for Python 3.8 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.12.0 - Fixes rhbz#1856103 - Rebuilt for Python 3.9 - Update to 1.11.1 (#1709038) - Fix tests with Fish 3.1 (#1808322) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for Python 3.8.0rc1 (#1748018) - Rebuilt for Python 3.8 - Add gating configuration and a simple smoke test - Related: rhbz#1950291 - Add automatically generated Obsoletes tag with the python39- prefix for smoother upgrade from RHEL8 - Related: rhbz#1990421 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Disable tests on RHEL9 to avoid pulling in the test dependencies - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 20.3.0 (#1894866) - Update to 20.2.0 (#1876063) - Update to 20.1.0 (#1870794) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fix POSTIN scriplet to not fail during upgrade Resolves: RHEL-138696 - ausearch-checkpoint race condition fix Resolves: RHEL-86897 - Update end of event detection mechanism Resolves: RHEL-78323 - ausearch: correct search for DAEMON related events - allow hex digits when interpreting tty data Resolves: RHEL-82279 - Fix TTY hostname in log messages Resolves: RHEL-78323 - auditctl: correct buffer in filter_supported_syscalls to avoid overflow Resolves: RHEL-59585 - Don't do "live" operations during rpm-ostree composes Resolves: RHEL-69033 - Disable ProtectKernelModules=true in service file Resolves: RHEL-59570 - af_unix plugin: restore original behavior in binary mode Resolves: RHEL-59585 - Support image mode Resolves: RHEL-69033 - Resolve ordering cycle when using remote logging Resolves: RHEL-11252 - Filter syscalls to ensure architecture-specific availability Resolves: RHEL-70455 - New upstream maintenance release, 3.1.4 - Prevent scriplets from failing - When upgrading, restart the daemon if it's running - If uninstalling, stop the daemon - auditctl: use pidfd_send_signal for signaling auditd Resolves: RHEL-45865 - Minor doc update Resolves: RHEL-5186 - augenrules: do not exit with failure if in immutable mode Resolves: RHEL-40110 - auditd.service: Disable ProtectControlGroups Resolves: RHEL-5197 - auditctl: correct output when displaying rules with exe/path/dir Resolves: RHEL-40243 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for Python 3.9 - Backport upstream commit d93e1563add8c40450556b7d74520439ee792bd9 to fix the discovery of location in the test - Execute the tests at build time - Add a simple gating test to execute the test script, and make it gating for the python-augeas source - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Subpackage python2-augeas has been removed See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal - Rebuilt for Python 3.8.0rc1 (#1748018) - Rebuilt for Python 3.8 - Update to 0.31.1 Resolves: RHEL-157871 - Add patch fixing FIPS mode crash in awscli2 Resolves: RHEL-131280 - Update to 0.27.2 Resolves: RHEL-113230 - Removing extra pkcs11 source now that upstream switched to public domain headers - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 2.9.1. - Fixes CVE-2021-20095 Resolves: rhbz#1955615 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Drop build dependency on python-freezegun - Resolves: rhbz#1947517 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Disable Python 2 build entirely - Disable Python 2 build on RHEL 9+ - update to 2.9.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for Python 3.9 - Rebuild with LLVM 21 (RHEL-108343) - Rebase to version 0.35.0 (RHEL-79001) - Fix bpf-ksnoop (RHEL-96166) - Fix bpf-javagc (RHEL-78173) - Fix bpf-klockstat on aarch64 and ppc64le debug (RHEL-78619) - Remove macro in comment. - Rebase to version 0.34.0 (RHEL-78920) - Rebuild with LLVM 20 (RHEL-81773) - Fix biosnoop pattern option (RHEL-90848) - Fix bpf-klockstat on aarch64 and ppc64le (RHEL-78619) - Remove unsupported bpf-bcachefs* and bpf-zfs* tools (RHEL-78166) - Remove unsupported slaratetop tool (RHEL-78162) - Rebuild with libbpf 1.5.0 - Rebase to the latest version (RHEL-63883) - Fix gating tests of libbpf gating. - Explicitely disable blazesym support (RHEL-49640) - Fic bio* tools (RHEL-61615) - Rebuild with LLVM 18 (RHEL-28684) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629) - Backport fix for nameserver line processing. (RHEL-79714) - Add sysusers named user creation (RHEL-132053) - Create /var/named directories for bind-chroot (RHEL-132053) - Copy named.* files from /var/named into /usr/share/named - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Replace downstream fixes with upstream changes - Address various spoofing attacks (CVE-2025-40778) - Fix failures in idna system test (RHEL-66172) - logrotate: skip if empty and remove old variants (RHEL-113942) - Decode IDN names on input in all situations in utilities (RHEL-66172) - Prevent assertion failure in dns64 mode with break-dnssec yes (CVE-2026-19666) - Prevent crash on wildcard responses containing both NSEC and NSEC3 proofs (CVE-2026-80274) - Reject oversized negative cached records early (CVE-2026-19667) - Add new root key 38696 into package files (RHEL-255763) - Update built-in anchors in delv and named - Fix NSEC3 signer validation (CVE-2026-10723) - Fix CVE-2026-13321: reject out-of-zone NSEC next owner names - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) - Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3 (CVE-2026-13204) - Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721) - Prevent cache memory exhaustion under sustained attack (CVE-2026-11622, RHEL-213397) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Fix CVE-2026-19662: NOQNAME proof use-after-free could crash recursive resolver. - Backport 'Do not use header_prev in expire_lru_headers' from upstream. (RHEL-276913) - Prevent assertion failure in dns64 mode with break-dnssec yes (CVE-2026-19666) - Prevent crash on wildcard responses containing both NSEC and NSEC3 proofs (CVE-2026-80274) - Reject oversized negative cached records early (CVE-2026-19667) - Add new root key 38696 into package files (RHEL-255763) - Update built-in anchors in delv and named - Fix NSEC3 signer validation (CVE-2026-10723) - Fix CVE-2026-13321: reject out-of-zone NSEC next owner names - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) - Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3 (CVE-2026-13204) - Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721) - Prevent cache memory exhaustion under sustained attack (CVE-2026-11622, RHEL-213397) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629) - Backport fix for nameserver line processing. (RHEL-79714) - Add sysusers named user creation (RHEL-132053) - Create /var/named directories for bind-chroot (RHEL-132053) - Copy named.* files from /var/named into /usr/share/named - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Replace downstream fixes with upstream changes - Address various spoofing attacks (CVE-2025-40778) - Fix failures in idna system test (RHEL-66172) - logrotate: skip if empty and remove old variants (RHEL-113942) - Fix NSEC3 signer validation (CVE-2026-10723) - Fix CVE-2026-13321: reject out-of-zone NSEC next owner names - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) - Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3 (CVE-2026-13204) - Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721) - Prevent cache memory exhaustion under sustained attack (CVE-2026-11622, RHEL-213397) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629) - Backport fix for nameserver line processing. (RHEL-79714) - Add new root key 38696 into package files (RHEL-255763) - Update built-in anchors in delv and named - Fix NSEC3 signer validation (CVE-2026-10723) - Fix CVE-2026-13321: reject out-of-zone NSEC next owner names - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) - Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3 (CVE-2026-13204) - Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721) - Prevent cache memory exhaustion under sustained attack (CVE-2026-11622, RHEL-213397) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629) - iSCSI: don't crash when LUN ID >= 256 Resolves: RHEL-122858 - Add a pre-wipe fixup function for LVM logical volumes Resolves: RHEL-68368 - Wipe end partition before creating it as well as the start Resolves: RHEL-76917 - Make ActionDestroyFormat optional when the device is also scheduled to be removed Resolves: RHEL-8008 Resolves: RHEL-8012 - Get the actual PV format size for LVMPV format Resolves: RHEL-74078 - Include additional information in PartitioningError Resolves: RHEL-8005 - Do not remove PVs from devices file if disabled or doesn't exist Resolves: RHEL-84662 - Set persistent allow-discards flag for newly created LUKS devices Resolves: RHEL-82430 - Fix running tests in FIPS mode Resolves: RHEL-8029 - Modified passphrase in stratis test Resolves: RHEL-8029 - Align sizes up for growable LVs Resolves: RHEL-8036 Resolves: RHEL-19725 - tests: Adjust sizes in generic FS resize test for VFAT resize Resolves: RHEL-124142 - lvm-dbus: Fix calling lvcreate with empty list of PVs Resolves: RHEL-113928 - Don't allow suid and dev set on fs resize Resolves: RHEL-96039 - crypto: Add a function to set persistent flags for LUKS Resolves: RHEL-82886 - nvme: Add bd_nvme_is_tech_avail to the API file Resolves: RHEL-59588 - tests: Remove unreliable nvme attribute checks Resolves: RHEL-16126 - lvm: Add support for starting and stopping VG locking Resolves: RHEL-15921 - nvme: HostID fixes for TP4126 Resolves: RHEL-1375 - nvme: Stack smashing fixes Resolves: RHEL-13127 Resolves: RHEL-8037 - Update to release 1.6.8 - Resolves: RHEL-111711 - Update to release 1.6.5. - Resolves: RHEL-59512 - Add issues resolved by release 1.6.1 - Resolves: RHEL-36001 - Resolves: RHEL-36664 - Resolves: RHEL-36667 - Resolves: RHEL-36691 - Update to release 1.6.1. - Add dependency on systemd version - Update to release 1.6.0. - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixed brlapi multilib Resolves: rhbz#1915335 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - New version Resolves: rhbz#1910328 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Fixed brlapi.key to pass the RPM verification - OCaml 4.11.1 rebuild - OCaml 4.11.0 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Dropped explicit brlapi dependency (brltty) and relaxed brltty dependency (brlapi) Related: rhbz#1765611 - CVE-2026-111497 brotli: Out-of-Bounds Write in Google Brotli Decoder - Resolves: RHEL-290294 - Accept output_buffer_limit as an alias for max_output_length in Decompressor.process() for forward compatibility with upstream 1.2.0 - Resolves: RHEL-221150 - Resolves: RHEL-133995 Rebuild for CVE-2025-6176 Brotli decompression bomb DoS in scrapy - Resolves: RHEL-133995 CVE-2025-6176 Brotli decompression bomb DoS in scrapy - Accept output_buffer_limit as an alias for max_output_length in Decompressor.process() for forward compatibility with upstream 1.2.0 - Resolves: RHEL-221150 - Resolves: RHEL-133995 Rebuild for CVE-2025-6176 Brotli decompression bomb DoS in scrapy - Resolves: RHEL-133995 CVE-2025-6176 Brotli decompression bomb DoS in scrapy - Check BitMask(n) n value for kBrotliBitMask[n] bounds - Resolves: RHEL-133995 Rebuild for CVE-2025-6176 Brotli decompression bomb DoS in scrapy - Resolves: RHEL-133995 CVE-2025-6176 Brotli decompression bomb DoS in scrapy - Check BitMask(n) n value for kBrotliBitMask[n] bounds - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Translated using Weblate (Hebrew) (sh.yaron) - Added translation using Weblate (Hebrew) (sh.yaron) - Add support to ppc64le for debian build (74309971+gururajrkatti) - Translated using Weblate (Finnish) (ricky.tigg) - tools: Read input from stdin when not running in a tty (vtrefny) - travis: Print logs after failed tests (vtrefny) - tests: Run pylint and pycodestyle on bscalc (vtrefny) - bscalc: Add option to print only single "human readable" result (vtrefny) - travis: Add --nogpgcheck when using dnf on Fedora (vtrefny) - Translated using Weblate (Asturian) (fitoschido) - Update translation files (noreply) - Translated using Weblate (Spanish) (fitoschido) - Sync spec with downstream (vtrefny) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add Travis build status badge (vtrefny) - Add Travis CI config and Dockerfiles for running tests (vtrefny) - Add ansible playbook for installing test dependencies (vtrefny) - remove msgcat dependency (Aduskett) - Translated using Weblate (Bengali (India)) (akarshan.biswas) - Update translation files (noreply) - Added translation using Weblate (Bengali (India)) (akarshan.biswas) - Fix library version in pkgconfig file (vtrefny) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for Python 3.9 - Fix memory leak in bs_size_new_from_str (vtrefny) - Translated using Weblate (Turkish) (oguzersen) - add translation platform widget (jean-baptiste) - Update translation files (noreply) - Do not regenerate POT file during 'make release' (vtrefny) - Remove Zanata from our build and release processes (vtrefny) - Add PO files to git (vtrefny) - Sync spec with downstream (vtrefny) - Require the same version of python3-bytesize in libbytesize-tools (v.podzimek) - src/gettext: fix warning if gettext is already present (giulio.benetti) - Update README.md (vpodzime) - fix build on shells where test == fails (tbier) - Add POT file to git and do not rebuild it during every build (vtrefny) - Update to 1.20.1 - Resolves: rhbz#2016905 - Ship python3-cairo-devel in CRB - Resolves: rhbz#2053665 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.20.0 (bgz#1493325) - Move python2-cairo to a separate component - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to version 0.3.17 - related: RHEL-121734 - Update to version 0.3.16 - related: RHEL-121734 - Update to version 0.3.13 - resolves: RHEL-133513 - Update to version 0.3.12 - resolves: RHEL-121734 - Added channel binding support - resolves: RHEL-103417 - resolves: RHEL-24924 - Fix requirement on cepces-selinux - related: RHEL-13739 - Update to version 0.3.8 - resolves: RHEL-22301 - Fix spnego authentication - Fix SELinux sysctl denial - follow up - related: RHEL-215379 - Fix cepces-certmonger postinstall script - resolves: RHEL-215379 - Fix SELinux sysctl denial - Update to version 0.3.17 - related: RHEL-121734 - Update to version 0.3.16 - related: RHEL-121734 - Update to version 0.3.13 - resolves: RHEL-133513 - Update to version 0.3.12 - resolves: RHEL-121734 - Added channel binding support - resolves: RHEL-103417 - Remove compat libs for LLVM 20 - Update LLVM Toolset to 21.1.8 [rhel-9] - Update to 21.1.7 - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683) - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037) - Backport fix for build of highway package on ppc64le (rhbz#2383182) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to LLVM 20.1.8 - Add riscv64 enablement bits; thanks: Songsong Zhang (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com) - Update to LLVM 20.1.7 - Fix llvm-config alternatives handling (rhbz#2361779) - Use libdir suffix in versioned prefix - Add gating.yaml - Remove autorelease from the spec file - Initial RHEL 9 package. - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Subpackage python2-configobj has been removed See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal - Rebuilt for Python 3.8.0rc1 (#1748018) - Rebuilt for Python 3.8 - Add git build require, needed for binary patches (RHEL-67689) - Add zstd compression support (RHEL-67689) - Change test to compare contents instead of checksum, cleanup (RhBug:2130179) - Added patch to correctly handle SELinux labels in Kubernetes - Added latest upstream rseq patch - Update to 3.19 - Drop upstreamed patches - Handle rseq in generic compel code (checkpoint-restore/criu#3097) - Added patch to correctly handle SELinux labels in Kubernetes - Added latest upstream rseq patch - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - fix invalid delete (upstream ticket #11) - make is no longer in buildroot by default - use smaller git-core instead of git - 1873385 - ignore driverless utilities during tags creation - use %python3_sitearch in filter_provides_in, otherwise the package fails to build - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for Python 3.9 - 2.0.1, fixes #1816107 - Update to version 1.7 - Update to version 1.5 - Update to 0.5.1 - Resolves: rhbz#2192384 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Remove check test - Resolves: rhbz#1986607 - Update to 0.8.3 - Resolves: rhbz#2189682 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Remove check test - Remove BuildRequires for python3-dbus and python3-into-dbus-python - Resolves: rhbz#1986608 - Update to 0.4.1 - Resolves: rhbz#2196269 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Remove check test - Remove Requires and BuildRequires for python3-pyparsing - Resolves: rhbz#1986574 - Security fix for CVE-2026-15308 Resolves: RHEL-193786 - Fix ssl.SSLError: [ASN1: NOT_ENOUGH_DATA] not enough data with OpenSSL 3.5.7+ Resolves: RHEL-194207 - Security fixes for CVE-2026-4786 and CVE-2026-6100 Resolves: RHEL-167919, RHEL-168161 - Security fix for CVE-2026-4519 Resolves: RHEL-158117 - Rebuilding previous fixes for different build target Related: RHEL-143117, RHEL-143174, RHEL-144897 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143117 Resolves: RHEL-143174 Resolves: RHEL-144897 - Security fix for CVE-2025-12084 Resolves: RHEL-135897 - Move _sysconfigdata_d_linux*.py to the debug subpackage - Update to Python 3.9.25 - Update to Python 3.9.24 - Security fix for CVE-2026-11940 Resolves: RHEL-227228 - Security fix for CVE-2026-15308 Resolves: RHEL-193786 - Fix ssl.SSLError: [ASN1: NOT_ENOUGH_DATA] not enough data with OpenSSL 3.5.7+ Resolves: RHEL-194207 - Security fixes for CVE-2026-4786 and CVE-2026-6100 Resolves: RHEL-167919, RHEL-168161 - Security fix for CVE-2026-4519 Resolves: RHEL-158117 - Rebuilding previous fixes for different build target Related: RHEL-143117, RHEL-143174, RHEL-144897 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143117 Resolves: RHEL-143174 Resolves: RHEL-144897 - Security fix for CVE-2025-12084 Resolves: RHEL-135897 - Move _sysconfigdata_d_linux*.py to the debug subpackage - Update to Python 3.9.25 - CVE-2026-19553 python3.9: python: Certificate verification bypass via missing server_hostname validation in SSLContext.wrap_bio() Resolves: RHEL-274143 - CVE-2026-19445 python3.9: Use-after-free of a server-side SSLContext when sni_callback switches contexts Resolves: RHEL-276263 - CVE-2026-12345 python3.9: python: Arbitrary file deletion via race condition during temporary directory cleanup Resolves: RHEL-272937 - Security fix for CVE-2026-11940 Resolves: RHEL-227228 - Security fix for CVE-2026-15308 Resolves: RHEL-193786 - Fix ssl.SSLError: [ASN1: NOT_ENOUGH_DATA] not enough data with OpenSSL 3.5.7+ Resolves: RHEL-194207 - Security fixes for CVE-2026-4786 and CVE-2026-6100 Resolves: RHEL-167919, RHEL-168161 - Security fix for CVE-2026-4519 Resolves: RHEL-158117 - Rebuilding previous fixes for different build target Related: RHEL-143117, RHEL-143174, RHEL-144897 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143117 Resolves: RHEL-143174 Resolves: RHEL-144897 - Security fixes for CVE-2026-4786 and CVE-2026-6100 Resolves: RHEL-167919, RHEL-168161 - Security fix for CVE-2026-4519 Resolves: RHEL-158117 - Rebuilding previous fixes for different build target Related: RHEL-143117, RHEL-143174, RHEL-144897 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143117 Resolves: RHEL-143174 Resolves: RHEL-144897 - Security fix for CVE-2025-12084 Resolves: RHEL-135897 - Move _sysconfigdata_d_linux*.py to the debug subpackage - Update to Python 3.9.25 - Update to Python 3.9.24 - Security fix for CVE-2025-8194 Resolves: RHEL-106374 - Update to 3.9.23 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98051, RHEL-98024, RHEL-98242, RHEL-98193, RHEL-98218 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for Python 3.9 - Fix Python configuration for ELN/RHEL 9 - Rework bconds for Python now that there are no Fedoras left that should use Python2 - rebase to distro 1.5.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for Python 3.8.0rc1 (#1748018) - Rebuilt for Python 3.8 - Multisig: ignore untrusted signatures if there is trusted one (RHEL-145372) - Document that local packages are not affected by versionlock (RHEL-94014) - Rename dnf4-multisig(8) manual page to dnf-multisig(8) (RHEL-117134) - Fix importing OpenPGPv6 keys (RHEL-114424) - Add multisig plugin (RHEL-100157) - reposync: Avoid multiple downloads of duplicate packages (RHEL-64320) - Fix bogus changelog entry date - Add forgotten changelog - Backport patch: "dnf copr enable" on "Asahi Fedora Linux Remix" guesses (RHEL-56143) - needs-restarting: Get boot time from systemd UnitsLoadStartTimestamp (RHEL-14900) - reposync: Respect --norepopath with --metadata-path (RHEL-40914) - Multisig: ignore untrusted signatures if there is trusted one (RHEL-145372) - Document that local packages are not affected by versionlock (RHEL-94014) - Rename dnf4-multisig(8) manual page to dnf-multisig(8) (RHEL-117134) - Fix importing OpenPGPv6 keys (RHEL-114424) - Add multisig plugin (RHEL-100157) - reposync: Avoid multiple downloads of duplicate packages (RHEL-64320) - Fix bogus changelog entry date - Add forgotten changelog - Backport patch: "dnf copr enable" on "Asahi Fedora Linux Remix" guesses (RHEL-56143) - needs-restarting: Get boot time from systemd UnitsLoadStartTimestamp (RHEL-14900) - reposync: Respect --norepopath with --metadata-path (RHEL-40914) - Multisig: ignore untrusted signatures if there is trusted one (RHEL-145372) - Document that local packages are not affected by versionlock (RHEL-94014) - Rename dnf4-multisig(8) manual page to dnf-multisig(8) (RHEL-117134) - Fix importing OpenPGPv6 keys (RHEL-114424) - Add multisig plugin (RHEL-100157) - reposync: Avoid multiple downloads of duplicate packages (RHEL-64320) - Fix bogus changelog entry date - Add forgotten changelog - Backport patch: "dnf copr enable" on "Asahi Fedora Linux Remix" guesses (RHEL-56143) - needs-restarting: Get boot time from systemd UnitsLoadStartTimestamp (RHEL-14900) - reposync: Respect --norepopath with --metadata-path (RHEL-40914) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for Python 3.9 - Update to 0.16 - Remove python2 subpackage - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for Python 3.8.0rc1 (#1748018) - Rebuilt for Python 3.8 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Drop dependency on python-nose as tests are not included - Update to 3.2.0 (rhbz#1905482) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to version 3.1.1 (rhbz#1837989) - Rebuilt for Python 3.9 - Update to version 3.0.1 (rhbz#1794914) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fix TypeError: 'NoneType' object is not callable in magic.close() Resolves: RHEL-136523 - Bump release number Resolves: RHEL-128083 - Reintroduce "Ignore home server ping packets" Resolves: RHEL-128083 - Rebase to upstream 3.0.27 Resolves: RHEL-102101 - Expose ca_path_reload_interval in configuration files Resolves: RHEL-93552 - Rebuild for OpenSSL rebase to 3.5 Resolves: RHEL-88052 - Ignore home server ping packets Resolves: RHEL-54312 - Backport fixes for BlastRADIUS CVE Resolves: RHEL-46567 - Rebuild for OpenSSL rebase to 3.2.1 Resolves: RHEL-33857 - Comment out unneeded options from mods-available/eap Resolves: RHEL-30830 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - remove unneeded file with ambiguous licence - fixes bug bz#1939340 - Rebase with latest RHGS-3.5.4 - Fix changlog chronological order by removing unneeded changelogs - fixes bug bz#1939340 - fixes bugs bz#1953901 - fixes bugs bz#1927235 - fixes bugs bz#1948547 - fixes bugs bz#1939372 - fixes bugs bz#1832306 bz#1911292 bz#1924044 - fixes bugs bz#1224906 bz#1691320 bz#1719171 bz#1814744 bz#1865796 - fixes bugs bz#1600459 bz#1719171 bz#1830713 bz#1856574 - Fix the multilib problems by backporting fixes done by mhroncok from Fedora: - Move pure Python modules to a noarch subpackage - Ensure Python bytecode installed in multilib packages is bit-to-bit identical Resolves: rhbz#1915764 - Rebuilt for libffi 3.4.2 SONAME transition. Related: rhbz#1891914 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add concurrency fix Related: #1957130 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 3.40.1 - Update to 3.40.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Explicity BuildRequire python3-setuptools - Update to 3.38.0 - Bump release for move of -devel subpackage to CRB Resolves: rhbz#2149497 - Add python-greenlet to RHEL-9 Resolves: rhbz#2084555 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - New upstream release (1.6.9) - Rebuilt for Python 3.9 - New upstream release (1.6.5) - New upstream release (1.6.4) - Resolves: #1821889 - New upstream release (1.6.2) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt - Resolves: rhbz#2072719 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Version 4.3 - Resolves: rhbz#1989260 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Move eeprog to i2c-tools (shouldn't have been in eepromer sub package) - Drop/obsolete eepromer subpackage, deprecated for 6 years - Drop python2 conditionals - Minor cleanups - Version 4.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebase to PKI 11.7.1 - Rebase to PKI 11.7.0 - Rebase to PKI 11.7.0-beta1 - Drop pki-est subpackage - Use external runtime dependencies - Rebase to PKI 11.6.0 - Rebase to PKI 11.6.0-alpha2 - Rebase to PKI 11.5.1 - Rebase to PKI 11.5.0 - RHEL-245465 CVE-2026-76561 pki-core: ExternalProcessConstraint executable allow-list - RHEL-248586 CVE-2026-80110 pki-core: ACLFilter sort order fix - Rebase to PKI 11.7.1 - Rebase to PKI 11.7.0 - Rebase to PKI 11.7.0-beta1 - Drop pki-est subpackage - Use external runtime dependencies - Rebase to PKI 11.6.0 - Rebase to PKI 11.6.0-alpha2 - New upstream release 3.1.2 - Rebuilt for Python 3.10 - Add main package as dependency to python package. - Update spec per reviewer comments. - Update to 3.0.2. - Initial packaging. - Add gating configuration and a simple smoke test - Related: rhbz#1950291 - Add automatically generated Obsoletes tag with the python39- prefix for smoother upgrade from RHEL8 - Related: rhbz#1990421 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Disable tests on RHEL9 to remove tox dependency - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.1.1 (#1888157) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Initial package (#1856421) - Update to 0.8.2 - Resolves: rhbz#2193199 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Remove check test - Remove BuildRequires for python3-dbus-signature-pyparsing and python3-dbus - Resolves: rhbz#1986609 - Related: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-155037 Pagure #9953: Adding a group with 32Bit Idrange fails. [rhel-9.8.z] - Resolves: RHEL-153146 IdM password policy Min lifetime is not enforced when high minlife is set [rhel-9.8.z] - Resolves: RHEL-168047 ipa ca-show ipa --all failing to list RSN version - RHEL-148282 ipa-replica-conncheck fails with "an internal error has occured" - RHEL-148481 Pruning is enabled by default with RSN on RHEL 9.8 - RHEL-147191 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - RHEL-146185 Names of domains from a trusted forest should be compared case-insentive - RHEL-146184 ipa-advise client script requires keytab (should just require root access on client system) - RHEL-145854 Include latest fixes in python3-ipatests package - RHEL-143684 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - RHEL-141500 ipa use systemd-sysusers - Resolves: RHEL-141446 [RFE] Command that retrieve and install new CA certificates - Resolves: RHEL-140584 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-141297 Memory leaks in IPA plugins - Resolves: RHEL-141054 IPA fails to sign zone - Resolves: RHEL-138570 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-138473 Include latest fixes in python3-ipatests package - Resolves: RHEL-137585 ipa-server-upgrade succeeds but ipactl restart fails due to ipa-dnskeysyncd service failure caused by SELinux AVC denial on RHEL 9.8 - Resolves: RHEL-134542 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-134540 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-134196 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-132334 Include latest fixes in python3-ipatests package - Resolves: RHEL-129224 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-126974 Minor typo in ipa_idrange_fix.py - Resolves: RHEL-120954 Rebase ipa to latest 4.13.x version for RHEL 9.8 - Resolves: RHEL-128238 [RFE] Support storing LWCA private keys on an HSM [rhel-9] - Resolves: RHEL-126515 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM [rhel-9] - Resolves: RHEL-73399 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-128241 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier [rhel-9] - Resolves: RHEL-126514 [RFE] ipa-client-automount should have an option to include domain of the machine. [rhel-9] - Resolves: RHEL-124171 Include latest fixes in python3-ipatests package - Resolves: RHEL-120514 Include fixes in python3-ipatests [rhel-9.8] - Resolves: RHEL-118609 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114548 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-107483 ipa-ca-install fails on CA-less replica due to inadequate key usage in master certificate - RHEL-218866 CVE-2026-18147 ipa: FreeIPA/IdM: Cross-Site Scripting vulnerability allows arbitrary code execution via crafted URL [rhel-9.8.z] - RHEL-245474 CVE-2026-76578 ipa: FreeIPA: unauthenticated LDAP client can obtain administrator credentials via the self-managed-token ACI [rhel-9.8.z] - RHEL-248206 CVE-2026-79678 ipa: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service [rhel-9.8.z] - RHEL-245627 CVE-2026-19550 ipa: FreeIPA: trust-fetch-domains uses trust-read ACI to gate a privileged AD trust refresh, allowing unauthorized LDAP writes [rhel-9.8.z] - RHEL-240898 CVE-2026-13097 ipa: Privilege escalation via krbCanonicalName manipulation due to realm-unaware uniqueness enforcement in FreeIPA LDAP datastore [rhel-9.8.z] - RHEL-240830 CVE-2026-11861 ipa: FreeIPA: Obtaining TGS with impersonating cname through trust relationships [rhel-9.8.z] - RHEL-240815 CVE-2026-73197 ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read [rhel-9.8.z] - RHEL-240804 CVE-2026-73198 ipa: FreeIPA: Unauthenticated DoS in `/ipa/i18n_messages` via Unbounded Request Body Read [rhel-9.8.z] - RHEL-240767 ipa-migrate tool is renaming host records & host info in automount information [rhel-9.8.z] - RHEL-238677 ipa-migrate: require Replication Administrator privilege [rhel-9.8.z] - RHEL-238674 ipa-epn: drop_privileges method is mixing uid and gid [rhel-9.8.z] - RHEL-238527 ipa env: support only simple * wildcard [rhel-9.8.z] - Related: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-155037 Pagure #9953: Adding a group with 32Bit Idrange fails. [rhel-9.8.z] - Resolves: RHEL-153146 IdM password policy Min lifetime is not enforced when high minlife is set [rhel-9.8.z] - Resolves: RHEL-168047 ipa ca-show ipa --all failing to list RSN version - RHEL-148282 ipa-replica-conncheck fails with "an internal error has occured" - RHEL-148481 Pruning is enabled by default with RSN on RHEL 9.8 - RHEL-147191 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - RHEL-146185 Names of domains from a trusted forest should be compared case-insentive - RHEL-146184 ipa-advise client script requires keytab (should just require root access on client system) - RHEL-145854 Include latest fixes in python3-ipatests package - RHEL-143684 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - RHEL-141500 ipa use systemd-sysusers - Resolves: RHEL-141446 [RFE] Command that retrieve and install new CA certificates - Resolves: RHEL-140584 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-141297 Memory leaks in IPA plugins - Resolves: RHEL-141054 IPA fails to sign zone - Resolves: RHEL-138570 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-138473 Include latest fixes in python3-ipatests package - Resolves: RHEL-137585 ipa-server-upgrade succeeds but ipactl restart fails due to ipa-dnskeysyncd service failure caused by SELinux AVC denial on RHEL 9.8 - Resolves: RHEL-134542 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-134540 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-134196 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-132334 Include latest fixes in python3-ipatests package - Resolves: RHEL-129224 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-126974 Minor typo in ipa_idrange_fix.py - Resolves: RHEL-120954 Rebase ipa to latest 4.13.x version for RHEL 9.8 - Resolves: RHEL-128238 [RFE] Support storing LWCA private keys on an HSM [rhel-9] - Resolves: RHEL-126515 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM [rhel-9] - Resolves: RHEL-73399 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-128241 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier [rhel-9] - Resolves: RHEL-126514 [RFE] ipa-client-automount should have an option to include domain of the machine. [rhel-9] - Resolves: RHEL-124171 Include latest fixes in python3-ipatests package - Resolves: RHEL-120514 Include fixes in python3-ipatests [rhel-9.8] - Resolves: RHEL-118609 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114548 Rebase Samba to the latest 4.23.x release - Related: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-155037 Pagure #9953: Adding a group with 32Bit Idrange fails. [rhel-9.8.z] - Resolves: RHEL-153146 IdM password policy Min lifetime is not enforced when high minlife is set [rhel-9.8.z] - Resolves: RHEL-168047 ipa ca-show ipa --all failing to list RSN version - RHEL-148282 ipa-replica-conncheck fails with "an internal error has occured" - RHEL-148481 Pruning is enabled by default with RSN on RHEL 9.8 - RHEL-147191 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - RHEL-146185 Names of domains from a trusted forest should be compared case-insentive - RHEL-146184 ipa-advise client script requires keytab (should just require root access on client system) - RHEL-145854 Include latest fixes in python3-ipatests package - RHEL-143684 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - RHEL-141500 ipa use systemd-sysusers - Resolves: RHEL-141446 [RFE] Command that retrieve and install new CA certificates - Resolves: RHEL-140584 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-141297 Memory leaks in IPA plugins - Resolves: RHEL-141054 IPA fails to sign zone - Resolves: RHEL-138570 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-138473 Include latest fixes in python3-ipatests package - Resolves: RHEL-137585 ipa-server-upgrade succeeds but ipactl restart fails due to ipa-dnskeysyncd service failure caused by SELinux AVC denial on RHEL 9.8 - Resolves: RHEL-134542 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-134540 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-134196 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-132334 Include latest fixes in python3-ipatests package - Resolves: RHEL-129224 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-126974 Minor typo in ipa_idrange_fix.py - Resolves: RHEL-120954 Rebase ipa to latest 4.13.x version for RHEL 9.8 - Resolves: RHEL-128238 [RFE] Support storing LWCA private keys on an HSM [rhel-9] - Resolves: RHEL-126515 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM [rhel-9] - Resolves: RHEL-73399 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-128241 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier [rhel-9] - Resolves: RHEL-126514 [RFE] ipa-client-automount should have an option to include domain of the machine. [rhel-9] - Resolves: RHEL-124171 Include latest fixes in python3-ipatests package - Resolves: RHEL-120514 Include fixes in python3-ipatests [rhel-9.8] - Resolves: RHEL-118609 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114548 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-107483 ipa-ca-install fails on CA-less replica due to inadequate key usage in master certificate - RHEL-218866 CVE-2026-18147 ipa: FreeIPA/IdM: Cross-Site Scripting vulnerability allows arbitrary code execution via crafted URL [rhel-9.8.z] - RHEL-245474 CVE-2026-76578 ipa: FreeIPA: unauthenticated LDAP client can obtain administrator credentials via the self-managed-token ACI [rhel-9.8.z] - RHEL-248206 CVE-2026-79678 ipa: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service [rhel-9.8.z] - RHEL-245627 CVE-2026-19550 ipa: FreeIPA: trust-fetch-domains uses trust-read ACI to gate a privileged AD trust refresh, allowing unauthorized LDAP writes [rhel-9.8.z] - RHEL-240898 CVE-2026-13097 ipa: Privilege escalation via krbCanonicalName manipulation due to realm-unaware uniqueness enforcement in FreeIPA LDAP datastore [rhel-9.8.z] - RHEL-240830 CVE-2026-11861 ipa: FreeIPA: Obtaining TGS with impersonating cname through trust relationships [rhel-9.8.z] - RHEL-240815 CVE-2026-73197 ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read [rhel-9.8.z] - RHEL-240804 CVE-2026-73198 ipa: FreeIPA: Unauthenticated DoS in `/ipa/i18n_messages` via Unbounded Request Body Read [rhel-9.8.z] - RHEL-240767 ipa-migrate tool is renaming host records & host info in automount information [rhel-9.8.z] - RHEL-238677 ipa-migrate: require Replication Administrator privilege [rhel-9.8.z] - RHEL-238674 ipa-epn: drop_privileges method is mixing uid and gid [rhel-9.8.z] - RHEL-238527 ipa env: support only simple * wildcard [rhel-9.8.z] - Related: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-155037 Pagure #9953: Adding a group with 32Bit Idrange fails. [rhel-9.8.z] - Resolves: RHEL-153146 IdM password policy Min lifetime is not enforced when high minlife is set [rhel-9.8.z] - Resolves: RHEL-168047 ipa ca-show ipa --all failing to list RSN version - RHEL-148282 ipa-replica-conncheck fails with "an internal error has occured" - RHEL-148481 Pruning is enabled by default with RSN on RHEL 9.8 - RHEL-147191 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - RHEL-146185 Names of domains from a trusted forest should be compared case-insentive - RHEL-146184 ipa-advise client script requires keytab (should just require root access on client system) - RHEL-145854 Include latest fixes in python3-ipatests package - RHEL-143684 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - RHEL-141500 ipa use systemd-sysusers - Resolves: RHEL-141446 [RFE] Command that retrieve and install new CA certificates - Resolves: RHEL-140584 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-141297 Memory leaks in IPA plugins - Resolves: RHEL-141054 IPA fails to sign zone - Resolves: RHEL-138570 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-138473 Include latest fixes in python3-ipatests package - Resolves: RHEL-137585 ipa-server-upgrade succeeds but ipactl restart fails due to ipa-dnskeysyncd service failure caused by SELinux AVC denial on RHEL 9.8 - Resolves: RHEL-134542 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-134540 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-134196 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-132334 Include latest fixes in python3-ipatests package - Resolves: RHEL-129224 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-126974 Minor typo in ipa_idrange_fix.py - Resolves: RHEL-120954 Rebase ipa to latest 4.13.x version for RHEL 9.8 - Resolves: RHEL-128238 [RFE] Support storing LWCA private keys on an HSM [rhel-9] - Resolves: RHEL-126515 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM [rhel-9] - Resolves: RHEL-73399 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-128241 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier [rhel-9] - Resolves: RHEL-126514 [RFE] ipa-client-automount should have an option to include domain of the machine. [rhel-9] - Resolves: RHEL-124171 Include latest fixes in python3-ipatests package - Resolves: RHEL-120514 Include fixes in python3-ipatests [rhel-9.8] - Resolves: RHEL-118609 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114548 Rebase Samba to the latest 4.23.x release - Related: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-155037 Pagure #9953: Adding a group with 32Bit Idrange fails. [rhel-9.8.z] - Resolves: RHEL-153146 IdM password policy Min lifetime is not enforced when high minlife is set [rhel-9.8.z] - Resolves: RHEL-168047 ipa ca-show ipa --all failing to list RSN version - RHEL-148282 ipa-replica-conncheck fails with "an internal error has occured" - RHEL-148481 Pruning is enabled by default with RSN on RHEL 9.8 - RHEL-147191 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - RHEL-146185 Names of domains from a trusted forest should be compared case-insentive - RHEL-146184 ipa-advise client script requires keytab (should just require root access on client system) - RHEL-145854 Include latest fixes in python3-ipatests package - RHEL-143684 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - RHEL-141500 ipa use systemd-sysusers - Resolves: RHEL-141446 [RFE] Command that retrieve and install new CA certificates - Resolves: RHEL-140584 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-141297 Memory leaks in IPA plugins - Resolves: RHEL-141054 IPA fails to sign zone - Resolves: RHEL-138570 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-138473 Include latest fixes in python3-ipatests package - Resolves: RHEL-137585 ipa-server-upgrade succeeds but ipactl restart fails due to ipa-dnskeysyncd service failure caused by SELinux AVC denial on RHEL 9.8 - Resolves: RHEL-134542 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-134540 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-134196 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-132334 Include latest fixes in python3-ipatests package - Resolves: RHEL-129224 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-126974 Minor typo in ipa_idrange_fix.py - Resolves: RHEL-120954 Rebase ipa to latest 4.13.x version for RHEL 9.8 - Resolves: RHEL-128238 [RFE] Support storing LWCA private keys on an HSM [rhel-9] - Resolves: RHEL-126515 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM [rhel-9] - Resolves: RHEL-73399 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-128241 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier [rhel-9] - Resolves: RHEL-126514 [RFE] ipa-client-automount should have an option to include domain of the machine. [rhel-9] - Resolves: RHEL-124171 Include latest fixes in python3-ipatests package - Resolves: RHEL-120514 Include fixes in python3-ipatests [rhel-9.8] - Resolves: RHEL-118609 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114548 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-107483 ipa-ca-install fails on CA-less replica due to inadequate key usage in master certificate - RHEL-218866 CVE-2026-18147 ipa: FreeIPA/IdM: Cross-Site Scripting vulnerability allows arbitrary code execution via crafted URL [rhel-9.8.z] - RHEL-245474 CVE-2026-76578 ipa: FreeIPA: unauthenticated LDAP client can obtain administrator credentials via the self-managed-token ACI [rhel-9.8.z] - RHEL-248206 CVE-2026-79678 ipa: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service [rhel-9.8.z] - RHEL-245627 CVE-2026-19550 ipa: FreeIPA: trust-fetch-domains uses trust-read ACI to gate a privileged AD trust refresh, allowing unauthorized LDAP writes [rhel-9.8.z] - RHEL-240898 CVE-2026-13097 ipa: Privilege escalation via krbCanonicalName manipulation due to realm-unaware uniqueness enforcement in FreeIPA LDAP datastore [rhel-9.8.z] - RHEL-240830 CVE-2026-11861 ipa: FreeIPA: Obtaining TGS with impersonating cname through trust relationships [rhel-9.8.z] - RHEL-240815 CVE-2026-73197 ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via Unbounded Request Body Read [rhel-9.8.z] - RHEL-240804 CVE-2026-73198 ipa: FreeIPA: Unauthenticated DoS in `/ipa/i18n_messages` via Unbounded Request Body Read [rhel-9.8.z] - RHEL-240767 ipa-migrate tool is renaming host records & host info in automount information [rhel-9.8.z] - RHEL-238677 ipa-migrate: require Replication Administrator privilege [rhel-9.8.z] - RHEL-238674 ipa-epn: drop_privileges method is mixing uid and gid [rhel-9.8.z] - RHEL-238527 ipa env: support only simple * wildcard [rhel-9.8.z] - Related: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-155037 Pagure #9953: Adding a group with 32Bit Idrange fails. [rhel-9.8.z] - Resolves: RHEL-153146 IdM password policy Min lifetime is not enforced when high minlife is set [rhel-9.8.z] - Resolves: RHEL-168047 ipa ca-show ipa --all failing to list RSN version - RHEL-148282 ipa-replica-conncheck fails with "an internal error has occured" - RHEL-148481 Pruning is enabled by default with RSN on RHEL 9.8 - RHEL-147191 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - RHEL-146185 Names of domains from a trusted forest should be compared case-insentive - RHEL-146184 ipa-advise client script requires keytab (should just require root access on client system) - RHEL-145854 Include latest fixes in python3-ipatests package - RHEL-143684 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - RHEL-141500 ipa use systemd-sysusers - Resolves: RHEL-141446 [RFE] Command that retrieve and install new CA certificates - Resolves: RHEL-140584 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-141297 Memory leaks in IPA plugins - Resolves: RHEL-141054 IPA fails to sign zone - Resolves: RHEL-138570 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-138473 Include latest fixes in python3-ipatests package - Resolves: RHEL-137585 ipa-server-upgrade succeeds but ipactl restart fails due to ipa-dnskeysyncd service failure caused by SELinux AVC denial on RHEL 9.8 - Resolves: RHEL-134542 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-134540 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-134196 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-132334 Include latest fixes in python3-ipatests package - Resolves: RHEL-129224 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-126974 Minor typo in ipa_idrange_fix.py - Resolves: RHEL-120954 Rebase ipa to latest 4.13.x version for RHEL 9.8 - Resolves: RHEL-128238 [RFE] Support storing LWCA private keys on an HSM [rhel-9] - Resolves: RHEL-126515 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM [rhel-9] - Resolves: RHEL-73399 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-128241 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier [rhel-9] - Resolves: RHEL-126514 [RFE] ipa-client-automount should have an option to include domain of the machine. [rhel-9] - Resolves: RHEL-124171 Include latest fixes in python3-ipatests package - Resolves: RHEL-120514 Include fixes in python3-ipatests [rhel-9.8] - Resolves: RHEL-118609 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA - Related: RHEL-114548 Rebase Samba to the latest 4.23.x release - Open-iSCSI upstream 2.1.11 - rebase to upstream 2.1.9+ with iscsiuio 0.7.8.8 - new meson build system, sync with fedora packaging - fix CVE-2026-44943: path traversal via IQN names in discovery - fix CVE-2026-44944: iscsiuio socket credential verification bypass - fix CVE-2026-44943: path traversal via IQN names in discovery - fix CVE-2026-44944: iscsiuio socket credential verification bypass - fix regression in fw and static node records - Open-iSCSI upstream 2.1.11 - Security fix for CVE-2025-27516 Resolves: RHEL-85064 - Security fix for CVE-2024-56326 Resolves: RHEL-74690 - Security fix for CVE-2024-34064 Resolves: RHEL-35653 - Security fix for CVE-2024-22195 Resolves: RHEL-21349 - Update to 1.0.1 Resolves: RHEL-126064 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for Python 3.8.0rc1 (#1748018) - Rebuilt for Python 3.8 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - update to upstream version 2.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Subpackage python2-jsonpointer has been removed See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal - Rebuilt for Python 3.8 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Remove +format metapackage - Resolves: rhbz#1952356 - Remove unwanted packages - Resolves: bz#1935823 - Resolves: bz#1942562 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Provide python3dist(jsonschema[format]) again (#1878976) - Remove metapackage for python3dist(jsonschema[format]) (missing deps, #1880820) - Add metapackage for python3dist(jsonschema[format]) needed by python3-bravado-core (#1878976) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for Python 3.9 - Update to 0.15.2 - Resolves: rhbz#2203858 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Remove check test - Resolves: rhbz#1986912 - Update to 0.15.2 - Resolves: rhbz#2204503 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Remove check test - Remove BuildRequires and Requires for python3-justbases - Resolves: rhbz#1986913 - Limit max plaintext size for JWE decompression Resolves: RHEL-166029 - Disable auto-generation of dependencies Related: RHEL-34809 - Rebase to version 1.5.6 Resolve: RHEL-34809 - New upstream version (1.1.0) - Use DNS discovery for declared realms only (CVE-2025-59088) Resolves: RHEL-113677 - Fix DoS vulnerability based on unbounded TCP buffering (CVE-2025-59089) Resolves: RHEL-113681 - Log KDC timeout only once per request Resolves: RHEL-68355 - Rebase to version 1.3 - Resolves: RHEL-3336 - khci won't work with Quarkus-based Keycloak due to missing /auth path - Fix registrar authentication bypass (CVE-2026-1709) Resolves: RHEL-145391 - Add support for TPM quotes using ECC keys Resolves: RHEL-118150 - Keylime: Registrar allows identity takeover via duplicate UUID registration Resolves: RHEL-130761 - Change ownership of /usr/share/keylime/tpm_cert_store to root Resolves: RHEL-106024 - Properly fix the malformed certificate workaround Resolves: RHEL-111244 - Fix for revocation notifier not closing TLS session correctly Resolves: RHEL-109656 - Support vendor_db: follow-up fix Related: RHEL-80455 - Support vendor_db as logged by newer shim versions Resolves: RHEL-80455 - Fix DB connection leaks Resolves: RHEL-108263 - Fix tmpfiles.d configuration related to the cert store Resolves: RHEL-104572 - Add API version negotiation to keylime_tenant Resolves: RHEL-154785 - Fix registrar authentication bypass (CVE-2026-1709) Resolves: RHEL-145391 - Add support for TPM quotes using ECC keys Resolves: RHEL-118150 - Keylime: Registrar allows identity takeover via duplicate UUID registration Resolves: RHEL-130761 - Change ownership of /usr/share/keylime/tpm_cert_store to root Resolves: RHEL-106024 - Properly fix the malformed certificate workaround Resolves: RHEL-111244 - Fix for revocation notifier not closing TLS session correctly Resolves: RHEL-109656 - Support vendor_db: follow-up fix Related: RHEL-80455 - Support vendor_db as logged by newer shim versions Resolves: RHEL-80455 - Fix DB connection leaks Resolves: RHEL-108263 - workflows: run tests using only python 3.9 (bcl) Related: RHEL-75659 - workflows: Switch to using ubuntu-latest (bcl) Related: RHEL-75659 - Do not remove "md" prefix from RAID names (vtrefny) Resolves: RHEL-75659 - Update %certificate section documentation (rvykydal) Related: RHEL-61432 - Make %certificate section option --dir mandatory. (rvykydal) Resolves: RHEL-76501 - Switch to using tmt based tests and running unit tests during build Related: RHEL-61432 - Add support for inline certificates with `%certificate` section (k.koukiou) Resolves: RHEL-61432 - tox: Only run unit tests for python 3.6 (bcl) Related: RHEL-17662 - Add conflict test between ostree sources (#2125655) (jkonecny) Related: RHEL-17662 - Fix missing seen check for output generation (#2125655) (jkonecny) Related: RHEL-17662 - Add new ostreecontainer command (#2125655) (jkonecny) Resolves: RHEL-17662 - Check the conflicting commands automatically (vponcova) Related: RHEL-17662 - Fix tests for conflicting commands (vponcova) Related: RHEL-17662 - Add conflicting commands support (bcl) Related: RHEL-17662 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 0.0.54 - add list_common_languages derived from gnome-control-center by Sundeep ANAND <suanand@redhat.com> - Update to 0.0.53 - Capitalize the return values of language_name() and territory_name() (See: https://github.com/rhinstaller/anaconda/pull/2837). - Add more translations from CLDR - Get translation changes from CLDR - Update to 0.0.52 - add list_common_keyboards() to public api by Sundeep ANAND <suanand@redhat.com> - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Parse stuff in glibc locale names after @ which is not a script as a variant - Add ckb_IQ.UTF-8 locale - Add python-lark-parser to RHEL-9 Resolves: rhbz#2084554 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Rebuilt for Python 3.10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 0.9.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fixing CVE-2025-47151 Resolves: RHEL-126685 CVE-2025-47151 lasso: Type confusion in Entr'ouvert Lasso - Fix changelog date typo Related: rhbz#2158289 - New upstream release 3.4.3 Resolves: rhbz#2158289 - Disable openldap-servers tests as the package is fully deprecated Resolves: rhbz#2102940 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix SASL get/set options on big endian platforms - Resolves: rhbz#1976827 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Run test suite without tox (#1918913) - Resolves: RHEL-220502 - CVE-2026-18355 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasl_io_start_packet() [rhel-9.8.z] - Resolves: RHEL-222321 - CVE-2026-18453 389-ds-base: pre-authentication NULL pointer dereference via paged results and USE_ONE_BACKEND control in op_shared_search [rhel-9.8.z] - Resolves: RHEL-232854 - CVE-2026-18922 389-ds-base: SASL PLAIN authentication allows privilege escalation to Directory Manager via stale identity in Cyrus SASL auxiliary property [rhel-9.8.z] - Resolves: RHEL-244467 - lib389: set nsDS5ReplicaBindDNGroup before ensure_agreement() [rhel-9.8.z] - Resolves: RHEL-245374 - CVE-2026-76560 389-ds-base: anonymous LDAP client can defeat SELFDN ACI bind-rule checks via empty bind DN [rhel-9.8.z] - Resolves: RHEL-247865 - CVE-2026-78701 389-ds-base: CVE-2026-11610 incomplete fix may introduce a connection-stall DoS [rhel-9.8.z] - Resolves: RHEL-248766 - CVE-2026-11770 fix breaks replication total init when nsDS5ReplicaBindDNGroup is set after agreement creation [rhel-9.8.z] - Resolves: RHEL-183082 - CVE-2026-11770 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check [rhel-9.8.z] - Resolves: RHEL-190775 - CVE-2026-11788 389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser [rhel-9.8.z] - Resolves: RHEL-210875 - CVE-2026-15722 389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing [rhel-9.8.z] - Resolves: RHEL-182159 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-9.8.z] - Resolves: RHEL-183103 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow [rhel-9.8.z] - Resolves: RHEL-152356 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. [rhel-9.8.z] - Resolves: RHEL-168967 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. [rhel-9.8.z] - Resolves: RHEL-170269 - DS 12 does not handle escape char in bind user [rhel-9.8.z] - Resolves: RHEL-174524 - [RFE] Add OS-level thread names to all server threads [rhel-9.8.z] - Resolves: RHEL-178086 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-9.8] - Resolves: RHEL-180716 - Online export is failing when using the option "-s" [rhel-9.8.z] - Resolves: RHEL-183895 - Server shutdown during online reindex may lead to data loss [rhel-9.8.z] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-137084 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-152338 - Crash ( Segmentation fault ) in atomic_compare_exchange() [rhel-9.8] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-150907 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-111229 - Error showing local password policy on web UI [rhel-9] - Resolves: RHEL-112680 - Statistics about index lookup report a wrong duration [rhel-9] - Resolves: RHEL-116426 - RetroCL plugin generates invalid LDIF [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-117748 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-117771 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default - Resolves: RHEL-117782 - Ignore the memberOfDeferredUpdate setting when LMDB is used. [rhel-9] - Resolves: RHEL-121170 - Units for changing MDB max size are not consistent across different tools [rhel-9] - Resolves: RHEL-123231 - Improve the way to detect asynchronous operations in the access logs [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123258 - Typo in errors log after a Memberof fixup task. [rhel-9] - Resolves: RHEL-123272 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-123368 - IPA health check up script shows time skew is over 24 hours [rhel-9] - Resolves: RHEL-123766 - 389-ds-base OpenScanHub Leaks Detected [rhel-9] - Resolves: RHEL-123893 - Improve output dsctl dbverify when backend does not exist [rhel-9] - Resolves: RHEL-123897 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9] - Resolves: RHEL-123923 - Changelog trimming - add number of scanned entries to the log [rhel-9] - Resolves: RHEL-126552 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly [rhel-9] - Resolves: RHEL-129559 - Online initialization of consumers fails with error -23 [rhel-9] - Resolves: RHEL-129580 - Fix paged result search locking [rhel-9] - Resolves: RHEL-138481 - Memory leak observed in ns-slapd with 389-ds-base-2.6.1-12 [rhel-9] - Resolves: RHEL-139825 - Rebase 389-ds-base to 2.8.x - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-216720 - ERR - idl_new_range_fetch - Failed to build range candidate list on entryusn index [rhel-9.8.z] - Resolves: RHEL-234360 - Online reinitialization is failing with the supplier being busy calling idrange_add_id() [rhel-9.8.z] - Resolves: RHEL-252559 - MOD_REPLACE on groups/link attributes modifies overlap targets [rhel-9.8.z] - Resolves: RHEL-256995 - large IdM host group, missing memberof host group, authentication failures, high traffic and contention [rhel-9.8.z] - Resolves: RHEL-257002 - WARN - keys2idl - received NULL idl from index_read_ext_allids [rhel-9.8.z] - Resolves: RHEL-267288 - dsEntryDN is being updated when nsslapd-return-original-entrydn is set to off [rhel-9.8.z] - Resolves: RHEL-267317 - When fetching an entry from the DB, if nsslapd-return-original-entrydn is enabled the return dsEntryDN rather than normalized DN [rhel-9.8.z] - Resolves: RHEL-267322 - Differences on export ldif using online of off-line method on RHDS [rhel-9.8.z] - Resolves: RHEL-220502 - CVE-2026-18355 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasl_io_start_packet() [rhel-9.8.z] - Resolves: RHEL-222321 - CVE-2026-18453 389-ds-base: pre-authentication NULL pointer dereference via paged results and USE_ONE_BACKEND control in op_shared_search [rhel-9.8.z] - Resolves: RHEL-232854 - CVE-2026-18922 389-ds-base: SASL PLAIN authentication allows privilege escalation to Directory Manager via stale identity in Cyrus SASL auxiliary property [rhel-9.8.z] - Resolves: RHEL-244467 - lib389: set nsDS5ReplicaBindDNGroup before ensure_agreement() [rhel-9.8.z] - Resolves: RHEL-245374 - CVE-2026-76560 389-ds-base: anonymous LDAP client can defeat SELFDN ACI bind-rule checks via empty bind DN [rhel-9.8.z] - Resolves: RHEL-247865 - CVE-2026-78701 389-ds-base: CVE-2026-11610 incomplete fix may introduce a connection-stall DoS [rhel-9.8.z] - Resolves: RHEL-248766 - CVE-2026-11770 fix breaks replication total init when nsDS5ReplicaBindDNGroup is set after agreement creation [rhel-9.8.z] - Resolves: RHEL-183082 - CVE-2026-11770 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check [rhel-9.8.z] - Resolves: RHEL-190775 - CVE-2026-11788 389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser [rhel-9.8.z] - Resolves: RHEL-210875 - CVE-2026-15722 389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing [rhel-9.8.z] - Resolves: RHEL-182159 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-9.8.z] - Resolves: RHEL-183103 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow [rhel-9.8.z] - Resolves: RHEL-152356 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. [rhel-9.8.z] - Resolves: RHEL-168967 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. [rhel-9.8.z] - Resolves: RHEL-170269 - DS 12 does not handle escape char in bind user [rhel-9.8.z] - Resolves: RHEL-174524 - [RFE] Add OS-level thread names to all server threads [rhel-9.8.z] - Resolves: RHEL-178086 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-9.8] - Resolves: RHEL-180716 - Online export is failing when using the option "-s" [rhel-9.8.z] - Resolves: RHEL-183895 - Server shutdown during online reindex may lead to data loss [rhel-9.8.z] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-137084 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-152338 - Crash ( Segmentation fault ) in atomic_compare_exchange() [rhel-9.8] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-150907 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-137084 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-152338 - Crash ( Segmentation fault ) in atomic_compare_exchange() [rhel-9.8] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-150907 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-111229 - Error showing local password policy on web UI [rhel-9] - Resolves: RHEL-112680 - Statistics about index lookup report a wrong duration [rhel-9] - Resolves: RHEL-116426 - RetroCL plugin generates invalid LDIF [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-117748 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-117771 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default - Resolves: RHEL-117782 - Ignore the memberOfDeferredUpdate setting when LMDB is used. [rhel-9] - Resolves: RHEL-121170 - Units for changing MDB max size are not consistent across different tools [rhel-9] - Resolves: RHEL-123231 - Improve the way to detect asynchronous operations in the access logs [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123258 - Typo in errors log after a Memberof fixup task. [rhel-9] - Resolves: RHEL-123272 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-123368 - IPA health check up script shows time skew is over 24 hours [rhel-9] - Resolves: RHEL-123766 - 389-ds-base OpenScanHub Leaks Detected [rhel-9] - Resolves: RHEL-123893 - Improve output dsctl dbverify when backend does not exist [rhel-9] - Resolves: RHEL-123897 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9] - Resolves: RHEL-123923 - Changelog trimming - add number of scanned entries to the log [rhel-9] - Resolves: RHEL-126552 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly [rhel-9] - Resolves: RHEL-129559 - Online initialization of consumers fails with error -23 [rhel-9] - Resolves: RHEL-129580 - Fix paged result search locking [rhel-9] - Resolves: RHEL-138481 - Memory leak observed in ns-slapd with 389-ds-base-2.6.1-12 [rhel-9] - Resolves: RHEL-139825 - Rebase 389-ds-base to 2.8.x - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-104591 - RHDS12: Web console doesn't show Server Version [rhel-9] - Resolves: RHEL-104593 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-109034 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9] - Resolves: RHEL-109885 - Wrong backend database name syntax causes "Red Hat Directory Server" => "Databases" menu blank in Cockpit [rhel-9] - Resolves: RHEL-109889 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9] - Resolves: RHEL-109892 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy. [rhel-9] - Resolves: RHEL-109897 - AddressSanitizer: leak in do_search [rhel-9] - Resolves: RHEL-113981 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9] - Resolves: RHEL-89762 - dsidm Error: float() argument must be a string or a number, not 'NoneType' [rhel-9] - Resolves: RHEL-92041 - Memory leak in roles_cache_create_object_from_entry - Resolves: RHEL-95444 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] [rhel-9] - Resolves: RHEL-104821 - ipa-restore fails to restore SELinux contexts, causes ns-slapd AVC denials on /dev/shm after restore. - Resolves: RHEL-107005 - Failure to get Server monitoring data when NDN cache is disabled. [rhel-9] - Resolves: RHEL-107581 - segfault - error 4 in libpthread-2.28.so [rhel-9] - Resolves: RHEL-107585 - ns-slapd crashed when we add nsslapd-referral [rhel-9] - Resolves: RHEL-107586 - CWE-284 dirsrv log rotation creates files with world readable permission [rhel-9] - Resolves: RHEL-107587 - CWE-532 Created user password hash available to see in audit log [rhel-9] - Resolves: RHEL-107588 - CWE-778 Log doesn't show what user gets password changed by administrator [rhel-9] - Resolves: RHEL-61347 - Directory Server is unavailable after a restart with nsslapd-readonly=on and consumes 100% CPU - Resolves: RHEL-77983 - Defects found by OpenScanHub - Resolves: RHEL-79673 - Improve the "result" field of ipa-healthcheck if replicas are busy - Resolves: RHEL-80496 - Can't rename users member of automember rule [rhel-9] - Resolves: RHEL-81141 - Healthcheck tool should warn admin about creating a substring index on membership attribute [rhel-9] - Resolves: RHEL-89736 - dsconf backend replication monitor fails if replica id starts with 0 [rhel-9] - Resolves: RHEL-89745 - ns-slapd crash in dbmdb_import_prepare_worker_entry() [rhel-9] - Resolves: RHEL-89753 - Nested group does not receive memberOf attribute [rhel-9] - Resolves: RHEL-89769 - Crash in __strlen_sse2 when using the nsRole filter rewriter. [rhel-9] - Resolves: RHEL-89782 - RHDS12.2 NSMMReplicationPlugin - release_replica Unable to parse the response [rhel-9] - Resolves: RHEL-95768 - Improve error message when bulk import connection is closed [rhel-9] - Resolves: RHEL-101189 - lib389/replica.py is using unexisting datetime.UTC in python3.9 - Resolves: RHEL-152356 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. [rhel-9.8.z] - Resolves: RHEL-168967 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. [rhel-9.8.z] - Resolves: RHEL-170269 - DS 12 does not handle escape char in bind user [rhel-9.8.z] - Resolves: RHEL-174524 - [RFE] Add OS-level thread names to all server threads [rhel-9.8.z] - Resolves: RHEL-178086 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-9.8] - Resolves: RHEL-180716 - Online export is failing when using the option "-s" [rhel-9.8.z] - Resolves: RHEL-183895 - Server shutdown during online reindex may lead to data loss [rhel-9.8.z] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-137084 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-152338 - Crash ( Segmentation fault ) in atomic_compare_exchange() [rhel-9.8] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-150907 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-111229 - Error showing local password policy on web UI [rhel-9] - Resolves: RHEL-112680 - Statistics about index lookup report a wrong duration [rhel-9] - Resolves: RHEL-116426 - RetroCL plugin generates invalid LDIF [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-117748 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-117771 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default - Resolves: RHEL-117782 - Ignore the memberOfDeferredUpdate setting when LMDB is used. [rhel-9] - Resolves: RHEL-121170 - Units for changing MDB max size are not consistent across different tools [rhel-9] - Resolves: RHEL-123231 - Improve the way to detect asynchronous operations in the access logs [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123258 - Typo in errors log after a Memberof fixup task. [rhel-9] - Resolves: RHEL-123272 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-123368 - IPA health check up script shows time skew is over 24 hours [rhel-9] - Resolves: RHEL-123766 - 389-ds-base OpenScanHub Leaks Detected [rhel-9] - Resolves: RHEL-123893 - Improve output dsctl dbverify when backend does not exist [rhel-9] - Resolves: RHEL-123897 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9] - Resolves: RHEL-123923 - Changelog trimming - add number of scanned entries to the log [rhel-9] - Resolves: RHEL-126552 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly [rhel-9] - Resolves: RHEL-129559 - Online initialization of consumers fails with error -23 [rhel-9] - Resolves: RHEL-129580 - Fix paged result search locking [rhel-9] - Resolves: RHEL-138481 - Memory leak observed in ns-slapd with 389-ds-base-2.6.1-12 [rhel-9] - Resolves: RHEL-139825 - Rebase 389-ds-base to 2.8.x - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-104591 - RHDS12: Web console doesn't show Server Version [rhel-9] - Resolves: RHEL-104593 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-109034 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9] - Resolves: RHEL-109885 - Wrong backend database name syntax causes "Red Hat Directory Server" => "Databases" menu blank in Cockpit [rhel-9] - Resolves: RHEL-109889 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9] - Resolves: RHEL-109892 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy. [rhel-9] - Resolves: RHEL-109897 - AddressSanitizer: leak in do_search [rhel-9] - Resolves: RHEL-113981 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9] - Resolves: RHEL-89762 - dsidm Error: float() argument must be a string or a number, not 'NoneType' [rhel-9] - Resolves: RHEL-92041 - Memory leak in roles_cache_create_object_from_entry - Resolves: RHEL-95444 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] [rhel-9] - Resolves: RHEL-104821 - ipa-restore fails to restore SELinux contexts, causes ns-slapd AVC denials on /dev/shm after restore. - Resolves: RHEL-107005 - Failure to get Server monitoring data when NDN cache is disabled. [rhel-9] - Resolves: RHEL-107581 - segfault - error 4 in libpthread-2.28.so [rhel-9] - Resolves: RHEL-107585 - ns-slapd crashed when we add nsslapd-referral [rhel-9] - Resolves: RHEL-107586 - CWE-284 dirsrv log rotation creates files with world readable permission [rhel-9] - Resolves: RHEL-107587 - CWE-532 Created user password hash available to see in audit log [rhel-9] - Resolves: RHEL-107588 - CWE-778 Log doesn't show what user gets password changed by administrator [rhel-9] - Resolves: RHEL-61347 - Directory Server is unavailable after a restart with nsslapd-readonly=on and consumes 100% CPU - Resolves: RHEL-182159 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-9.8.z] - Resolves: RHEL-183103 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow [rhel-9.8.z] - Resolves: RHEL-152356 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. [rhel-9.8.z] - Resolves: RHEL-168967 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. [rhel-9.8.z] - Resolves: RHEL-170269 - DS 12 does not handle escape char in bind user [rhel-9.8.z] - Resolves: RHEL-174524 - [RFE] Add OS-level thread names to all server threads [rhel-9.8.z] - Resolves: RHEL-178086 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-9.8] - Resolves: RHEL-180716 - Online export is failing when using the option "-s" [rhel-9.8.z] - Resolves: RHEL-183895 - Server shutdown during online reindex may lead to data loss [rhel-9.8.z] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-137084 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-152338 - Crash ( Segmentation fault ) in atomic_compare_exchange() [rhel-9.8] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-150907 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-111229 - Error showing local password policy on web UI [rhel-9] - Resolves: RHEL-112680 - Statistics about index lookup report a wrong duration [rhel-9] - Resolves: RHEL-116426 - RetroCL plugin generates invalid LDIF [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-117748 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-117771 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default - Resolves: RHEL-117782 - Ignore the memberOfDeferredUpdate setting when LMDB is used. [rhel-9] - Resolves: RHEL-121170 - Units for changing MDB max size are not consistent across different tools [rhel-9] - Resolves: RHEL-123231 - Improve the way to detect asynchronous operations in the access logs [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123258 - Typo in errors log after a Memberof fixup task. [rhel-9] - Resolves: RHEL-123272 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-123368 - IPA health check up script shows time skew is over 24 hours [rhel-9] - Resolves: RHEL-123766 - 389-ds-base OpenScanHub Leaks Detected [rhel-9] - Resolves: RHEL-123893 - Improve output dsctl dbverify when backend does not exist [rhel-9] - Resolves: RHEL-123897 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9] - Resolves: RHEL-123923 - Changelog trimming - add number of scanned entries to the log [rhel-9] - Resolves: RHEL-126552 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly [rhel-9] - Resolves: RHEL-129559 - Online initialization of consumers fails with error -23 [rhel-9] - Resolves: RHEL-129580 - Fix paged result search locking [rhel-9] - Resolves: RHEL-138481 - Memory leak observed in ns-slapd with 389-ds-base-2.6.1-12 [rhel-9] - Resolves: RHEL-139825 - Rebase 389-ds-base to 2.8.x - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-104591 - RHDS12: Web console doesn't show Server Version [rhel-9] - Resolves: RHEL-104593 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-109034 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9] - Resolves: RHEL-109885 - Wrong backend database name syntax causes "Red Hat Directory Server" => "Databases" menu blank in Cockpit [rhel-9] - Resolves: RHEL-109889 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9] - Resolves: RHEL-109892 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy. [rhel-9] - Resolves: RHEL-109897 - AddressSanitizer: leak in do_search [rhel-9] - Resolves: RHEL-113981 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9] - Resolves: RHEL-89762 - dsidm Error: float() argument must be a string or a number, not 'NoneType' [rhel-9] - Resolves: RHEL-92041 - Memory leak in roles_cache_create_object_from_entry - Resolves: RHEL-95444 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] [rhel-9] - Resolves: RHEL-104821 - ipa-restore fails to restore SELinux contexts, causes ns-slapd AVC denials on /dev/shm after restore. - Resolves: RHEL-107005 - Failure to get Server monitoring data when NDN cache is disabled. [rhel-9] - Resolves: RHEL-107581 - segfault - error 4 in libpthread-2.28.so [rhel-9] - Resolves: RHEL-107585 - ns-slapd crashed when we add nsslapd-referral [rhel-9] - Resolves: RHEL-107586 - CWE-284 dirsrv log rotation creates files with world readable permission [rhel-9] - Resolves: RHEL-107587 - CWE-532 Created user password hash available to see in audit log [rhel-9] - Resolves: RHEL-107588 - CWE-778 Log doesn't show what user gets password changed by administrator [rhel-9] - Resolves: RHEL-183082 - CVE-2026-11770 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check [rhel-9.8.z] - Resolves: RHEL-190775 - CVE-2026-11788 389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser [rhel-9.8.z] - Resolves: RHEL-210875 - CVE-2026-15722 389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing [rhel-9.8.z] - Resolves: RHEL-182159 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-9.8.z] - Resolves: RHEL-183103 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow [rhel-9.8.z] - Resolves: RHEL-152356 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. [rhel-9.8.z] - Resolves: RHEL-168967 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. [rhel-9.8.z] - Resolves: RHEL-170269 - DS 12 does not handle escape char in bind user [rhel-9.8.z] - Resolves: RHEL-174524 - [RFE] Add OS-level thread names to all server threads [rhel-9.8.z] - Resolves: RHEL-178086 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-9.8] - Resolves: RHEL-180716 - Online export is failing when using the option "-s" [rhel-9.8.z] - Resolves: RHEL-183895 - Server shutdown during online reindex may lead to data loss [rhel-9.8.z] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-137084 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-152338 - Crash ( Segmentation fault ) in atomic_compare_exchange() [rhel-9.8] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-150907 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-111229 - Error showing local password policy on web UI [rhel-9] - Resolves: RHEL-112680 - Statistics about index lookup report a wrong duration [rhel-9] - Resolves: RHEL-116426 - RetroCL plugin generates invalid LDIF [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-117748 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-117771 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default - Resolves: RHEL-117782 - Ignore the memberOfDeferredUpdate setting when LMDB is used. [rhel-9] - Resolves: RHEL-121170 - Units for changing MDB max size are not consistent across different tools [rhel-9] - Resolves: RHEL-123231 - Improve the way to detect asynchronous operations in the access logs [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123258 - Typo in errors log after a Memberof fixup task. [rhel-9] - Resolves: RHEL-123272 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-123368 - IPA health check up script shows time skew is over 24 hours [rhel-9] - Resolves: RHEL-123766 - 389-ds-base OpenScanHub Leaks Detected [rhel-9] - Resolves: RHEL-123893 - Improve output dsctl dbverify when backend does not exist [rhel-9] - Resolves: RHEL-123897 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9] - Resolves: RHEL-123923 - Changelog trimming - add number of scanned entries to the log [rhel-9] - Resolves: RHEL-126552 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly [rhel-9] - Resolves: RHEL-129559 - Online initialization of consumers fails with error -23 [rhel-9] - Resolves: RHEL-129580 - Fix paged result search locking [rhel-9] - Resolves: RHEL-138481 - Memory leak observed in ns-slapd with 389-ds-base-2.6.1-12 [rhel-9] - Resolves: RHEL-139825 - Rebase 389-ds-base to 2.8.x - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-104591 - RHDS12: Web console doesn't show Server Version [rhel-9] - Resolves: RHEL-104593 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-109034 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9] - Resolves: RHEL-109885 - Wrong backend database name syntax causes "Red Hat Directory Server" => "Databases" menu blank in Cockpit [rhel-9] - Resolves: RHEL-109889 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9] - Resolves: RHEL-109892 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy. [rhel-9] - Resolves: RHEL-109897 - AddressSanitizer: leak in do_search [rhel-9] - Resolves: RHEL-113981 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9] - use pathfix.py - Update to 1.6.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.6.2 - Update to 1.6.1 - Update to 1.6 - Update to 1.5.3 - Update to 1.5.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for Python 3.9 - Update to 1.5.1 - Fix build for AlmaLinux - Avoid permission denied for yum/dnf cache - Enable building for ppc64le - Ignore blank disks in Windows drive mapping resolves: RHEL-108803 - Generate correct osinfo for SLES >= 15 resolves: RHEL-95791 - Remove duplicate root mountpoints in /etc/fstab resolves: RHEL-90168 - Run the fstrim command twice resolves: RHEL-88508 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87493 - Include host kernel information in libguestfs debugging output resolves: RHEL-83025 - Add new APIs to allow command output > 4MB resolves: RHEL-80159 - Rebase to libguestfs 1.54.0 resolves: RHEL-56809 - Fix osinfo for Windows Server 2025 resolves: RHEL-62935 - Replace Jansson with json-c resolves: RHEL-65292 - Update to libguestfs 1.50.2 resolves: RHEL-46775 - Enable accept_overflowed_buildorder in tier0 tests (bug #1984403) - 2.13.0 bump (bug #1984403) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 2.12.1 bump (bug #1956346) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add support for 'buildorder' to Packager documents - Fix issue with ModuleIndex when input contains only Obsoletes documents - Fix import issue when built with Python 2 support - Release 2.11.2 - Extend read_packager_[file|string]() to support overriding the module name and stream. - Release 2.11.1 - Ignore Packager documents when running ModuleIndex.update_from_*() - Add python overrides for XMD in PackagerV3 - Add python override to ignore the GType return when reading packager files - Add PackagerV3.get_mdversion() - fix RHEL-132706 - use sysusers.d for uuidd - fix RHEL-133956 - login-utils: fix setpwnam() buffer use [CVE-2025-14104] - fix RHEL-123527 - mount: improve --all documentation - fix RHEL-123531 - libblkid: use snprintf() instead of sprintf() - fix RHEL-123536 - libfdisk: (dos) fix off-by-one in maximum last sector calculation - fix RHEL-113638 - lscpu: update ARM identifiers - fix RHEL-108386 - libblkid: (jmicron_raid) backport checksum verification - fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing - fix RHEL-56983 - sulogin: fix POSIX locale use - fix RHEL-25559 - more: make sure we have data on stderr - fix RHEL-34165 - lsipc: fix semaphore USED counter - fix RHEL-25265 - libblkid: Check offset in LUKS2 header - fix RHEL-25559 - more: fix poll() use - lscpu: another tests update (RHEL-12783) - lscpu: update tests, follow max freq for scaling (RHEL-12783) - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1) - fix RHEL-21257 - logger sending process start time not current time with log messages - fix RHEL-16071 - issues in libblkid - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value - fix RHEL-14612 - Userspace mount options are not preserved for NFS - Add nbdcopy --blkhash option resolves: RHEL-85509 - Rebase to libnbd 1.20.3 - Rebase to libnbd 1.20.2 resolves: RHEL-31883 - Fix multiple flaws in TLS server certificate checking resolves: RHEL-49801 - Print full NBD error from server resolves: RHEL-50665 - Rebase to 1.20.0 resolves: RHEL-31883 - Backport unit test of recent libnbd API addition resolves: RHEL-16292 - Fix assertion in ext-mode BLOCK_STATUS (CVE-2023-5871) resolves: RHEL-15143 - Rebase to 1.18.1 resolves: RHEL-14476 - Rebase to 1.16.0 resolves: rhbz#2168628 - Upgrade to 2.2.58 - vrf: Handle ignore interface when verifying desired state. RHEL-141606 - alt-name: Remove alt-names when interface marked as absent. RHEL-141602 - hsr: Automatically disable IP on hsr port. RHEL-141609 - hsr: add support for configuring "interlink" property. RHEL-141608 - Support referring interface name using its alternative name. RHEL-141601 - Upgrade to 2.2.57 - Add libreswan leftprotoport and rightprotoport support. (RHEL-130912) - Upgrade to 2.2.56 - Allow using VRF name to specify route table. RHEL-123541 - Support OVS-DPDK dpdk-lsc-interrupt in nmstate. RHEL-125052 - Applying desired state with static DNS with static IP will touch `br-ex` even not mentioned. RHEL-126731 - Support rightca ipsec option. RHEL-123542 - Upgrade to 2.2.54. - Automatically set HSR port MAC address. RHEL-122171 - Fix OVSDB query failure on database bigger than 20KiB. RHEL-121992 - Upgrade to 2.2.52 - Support interface altnative name. RHEL-110781 - Upgrade to 2.2.50 - Support MAC referring for VLAN in gen_conf. RHEL-110369 - Introduce state: ignore for route. RHEL-107130 - Support PCI address matching in gen_conf. RHEL-110369 - Support MacSec interface in gen_conf. RHEL-110369 - Upgrade to 2.2.49 - Ignore desired MAC for bonds with fail_over_mac. RHEL-107526 - Fix setting DNS only with search or option. RHEL-104797 - Upgrade to 2.2.48 - Validate OVN bridge mapping. RHEL-85787 - Support bond `lacp_active` and `ns_ip6_target`. RHEL-85784 - Support matching by PCI adress. RHEL-88993 - Apply dispatch changes first. RHEL-101742 - Fix SRIOV VF reference. RHEL-93180 - Upgrade to 2.2.46 - Store DNS to both iface and global DNS. RHEL-91291 - Support nmpolicy against down iface. RHEL-88989 - Support removal VLAN connection with empty ifname. RHEL-93146 - Upgrade to 2.2.25 - Fix stuck of nmstatectl show on OVS. RHEL-93176 - Upgrade to 2.2.60 - ipv4: Add new parameter prefix-route-metric RHEL-170695 - Upgrade to 2.2.59 - Add support for lock-mtu option. RHEL-151933. - Upgrade to 2.2.58 - vrf: Handle ignore interface when verifying desired state. RHEL-141606 - alt-name: Remove alt-names when interface marked as absent. RHEL-141602 - hsr: Automatically disable IP on hsr port. RHEL-141609 - hsr: add support for configuring "interlink" property. RHEL-141608 - Support referring interface name using its alternative name. RHEL-141601 - Upgrade to 2.2.57 - Add libreswan leftprotoport and rightprotoport support. (RHEL-130912) - Upgrade to 2.2.56 - Allow using VRF name to specify route table. RHEL-123541 - Support OVS-DPDK dpdk-lsc-interrupt in nmstate. RHEL-125052 - Applying desired state with static DNS with static IP will touch `br-ex` even not mentioned. RHEL-126731 - Support rightca ipsec option. RHEL-123542 - Upgrade to 2.2.54. - Automatically set HSR port MAC address. RHEL-122171 - Fix OVSDB query failure on database bigger than 20KiB. RHEL-121992 - Upgrade to 2.2.52 - Support interface altnative name. RHEL-110781 - Upgrade to 2.2.50 - Support MAC referring for VLAN in gen_conf. RHEL-110369 - Introduce state: ignore for route. RHEL-107130 - Support PCI address matching in gen_conf. RHEL-110369 - Support MacSec interface in gen_conf. RHEL-110369 - Upgrade to 2.2.49 - Ignore desired MAC for bonds with fail_over_mac. RHEL-107526 - Fix setting DNS only with search or option. RHEL-104797 - Upgrade to 2.2.48 - Validate OVN bridge mapping. RHEL-85787 - Support bond `lacp_active` and `ns_ip6_target`. RHEL-85784 - Support matching by PCI adress. RHEL-88993 - Apply dispatch changes first. RHEL-101742 - Fix SRIOV VF reference. RHEL-93180 - Ignore IP addresses with non-kernel IFA_PROTO. RHEL-253623 - Upgrade to 2.2.60 - ipv4: Add new parameter prefix-route-metric RHEL-170695 - Upgrade to 2.2.59 - Add support for lock-mtu option. RHEL-151933. - Upgrade to 2.2.58 - vrf: Handle ignore interface when verifying desired state. RHEL-141606 - alt-name: Remove alt-names when interface marked as absent. RHEL-141602 - hsr: Automatically disable IP on hsr port. RHEL-141609 - hsr: add support for configuring "interlink" property. RHEL-141608 - Support referring interface name using its alternative name. RHEL-141601 - Upgrade to 2.2.57 - Add libreswan leftprotoport and rightprotoport support. (RHEL-130912) - Upgrade to 2.2.56 - Allow using VRF name to specify route table. RHEL-123541 - Support OVS-DPDK dpdk-lsc-interrupt in nmstate. RHEL-125052 - Applying desired state with static DNS with static IP will touch `br-ex` even not mentioned. RHEL-126731 - Support rightca ipsec option. RHEL-123542 - Upgrade to 2.2.54. - Automatically set HSR port MAC address. RHEL-122171 - Fix OVSDB query failure on database bigger than 20KiB. RHEL-121992 - Upgrade to 2.2.52 - Support interface altnative name. RHEL-110781 - Upgrade to 2.2.50 - Support MAC referring for VLAN in gen_conf. RHEL-110369 - Introduce state: ignore for route. RHEL-107130 - Support PCI address matching in gen_conf. RHEL-110369 - Support MacSec interface in gen_conf. RHEL-110369 - Upgrade to 2.2.49 - Ignore desired MAC for bonds with fail_over_mac. RHEL-107526 - Fix setting DNS only with search or option. RHEL-104797 - Fix linked list corruption RHEL-146273 - Respin for RHEL-114102 - Rebase to version 1.16.1 (RHEL-114102) - Update to version 1.13 (RHEL-88847) - TLS Fixes (RHEL-53980) - Update libnvme to version 1.11 (RHEL-67145) - Update to latest upstream version RHEL-61573 - Backport fix for RHEL-49544 - Backport URI parser API - Rebase to version 1.9 - Drop networkmanager subpackage. Resolves: rhbz#1996028 - Drop pacrunner subpackage. Resolves: rhbz#1990974 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add Copyright.txt. Resolves: rhbz#1986586 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Tweak KDE conditionals to only apply at runtime - Depend on KDE only on Fedora (#1902608) - Disable mozjs backend by default, obsolete it by webkit subpackage - Fix PAC buffer overflow (#1883584) - Add support for AlmaLinux Bug Tracker - Remove libreport-rhel-bugzilla and libreport-rhel-anaconda-bugzilla - [reporter-bugzilla] Retry XML-RPC calls - Resolves: rhbz#2037399 - [reporter-bugzilla] Fix subcomponent handling - Resolves: rhbz#2037399 - Change the default Bugzilla group - Resolves: rhbz#2037399 - Rebuild against json-c-0.14-11 Related: rhbz#2023322 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - New upstream version 2.15.2 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Drop AnacondaRHEL workflow reference - Close old selabel handle when setting a new one (RHEL-76472) - restorecon: Include <selinux/label.h> (RHEL-50821, RHEL-54385) - SELinux userspace 3.6 release - SELinux userspace 3.6-rc1 release - SELinux userspace 3.5 release - SELinux userspace 3.5-rc3 release - improve performance of semanage store rebuild (RHEL-79100) - Set new restorecon handle before doing restorecon (RHEL-76472) - open lock_file with O_RDWR (RHEL-60503) - Preserve file context and ownership in policy store (RHEL-31216, RHEL-54389) - SELinux userspace 3.6 release - SELinux userspace 3.6-rc1 release - Include more parameters in the module checksum (#2173959) - Upgrade to 1.10.1 - Upgrade to 1.10.0 - FIPS correction ref: https://issues.redhat.com/browse/RHEL-376 - Upgrade to 1.9.7 - Upgrade to 1.9.5 - Use systemd-sysusers - virDomainSaveParams: Add missing typed parameter conversion hints (RHEL-144009) - Rebased to libvirt-python-11.10.0 (RHEL-118198) - Rebased to libvirt-python-11.9.0 (RHEL-118198) - Rebased to libvirt-python-11.8.0 (RHEL-118198) - Rebased to libvirt-python-10.10.0 (RHEL-50576) - Rebased to libvirt-python-10.8.0 (RHEL-50576) - Rebased to libvirt-python-10.5.0 (RHEL-29643) - Rebased to libvirt-python-10.3.0 (RHEL-29643) - Rebased to libvirt-python-10.0.0 (RHEL-24822) - Remove compat libs for LLVM 20 - Update LLVM Toolset to 21.1.8 [rhel-9] - Update to 21.1.7 - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683) - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037) - Backport fix for build of highway package on ppc64le (rhbz#2383182) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to LLVM 20.1.8 - Add riscv64 enablement bits; thanks: Songsong Zhang (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com) - Update to LLVM 20.1.7 - Fix llvm-config alternatives handling (rhbz#2361779) - Use libdir suffix in versioned prefix - Remove compat libs for LLVM 20 - Update LLVM Toolset to 21.1.8 [rhel-9] - Update to 21.1.7 - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683) - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037) - Backport fix for build of highway package on ppc64le (rhbz#2383182) - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Update to LLVM 20.1.8 - Add riscv64 enablement bits; thanks: Songsong Zhang (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com) - Update to LLVM 20.1.7 - Fix llvm-config alternatives handling (rhbz#2361779) - Use libdir suffix in versioned prefix - Fix CVE-2023-26767 (#2181147) - Fix CVE-2023-26768 (#2181151) - Fix CVE-2023-26769 (#2181149) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Security fix for CVE-2022-2309 - Resolves: rhbz#2107571 - Add automatically generated Obsoletes tag with the python39- prefix for smoother upgrade from RHEL8 - Related: rhbz#1990421 - Update to 4.6.5 - Fixes CVE-2021-43818 - Resolves: rhbz#2032569 - Run the tests during build - Resolves: rhbz#2026941 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update the license information - Update to 4.6.3 - Fixes CVE-2021-28957 Resolves: rhbz#1941534 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 4.6.2 - Fixes CVE-2020-27783 and another vulnerability in the HTML Cleaner - Fixes: rhbz#1855415 - Fixes: rhbz#1901634 - Security fix for CVE-2026-49825 - Resolves: RHEL-251499 - Fix CVE-2022-40023 (#2133606) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Remove unnecessary python3-mock BuildRequires - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to version 1.1.4 - Avoids test warnings on Python 3.10 Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1907474 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Disable Python 2 entirely - Disable Python 2 in ELN - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for Python 3.8.0rc1 (#1748018) - Rebuilt for Python 3.8 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Merge pull request #33 from mzidek-gh/master (mkolman) - dump: Use exception's type and value when calculating hash (mzidek) - Merge pull request #31 from jkonecny12/master-fix-make-archive (mkolman) - Fix make archive command after pot file removal (jkonecny) - Merge pull request #29 from jkonecny12/master-weblate-support (jkonecny) - Add Readme with description and translation badge (jkonecny) - Add pot file to the git ignore (jkonecny) - Pause release when making bumpver to check and solve translations (jkonecny) - Remove unused PREFIX from Makefile (jkonecny) - Remove Zanata (jkonecny) - Push translations to our translation repository (jkonecny) - Download translations from Weblate (jkonecny) - Remove pot file (jkonecny) - Merge pull request #24 from M4rtinK/master-fix_zanata_client_detection_in_makefile (mkolman) - Fix Zanata client detection in Makefile (mkolman) - Merge pull request #23 from poncovka/master-decode_bytes (mkolman) - Handle bytes and strings from RPM (#1764642) (vponcova) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Merge pull request #33 from mzidek-gh/master (mkolman) - dump: Use exception's type and value when calculating hash (mzidek) - Merge pull request #31 from jkonecny12/master-fix-make-archive (mkolman) - Fix make archive command after pot file removal (jkonecny) - Merge pull request #29 from jkonecny12/master-weblate-support (jkonecny) - Add Readme with description and translation badge (jkonecny) - Add pot file to the git ignore (jkonecny) - Pause release when making bumpver to check and solve translations (jkonecny) - Remove unused PREFIX from Makefile (jkonecny) - Remove Zanata (jkonecny) - Push translations to our translation repository (jkonecny) - Download translations from Weblate (jkonecny) - Remove pot file (jkonecny) - Merge pull request #24 from M4rtinK/master-fix_zanata_client_detection_in_makefile (mkolman) - Fix Zanata client detection in Makefile (mkolman) - Merge pull request #23 from poncovka/master-decode_bytes (mkolman) - Handle bytes and strings from RPM (#1764642) (vponcova) - Resolves: RHEL-65419 - httpd with python3-mod_wsgi is stalling in process destruction - fix creation of /var/lib/net-snmp in image mode (RHEL-132655) - fix out of bound access issue (RHEL-137511) - enable PQC (RHEL-132653) - remove wrong assert (RHEL-122095) - fix inverted usage of -n in snmptrapd (RHEL-101078) - fix use after free issue (RHEL-121091) - fix help and manpage for net-snmp-create-v3-user script(RHEL-101614 and RHEL-103557) - fix segfault with error on subcontainer (RHEL-46033) - fix unexpected header length in /proc/net/snmp (RHEL-44357) - fix changelog issue - fix CVE-2022-24805, CVE-2022-24806, CVE-2022-24807, CVE-2022-24808, CVE-2022-24809 and CVE-2022-24810 (RHEL-26649) - Bump version to rebuild due to brew issues Resolves: RHEL-25506 - Remove subpackage python3-netaddr-shell Resolves: RHEL-25506 - Rebase to version 0.10.1 Resolves: RHEL-25506 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Subpackage python2-netifaces has been removed See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal - Rebuilt for Python 3.8 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Version 2.6.2 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Add -pyyaml patch to fix FTBFS - Limit BuildRequires to necessary minimum in Red Hat Enterprise Linux - Skip pytest in Red Hat Enterprise Linux - Do not build -doc subpackage for Red Hat Enterprise Linux - Version 2.5 - All patches except -doc have been upstreamed; drop them - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for Python 3.9 - Add -deprecated and -arg-order patches to fix FTBFS with python 3.9 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - disable python2 subpackage on fedora >= 32 (#1763073) - Rebuilt for Python 3.8.0rc1 (#1748018) - Rebuilt for Python 3.8 - New release 1.2.14 (Gris Ge) - bond: support changing bond mode (Gris Ge) - Reorganize the code structure (Gris Ge) - CI: Enable VRF and ethool pause test (Gris Ge) - CI: Upgrade the version of github action tasks (Gris Ge) - test: Fix ethtool link mode test on Ubuntu (Gris Ge) - Github CI: Install extra module of running kernel (Gris Ge) - macsec: add base_iface property (Fernando Fernandez Mancera) - macsec: add MACsec interface support (Fernando Fernandez Mancera) - Bump netlink-packet-route to 0.17.1 (Fernando Fernandez Mancera) - New release 1.2.12 (Gris Ge) - Use latest rust-netlink crates (Gris Ge) - Upgrade to 1.2.10. RHBZ#2153165 - Upgrade to 1.2.9. RHBZ#2153165 - Upgrade to 1.2.7. - Upgarde to 1.2.4. RHBZ#2064299 - Upgrade to 1.2.3. Resolves: RHBZ#1996623 - Upgrade to 1.2.2. Resolves: RHBZ#1996623 - fix ppc64le test failures (RHEL-88575) - Update to 1.23.5 - Resolves: RHEL-5520 - fix ppc64le test failures (RHEL-88575) - Update to 1.23.5 - Resolves: RHEL-5520 - RFC5849 oauth1 signature base_string_uri doesn't parse IPv6 addresses Resolves: rhbz#2133805 - Resolves: rhbz#2133805 - fix for CVE-2022-36087 - Remove RSA support - Remove build dependency on blinker Resolves: rhbz#1984046 - python-oauthlib depends on jwt for RSA - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: rhbz#1935433 - python-oauthlib implements and/or uses the deprecated SHA1 algorithm by default - Remove the python3-oauthlib+signedtoken package - When building, skip tests that require jwt - Resolves: rhbz#1966407 - Drop python-jwt dependency from python-oauthlib - Resolves: rhbz#1922352 - python-oauthlib requires python-mock - Update to upstream 3.1.0 - Gets rid of obsolete python-nose dependency - Nuke the python2/python3 conditionals, let's only support python3 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - Add automatically generated Obsoletes tag with the python39- prefix for smoother upgrade from RHEL8 - Related: rhbz#1990421 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Disable tests on RHEL9 to remove the test dependencies - Update to 20.9 Resolves: rhbz#1922545 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 20.8 (#1906985) - Update to 20.7 (#1902369) - Drop the dependency on six to make the package lighter - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backported memory leaks patches from pcp-7.0.3 - Update selinux policy for pmda-nvidia (RHEL-133548) - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport metric removal for pmdaopenmetrics - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Add selinux policy for new proc_psi_t-induced failure - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add gating configuration. - Added test script and configuration. - Initial package. - Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable backports (SOURCES/1100-1196) - Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto authencesn/algif) - Keep the smb cifs.spnego ahead-fix (retained as 1197) - RHEL changelog for 687.6.1..687.10.1 follows: - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163} - RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128} - usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607} - can: raw: fix ro->uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401} - powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125] - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742] - Revert "lpfc: don't use file->f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742] - drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822] - drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853] - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404] - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402} - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741} - smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988] - ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378] - RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966] - net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207] - ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095] - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766} - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766} - rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075} - Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable backports (SOURCES/1198-1252) - RHEL changelog for 687.11.1..687.12.1 follows: - dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110} - Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020} - crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914] - proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653} - proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653} - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470] - mm/page_alloc: clear page->private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303} - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158} - redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927] - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859] - ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829] - ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829] - ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179] - ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257] - dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442] - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378] - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684} - cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701] - ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701] - ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701] - ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701] - drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179] - nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089} - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724} - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183} - i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312] - ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182] - ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185] - Revert "mm: pcp: increase pcp->free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464] - netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392} - Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269) - RHEL changelog for 687.13.1 follows: - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243} - s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472] - s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472] - s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472] - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745] - nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745] - Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786} - crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167] - crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167] - smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613} - mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778] - mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778] - mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778] - mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778] - mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778] - mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778] - mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778] - mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778] - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.18.1..687.19.1 follows: - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176} - init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183] - update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183] - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183] - work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183] - compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183] - powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183] - sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776] - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189} - sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273] - netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273] - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993] - iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993] - iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993] - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993] - iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993] - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057] - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057] - IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057] - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057] - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057] - net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057] - net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057] - net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057] - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057] - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057] - net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057] - net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057] - net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057] - net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057] - net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057] - net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057] - net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057] - net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057] - net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057] - net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057] - net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057] - mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057] - net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057] - net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057] - net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057] - net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057] - net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057] - net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057] - net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057] - net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057] - net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057] - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057] - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057] - mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057] - net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057] - net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057] - net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057] - net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057] - net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057] - net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057] - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057] - net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057] - net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057] - net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057] - net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057] - net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057] - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057] - net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057] - net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057] - net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057] - net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057] - net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057] - net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057] - net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057] - net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057] - net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057] - net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057] - eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057] - net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057] - net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057] - net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057] - net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057] - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057] - RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057] - net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057] - net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057] - net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057] - net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057] - net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057] - net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057] - net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057] - net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057] - net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057] - net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057] - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057] - net: Fix typos (Kamal Heib) [RHEL-169057] - net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057] - net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057] - net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057] - net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057] - net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057] - net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057] - net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057] - net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057] - net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057] - net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057] - net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057] - eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Kamal Heib) [RHEL-169057] - net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057] - net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057] - net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057] - net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057] - net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057] - net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057] - net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057] - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057] - net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057] - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057] - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057] - net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057] - net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057] - net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057] - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057] - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444] - ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444] - ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444] - ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488} - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329} - Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312) - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.19.1..687.20.1 follows: - crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540] - crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540] - crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540] - crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540] - tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198} - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739} - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760] - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760] - scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886] - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411} - Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.18.1..687.19.1 follows: - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176} - init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183] - update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183] - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183] - work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183] - compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183] - powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183] - sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776] - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189} - sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273] - netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273] - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993] - iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993] - iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993] - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993] - iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993] - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057] - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057] - IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057] - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057] - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057] - net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057] - net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057] - net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057] - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057] - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057] - net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057] - net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057] - net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057] - net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057] - net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057] - net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057] - net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057] - net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057] - net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057] - net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057] - net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057] - mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057] - net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057] - net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057] - net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057] - net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057] - net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057] - net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057] - net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057] - net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057] - net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057] - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057] - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057] - mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057] - net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057] - net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057] - net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057] - net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057] - net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057] - net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057] - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057] - net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057] - net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057] - net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057] - net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057] - net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057] - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057] - net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057] - net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057] - net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057] - net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057] - net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057] - net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057] - net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057] - net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057] - net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057] - net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057] - eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057] - net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057] - net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057] - net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057] - net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057] - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057] - RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057] - net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057] - net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057] - net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057] - net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057] - net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057] - net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057] - net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057] - net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057] - net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057] - net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057] - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057] - net: Fix typos (Kamal Heib) [RHEL-169057] - net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057] - net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057] - net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057] - net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057] - net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057] - net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057] - net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057] - net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057] - net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057] - net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057] - net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057] - eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Kamal Heib) [RHEL-169057] - net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057] - net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057] - net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057] - net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057] - net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057] - net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057] - net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057] - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057] - net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057] - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057] - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057] - net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057] - net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057] - net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057] - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057] - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444] - ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444] - ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444] - ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488} - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329} - Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312) - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735) - Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll ep_remove use-after-free CVE-2026-46242 (1712) - RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux ahead-patch (1312) is retained and RHEL's duplicate copy omitted - CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263) - RHEL changelog for 687.21.1..687.22.1 follows: - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041] - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116} - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263} - KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316} - netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227} - nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966] - Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755) - The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by RHEL's eventpoll series carrying the same fix and is dropped - Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738) - RHEL changelog for 687.23.1 follows: - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1756, 1757) are superseded by RHEL's copies and dropped - RHEL changelog for 687.25.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770) - RHEL changelog for 687.26.1 follows: - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1756, 1757) are superseded by RHEL's copies and dropped - RHEL changelog for 687.25.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041] - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116} - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619] - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619] - Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762] - Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762] - Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762] - Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762] - Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762] - Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762] - Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762] - Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762] - nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489] - pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489] - net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508] - cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548] - spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129] - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431) - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619] - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619] - Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762] - Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762] - Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762] - Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762] - Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762] - Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762] - Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762] - Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762] - nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489] - net: skbuff: propagate shared-frag marker through frag-transfer helpers (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300 "Fragnesia") - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431) - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (Mohammadfaiz Bawa) [RHEL-243814] {CVE-2026-72288} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275058] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275076] {CVE-2026-93228} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270929] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270929] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271453] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268122] {CVE-2026-74705} - net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CKI Backport Bot) [RHEL-270908] {CVE-2026-81003} - wifi: cfg80211: use wiphy work for socket owner autodisconnect (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-263788] {CVE-2026-68409} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (Jose Ignacio Tornos Martinez) [RHEL-259560] {CVE-2026-64030} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261686] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260511] {CVE-2026-68140} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261293] {CVE-2026-72320} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256448] {CVE-2026-74641} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-237219] {CVE-2026-68377} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229654] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226490] {CVE-2026-53011} - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net: always dissect GSO packets in __virtio_net_hdr_to_skb() (Davide Caratti) [RHEL-284987] - ipv4: validate checksum_start before completing checksum (CKI Backport Bot) [RHEL-284987] {CVE-2026-99999} - smb: client: reject a tree connect response whose byte count is too small (Alisher Mazhirinov) [RHEL-271284] {CVE-2026-89631} - exec: Cleanup POSIX timers right after de_thread() (Luiz Capitulino) [RHEL-282063] {CVE-2026-98260} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271871] {CVE-2026-93817} - smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (Frank Sorenson) [RHEL-271487] {CVE-2026-89633} - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270747] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256697] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256697] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256697] - bridge: mcast: Fix a possible use-after-free when removing a bridge port (Jakub Ramaseuski) [RHEL-232528] {CVE-2026-64032} - net: bridge: Flush multicast groups when snooping is disabled (Jakub Ramaseuski) [RHEL-232528] - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Antoine Tenart) [RHEL-231693] {CVE-2026-64024} - ipv4: fib: free fib_alias with kfree_rcu() on insert error path (Jamie Bainbridge) [RHEL-233131] {CVE-2026-64572} - inet: frags: strip GSO state from fragments before reassembly (Jamie Bainbridge) [RHEL-254224] {CVE-2026-80590} - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Jamie Bainbridge) [RHEL-225452] {CVE-2026-64114} - usb: typec: ucsi: validate connector number in ucsi_connector_change() (Desnes Nunes) [RHEL-259429] {CVE-2026-63958} - usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO (Desnes Nunes) [RHEL-259429] - usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (Desnes Nunes) [RHEL-259429] {CVE-2026-63962} - usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (Desnes Nunes) [RHEL-259429] {CVE-2026-63963} - usb: typec: altmodes/displayport: validate count before reading Status Update VDO (Desnes Nunes) [RHEL-259429] {CVE-2026-63961} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63899} - Bluetooth: hci_sync: Fix advertising data UAFs (CKI Backport Bot) [RHEL-254674] {CVE-2026-74509} - openvswitch: vport: fix self-deadlock on release of tunnel ports (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222958] {CVE-2026-52935} - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (Mohammadfaiz Bawa) [RHEL-243814] {CVE-2026-72288} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275058] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275076] {CVE-2026-93228} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270929] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270929] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271453] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268122] {CVE-2026-74705} - net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CKI Backport Bot) [RHEL-270908] {CVE-2026-81003} - wifi: cfg80211: use wiphy work for socket owner autodisconnect (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-263788] {CVE-2026-68409} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (Jose Ignacio Tornos Martinez) [RHEL-259560] {CVE-2026-64030} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261686] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260511] {CVE-2026-68140} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261293] {CVE-2026-72320} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256448] {CVE-2026-74641} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-237219] {CVE-2026-68377} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229654] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226490] {CVE-2026-53011} - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: skbuff: propagate shared-frag marker in skb_zerocopy() - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - xfs: bounds-check buffer log item's dirty bitmap (Pavel Reichl) [RHEL-253366] {CVE-2026-80536} - ovl: check access to copy_file_range source with src mounter creds (Miklos Szeredi) [RHEL-238870] {CVE-2026-68448} - ALSA: seq: close a re-opened queue timer in the destructor (CKI Backport Bot) [RHEL-263709] {CVE-2026-68202} - calipso: unlock rcu before returning -EAFNOSUPPORT (CKI Backport Bot) [RHEL-257685] {CVE-2025-38147} - calipso: Don't call calipso functions for AF_INET sk. (CKI Backport Bot) [RHEL-257685] {CVE-2025-38147} - netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (CKI Backport Bot) [RHEL-257666] {CVE-2025-22063} - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (CKI Backport Bot) [RHEL-255258] {CVE-2026-80530} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252811] {CVE-2026-68299} - ALSA: hda/cs35l41: Fix firmware load work teardown (CKI Backport Bot) [RHEL-234099] {CVE-2026-64481} - rtla: Fix segfault on multiple SIGINTs (Tomas Glozar) [RHEL-193029] - net: always dissect GSO packets in __virtio_net_hdr_to_skb() (Davide Caratti) [RHEL-284987] - ipv4: validate checksum_start before completing checksum (CKI Backport Bot) [RHEL-284987] {CVE-2026-99999} - smb: client: reject a tree connect response whose byte count is too small (Alisher Mazhirinov) [RHEL-271284] {CVE-2026-89631} - exec: Cleanup POSIX timers right after de_thread() (Luiz Capitulino) [RHEL-282063] {CVE-2026-98260} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271871] {CVE-2026-93817} - smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (Frank Sorenson) [RHEL-271487] {CVE-2026-89633} - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270747] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256697] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256697] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256697] - bridge: mcast: Fix a possible use-after-free when removing a bridge port (Jakub Ramaseuski) [RHEL-232528] {CVE-2026-64032} - net: bridge: Flush multicast groups when snooping is disabled (Jakub Ramaseuski) [RHEL-232528] - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Antoine Tenart) [RHEL-231693] {CVE-2026-64024} - ipv4: fib: free fib_alias with kfree_rcu() on insert error path (Jamie Bainbridge) [RHEL-233131] {CVE-2026-64572} - inet: frags: strip GSO state from fragments before reassembly (Jamie Bainbridge) [RHEL-254224] {CVE-2026-80590} - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Jamie Bainbridge) [RHEL-225452] {CVE-2026-64114} - usb: typec: ucsi: validate connector number in ucsi_connector_change() (Desnes Nunes) [RHEL-259429] {CVE-2026-63958} - usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO (Desnes Nunes) [RHEL-259429] - usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (Desnes Nunes) [RHEL-259429] {CVE-2026-63962} - usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (Desnes Nunes) [RHEL-259429] {CVE-2026-63963} - usb: typec: altmodes/displayport: validate count before reading Status Update VDO (Desnes Nunes) [RHEL-259429] {CVE-2026-63961} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63899} - Bluetooth: hci_sync: Fix advertising data UAFs (CKI Backport Bot) [RHEL-254674] {CVE-2026-74509} - openvswitch: vport: fix self-deadlock on release of tunnel ports (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222958] {CVE-2026-52935} - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (Mohammadfaiz Bawa) [RHEL-243814] {CVE-2026-72288} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275058] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275076] {CVE-2026-93228} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270929] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270929] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271453] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268122] {CVE-2026-74705} - net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CKI Backport Bot) [RHEL-270908] {CVE-2026-81003} - wifi: cfg80211: use wiphy work for socket owner autodisconnect (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-263788] {CVE-2026-68409} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (Jose Ignacio Tornos Martinez) [RHEL-259560] {CVE-2026-64030} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261686] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260511] {CVE-2026-68140} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261293] {CVE-2026-72320} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256448] {CVE-2026-74641} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-237219] {CVE-2026-68377} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229654] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226490] {CVE-2026-53011} - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - net: skbuff: propagate shared-frag marker in skb_zerocopy() - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - netfilter: flowtable: hold reference on ct until flow is released (CKI Backport Bot) [RHEL-280075] {CVE-2026-98320} - vfio/pci: clear vdev->msi_perm after freeing it on init failure (Rodolfo Vick) [RHEL-270901] {CVE-2026-89777} - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278089] {CVE-2026-93262} - KEYS: encrypted: fix integer overflow of datablob_len (Bruno Meneguele) [RHEL-279504] {CVE-2026-98222} - KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (CKI Backport Bot) [RHEL-277620] {CVE-2026-74515} - smb: client: guard against tailsz underflow in wdata_send_pages() (Paulo Alcantara) [RHEL-257205] - smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-257205] - smb: client: fix rlist race and missing initialization (Paulo Alcantara) [RHEL-257205] {CVE-2026-98174} - smb: client: cancel reconnect work in clean_demultiplex_info() (Paulo Alcantara) [RHEL-257205] {CVE-2026-98175} - smb/client: send lease break ACKs thru correct session for multiuser mounts (Paulo Alcantara) [RHEL-257205] - smb: client: fix cifsFileInfo reference leak in deferred close (Paulo Alcantara) [RHEL-257205] {CVE-2026-97558} - smb: client: avoid leaking refcount when cifs_sb_tlink() fails (Paulo Alcantara) [RHEL-257205] {CVE-2026-97556} - smb: client: avoid leaking refcount in cifs_queue_oplock_break() (Paulo Alcantara) [RHEL-257205] {CVE-2026-97557} - smb: client: fix data corruption with concurrent writes and O_TRUNC (Paulo Alcantara) [RHEL-257205] - cifs: don't update i_size in cifs_do_truncate without a cached handle (Paulo Alcantara) [RHEL-257205] - smb: client: invalidate fscache for fallocate range operations (Paulo Alcantara) [RHEL-257205] {CVE-2026-98124} - smb: client: fix stale page cache in insert/collapse range (Paulo Alcantara) [RHEL-257205] {CVE-2026-98125} - smb: client: fix integer truncation in collapse range (Paulo Alcantara) [RHEL-257205] - smb: client: fix data corruption in emulated insert range (Paulo Alcantara) [RHEL-257205] - smb/client: mark file sparse before emulating insert range (Paulo Alcantara) [RHEL-257205] - smb/client: validate new EOF for zero range (Paulo Alcantara) [RHEL-257205] {CVE-2026-98126} - smb/client: validate new EOF for insert range (Paulo Alcantara) [RHEL-257205] {CVE-2026-98127} - cifs: add revalidation on FSCTL failure in smb2_duplicate_extents() (Paulo Alcantara) [RHEL-257205] - cifs: fix loff_t underflow in cifs_remap_file_range() when len == 0 (Paulo Alcantara) [RHEL-257205] {CVE-2026-89640} - cifs: call pagecache_isize_extended() in cifs_setsize() when extending (Paulo Alcantara) [RHEL-257205] {CVE-2026-89642} - cifs: clear tcon after cifsFileInfo_put() in cifs_file_set_size() (Paulo Alcantara) [RHEL-257205] {CVE-2026-89641} - smb/client: decode reparse metadata using its payload type (Paulo Alcantara) [RHEL-257205] - smb/client: preserve open info type across compound queries (Paulo Alcantara) [RHEL-257205] - smb/client: mark missing nlink values as unknown (Paulo Alcantara) [RHEL-257205] - smb/client: fix nlink of an overwritten open file (Paulo Alcantara) [RHEL-257205] - cifs: remove dead size-update blocks in cifs_setattr_unix/nounix (Paulo Alcantara) [RHEL-257205] - cifs: remove redundant size-update block in cifs_remap_file_range() (Paulo Alcantara) [RHEL-257205] - cifs: add cifs_resize_file_locked() to guard fscache_resize_cookie() under i_rwsem (Paulo Alcantara) [RHEL-257205] - cifs: use cifs_invalidate_cache() in cifs_do_truncate() for O_TRUNC (Paulo Alcantara) [RHEL-257205] {CVE-2026-89639} - cifs: add fscache_resize_cookie() to cifs_setsize() (Paulo Alcantara) [RHEL-257205] - smb: client: simplify cifs_fscache_get_super_cookie() (Paulo Alcantara) [RHEL-257205] - smb/client: flush dirty data before punching a hole (Paulo Alcantara) [RHEL-257205] {CVE-2026-93794} - smb/client: refresh allocation after EOF-extending fallocate (Paulo Alcantara) [RHEL-257205] - smb/client: emulate small EOF-extending mode 0 fallocate ranges (Paulo Alcantara) [RHEL-257205] - smb/client: reduce fallocate zero buffer allocation (Paulo Alcantara) [RHEL-257205] - smb/client: refresh allocation size after duplicate extents (Paulo Alcantara) [RHEL-257205] - smb: client: use kvzalloc() for megabyte buffer in simple fallocate (Paulo Alcantara) [RHEL-257205] - smb/client: fix incorrect nlink returned by fstat() (Paulo Alcantara) [RHEL-257205] - smb/client: zero-initialize stack-allocated cifs_open_info_data (Paulo Alcantara) [RHEL-257205] {CVE-2026-93801} - smb/client: pass cifs_open_info_data to SMB2_open() (Paulo Alcantara) [RHEL-257205] - smb/client: use stack-allocated smb2_file_all_info in smb3_query_mf_symlink() (Paulo Alcantara) [RHEL-257205] - smb: client: refactor cifs_revalidate_mapping() to use clear_and_wake_up_bit() (Paulo Alcantara) [RHEL-257205] - smb/client: do not account EOF extension as allocation (Paulo Alcantara) [RHEL-257205] - smb/client: preserve errors from smb2_set_sparse() (Paulo Alcantara) [RHEL-257205] - smb/client: name the default fallocate mode (Paulo Alcantara) [RHEL-257205] - smb/client: update i_blocks after contiguous writes (Paulo Alcantara) [RHEL-257205] - smb: client: fix races in cifsd thread creation (Paulo Alcantara) [RHEL-257205] {CVE-2026-93829} - cifs: invalidate cfid on unlink/rename/rmdir (Paulo Alcantara) [RHEL-257205] - cifs: abort open_cached_dir if we don't request leases (Paulo Alcantara) [RHEL-257205] - cifs: change_conf needs to be called for session setup (Paulo Alcantara) [RHEL-257205] - smb: client: fix generic/694 due to wrong ->i_blocks (Paulo Alcantara) [RHEL-257205] - smb: client: fix open handle lookup in cifs_open() (Paulo Alcantara) [RHEL-257205] - smb: client: fix in-place encryption corruption in SMB2_write() (Paulo Alcantara) [RHEL-257205] {CVE-2026-43362} - smb: client: fix atomic open with O_DIRECT & O_SYNC (Paulo Alcantara) [RHEL-257205] - cifs: Scripted clean up fs/smb/client/cifsglob.h (Paulo Alcantara) [RHEL-257205] - cifs: Scripted clean up fs/smb/client/fscache.h (Paulo Alcantara) [RHEL-257205] - cifs: Scripted clean up fs/smb/client/cifsfs.h (Paulo Alcantara) [RHEL-257205] - cifs: Scripted clean up fs/smb/client/cifsproto.h (Paulo Alcantara) [RHEL-257205] - udp: Deal with race between UDP socket address change and rehash (Jamie Bainbridge) [RHEL-257635] {CVE-2024-57974} - smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (CKI Backport Bot) [RHEL-271257] {CVE-2026-89638} - net/handshake: Drain pending requests at net namespace exit (Xin Long) [RHEL-232134] {CVE-2026-63978} - net/handshake: Use spin_lock_bh for hn_lock (Xin Long) [RHEL-232134] - net/handshake: hand off the pinned file reference to accept_doit (Xin Long) [RHEL-230363] {CVE-2026-63979} - net/handshake: Take a long-lived file reference at submit (Xin Long) [RHEL-234159] {CVE-2026-64523} - fuse: re-lock request before replacing page cache folio (Miklos Szeredi) [RHEL-226093] {CVE-2026-53388} - fuse: release pipe buf after last use (Miklos Szeredi) [RHEL-226093] {CVE-2026-53388} - fuse: fix page stealing (Miklos Szeredi) [RHEL-226093] {CVE-2026-53388} - ipvs: reload ip header after head reallocation (Phil Sutter) [RHEL-263800] {CVE-2026-68476} - selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() (CKI Backport Bot) [RHEL-243225] {CVE-2026-72242} - usb: usbfs: fix use-after-free of usb_device in usbdev_release() (CKI Backport Bot) [RHEL-258557] {CVE-2026-80824} - fuse: re-lock request before returning from fuse_ref_folio() (CKI Backport Bot) [RHEL-234250] {CVE-2026-64266} - xfs: bounds-check buffer log item's dirty bitmap (Pavel Reichl) [RHEL-253366] {CVE-2026-80536} - ovl: check access to copy_file_range source with src mounter creds (Miklos Szeredi) [RHEL-238870] {CVE-2026-68448} - ALSA: seq: close a re-opened queue timer in the destructor (CKI Backport Bot) [RHEL-263709] {CVE-2026-68202} - calipso: unlock rcu before returning -EAFNOSUPPORT (CKI Backport Bot) [RHEL-257685] {CVE-2025-38147} - calipso: Don't call calipso functions for AF_INET sk. (CKI Backport Bot) [RHEL-257685] {CVE-2025-38147} - netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (CKI Backport Bot) [RHEL-257666] {CVE-2025-22063} - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (CKI Backport Bot) [RHEL-255258] {CVE-2026-80530} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252811] {CVE-2026-68299} - ALSA: hda/cs35l41: Fix firmware load work teardown (CKI Backport Bot) [RHEL-234099] {CVE-2026-64481} - rtla: Fix segfault on multiple SIGINTs (Tomas Glozar) [RHEL-193029] - net: always dissect GSO packets in __virtio_net_hdr_to_skb() (Davide Caratti) [RHEL-284987] - ipv4: validate checksum_start before completing checksum (CKI Backport Bot) [RHEL-284987] {CVE-2026-99999} - smb: client: reject a tree connect response whose byte count is too small (Alisher Mazhirinov) [RHEL-271284] {CVE-2026-89631} - exec: Cleanup POSIX timers right after de_thread() (Luiz Capitulino) [RHEL-282063] {CVE-2026-98260} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271871] {CVE-2026-93817} - smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (Frank Sorenson) [RHEL-271487] {CVE-2026-89633} - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270747] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256697] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256697] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256697] - bridge: mcast: Fix a possible use-after-free when removing a bridge port (Jakub Ramaseuski) [RHEL-232528] {CVE-2026-64032} - net: bridge: Flush multicast groups when snooping is disabled (Jakub Ramaseuski) [RHEL-232528] - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Antoine Tenart) [RHEL-231693] {CVE-2026-64024} - ipv4: fib: free fib_alias with kfree_rcu() on insert error path (Jamie Bainbridge) [RHEL-233131] {CVE-2026-64572} - inet: frags: strip GSO state from fragments before reassembly (Jamie Bainbridge) [RHEL-254224] {CVE-2026-80590} - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Jamie Bainbridge) [RHEL-225452] {CVE-2026-64114} - usb: typec: ucsi: validate connector number in ucsi_connector_change() (Desnes Nunes) [RHEL-259429] {CVE-2026-63958} - usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO (Desnes Nunes) [RHEL-259429] - usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (Desnes Nunes) [RHEL-259429] {CVE-2026-63962} - usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (Desnes Nunes) [RHEL-259429] {CVE-2026-63963} - usb: typec: altmodes/displayport: validate count before reading Status Update VDO (Desnes Nunes) [RHEL-259429] {CVE-2026-63961} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63899} - Bluetooth: hci_sync: Fix advertising data UAFs (CKI Backport Bot) [RHEL-254674] {CVE-2026-74509} - openvswitch: vport: fix self-deadlock on release of tunnel ports (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222958] {CVE-2026-52935} - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (Mohammadfaiz Bawa) [RHEL-243814] {CVE-2026-72288} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275058] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275076] {CVE-2026-93228} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270929] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270929] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271453] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268122] {CVE-2026-74705} - net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CKI Backport Bot) [RHEL-270908] {CVE-2026-81003} - wifi: cfg80211: use wiphy work for socket owner autodisconnect (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-263788] {CVE-2026-68409} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (Jose Ignacio Tornos Martinez) [RHEL-259560] {CVE-2026-64030} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261686] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260511] {CVE-2026-68140} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261293] {CVE-2026-72320} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256448] {CVE-2026-74641} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-237219] {CVE-2026-68377} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229654] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226490] {CVE-2026-53011} - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Switch the test run from nose to pytest, related: rhbz#1916787 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for Python 3.8.0rc1 (#1748018) - Rebuilt for Python 3.8 - Bump epoch for the virtual pip Provide, for this package to take precedence over python3.14-pip Resolves: RHEL-178095 - Add gating configuration and a simple smoke test - Related: rhbz#1950291 - Add automatically generated Obsoletes tag with the python39- prefix for smoother upgrade from RHEL8 - Related: rhbz#1990421 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - update to 0.13.1 - Rebuilt for Python 3.9 - Bootstrap for Python 3.9 - update to https://github.com/containers/podman-py/releases/tag/v5.7.0 - Related: RHEL-111919 - update to https://github.com/containers/podman-py/releases/tag/v5.6.0 - Related: RHEL-111919 - update to https://github.com/containers/podman-py/releases/tag/v5.5.0 - Related: RHEL-80816 - update to https://github.com/containers/podman-py/releases/tag/v5.4.0.1 - Resolves: RHEL-81952 - update to https://github.com/containers/podman-py/releases/tag/v5.3.0 - Resolves: RHEL-69140 - update to https://github.com/containers/podman-py/releases/tag/v5.2.0 - Related: RHEL-27608 - update to https://github.com/containers/podman-py/releases/tag/v5.0.0 - Resolves: RHEL-30257 - sandbox/seunshare: Replace system() with execv() to prevent shell injection - seunshare: fix the frail tmpdir cleanup - semanage: Reset active value when deleting boolean customizations - restorecond: always add '\0' to ut_user - semanage: Allow modifying records on "add" - semanage: Do not sort local fcontext definitions - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Subpackage python2-prettytable has been removed See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal - Rebuilt for Python 3.8.0rc1 (#1748018) - Rebuilt for Python 3.8 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - New upstream release - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - New upstream release - New upstream release - Fix Python 2 conditional for ELN - New upstream release - New upstream release 1.27 - Switch sources to tar.gz - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 3.0.41 Resolves: RHEL-162818 - Fix CVE-2026-0994: nested Any messages bypassing recursion depth limits - Rebuild - Rebuild - Applied patch for CVE-2022-1941 (#RHEL-40872) - Applied patch to make emacs dependency optional (#RHEL-40572) - Add automatically generated Obsoletes tag with the python39- prefix for smoother upgrade from RHEL8 - Related: rhbz#1990421 - Separate the tests to their own subpackage Resolves: rhbz#1990466 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Skip 2 tests that fail in brew due to broken IPv6 Resolves: rhbz#1913682 - Add tolerance to a flaky test Resolves: rhbz#1913682 - Drop python2-psutil Resolves: rhbz#1913682 - Remove unnecessary test dependency on python3-mock - Remove unnecessary macro __provides_exclude_from - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Disable test_leak_mem test. - Add automatically generated Obsoletes tag with the python39- prefix for smoother upgrade from RHEL8 - Add manual Obsoletes for python39-psycopg2-doc - Related: rhbz#1990421 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - rebuild for libpq ABI fix rhbz#1908268 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebase to upstream version 2.8.6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for Python 3.9 - Rebase to upstream version 2.8.5 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Explicitly rebuild the localization - Resolves: rhbz#1938621 - rebuilt - added i18n updates for de, fr, ja, ko, zh_CN - Resolves: rhbz#1963858 - Resolves: rhbz#1938621 - cracklib-dicts is a hard requirement, not a recomendation. - Resolves rhbz#1947882 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Resolves rhbz#1919026 libpwquaily rpm requires cracklib-dict to function but RPM missing requirement - Translation updates - Fix regression with enabling the cracklib check during build - Multiple translation updates - Add usersubstr check for substrings of N characters from the username patch by Danny Sauer - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Add gating configuration and a simple smoke test - Related: rhbz#1950291 - Add automatically generated Obsoletes tag with the python39- prefix for smoother upgrade from RHEL8 - Related: rhbz#1990421 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.10.0. - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.9.0. - Update to 1.8.2. - Rebuilt for Python 3.9 - Resolves: RHEL-148154 - Fix CVE-2026-59886: prevent overflow in Real type float conversion - Resolves: RHEL-217915 - Resolves: RHEL-148154 - Resolves: RHEL-148154 - Fix CVE-2026-59886: prevent overflow in Real type float conversion - Resolves: RHEL-217915 - Resolves: RHEL-148154 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 2.38.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 2.38.0 - Update to 2.37.90 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for Python 3.9 - Update to 2.36.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Disable tests that use genisoimage Resolves: rhbz#1972212 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to upstream 1.11.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to upstream version 1.9.0 - Rebuilt for Python 3.8.0rc1 (#1748018) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - temporarily remove a failing test-case (#1927655) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - make build dependencies for upstream tests optional - make the code compile against python-3.10.0a1 (#1890442) - update to 7.43.0.6 - relax crypto policy for the test-suite to make it pass again (#1863711) - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - update to 0.27 (#1891845) - run readelf tests on all arches - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - update to 0.26 (#1780153) - make main package archful to run tests on all arches (pythonN-pyelftools subpackages are still noarch) - run readelf tests on x86_64 only for now - rename binaries to conform to Python packaging guidelines - enable python3 subpackage for EPEL7 - declare bundled old construct module instead of needlessly requiring it - Rebuilt for Python 3.8.0rc1 (#1748018) - Rebuilt for Python 3.8 - Updated to 1.5.34. - Updated to 1.5.29. - Avoid dependency on python-pbr, conditionalize docs build, to allow building in RHEL. Inspired by python-sushy. - Updated to 1.5.19. - Updated to 1.5.16. - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Relax dateutil requirement in requirement.txt as well (#1835084) - Rebuilt for Python 3.9 - Fix typo in requirements - Updated to 1.5.14. - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Upstream released 4.0.30 - Add Recommendation to install database connector - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Upstream released 4.0.27 - Rebuilt for Python 3.8 - Patch pyparted to handle PED_DISK_TYPE_PARTITION_TYPE_ID for the msdos disk type and PED_DISK_TYPE_PARTITION_TYPE_UUID for the gpt label Resolves: rhbz#2103243 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Upgrade to pyparted-3.11.7 (BZ#1890443) - Set PY_SSIZE_T_CLEAN for the build (bcl) - add nvme support - Update RELEASE file to make last step be "make pypi" (dcantrell) - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - 12.11.1 Resolves: bz#2188589 - Initial package Resolves: bz#2090327 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Don't BuildRequire python3-hypothesis and exclude affected tests from %check - Resolves: rhbz#1928125 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Parallelize Sphinx documentation build - Use the GitHub tarball instead of the PyPI tarball - Switch URL to HTTPS - Replace pypi_name macro with srcname - Update BR’s - Run the doctests - Build documentation in a new -doc subpackage - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - update to version 0.17.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for Python 3.9 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Subpackage python2-pyserial has been removed See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal - Rebuilt for Python 3.8.0rc1 (#1748018) - Rebuilt for Python 3.8 - Allow pluggy >=1.0 Resolves: RHEL-29656 - Fix FTBFS with newest tzdata Resolves: RHEL-676 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - BR python3-setuptools - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Drop Python 2. - Rebuilt for Python 3.8.0rc1 (#1748018) - Rebuilt for Python 3.8 - Rebuilt for gating testing - Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331 - Rebase to upstream release v61.0 - Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331 - bump release to rebuild in sidetag - Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331 - bump release to rebuild in sidetag - Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331 - Rebase to upstream release v60.0 - Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331 - Fix pyverbs tests - Resolves: RHEL-107929, RHEL-107930 - Rebase to upstream release v57.0 - Resolves: RHEL-76570, RHEL-45644, RHEL-72077, RHEL-68506, RHEL-94449 - Fix data corruption in bnxt_re - Resolves: RHEL-89179 - Rebase to upstream release v54.0 - Resolves: RHEL-52886, RHEL-54647, RHEL-51876 - Rebase to upstream release v51.0 - Resolves: RHEL-24473, RHEL-23180 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - https://bugzilla.redhat.com/show_bug.cgi?id=1975381 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - https://bugzilla.redhat.com/show_bug.cgi?id=1922368 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 0.15.0 for python 3.8 fixes - New build to do a multi-build - Add epoch to override the newer version that cannot be installed. - Fix build failure Bad source: /builddir/build/SOURCES/pywbem-0.14.6.tar.gz: No such file or directory - Go back to 0.14.6 ref. https://bugzilla.redhat.com/show_bug.cgi?id=1868128 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Backport a rawhide patch to fix the gating tests - update to 0.27 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Subpackage python2-pyxdg has been removed See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal - Rebuilt for Python 3.8.0rc1 (#1748018) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Build only python3-qrcode-core on RHEL - Related: #1935839 - Resolves: #1935839 Remove python-imaging build requirements for RHEL - Run unit tests during build - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for Python 3.8.0rc1 (#1748018) - Rebuilt for Python 3.8 - 5.15.9 Resolves: bz#2175758 - 5.15.6 + sync with Fedora Resolves: bz#2061728 - Rebuild (Qt 5.15.3) Resolves: bz#2061728 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.9 Resolves: bz#2175758 - 5.15.6 + sync with Fedora Resolves: bz#2061728 - Rebuild (Qt 5.15.3) Resolves: bz#2061728 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Security fix for CVE-2024-47081 Resolves: RHEL-105461 - Security fix for CVE-2024-35195 Resolves: RHEL-37609 - Add support for IPv6 CIDR in no_proxy setting Resolves: RHEL-17548 - Security fix for CVE-2024-47081 Resolves: RHEL-105461 - Security fix for CVE-2024-35195 Resolves: RHEL-37609 - Add support for IPv6 CIDR in no_proxy setting Resolves: RHEL-17548 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Make Content-Length optional - Fix python2 compatibility - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for Python 3.8.0rc1 (#1748018) - Rebuilt for Python 3.8 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for Python 3.8.0rc1 (#1748018) - Rebuilt for Python 3.8 - New upstream release (1.4.0) Resolves: RHEL-103416 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Don't use SIGNATURE_RSA - Related: #1935433 - python-oauthlib implements and/or uses the deprecated SHA1 algorithm by default - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Drop python2 support - actually run unit tests - drop unused python3-mock dependency - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.3.0. Fixes bug #1769415 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for Python 3.8.0rc1 (#1748018) - Initial package. - Forked from https://fedora.pkgs.org/rawhide/fedora-x86_64/python3-resolvelib-0.5.5-2.fc35.noarch.rpm.html however downgraded to 0.5.4 due to 0.5.5 being yanked from pypi. - Avoid needless pkg_resources import in pythonbundles.py - Resolves: RHEL-6110 - From `python3-foo` packages automatically generate `python3.X-foo` Obsoletes tags on CentOS/RHEL - Resolves: rhbz#1990421 - %python_extras_subpkg: Add option -a to include BuildArch: noarch - Update macros from Fedora and add pathfix.py into python-rpm-macros - Resolves: RHEL-6107 - Update to version 2.1.76 - Update to version 2.1.75 - Add CI test. Resolves: rhbz#2009152 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 0.16.6 - Rebuilt for Python 3.8.0rc1 (#1748018) - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for Python 3.12 - Update to 0.2.7 - Confirm License is SPDX MIT - Reduce macro indirection, etc. - Drop unused manual runtime dependency on setuptools - Add a note about the circular dependency with ruamel.yaml - Stop numbering sources and patches - Update URL (close RHBZ#1840610) - Add an import-only “smoke test” - Properly handle libyaml bundling - Port to pyproject-rpm-macros (“new Python guidelines”) - Add a link to the upstream issue for the Cython workaround - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Rebuilt for Python 3.11 - Update to 0.2.6 - Fix for type demotion issues on s390x - Resolves: BZ#2042422 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - new upstream release - Bump release. - new upstream release - new nodelay flag for add_lockspace - spec file fixes - upstream release 3.9.5, and udevadm settle patch - fix invalid strcpy in direct dump - upstream release - upstream release, fix rpm issues - fix rpm issues - New version 2.6.1 (Andrea Claudi) [RHEL-657] - Don't package scapy tests (Andrea Claudi) - Fix scapy compliance with pep-0440 (Andrea Claudi) [2162667] - New version 2.5.0 (Andrea Claudi) [RHEL-657] - Apply upstream patch: MAINT:linalg:Adjust lwork/liwork changes OpenBLAS 0.3.26 - Resolves: RHEL-70908 - Update to 1.9.3 - Resolves: RHEL-5600 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Don't run tests on the centos and rhel because of missing required packages - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 0.38.1 - 0.38 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for Python 3.8.0rc1 (#1748018) - Fix bumpver Makefile target (Jiri Konecny) - Add tests for UIScreen wide disabling of concurrency check (Jiri Konecny) Related: rhbz#2134889 - Abstract registering signal handler in the InputHandler constructor (Jiri Konecny) Related: rhbz#2134889 - Allow to disable concurrency check for all UIScreen inputs (Jiri Konecny) Resolves: rhbz#2134889 - Add Makefile target for local container tests (Jiri Konecny) - Use localization from rhel-9 weblate translation component (Jiri Konecny) - Remove changelog from the upstream spec file (Jiri Konecny) - Fix spec file archive link (Jiri Konecny) - Include also documentation to the tarball (Jiri Konecny) - Rename doc directory to docs (Jiri Konecny) - Add explanations of what is included in the MANIFEST.in file (Jiri Konecny) - Update packit config to reflect new tag naming (Jiri Konecny) - Change tag name to just version (Jiri Konecny) - Fix GitHub workflow checkout (Jiri Konecny) - Switch to packit new fedora-latest alias (Jiri Konecny) - Disable duplicate-code in pylint test (Jiri Konecny) - Remove duplicate of code between event loops (Jiri Konecny) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - New version - 1.8 (Jiri Konecny) - Add missing make command to spec file (Jiri Konecny) - Don't translate the prompt keys (Vendula Poncova) - Enable daily build for Anaconda-devel COPR repository (Jiri Konecny) - Use Fedora container registry instead of Dockerhub (Jiri Konecny) - Migrate COPR daily COPR builds to Packit (Jiri Konecny) - Test build on Fedora ELN (Jiri Konecny) - Remove packit get-current-action (Jiri Konecny) - Run tests in GitHub workflow (Martin Pitt) - Fix raise-missing-from (W0707) pylint warnings (Martin Pitt) - Fix pylint to check test code correctly (Jiri Konecny) - Use script to run unit tests (Jiri Konecny) - Use relative imports in tests (Jiri Konecny) - Change directory structure of unit tests (Jiri Konecny) - Fix documentation of _process_screen method (Jiri Konecny) - Fix pylint issues (Jiri Konecny) - Use pylint instead of pocketlint (Jiri Konecny) - Add coverage support (Jiri Konecny) - Make link to exmples directory in Readme (Jiri Konecny) - Fix homepage of the project in setup.py (Jiri Konecny) - Fix classifiers in setup.py (Jiri Konecny) - Add pypi-upload to Makefile (Jiri Konecny) - Use correct variant of the field (Jiri Konecny) - Propose Fedora update only to Fedora in development (Jiri Konecny) - Add upstream tag template to packit for releasing (Jiri Konecny) - Packit will download archive from Source0 if needed (Jiri Konecny) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update the version test expectation. - Update to upstream 0.7.0 - schedule: fix TIMELINE policy retention indexing when keep_x > len(x) - Update expected string in TMT version test - Update to upstream 0.5.2 - Update TMT configuration - Update to upstream 0.5.1 - Bump tests/upstream/main.fmf duration to 30m - Update test path in main.fmf - Update to upstream 0.4.3 - Update the version test expectation. - Update to upstream 0.7.0 - schedule: fix TIMELINE policy retention indexing when keep_x > len(x) - Update expected string in TMT version test - Update to upstream 0.5.2 - Update TMT configuration - Update to upstream 0.5.1 - Bump tests/upstream/main.fmf duration to 30m - Update test path in main.fmf - Update to upstream 0.4.3 - Backport "Implement color filtering when adding update targets" Resolves: RHEL-103995 - Some static analysis fixes for unitialized structs Resolves: RHEL-25498 - Fix a memory leak in parse_package() of repo conda (RHEL-25496) - Backport "choice rules: also do solver_choicerulecheck for package downgrades" Resolves: RHEL-141449 - Backport "Implement color filtering when adding update targets" Resolves: RHEL-103995 - Fix a buffer overflow when decompressing solv pages (CVE-2026-48864) (RHEL-178982) - Backport "choice rules: also do solver_choicerulecheck for package downgrades" Resolves: RHEL-141449 - Backport "Implement color filtering when adding update targets" Resolves: RHEL-103995 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 0.10.2 - Fix crash with python 3.9 (#1878276) - Update to 0.10.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for Python 3.9 - Fixed FTBFS - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to current version - 1.4.45 Resolves: rhbz#2152649 - Remove obsolete cruft from the specfile, follow the packaging guidelines - Remove also extra packages we have no runtime dependencies for Related: rhbz#2084556 - Add python-sqlalchemy to RHEL-9 Resolves: rhbz#2084556 - version 1.4.37 - version 1.4.36 - version 1.4.35 - version 1.4.34 - version 1.4.32 - don't BR: python3-pytest-xdist on EL9 - remove obsolete (no-op) tweak of setup.cfg - version 1.4.31 - version 1.4.29 - mod_dav_svn: add conflicts to ensure compatible mod_dav Related: RHEL-79948 - mod_dav_svn: inherit DavBasePath from httpd Resolves: RHEL-79948 - Remove jQuery from Doxygen output (RHEL-77697) - Security fix for CVE-2026-15308 Resolves: RHEL-193786 - Fix ssl.SSLError: [ASN1: NOT_ENOUGH_DATA] not enough data with OpenSSL 3.5.7+ Resolves: RHEL-194207 - Security fixes for CVE-2026-4786 and CVE-2026-6100 Resolves: RHEL-167919, RHEL-168161 - Security fix for CVE-2026-4519 Resolves: RHEL-158117 - Rebuilding previous fixes for different build target Related: RHEL-143117, RHEL-143174, RHEL-144897 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143117 Resolves: RHEL-143174 Resolves: RHEL-144897 - Security fix for CVE-2025-12084 Resolves: RHEL-135897 - Move _sysconfigdata_d_linux*.py to the debug subpackage - Update to Python 3.9.25 - Update to Python 3.9.24 - Security fix for CVE-2026-11940 Resolves: RHEL-227228 - Security fix for CVE-2026-15308 Resolves: RHEL-193786 - Fix ssl.SSLError: [ASN1: NOT_ENOUGH_DATA] not enough data with OpenSSL 3.5.7+ Resolves: RHEL-194207 - Security fixes for CVE-2026-4786 and CVE-2026-6100 Resolves: RHEL-167919, RHEL-168161 - Security fix for CVE-2026-4519 Resolves: RHEL-158117 - Rebuilding previous fixes for different build target Related: RHEL-143117, RHEL-143174, RHEL-144897 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143117 Resolves: RHEL-143174 Resolves: RHEL-144897 - Security fix for CVE-2025-12084 Resolves: RHEL-135897 - Move _sysconfigdata_d_linux*.py to the debug subpackage - Update to Python 3.9.25 - CVE-2026-19553 python3.9: python: Certificate verification bypass via missing server_hostname validation in SSLContext.wrap_bio() Resolves: RHEL-274143 - CVE-2026-19445 python3.9: Use-after-free of a server-side SSLContext when sni_callback switches contexts Resolves: RHEL-276263 - CVE-2026-12345 python3.9: python: Arbitrary file deletion via race condition during temporary directory cleanup Resolves: RHEL-272937 - Security fix for CVE-2026-11940 Resolves: RHEL-227228 - Security fix for CVE-2026-15308 Resolves: RHEL-193786 - Fix ssl.SSLError: [ASN1: NOT_ENOUGH_DATA] not enough data with OpenSSL 3.5.7+ Resolves: RHEL-194207 - Security fixes for CVE-2026-4786 and CVE-2026-6100 Resolves: RHEL-167919, RHEL-168161 - Security fix for CVE-2026-4519 Resolves: RHEL-158117 - Rebuilding previous fixes for different build target Related: RHEL-143117, RHEL-143174, RHEL-144897 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143117 Resolves: RHEL-143174 Resolves: RHEL-144897 - Security fixes for CVE-2026-4786 and CVE-2026-6100 Resolves: RHEL-167919, RHEL-168161 - Security fix for CVE-2026-4519 Resolves: RHEL-158117 - Rebuilding previous fixes for different build target Related: RHEL-143117, RHEL-143174, RHEL-144897 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143117 Resolves: RHEL-143174 Resolves: RHEL-144897 - Security fix for CVE-2025-12084 Resolves: RHEL-135897 - Move _sysconfigdata_d_linux*.py to the debug subpackage - Update to Python 3.9.25 - Update to Python 3.9.24 - Security fix for CVE-2025-8194 Resolves: RHEL-106374 - Update to 3.9.23 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98051, RHEL-98024, RHEL-98242, RHEL-98193, RHEL-98218 - Add automatically generated Obsoletes tag with the python39- prefix for smoother upgrade from RHEL8 - Related: rhbz#1990421 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Disable tests on RHEL9 to avoid pulling in the test dependencies - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 0.10.2 - Fixes: rhbz#1893498 - Don't BR pytest-cov - Use pyproject-rpm-macros - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 0.10.1 (#1835567) - Initial package for RHEL 9 - Resolves: rhbz#2175213 - Fedora+EPEL contributions by: Maxwell G <gotmax@e.email> Michel Alexandre Salim <salimma@fedoraproject.org> Miro Hrončok <miro@hroncok.cz> Petr Viktorin <pviktori@redhat.com> - Update to 6.5.10 Resolves: RHEL-274870 - Update to 6.5.8 Resolves: RHEL-247281 - Update to 6.5.5 Resolves: RHEL-160942 - httputil: Raise errors instead of logging in multipart/form-data parsing Resolves: RHEL-91998 - Bump release to prevent clash with 9.5.z NVR Resolves: RHEL-68667 - Update to 6.4.2 Resolves: RHEL-68667 - Update to 6.5.5 Resolves: RHEL-160942 - httputil: Raise errors instead of logging in multipart/form-data parsing Resolves: RHEL-91998 - Bump release to prevent clash with 9.5.z NVR Resolves: RHEL-68667 - Update to 6.4.2 Resolves: RHEL-68667 - Update to 6.5.8 Resolves: RHEL-247281 - Update to 6.5.5 Resolves: RHEL-160942 - httputil: Raise errors instead of logging in multipart/form-data parsing Resolves: RHEL-91998 - Bump release to prevent clash with 9.5.z NVR Resolves: RHEL-68667 - Update to 6.4.2 Resolves: RHEL-68667 - Rebuild with gating.yaml - Fix parameters for specifying the target user (frostyx@email.cz) - Resolves: RHEL-6988 - Fix querying RPM files on EPEL7 (frostyx@email.cz) - Use backported lru_cache on EPEL7 (frostyx@email.cz) - Don't hang forever when executed via SSH (frostyx@email.cz) - Don't check if package is installed before listing its files (frostyx@email.cz) - Replace regexes where they are not needed (frostyx@email.cz) - Query all packages at once, its faster than one by one (frostyx@email.cz) - Cache some properties for a massive performance boost (frostyx@email.cz) - Refactor unnecessary condition (frostyx@email.cz) - Fix weird indentation (frostyx@email.cz) - Pass the whole application to the provided_by function, not just its name (frostyx@email.cz) - Stop using deprecated rpm.fi (frostyx@email.cz) - Attempt to fix readthedocs deprecation error (frostyx@email.cz) - More reliable check if /usr/lib/sysimage/dnf/ database should be used (frostyx@email.cz) - Rather create a /run/reboot-required not /var/run/reboot-required (frostyx@email.cz) - Update license to SPDX (frostyx@email.cz) - Update tito releasers (frostyx@email.cz) - Create /var/run/reboot-required file (frostyx@email.cz) - Recommend the correct command for restarting auditd (frostyx@email.cz) - Add python3-setuptools dependency (frostyx@email.cz) - Fix argument passed to print_helper() (ferdnyc@gmail.com) - Add similar software to the readme (frostyx@email.cz) - Update url references to point to tracer.readthedocs.io (dcampano@gmail.com) - Oracle Linux 8 uses dnf, too (suttner@atix.de) - Drop python-setuptools runtime dependency (frostyx@email.cz) - Fix Python DeprecationWarning: invalid escape sequence (jvanderwaa@redhat.com) - Add readthedocs configuration file (frostyx@email.cz) - Switch TLS configuration to follow TLS sockets by crypto-policy again (RHEL-147860) - Change the default of tls-use-system-policy-versions at build-time - Add new root key 38696 (RHEL-77716) - Do not verify root.key in libs (RHEL-64339) - Create root key if missing automatically (RHEL-127540) - Fix RebirthDay Attack (CVE-2025-5994) - Resolves: RHEL-104129 - Fix verification of unbound-control key files - Resolves: RHEL-65396 - Fix regression on update introduced by local-root symlink - Resolves: RHEL-92255 - Prevent unbounded name compression (CVE-2024-8508) - Add as112 networks config file - Resolves: RHEL-78696 - Add possibility to disable unbound-anchor by file presence - Resolves: RHEL-78694 - Fix CVE-2026-33278 (RHEL‑177822) Fix CVE-2026-42944 (RHEL-177936) Fix CVE-2026-42959 (RHEL-177797) - Install correct trust anchor source in Image Mode (RHEL-127540) - Switch TLS configuration to follow TLS sockets by crypto-policy again (RHEL-147860) - Change the default of tls-use-system-policy-versions at build-time - Add new root key 38696 (RHEL-77716) - Do not verify root.key in libs (RHEL-64339) - Create root key if missing automatically (RHEL-127540) - Fix RebirthDay Attack (CVE-2025-5994) - Resolves: RHEL-104129 - Fix verification of unbound-control key files - Resolves: RHEL-65396 - Fix regression on update introduced by local-root symlink - Resolves: RHEL-92255 - Prevent unbounded name compression (CVE-2024-8508) - Fix CVE-2026-40622 (RHEL-184840) Fix CVE-2026-44390 (RHEL-186688) Fix CVE-2026-41292 (RHEL-187352) Fix CVE-2026-42534 (RHEL-187095) - Fix CVE-2026-33278 (RHEL-177822) Fix CVE-2026-42944 (RHEL-177936) Fix CVE-2026-42959 (RHEL-177797) - Install correct trust anchor source in Image Mode (RHEL-127540) - Switch TLS configuration to follow TLS sockets by crypto-policy again (RHEL-147860) - Change the default of tls-use-system-policy-versions at build-time - Add new root key 38696 (RHEL-77716) - Do not verify root.key in libs (RHEL-64339) - Create root key if missing automatically (RHEL-127540) - Fix RebirthDay Attack (CVE-2025-5994) - Resolves: RHEL-104129 - Fix verification of unbound-control key files - Resolves: RHEL-65396 - Fix regression on update introduced by local-root symlink - Resolves: RHEL-92255 - Fix CVE-2026-55973 (RHEL-212809) - Backport additional fix from 1.26.0 (CVE-2026-50252) - Fix CVE-2026-50252 (RHEL-243479) - Fix CVE-2026-55973 (RHEL-212809) - Prevent heap corruption during CNAME synthesis (CVE-2026-82717) - Prevent heap buffer overflow when digesting DNSKEY (CVE-2026-81642) - Prevent heap buffer overflow during DNSSEC canonicalization (CVE-2026-81634) - Add unit tests for vulnerabilities too - Backport additional fix from 1.26.0 (CVE-2026-50252) - Fix CVE-2026-50252 (RHEL-243479) - Fix CVE-2026-55973 (RHEL-212809) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Drop dependency on python-nose - New upstream release (1.0.2) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for Python 3.8.0rc1 (#1748018) - Rebuilt for Python 3.8 - backport bootctl fix for 99-uki-uefi-setup.install - Resolves: RHEL-84984 - update to version 24.11 - Resolves: RHEL-69507 - update to version 24.7 - update to version 24.4 - update to version 24.2 - update to version 24.1.1 - update to version 24.1 - Resolves: RHEL-21090 - add "obsoletes: rhel-cvm-update-tool" to uki-direct - add uki-direct subpackage - Resolves: RHEL-19383 - update to version 23.11 - ake getting password from backed up secret FIPS compatible (RHEL-113757) - make volume_key FIPS compliant (RHEL-78044) - Rebuild after move into AppStream - Related: rhbz#2066456 - Add automatically generated Obsoletes tag with the python39- prefix for smoother upgrade from RHEL8 - Related: rhbz#1990421 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Remove check test - Resolves: rhbz#1988144 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 0.2.5 (#1850238) - Update to 0.2.4 - Bump revision to address packaging issues Resolves: RHEL-157865 - Update to 14.2 and add patch to remove shell=True Resolves: RHEL-113034 - Add py_ssize_t_clean module support for compatibility with python-qt5 Resolves: RHEL-27554 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Use pytest instead of nose (#1918336) - Don't use is to compare literals (#1749216) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for Python 3.9 - Update to 1.3.3 - Removing py3 patches - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Drop forgotten build dependency on python2-pyusb - Rebuilt for Python 3.8.0rc1 (#1748018) - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-178519 - Security fixes for CVE-2026-4786, CVE-2026-6100 Resolves: RHEL-168158, RHEL-167916 - Security fix for CVE-2026-4519 Resolves: RHEL-158053 - Rebuilding previous fixes for different build target Related: RHEL-143110, RHEL-143170, RHEL-144894 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143110 Resolves: RHEL-143170 Resolves: RHEL-144894 - Security fix for CVE-2025-13836 Resolves: RHEL-141025 - Security fix for CVE-2025-12084 Resolves: RHEL-135395 - Security fix for CVE-2025-8194 Resolves: RHEL-106365 - Fix PySSL_SetError handling SSL_ERROR_SYSCALL - This fixes random flakiness of test_ssl on stressed machines Resolves: RHEL-101551 - Update to 3.11.13 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98044, RHEL-98014, RHEL-98237, RHEL-98176, RHEL-98205 - Security fixes for CVE-2026-4786, CVE-2026-6100 Resolves: RHEL-168158, RHEL-167916 - Security fix for CVE-2026-4519 Resolves: RHEL-158053 - Rebuilding previous fixes for different build target Related: RHEL-143110, RHEL-143170, RHEL-144894 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143110 Resolves: RHEL-143170 Resolves: RHEL-144894 - Security fix for CVE-2025-13836 Resolves: RHEL-141025 - Security fix for CVE-2025-12084 Resolves: RHEL-135395 - Security fix for CVE-2025-8194 Resolves: RHEL-106365 - Fix PySSL_SetError handling SSL_ERROR_SYSCALL - This fixes random flakiness of test_ssl on stressed machines Resolves: RHEL-101551 - Update to 3.11.13 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98044, RHEL-98014, RHEL-98237, RHEL-98176, RHEL-98205 - Security fix for CVE-2025-0938 Resolves: RHEL-77262 - Security fix for CVE-2024-36039 Resolves: RHEL-38370 - Initial package - Fedora contributions by: Benjamin A. Beasley <code@musicinmybrain.net> Carl George <carl@george.computer> Damien Ciabrini <dciabrin@redhat.com> Haikel Guemar <hguemar@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Itamar Reis Peixoto <itamar@ispbrasil.com.br> Julien Enselme <jujens@jujens.eu> Lumir Balhar <lbalhar@redhat.com> Miro Hrončok <miro@hroncok.cz> - Security fix for CVE-2024-36039 Resolves: RHEL-38370 - Initial package - Fedora contributions by: Benjamin A. Beasley <code@musicinmybrain.net> Carl George <carl@george.computer> Damien Ciabrini <dciabrin@redhat.com> Haikel Guemar <hguemar@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Itamar Reis Peixoto <itamar@ispbrasil.com.br> Julien Enselme <jujens@jujens.eu> Lumir Balhar <lbalhar@redhat.com> Miro Hrončok <miro@hroncok.cz> - Initial package - Fedora contributions by: Charalampos Stratakis <cstratak@redhat.com> Dennis Gilmore <dennis@ausil.us> Eric Smith <brouhaha@fedoraproject.org> Gwyn Ciesla <limburgher@gmail.com> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Joel Capitao <jcapitao@redhat.com> John Dulaney <jdulaney@fedoraproject.org> Lumir Balhar <lbalhar@redhat.com> Miro Hrončok <miro@hroncok.cz> Nathaniel McCallum <nathaniel@themccallums.org> Orion Poplawski <orion@cora.nwra.com> Parag Nemade <pnemade@redhat.com> Peter Robinson <pbrobinson@fedoraproject.org> Petr Viktorin <pviktori@redhat.com> Robert Kuska <rkuska@redhat.com> Slavek Kabrda <bkabrda@redhat.com> Tomáš Hrnčiar <thrnciar@redhat.com> Tom Stellard <tstellar@redhat.com> Troy Dawson <tdawson@redhat.com> - Initial package - Fedora contributions by: Gwyn Ciesla <limb@fedoraproject.org> Lumir Balhar <lbalhar@redhat.com> - Security fix for CVE-2023-49083 - Resolves: RHEL-19832 - Bump release for rebuild - Security fix for CVE-2023-23931 - Rebuild for gating - Add explicit dependency on python3.11-rpm-macros - Initial package - Fedora contributions by: Alfredo Moralejo <amoralej@redhat.com> Charalampos Stratakis <cstratak@redhat.com> Christian Heimes <christian@python.org> Colin Walters <walters@verbum.org> Dennis Gilmore <dennis@ausil.us> Fabio Valentini <decathorpe@gmail.com> Felix Schwarz <felix.schwarz@oss.schwarz.eu> Haikel Guemar <hguemar@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Lumir Balhar <lbalhar@redhat.com> Matěj Cepl <mcepl@cepl.eu> Miro Hrončok <miro@hroncok.cz> Nathaniel McCallum <npmccallum@redhat.com> Randy Barlow <randy@electronsweatshop.com> Robert Kuska <rkuska@redhat.com> Sahana Prasad <sahana@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Troy Dawson <tdawson@redhat.com> - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-178519 - Security fixes for CVE-2026-4786, CVE-2026-6100 Resolves: RHEL-168158, RHEL-167916 - Security fix for CVE-2026-4519 Resolves: RHEL-158053 - Rebuilding previous fixes for different build target Related: RHEL-143110, RHEL-143170, RHEL-144894 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143110 Resolves: RHEL-143170 Resolves: RHEL-144894 - Security fix for CVE-2025-13836 Resolves: RHEL-141025 - Security fix for CVE-2025-12084 Resolves: RHEL-135395 - Security fix for CVE-2025-8194 Resolves: RHEL-106365 - Fix PySSL_SetError handling SSL_ERROR_SYSCALL - This fixes random flakiness of test_ssl on stressed machines Resolves: RHEL-101551 - Update to 3.11.13 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98044, RHEL-98014, RHEL-98237, RHEL-98176, RHEL-98205 - Security fixes for CVE-2026-4786, CVE-2026-6100 Resolves: RHEL-168158, RHEL-167916 - Security fix for CVE-2026-4519 Resolves: RHEL-158053 - Rebuilding previous fixes for different build target Related: RHEL-143110, RHEL-143170, RHEL-144894 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143110 Resolves: RHEL-143170 Resolves: RHEL-144894 - Security fix for CVE-2025-13836 Resolves: RHEL-141025 - Security fix for CVE-2025-12084 Resolves: RHEL-135395 - Security fix for CVE-2025-8194 Resolves: RHEL-106365 - Fix PySSL_SetError handling SSL_ERROR_SYSCALL - This fixes random flakiness of test_ssl on stressed machines Resolves: RHEL-101551 - Update to 3.11.13 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98044, RHEL-98014, RHEL-98237, RHEL-98176, RHEL-98205 - Security fix for CVE-2025-0938 Resolves: RHEL-77262 - Initial package - Fedora contributions by: Charalampos Stratakis <cstratak@redhat.com> Dennis Gilmore <dennis@ausil.us> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jeremy Cline <jeremy@jcline.org> Lumir Balhar <lbalhar@redhat.com> Miro Hrončok <miro@hroncok.cz> Orion Poplawski <orion@cora.nwra.com> Paul Wouters <pwouters@redhat.com> Robert Kuska <rkuska@redhat.com> Tom Prince <tom.prince@ualberta.net> - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-178519 - Security fixes for CVE-2026-4786, CVE-2026-6100 Resolves: RHEL-168158, RHEL-167916 - Security fix for CVE-2026-4519 Resolves: RHEL-158053 - Rebuilding previous fixes for different build target Related: RHEL-143110, RHEL-143170, RHEL-144894 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143110 Resolves: RHEL-143170 Resolves: RHEL-144894 - Security fix for CVE-2025-13836 Resolves: RHEL-141025 - Security fix for CVE-2025-12084 Resolves: RHEL-135395 - Security fix for CVE-2025-8194 Resolves: RHEL-106365 - Fix PySSL_SetError handling SSL_ERROR_SYSCALL - This fixes random flakiness of test_ssl on stressed machines Resolves: RHEL-101551 - Update to 3.11.13 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98044, RHEL-98014, RHEL-98237, RHEL-98176, RHEL-98205 - Security fixes for CVE-2026-4786, CVE-2026-6100 Resolves: RHEL-168158, RHEL-167916 - Security fix for CVE-2026-4519 Resolves: RHEL-158053 - Rebuilding previous fixes for different build target Related: RHEL-143110, RHEL-143170, RHEL-144894 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143110 Resolves: RHEL-143170 Resolves: RHEL-144894 - Security fix for CVE-2025-13836 Resolves: RHEL-141025 - Security fix for CVE-2025-12084 Resolves: RHEL-135395 - Security fix for CVE-2025-8194 Resolves: RHEL-106365 - Fix PySSL_SetError handling SSL_ERROR_SYSCALL - This fixes random flakiness of test_ssl on stressed machines Resolves: RHEL-101551 - Update to 3.11.13 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98044, RHEL-98014, RHEL-98237, RHEL-98176, RHEL-98205 - Security fix for CVE-2025-0938 Resolves: RHEL-77262 - Bring back the isoschematron submodule, but without the validation of the schema file itself - Resolves: RHEL-5570 - Remove the isoschematron submodule - Remove the extras subpackages - Initial package - Fedora contributions by: Alexander Todorov <atodorov@redhat.com> Bill Nottingham <notting@fedoraproject.org> Charalampos Stratakis <cstratak@redhat.com> Dan Horák <dan@danny.cz> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Fabio Alessandro Locati <fale@redhat.com> Igor Raits <ignatenkobrain@fedoraproject.org> Jason ティビツ <tibbs@fedoraproject.org> Jeffrey C. Ollie <jcollie@fedoraproject.org> Jesse Keating <jkeating@fedoraproject.org> Kevin Fenzi <kevin@scrye.com> Lumir Balhar <lbalhar@redhat.com> Mikolaj Izdebski <mizdebsk@redhat.com> Miro Hrončok <miro@hroncok.cz> Peter Robinson <pbrobinson@gmail.com> Robert Kuska <rkuska@redhat.com> Shahms King <shahms@fedoraproject.org> Slavek Kabrda <bkabrda@redhat.com> tomspur <tomspur@fedoraproject.org> Ville Skyttä <scop@fedoraproject.org> - Initial package - Fedora contributions by: Adam Williamson <awilliam@redhat.com> Alexander Bokovoy <abokovoy@redhat.com> Bill Nottingham <notting@fedoraproject.org> Dennis Gilmore <dennis@ausil.us> dmalcolm <dmalcolm@fedoraproject.org> Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jakub Dorňák <jakub.dornak@misli.cz> James Bowes <jbowes@repl.ca> Jan Kaluza <jkaluza@redhat.com> jbowes <jbowes@fedoraproject.org> Jesse Keating <jkeating@fedoraproject.org> Joe Orton <jorton@redhat.com> joshkayse <joshkayse@fedoraproject.org> Kevin Fenzi <kevin@fedoraproject.org> Luboš Uhliarik <luhliari@redhat.com> Luke Macken <lmacken@fedoraproject.org> Matthias Runge <mrunge@redhat.com> Miro Hrončok <miro@hroncok.cz> Orion Poplawski <orion@cora.nwra.com> Peter Robinson <pbrobinson@fedoraproject.org> Richard W.M. Jones <rjones@redhat.com> Ricky Zhou (周家杰) <ricky@fedoraproject.org> Tomas Hrnciar <thrnciar@redhat.com> Tom Stellard <tstellar@redhat.com> Troy Dawson <tdawson@redhat.com> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Initial package - Fedora contributions by: Bill Nottingham <notting@fedoraproject.org> Charalampos Stratakis <cstratak@redhat.com> Christian Dersch <lupinix@mailbox.org> Dan Horák <sharkcz@fedoraproject.org> David Malcolm <dmalcolm@redhat.com> David Tardon <dtardon@redhat.com> Deji Akingunola <deji@fedoraproject.org> Dennis Gilmore <dennis@ausil.us> Elliott Sales de Andrade <quantum.analyst@gmail.com> Gwyn Ciesla <limburgher@gmail.com> Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org> Iñaki Úcar <iucar@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jarod Wilson <jwilson@fedoraproject.org> Jaromir Capik <jcapik@redhat.com> Jef Spaleta <jspaleta@fedoraproject.org> Jesse Keating <jkeating@fedoraproject.org> Jon Ciesla <limb@fedoraproject.org> Kalev Lember <klember@redhat.com> Karolina Surma <ksurma@redhat.com> Lumir Balhar <lbalhar@redhat.com> Merlin Mathesius <mmathesi@redhat.com> Miro Hrončok <miro@hroncok.cz> Nikola Forró <nforro@redhat.com> Orion Poplawski <orion@nwra.com> Pavel Šimovec <psimovec@redhat.com> Peter Robinson <pbrobinson@fedoraproject.org> Robert Kuska <rkuska@redhat.com> Simone Caronni <negativo17@gmail.com> Thomas Spura <tomspur@fedoraproject.org> Tomáš Hrnčiar <thrnciar@redhat.com> Tomas Orsava <torsava@redhat.com> Tomas Tomecek <ttomecek@redhat.com> Ville Skyttä <scop@fedoraproject.org> - Initial package - Fedora contributions by: Bill Nottingham <notting@fedoraproject.org> Charalampos Stratakis <cstratak@redhat.com> Christian Dersch <lupinix@mailbox.org> Dan Horák <sharkcz@fedoraproject.org> David Malcolm <dmalcolm@redhat.com> David Tardon <dtardon@redhat.com> Deji Akingunola <deji@fedoraproject.org> Dennis Gilmore <dennis@ausil.us> Elliott Sales de Andrade <quantum.analyst@gmail.com> Gwyn Ciesla <limburgher@gmail.com> Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org> Iñaki Úcar <iucar@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jarod Wilson <jwilson@fedoraproject.org> Jaromir Capik <jcapik@redhat.com> Jef Spaleta <jspaleta@fedoraproject.org> Jesse Keating <jkeating@fedoraproject.org> Jon Ciesla <limb@fedoraproject.org> Kalev Lember <klember@redhat.com> Karolina Surma <ksurma@redhat.com> Lumir Balhar <lbalhar@redhat.com> Merlin Mathesius <mmathesi@redhat.com> Miro Hrončok <miro@hroncok.cz> Nikola Forró <nforro@redhat.com> Orion Poplawski <orion@nwra.com> Pavel Šimovec <psimovec@redhat.com> Peter Robinson <pbrobinson@fedoraproject.org> Robert Kuska <rkuska@redhat.com> Simone Caronni <negativo17@gmail.com> Thomas Spura <tomspur@fedoraproject.org> Tomáš Hrnčiar <thrnciar@redhat.com> Tomas Orsava <torsava@redhat.com> Tomas Tomecek <ttomecek@redhat.com> Ville Skyttä <scop@fedoraproject.org> - Fix Bash completion Resolves: RHEL-100071 - Require Python with tarfile filters Resolves: RHEL-25455 - Use tarfile.data_filter for extracting (CVE-2007-4559, PEP-721, PEP-706) Resolves: RHBZ#2218247 - Fix Bash completion Resolves: RHEL-100071 - Require Python with tarfile filters Resolves: RHEL-25455 - Use tarfile.data_filter for extracting (CVE-2007-4559, PEP-721, PEP-706) Resolves: RHBZ#2218247 - Initial package - Fedora contributions by: Bill Nottingham <notting@fedoraproject.org> Charalampos Stratakis <cstratak@redhat.com> Christian Heimes <cheimes@redhat.com> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Jesse Keating <jkeating@fedoraproject.org> Miro Hrončok <miro@hroncok.cz> Orion Poplawski <orion@cora.nwra.com> Patrik Kopkan <pkopkan@redhat.com> Robert Kuska <rkuska@redhat.com> Slavek Kabrda <bkabrda@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Thomas Spura <tomspur@fedoraproject.org> Tom spot Callaway <spot@fedoraproject.org> Troy Dawson <tdawson@redhat.com> - Initial package - Fedora contributions by: Bill Nottingham <notting@fedoraproject.org> Charalampos Stratakis <cstratak@redhat.com> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Devrim GÜNDÜZ <devrim@fedoraproject.org> Filip Januš <fjanus@redhat.com> Honza Horak <hhorak@redhat.com> Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Jason Tibbitts <tibbs@math.uh.edu> Jesse Keating <jkeating@fedoraproject.org> Jozef Mlich <jmlich@redhat.com> Lumir Balhar <lbalhar@redhat.com> Miro Hrončok <miro@hroncok.cz> Ondřej Sloup <ondrej.sloup@protonmail.com> Patrik Novotný <panovotn@redhat.com> Pavel Raiskup <praiskup@redhat.com> Peter Robinson <pbrobinson@fedoraproject.org> Petr Kubat <pkubat@redhat.com> Slavek Kabrda <bkabrda@redhat.com> Todd Zullinger <tmz@fedoraproject.org> Tomas Hrnciar <thrnciar@redhat.com> Tom Lane <tgl@fedoraproject.org> - Initial package - Fedora contributions by: Charalampos Stratakis <cstratak@redhat.com> Christian Heimes <cheimes@redhat.com> Dennis Gilmore <dennis@ausil.us> Eric Smith <brouhaha@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Lumir Balhar <lbalhar@redhat.com> Marcel Plch <mplch@redhat.com> Miro Hrončok <miro@hroncok.cz> Nathaniel McCallum <nathaniel@themccallums.org> Orion Poplawski <orion@cora.nwra.com> Robert Kuska <rkuska@redhat.com> Slavek Kabrda <bkabrda@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Tom Callaway <spot@fedoraproject.org> Troy Dawson <tdawson@redhat.com> - Initial package - Fedora contributions by: Carl George <carl@george.computer> Charalampos Stratakis <cstratak@redhat.com> Kevin Fenzi <kevin@scrye.com> Miro Hrončok <miro@hroncok.cz> Petr Viktorin <pviktori@redhat.com> Ralph Bean <rbean@redhat.com> Raphael Groner <raphgro@fedoraproject.org> Tim Orling <timothy.t.orling@linux.intel.com> - Initial package - Fedora contributions by: Bill Nottingham <notting@fedoraproject.org> Charalampos Stratakis <cstratak@redhat.com> Dan Horák <dan@danny.cz> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <ausil@fedoraproject.org> dmalcolm <dmalcolm@fedoraproject.org> Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jakub Čajka <jcajka@redhat.com> Jesse Keating <jkeating@fedoraproject.org> John Eckersberg <jeckersb@fedoraproject.org> Kalev Lember <klember@redhat.com> Lumir Balhar <lbalhar@redhat.com> Mamoru Tasaka <mtasaka@fedoraproject.org> Miro Hrončok <miro@hroncok.cz> Peter Robinson <pbrobinson@fedoraproject.org> Petr Viktorin <pviktori@redhat.com> Robert Kuska <rkuska@redhat.com> Slavek Kabrda <bkabrda@redhat.com> Tom Callaway <spot@fedoraproject.org> Troy Dawson <tdawson@redhat.com> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Initial package - Fedora contributions by: Adam Williamson <awilliam@redhat.com> Arun SAG <sagarun@gmail.com> Charalampos Stratakis <cstratak@redhat.com> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jeremy Cline <jeremy@jcline.org> Karolina Surma <ksurma@redhat.com> Kevin Fenzi <kevin@scrye.com> Lumir Balhar <lbalhar@redhat.com> Miro Hrončok <miro@hroncok.cz> Petr Viktorin <pviktori@redhat.com> Ralph Bean <rbean@redhat.com> Randy Barlow <randy@electronsweatshop.com> Rex Dieter <rdieter@math.unl.edu> Robert Kuska <rkuska@redhat.com> Slavek Kabrda <bkabrda@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Tom Callaway <spot@fedoraproject.org> Toshio Kuratomi <toshio@fedoraproject.org> yatinkarel <ykarel@redhat.com> - Initial package - Fedora contributions by: Adam Williamson <awilliam@redhat.com> Arun SAG <sagarun@gmail.com> Charalampos Stratakis <cstratak@redhat.com> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jeremy Cline <jeremy@jcline.org> Karolina Surma <ksurma@redhat.com> Kevin Fenzi <kevin@scrye.com> Lumir Balhar <lbalhar@redhat.com> Miro Hrončok <miro@hroncok.cz> Petr Viktorin <pviktori@redhat.com> Ralph Bean <rbean@redhat.com> Randy Barlow <randy@electronsweatshop.com> Rex Dieter <rdieter@math.unl.edu> Robert Kuska <rkuska@redhat.com> Slavek Kabrda <bkabrda@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Tom Callaway <spot@fedoraproject.org> Toshio Kuratomi <toshio@fedoraproject.org> yatinkarel <ykarel@redhat.com> - Initial package - Fedora contributions by: Adam Williamson <awilliam@redhat.com> Arun SAG <sagarun@gmail.com> Charalampos Stratakis <cstratak@redhat.com> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jeremy Cline <jeremy@jcline.org> Karolina Surma <ksurma@redhat.com> Kevin Fenzi <kevin@scrye.com> Lumir Balhar <lbalhar@redhat.com> Miro Hrončok <miro@hroncok.cz> Petr Viktorin <pviktori@redhat.com> Ralph Bean <rbean@redhat.com> Randy Barlow <randy@electronsweatshop.com> Rex Dieter <rdieter@math.unl.edu> Robert Kuska <rkuska@redhat.com> Slavek Kabrda <bkabrda@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Tom Callaway <spot@fedoraproject.org> Toshio Kuratomi <toshio@fedoraproject.org> yatinkarel <ykarel@redhat.com> - Fix test_milp_timeout failure - Update to 1.10.1 - Update to 1.10.0 - Initial package - Fedora contributions by: Antonio Trande <anto.trande@gmail.com> Bill Nottingham <notting@fedoraproject.org> Björn Esser <me@besser82.io> Charalampos Stratakis <cstratak@redhat.com> Christian Dersch <lupinix@mailbox.org> David Malcolm <dmalcolm@redhat.com> Deji Akingunola <deji@fedoraproject.org> Dennis Gilmore <dennis@ausil.us> Elliott Sales de Andrade <quantum.analyst@gmail.com> Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iñaki Úcar <iucar@fedoraproject.org> Jef Spaleta <jspaleta@fedoraproject.org> Jesse Keating <jkeating@fedoraproject.org> Jitka Plesnikova <jplesnik@redhat.com> Jonathan Wakely <jwakely@redhat.com> Jon Ciesla <limb@fedoraproject.org> Kalev Lember <klember@redhat.com> Kevin Fenzi <kevin@scrye.com> Lumir Balhar <lbalhar@redhat.com> Mamoru TASAKA <mtasaka@fedoraproject.org> Marcel Plch <mplch@redhat.com> Miro Hrončok <miro@hroncok.cz> Nikola Forró <nforro@redhat.com> Nils Philippsen <nils@redhat.com> Orion Poplawski <orion@nwra.com> Pavel Šimovec <psimovec@redhat.com> Peter Robinson <pbrobinson@fedoraproject.org> Petr Viktorin <pviktori@redhat.com> Robert Kuska <rkuska@redhat.com> Than Ngo <than@redhat.com> Thomas Spura <thomas.spura@gmail.com> Tomas Tomecek <ttomecek@redhat.com> Toshio Kuratomi <toshio@fedoraproject.org> Troy Dawson <tdawson@fedoraproject.org> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Security fix for CVE-2025-47273 Resolves: RHEL-101116 - Make sure the INSTALLER is not pip and remove RECORD Resolves: RHEL-82611 - Security fix for CVE-2024-6345 Resolves: RHEL-49992 - Security fix for CVE-2025-47273 Resolves: RHEL-101116 - Make sure the INSTALLER is not pip and remove RECORD Resolves: RHEL-82611 - Security fix for CVE-2024-6345 Resolves: RHEL-49992 - Initial package - Fedora contributions by: Bohuslav Kabrda <bkabrda@redhat.com> Charalampos Stratakis <cstratak@redhat.com> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Haikel Guemar <hguemar@fedoraproject.org> Igor Gnatenko <ignatenko@redhat.com> Karolina Surma <ksurma@redhat.com> Lumir Balhar <lbalhar@redhat.com> Matthias Runge <mrunge@redhat.com> Miro Hrončok <miro@hroncok.cz> Orion Poplawski <orion@nwra.com> Pádraig Brady <P@draigBrady.com> Petr Viktorin <pviktori@redhat.com> Ralph Bean <rbean@redhat.com> Robert Kuska <rkuska@redhat.com> Slavek Kabrda <bkabrda@redhat.com> Tomas Hrnciar <thrnciar@redhat.com> Tomas Orsava <torsava@redhat.com> Tom Callaway <spot@fedoraproject.org> yatin <ykarel@redhat.com> - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-178519 - Security fixes for CVE-2026-4786, CVE-2026-6100 Resolves: RHEL-168158, RHEL-167916 - Security fix for CVE-2026-4519 Resolves: RHEL-158053 - Rebuilding previous fixes for different build target Related: RHEL-143110, RHEL-143170, RHEL-144894 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143110 Resolves: RHEL-143170 Resolves: RHEL-144894 - Security fix for CVE-2025-13836 Resolves: RHEL-141025 - Security fix for CVE-2025-12084 Resolves: RHEL-135395 - Security fix for CVE-2025-8194 Resolves: RHEL-106365 - Fix PySSL_SetError handling SSL_ERROR_SYSCALL - This fixes random flakiness of test_ssl on stressed machines Resolves: RHEL-101551 - Update to 3.11.13 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98044, RHEL-98014, RHEL-98237, RHEL-98176, RHEL-98205 - Security fixes for CVE-2026-4786, CVE-2026-6100 Resolves: RHEL-168158, RHEL-167916 - Security fix for CVE-2026-4519 Resolves: RHEL-158053 - Rebuilding previous fixes for different build target Related: RHEL-143110, RHEL-143170, RHEL-144894 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143110 Resolves: RHEL-143170 Resolves: RHEL-144894 - Security fix for CVE-2025-13836 Resolves: RHEL-141025 - Security fix for CVE-2025-12084 Resolves: RHEL-135395 - Security fix for CVE-2025-8194 Resolves: RHEL-106365 - Fix PySSL_SetError handling SSL_ERROR_SYSCALL - This fixes random flakiness of test_ssl on stressed machines Resolves: RHEL-101551 - Update to 3.11.13 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98044, RHEL-98014, RHEL-98237, RHEL-98176, RHEL-98205 - Security fix for CVE-2025-0938 Resolves: RHEL-77262 - Security fix for CVE-2025-66471 - Security fix for CVE-2025-66418 - Security fix for CVE-2026-21441 Resolves: RHEL-140565, RHEL-139404 - Security fix for CVE-2023-45803 Resolves: RHEL-66551 - Fix test_ssltransport for changes in ssl.SSLSocket in Python 3.11.3 Related: RHEL-59991 - Security fix for CVE-2024-37891 Resolves: RHEL-59991 - Explicitly require the python3.11-rpm-macros - Disable bootstrap - Initial package - Fedora contributions by: Charalampos Stratakis <cstratak@redhat.com> Dennis Gilmore <dennis@ausil.us> Haikel Guemar <hguemar@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Karolina Surma <ksurma@redhat.com> Lumir Balhar <lbalhar@redhat.com> Matej Stuchlik <mstuchli@redhat.com> Miro Hrončok <miro@hroncok.cz> Robert Kuska <rkuska@redhat.com> Slavek Kabrda <bkabrda@redhat.com> Tomas Hrnciar <thrnciar@redhat.com> Tomas Orsava <torsava@redhat.com> - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-168159, RHEL-167917 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672 Related: RHEL-168159, RHEL-167917 - Security fix for CVE-2026-4519 Resolves: RHEL-158126 - Rebuilding previous fixes for different build target Related: RHEL-143112, RHEL-143172, RHEL-144895 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143112 Resolves: RHEL-143172 Resolves: RHEL-144895 - Release bump to correct the build for wrong release Related: RHEL-141026 - Security fix for CVE-2025-13836 Resolves: RHEL-141026 - Security fix for CVE-2025-12084 Resolves: RHEL-135399 - Update to 3.12.12 Resolves: RHEL-125856 - Security fix for CVE-2025-8194 Resolves: RHEL-106369 - Security fix for CVE-2026-15308 Resolves: RHEL-RHEL-193793 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180474 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-168159, RHEL-167917 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672 Related: RHEL-168159, RHEL-167917 - Security fix for CVE-2026-4519 Resolves: RHEL-158126 - Rebuilding previous fixes for different build target Related: RHEL-143112, RHEL-143172, RHEL-144895 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143112 Resolves: RHEL-143172 Resolves: RHEL-144895 - Release bump to correct the build for wrong release Related: RHEL-141026 - Security fix for CVE-2025-13836 Resolves: RHEL-141026 - Security fix for CVE-2025-12084 Resolves: RHEL-135399 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180474 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-168159, RHEL-167917 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672 Related: RHEL-168159, RHEL-167917 - Security fix for CVE-2026-4519 Resolves: RHEL-158126 - Rebuilding previous fixes for different build target Related: RHEL-143112, RHEL-143172, RHEL-144895 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143112 Resolves: RHEL-143172 Resolves: RHEL-144895 - Release bump to correct the build for wrong release Related: RHEL-141026 - Security fix for CVE-2025-13836 Resolves: RHEL-141026 - Security fix for CVE-2025-12084 Resolves: RHEL-135399 - Update to 3.12.12 Resolves: RHEL-125856 - Update to Python 3.12.14 Resolves: RHEL-227215 - Security fix for CVE-2026-15308 Resolves: RHEL-193793 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180474 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-168159, RHEL-167917 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672 Related: RHEL-168159, RHEL-167917 - Security fix for CVE-2026-4519 Resolves: RHEL-158126 - Rebuilding previous fixes for different build target Related: RHEL-143112, RHEL-143172, RHEL-144895 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143112 Resolves: RHEL-143172 Resolves: RHEL-144895 - Release bump to correct the build for wrong release Related: RHEL-141026 - Security fix for CVE-2025-13836 Resolves: RHEL-141026 - Update to 3.12.15 - Security fix for CVE-2026-15310 - Security fix for CVE-2026-15806 - Security fix for CVE-2026-17084 - Security fix for CVE-2026-19445 - Security fix for CVE-2026-19553 - Security fix for CVE-2026-19672 - Security fix for CVE-2026-82049 - Security fix for CVE-2026-87910 Resolves: RHEL-274140 Resolves: RHEL-276310 - Update to Python 3.12.14 Resolves: RHEL-227215 - Security fix for CVE-2026-15308 Resolves: RHEL-193793 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180474 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-168159, RHEL-167917 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672 Related: RHEL-168159, RHEL-167917 - Security fix for CVE-2026-4519 Resolves: RHEL-158126 - Rebuilding previous fixes for different build target Related: RHEL-143112, RHEL-143172, RHEL-144895 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143112 Resolves: RHEL-143172 Resolves: RHEL-144895 - Release bump to correct the build for wrong release Related: RHEL-141026 - Security fix for CVE-2024-36039 Resolves: RHEL-38371 - Rebuilt for timestamp .pyc invalidation mode - Initial package - Fedora contributions by: Benjamin A. Beasley <code@musicinmybrain.net> Carl George <carl@george.computer> Damien Ciabrini <dciabrin@redhat.com> Haikel Guemar <hguemar@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Itamar Reis Peixoto <itamar@ispbrasil.com.br> Julien Enselme <jujens@jujens.eu> Lumir Balhar <lbalhar@redhat.com> Miro Hrončok <miro@hroncok.cz> Yaakov Selkowitz <yselkowi@redhat.com> - Security fix for CVE-2024-36039 Resolves: RHEL-38371 - Rebuilt for timestamp .pyc invalidation mode - Initial package - Fedora contributions by: Benjamin A. Beasley <code@musicinmybrain.net> Carl George <carl@george.computer> Damien Ciabrini <dciabrin@redhat.com> Haikel Guemar <hguemar@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Itamar Reis Peixoto <itamar@ispbrasil.com.br> Julien Enselme <jujens@jujens.eu> Lumir Balhar <lbalhar@redhat.com> Miro Hrončok <miro@hroncok.cz> Yaakov Selkowitz <yselkowi@redhat.com> - Rebuilt for timestamp .pyc invalidation mode - Initial package - Fedora contributions by: Charalampos Stratakis <cstratak@redhat.com> Dennis Gilmore <dennis@ausil.us> Eric Smith <brouhaha@fedoraproject.org> Gwyn Ciesla <limburgher@gmail.com> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Joel Capitao <jcapitao@redhat.com> John Dulaney <jdulaney@fedoraproject.org> Lumir Balhar <lbalhar@redhat.com> Miro Hrončok <miro@hroncok.cz> Nathaniel McCallum <nathaniel@themccallums.org> Orion Poplawski <orion@cora.nwra.com> Parag Nemade <pnemade@redhat.com> Peter Robinson <pbrobinson@fedoraproject.org> Petr Viktorin <pviktori@redhat.com> Robert Kuska <rkuska@redhat.com> Slavek Kabrda <bkabrda@redhat.com> Tomáš Hrnčiar <thrnciar@redhat.com> Tom Stellard <tstellar@redhat.com> Troy Dawson <tdawson@redhat.com> - Rebuilt for timestamp .pyc invalidation mode - Initial package - Fedora contributions by: Charalampos Stratakis <cstratak@redhat.com> Gwyn Ciesla <limb@fedoraproject.org> Lumír Balhar <lbalhar@redhat.com> - Security fix for CVE-2024-26130 Resolves: RHEL-112485 - Security fix for CVE-2025-24898 in the bundled openssl crate Resolves: RHEL-77735 - Update to 41.0.7, fixes CVE-2023-49083 - Rebuilt for timestamp .pyc invalidation mode - Initial package - Fedora contributions by: Alfredo Moralejo <amoralej@redhat.com> Benjamin A. Beasley <code@musicinmybrain.net> Charalampos Stratakis <cstratak@redhat.com> Christian Heimes <christian@python.org> Colin Walters <walters@verbum.org> Dennis Gilmore <dennis@ausil.us> Fabio Valentini <decathorpe@gmail.com> Felix Schwarz <felix.schwarz@oss.schwarz.eu> Haikel Guemar <hguemar@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Lumir Balhar <lbalhar@redhat.com> Matěj Cepl <mcepl@cepl.eu> Miro Hrončok <miro@hroncok.cz> Nathaniel McCallum <npmccallum@redhat.com> Randy Barlow <randy@electronsweatshop.com> Robert Kuska <rkuska@redhat.com> Sahana Prasad <sahana@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Troy Dawson <tdawson@redhat.com> Yaakov Selkowitz <yselkowi@redhat.com> - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-168159, RHEL-167917 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672 Related: RHEL-168159, RHEL-167917 - Security fix for CVE-2026-4519 Resolves: RHEL-158126 - Rebuilding previous fixes for different build target Related: RHEL-143112, RHEL-143172, RHEL-144895 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143112 Resolves: RHEL-143172 Resolves: RHEL-144895 - Release bump to correct the build for wrong release Related: RHEL-141026 - Security fix for CVE-2025-13836 Resolves: RHEL-141026 - Security fix for CVE-2025-12084 Resolves: RHEL-135399 - Update to 3.12.12 Resolves: RHEL-125856 - Security fix for CVE-2025-8194 Resolves: RHEL-106369 - Security fix for CVE-2026-15308 Resolves: RHEL-RHEL-193793 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180474 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-168159, RHEL-167917 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672 Related: RHEL-168159, RHEL-167917 - Security fix for CVE-2026-4519 Resolves: RHEL-158126 - Rebuilding previous fixes for different build target Related: RHEL-143112, RHEL-143172, RHEL-144895 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143112 Resolves: RHEL-143172 Resolves: RHEL-144895 - Release bump to correct the build for wrong release Related: RHEL-141026 - Security fix for CVE-2025-13836 Resolves: RHEL-141026 - Security fix for CVE-2025-12084 Resolves: RHEL-135399 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180474 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-168159, RHEL-167917 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672 Related: RHEL-168159, RHEL-167917 - Security fix for CVE-2026-4519 Resolves: RHEL-158126 - Rebuilding previous fixes for different build target Related: RHEL-143112, RHEL-143172, RHEL-144895 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143112 Resolves: RHEL-143172 Resolves: RHEL-144895 - Release bump to correct the build for wrong release Related: RHEL-141026 - Security fix for CVE-2025-13836 Resolves: RHEL-141026 - Security fix for CVE-2025-12084 Resolves: RHEL-135399 - Update to 3.12.12 Resolves: RHEL-125856 - Update to Python 3.12.14 Resolves: RHEL-227215 - Security fix for CVE-2026-15308 Resolves: RHEL-193793 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180474 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-168159, RHEL-167917 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672 Related: RHEL-168159, RHEL-167917 - Security fix for CVE-2026-4519 Resolves: RHEL-158126 - Rebuilding previous fixes for different build target Related: RHEL-143112, RHEL-143172, RHEL-144895 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143112 Resolves: RHEL-143172 Resolves: RHEL-144895 - Release bump to correct the build for wrong release Related: RHEL-141026 - Security fix for CVE-2025-13836 Resolves: RHEL-141026 - Update to 3.12.15 - Security fix for CVE-2026-15310 - Security fix for CVE-2026-15806 - Security fix for CVE-2026-17084 - Security fix for CVE-2026-19445 - Security fix for CVE-2026-19553 - Security fix for CVE-2026-19672 - Security fix for CVE-2026-82049 - Security fix for CVE-2026-87910 Resolves: RHEL-274140 Resolves: RHEL-276310 - Update to Python 3.12.14 Resolves: RHEL-227215 - Security fix for CVE-2026-15308 Resolves: RHEL-193793 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180474 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-168159, RHEL-167917 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672 Related: RHEL-168159, RHEL-167917 - Security fix for CVE-2026-4519 Resolves: RHEL-158126 - Rebuilding previous fixes for different build target Related: RHEL-143112, RHEL-143172, RHEL-144895 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143112 Resolves: RHEL-143172 Resolves: RHEL-144895 - Release bump to correct the build for wrong release Related: RHEL-141026 - Rebuilt for timestamp .pyc invalidation mode - Initial package - Fedora contributions by: Charalampos Stratakis <cstratak@redhat.com> Dennis Gilmore <dennis@ausil.us> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jeremy Cline <jeremy@jcline.org> Karolina Surma <ksurma@redhat.com> Lumir Balhar <lbalhar@redhat.com> Miro Hrončok <miro@hroncok.cz> Orion Poplawski <orion@cora.nwra.com> Paul Wouters <pwouters@redhat.com> Robert Kuska <rkuska@redhat.com> Tom Prince <tom.prince@twistedmatrix.com> - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-168159, RHEL-167917 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672 Related: RHEL-168159, RHEL-167917 - Security fix for CVE-2026-4519 Resolves: RHEL-158126 - Rebuilding previous fixes for different build target Related: RHEL-143112, RHEL-143172, RHEL-144895 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143112 Resolves: RHEL-143172 Resolves: RHEL-144895 - Release bump to correct the build for wrong release Related: RHEL-141026 - Security fix for CVE-2025-13836 Resolves: RHEL-141026 - Security fix for CVE-2025-12084 Resolves: RHEL-135399 - Update to 3.12.12 Resolves: RHEL-125856 - Security fix for CVE-2025-8194 Resolves: RHEL-106369 - Security fix for CVE-2026-15308 Resolves: RHEL-RHEL-193793 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180474 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-168159, RHEL-167917 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672 Related: RHEL-168159, RHEL-167917 - Security fix for CVE-2026-4519 Resolves: RHEL-158126 - Rebuilding previous fixes for different build target Related: RHEL-143112, RHEL-143172, RHEL-144895 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143112 Resolves: RHEL-143172 Resolves: RHEL-144895 - Release bump to correct the build for wrong release Related: RHEL-141026 - Security fix for CVE-2025-13836 Resolves: RHEL-141026 - Security fix for CVE-2025-12084 Resolves: RHEL-135399 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180474 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-168159, RHEL-167917 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672 Related: RHEL-168159, RHEL-167917 - Security fix for CVE-2026-4519 Resolves: RHEL-158126 - Rebuilding previous fixes for different build target Related: RHEL-143112, RHEL-143172, RHEL-144895 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143112 Resolves: RHEL-143172 Resolves: RHEL-144895 - Release bump to correct the build for wrong release Related: RHEL-141026 - Security fix for CVE-2025-13836 Resolves: RHEL-141026 - Security fix for CVE-2025-12084 Resolves: RHEL-135399 - Update to 3.12.12 Resolves: RHEL-125856 - Update to Python 3.12.14 Resolves: RHEL-227215 - Security fix for CVE-2026-15308 Resolves: RHEL-193793 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180474 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-168159, RHEL-167917 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672 Related: RHEL-168159, RHEL-167917 - Security fix for CVE-2026-4519 Resolves: RHEL-158126 - Rebuilding previous fixes for different build target Related: RHEL-143112, RHEL-143172, RHEL-144895 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143112 Resolves: RHEL-143172 Resolves: RHEL-144895 - Release bump to correct the build for wrong release Related: RHEL-141026 - Security fix for CVE-2025-13836 Resolves: RHEL-141026 - Update to 3.12.15 - Security fix for CVE-2026-15310 - Security fix for CVE-2026-15806 - Security fix for CVE-2026-17084 - Security fix for CVE-2026-19445 - Security fix for CVE-2026-19553 - Security fix for CVE-2026-19672 - Security fix for CVE-2026-82049 - Security fix for CVE-2026-87910 Resolves: RHEL-274140 Resolves: RHEL-276310 - Update to Python 3.12.14 Resolves: RHEL-227215 - Security fix for CVE-2026-15308 Resolves: RHEL-193793 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180474 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-168159, RHEL-167917 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672 Related: RHEL-168159, RHEL-167917 - Security fix for CVE-2026-4519 Resolves: RHEL-158126 - Rebuilding previous fixes for different build target Related: RHEL-143112, RHEL-143172, RHEL-144895 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143112 Resolves: RHEL-143172 Resolves: RHEL-144895 - Release bump to correct the build for wrong release Related: RHEL-141026 - Rebuilt for timestamp .pyc invalidation mode - Initial package - Fedora contributions by: Alexander Todorov <atodorov@redhat.com> Bill Nottingham <notting@fedoraproject.org> Charalampos Stratakis <cstratak@redhat.com> Dan Horák <dan@danny.cz> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Fabio Alessandro Locati <me@fale.io> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Jason ティビツ <tibbs@fedoraproject.org> Jeffrey C. Ollie <jeff@ocjtech.us> Jesse Keating <jkeating@fedoraproject.org> Kevin Fenzi <kevin@scrye.com> Lumir Balhar <lbalhar@redhat.com> Mikolaj Izdebski <mizdebsk@redhat.com> Miro Hrončok <miro@hroncok.cz> Peter Robinson <pbrobinson@gmail.com> Robert Kuska <rkuska@redhat.com> Shahms King <shahms@fedoraproject.org> Slavek Kabrda <bkabrda@redhat.com> Tomáš Hrnčiar <thrnciar@redhat.com> tomspur <tomspur@fedoraproject.org> Ville Skyttä <scop@fedoraproject.org> Yaakov Selkowitz <yselkowi@redhat.com> - Fix CVE-2026-49825: add xlink:href to known HTML link attributes Resolves: RHEL-251488 - Rebuilt for timestamp .pyc invalidation mode - Initial package - Fedora contributions by: Adam Williamson <awilliam@redhat.com> Alexander Bokovoy <abokovoy@redhat.com> Bill Nottingham <notting@fedoraproject.org> Dennis Gilmore <dennis@ausil.us> dmalcolm <dmalcolm@fedoraproject.org> Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jakub Dorňák <jakub.dornak@misli.cz> James Bowes <jbowes@repl.ca> Jan Kaluza <jkaluza@redhat.com> jbowes <jbowes@fedoraproject.org> Jesse Keating <jkeating@fedoraproject.org> Joe Orton <jorton@redhat.com> joshkayse <joshkayse@fedoraproject.org> Kevin Fenzi <kevin@fedoraproject.org> Luboš Uhliarik <luhliari@redhat.com> Luke Macken <lmacken@fedoraproject.org> Matthias Runge <mrunge@redhat.com> Miro Hrončok <miro@hroncok.cz> Orion Poplawski <orion@cora.nwra.com> Peter Robinson <pbrobinson@fedoraproject.org> Richard W.M. Jones <rjones@redhat.com> Ricky Zhou (周家杰) <ricky@fedoraproject.org> Tomas Hrnciar <thrnciar@redhat.com> Tomas Orsava <torsava@redhat.com> Tom Stellard <tstellar@redhat.com> Troy Dawson <tdawson@redhat.com> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Rebuilt for timestamp .pyc invalidation mode - Initial package - Fedora contributions by: Bill Nottingham <notting@fedoraproject.org> Charalampos Stratakis <cstratak@redhat.com> Christian Dersch <lupinix@mailbox.org> Dan Horák <dan@danny.cz> David Malcolm <dmalcolm@redhat.com> David Tardon <dtardon@redhat.com> Deji Akingunola <deji@fedoraproject.org> Dennis Gilmore <dennis@ausil.us> Elliott Sales de Andrade <quantum.analyst@gmail.com> Gwyn Ciesla <gwync@protonmail.com> Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org> Iñaki Úcar <iucar@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jarod Wilson <jwilson@fedoraproject.org> Jaromir Capik <jcapik@redhat.com> Jef Spaleta <jspaleta@fedoraproject.org> Jesse Keating <jkeating@fedoraproject.org> Kalev Lember <klember@redhat.com> Karolina Surma <ksurma@redhat.com> Lumir Balhar <lbalhar@redhat.com> Merlin Mathesius <mmathesi@redhat.com> Miro Hrončok <miro@hroncok.cz> Nikola Forró <nforro@redhat.com> Orion Poplawski <orion@cora.nwra.com> Pavel Šimovec <psimovec@redhat.com> Peter Robinson <pbrobinson@fedoraproject.org> Robert Kuska <rkuska@redhat.com> Scott Talbert <swt@techie.net> Simone Caronni <negativo17@gmail.com> Thomas Spura <tomspur@fedoraproject.org> Tomáš Hrnčiar <thrnciar@redhat.com> Tomas Orsava <torsava@redhat.com> Tomas Tomecek <ttomecek@redhat.com> Ville Skyttä <scop@fedoraproject.org> Yaakov Selkowitz <yselkowitz@fedoraproject.org> - Rebuilt for timestamp .pyc invalidation mode - Initial package - Fedora contributions by: Bill Nottingham <notting@fedoraproject.org> Charalampos Stratakis <cstratak@redhat.com> Christian Dersch <lupinix@mailbox.org> Dan Horák <dan@danny.cz> David Malcolm <dmalcolm@redhat.com> David Tardon <dtardon@redhat.com> Deji Akingunola <deji@fedoraproject.org> Dennis Gilmore <dennis@ausil.us> Elliott Sales de Andrade <quantum.analyst@gmail.com> Gwyn Ciesla <gwync@protonmail.com> Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org> Iñaki Úcar <iucar@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jarod Wilson <jwilson@fedoraproject.org> Jaromir Capik <jcapik@redhat.com> Jef Spaleta <jspaleta@fedoraproject.org> Jesse Keating <jkeating@fedoraproject.org> Kalev Lember <klember@redhat.com> Karolina Surma <ksurma@redhat.com> Lumir Balhar <lbalhar@redhat.com> Merlin Mathesius <mmathesi@redhat.com> Miro Hrončok <miro@hroncok.cz> Nikola Forró <nforro@redhat.com> Orion Poplawski <orion@cora.nwra.com> Pavel Šimovec <psimovec@redhat.com> Peter Robinson <pbrobinson@fedoraproject.org> Robert Kuska <rkuska@redhat.com> Scott Talbert <swt@techie.net> Simone Caronni <negativo17@gmail.com> Thomas Spura <tomspur@fedoraproject.org> Tomáš Hrnčiar <thrnciar@redhat.com> Tomas Orsava <torsava@redhat.com> Tomas Tomecek <ttomecek@redhat.com> Ville Skyttä <scop@fedoraproject.org> Yaakov Selkowitz <yselkowitz@fedoraproject.org> - Fix Bash completion Resolves: RHEL-99083 - Use tarfile.data_filter for extracting (CVE-2007-4559, PEP-721, PEP-706) Resolves: RHEL-25737 - Don't RPM Provide pip - Remove a superfluous RPM Conflict with python-pip - Allows to install python3.12-pip together with python3-pip - Rebuilt for timestamp .pyc invalidation mode - Initial package - Fedora contributions by: Bill Nottingham <notting@fedoraproject.org> Charalampos Stratakis <cstratak@redhat.com> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Jon Ciesla <limburgher@gmail.com> Karolina Surma <ksurma@redhat.com> Kevin Fenzi <kevin@fedoraproject.org> Kevin Kofler <Kevin@tigcc.ticalc.org> Luke Macken <lmacken@redhat.com> Lumir Balhar <lbalhar@redhat.com> Marcel Plch <mplch@redhat.com> Matej Stuchlik <mstuchli@redhat.com> Michal Cyprian <m.cyprian@gmail.com> Miro Hrončok <miro@hroncok.cz> Orion Poplawski <orion@cora.nwra.com> Pádraig Brady <P@draigBrady.com> Peter Halliday <hoangelos@fedoraproject.org> Petr Viktorin <pviktori@redhat.com> Robert Kuska <rkuska@redhat.com> Slavek Kabrda <bkabrda@redhat.com> Tim Flink <tflink@fedoraproject.org> Tomáš Hrnčiar <thrnciar@redhat.com> Tomas Orsava <tomas.n@orsava.cz> Toshio Kuratomi <toshio@fedoraproject.org> Ville Skyttä <ville.skytta@iki.fi> - Fix Bash completion Resolves: RHEL-99083 - Use tarfile.data_filter for extracting (CVE-2007-4559, PEP-721, PEP-706) Resolves: RHEL-25737 - Don't RPM Provide pip - Remove a superfluous RPM Conflict with python-pip - Allows to install python3.12-pip together with python3-pip - Rebuilt for timestamp .pyc invalidation mode - Initial package - Fedora contributions by: Bill Nottingham <notting@fedoraproject.org> Charalampos Stratakis <cstratak@redhat.com> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Jon Ciesla <limburgher@gmail.com> Karolina Surma <ksurma@redhat.com> Kevin Fenzi <kevin@fedoraproject.org> Kevin Kofler <Kevin@tigcc.ticalc.org> Luke Macken <lmacken@redhat.com> Lumir Balhar <lbalhar@redhat.com> Marcel Plch <mplch@redhat.com> Matej Stuchlik <mstuchli@redhat.com> Michal Cyprian <m.cyprian@gmail.com> Miro Hrončok <miro@hroncok.cz> Orion Poplawski <orion@cora.nwra.com> Pádraig Brady <P@draigBrady.com> Peter Halliday <hoangelos@fedoraproject.org> Petr Viktorin <pviktori@redhat.com> Robert Kuska <rkuska@redhat.com> Slavek Kabrda <bkabrda@redhat.com> Tim Flink <tflink@fedoraproject.org> Tomáš Hrnčiar <thrnciar@redhat.com> Tomas Orsava <tomas.n@orsava.cz> Toshio Kuratomi <toshio@fedoraproject.org> Ville Skyttä <ville.skytta@iki.fi> - Rebuilt for timestamp .pyc invalidation mode - Initial package - Fedora contributions by: Bill Nottingham <notting@fedoraproject.org> Charalampos Stratakis <cstratak@redhat.com> Christian Heimes <cheimes@redhat.com> Dennis Gilmore <dennis@ausil.us> dmalcolm <dmalcolm@fedoraproject.org> Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Jesse Keating <jkeating@fedoraproject.org> Miro Hrončok <miro@hroncok.cz> Orion Poplawski <orion@cora.nwra.com> Patrik Kopkan <pkopkan@redhat.com> Rob Crittenden <rcritten@redhat.com> Robert Kuska <rkuska@redhat.com> Slavek Kabrda <bkabrda@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Thomas Spura <tomspur@fedoraproject.org> Tom spot Callaway <spot@fedoraproject.org> Troy Dawson <tdawson@redhat.com> - Rebuilt for timestamp .pyc invalidation mode - Initial package - Fedora contributions by: Bill Nottingham <notting@fedoraproject.org> Charalampos Stratakis <cstratak@redhat.com> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Devrim Gündüz <devrim@gunduz.org> Filip Januš <fjanus@redhat.com> Honza Horak <hhorak@redhat.com> Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Jason Tibbitts <tibbs@math.uh.edu> Jesse Keating <jkeating@fedoraproject.org> Jozef Mlich <jmlich@redhat.com> Lumir Balhar <lbalhar@redhat.com> Miro Hrončok <miro@hroncok.cz> Ondřej Sloup <ondrej.sloup@protonmail.com> Patrik Novotný <panovotn@redhat.com> Pavel Raiskup <praiskup@redhat.com> Peter Robinson <pbrobinson@fedoraproject.org> Petr Kubat <pkubat@redhat.com> Slavek Kabrda <bkabrda@redhat.com> Todd Zullinger <tmz@fedoraproject.org> Tomas Hrnciar <thrnciar@redhat.com> Tom Lane <tgl@fedoraproject.org> - Rebuilt for timestamp .pyc invalidation mode - Initial package - Fedora contributions by: Charalampos Stratakis <cstratak@redhat.com> Christian Heimes <cheimes@redhat.com> Dennis Gilmore <dennis@ausil.us> Eric Smith <brouhaha@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Lumir Balhar <lbalhar@redhat.com> Marcel Plch <mplch@redhat.com> Miro Hrončok <miro@hroncok.cz> Nathaniel McCallum <nathaniel@themccallums.org> Orion Poplawski <orion@cora.nwra.com> Rob Crittenden <rcritten@redhat.com> Robert Kuska <rkuska@redhat.com> Slavek Kabrda <bkabrda@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Tom Callaway <spot@fedoraproject.org> Troy Dawson <tdawson@redhat.com> - Rebuilt for timestamp .pyc invalidation mode - Initial package - Fedora contributions by: Bill Nottingham <notting@fedoraproject.org> Charalampos Stratakis <cstratak@redhat.com> Dan Horák <dan@danny.cz> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jakub Čajka <jcajka@redhat.com> Jesse Keating <jkeating@fedoraproject.org> John Eckersberg <jeckersb@fedoraproject.org> Kalev Lember <klember@redhat.com> Karolina Surma <ksurma@redhat.com> Lumir Balhar <lbalhar@redhat.com> Mamoru Tasaka <mtasaka@fedoraproject.org> Miro Hrončok <miro@hroncok.cz> Peter Robinson <pbrobinson@fedoraproject.org> Petr Viktorin <pviktori@redhat.com> Robert Kuska <rkuska@redhat.com> Slavek Kabrda <bkabrda@redhat.com> Tom Callaway <spot@fedoraproject.org> Troy Dawson <tdawson@redhat.com> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Rebuilt for timestamp .pyc invalidation mode - Initial package - Fedora contributions by: Adam Williamson <awilliam@redhat.com> Arun SAG <sagarun@gmail.com> Charalampos Stratakis <cstratak@redhat.com> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jeremy Cline <jeremy@jcline.org> Karolina Surma <ksurma@redhat.com> Kevin Fenzi <kevin@scrye.com> Lumir Balhar <lbalhar@redhat.com> Miro Hrončok <miro@hroncok.cz> Petr Viktorin <pviktori@redhat.com> Ralph Bean <rbean@redhat.com> Randy Barlow <randy@electronsweatshop.com> Rex Dieter <rdieter@math.unl.edu> Robert Kuska <rkuska@redhat.com> Slavek Kabrda <bkabrda@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Tom Callaway <spot@fedoraproject.org> Toshio Kuratomi <toshio@fedoraproject.org> Yaakov Selkowitz <yselkowi@redhat.com> yatinkarel <ykarel@redhat.com> - Rebuilt for timestamp .pyc invalidation mode - Initial package - Fedora contributions by: Antonio Trande <anto.trande@gmail.com> Bill Nottingham <notting@fedoraproject.org> Björn Esser <me@besser82.io> Charalampos Stratakis <cstratak@redhat.com> Christian Dersch <lupinix@mailbox.org> David Malcolm <dmalcolm@redhat.com> Deji Akingunola <deji@fedoraproject.org> Dennis Gilmore <dennis@ausil.us> Elliott Sales de Andrade <quantum.analyst@gmail.com> Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iñaki Úcar <iucar@fedoraproject.org> Jef Spaleta <jspaleta@fedoraproject.org> Jerry James <loganjerry@gmail.com> Jesse Keating <jkeating@fedoraproject.org> Jitka Plesnikova <jplesnik@redhat.com> Jonathan Wakely <jwakely@redhat.com> Jon Ciesla <limb@fedoraproject.org> Kalev Lember <klember@redhat.com> Kevin Fenzi <kevin@scrye.com> Lumir Balhar <lbalhar@redhat.com> Mamoru TASAKA <mtasaka@fedoraproject.org> Marcel Plch <mplch@redhat.com> Miro Hrončok <miro@hroncok.cz> Nikola Forró <nforro@redhat.com> Nils Philippsen <nils@redhat.com> Orion Poplawski <orion@cora.nwra.com> Pavel Šimovec <psimovec@redhat.com> Peter Robinson <pbrobinson@fedoraproject.org> Petr Viktorin <pviktori@redhat.com> Robert Kuska <rkuska@redhat.com> Than Ngo <than@redhat.com> Thomas Spura <thomas.spura@gmail.com> Tomas Tomecek <ttomecek@redhat.com> Toshio Kuratomi <toshio@fedoraproject.org> Troy Dawson <tdawson@fedoraproject.org> Yaakov Selkowitz <yselkowi@redhat.com> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Security fix for CVE-2025-47273 Resolves: RHEL-101118 - Security fix for CVE-2024-6345 Resolves: RHEL-49985 - Rebuilt for timestamp .pyc invalidation mode - Disable bootstrap - Initial package - Fedora contributions by: Bill Nottingham <notting@fedoraproject.org> Charalampos Stratakis <cstratak@redhat.com> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Haikel Guemar <hguemar@fedoraproject.org> Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org> Jesse Keating <jkeating@fedoraproject.org> Karolina Surma <ksurma@redhat.com> Kevin Fenzi <kevin@scrye.com> Konstantin Ryabitsev <icon@fedoraproject.org> Lumir Balhar <lbalhar@redhat.com> Matej Stuchlik <mstuchli@redhat.com> Michal Cyprian <mcyprian@redhat.com> Miro Hrončok <miro@hroncok.cz> Nils Philippsen <nils@redhat.com> Orion Poplawski <orion@cora.nwra.com> Petr Viktorin <pviktori@redhat.com> Pierre-Yves Chibon <pingou@pingoured.fr> Ralph Bean <rbean@redhat.com> Randy Barlow <randy@electronsweatshop.com> Robert Kuska <rkuska@redhat.com> Thomas Spura <thomas.spura@gmail.com> Tomáš Hrnčiar <thrnciar@redhat.com> Tomas Orsava <torsava@redhat.com> Tomas Radej <tradej@redhat.com> Toshio Kuratomi <toshio@fedoraproject.org> Troy Dawson <tdawson@redhat.com> Ville Skyttä <scop@fedoraproject.org> - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-168159, RHEL-167917 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672 Related: RHEL-168159, RHEL-167917 - Security fix for CVE-2026-4519 Resolves: RHEL-158126 - Rebuilding previous fixes for different build target Related: RHEL-143112, RHEL-143172, RHEL-144895 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143112 Resolves: RHEL-143172 Resolves: RHEL-144895 - Release bump to correct the build for wrong release Related: RHEL-141026 - Security fix for CVE-2025-13836 Resolves: RHEL-141026 - Security fix for CVE-2025-12084 Resolves: RHEL-135399 - Update to 3.12.12 Resolves: RHEL-125856 - Security fix for CVE-2025-8194 Resolves: RHEL-106369 - Security fix for CVE-2026-15308 Resolves: RHEL-RHEL-193793 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180474 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-168159, RHEL-167917 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672 Related: RHEL-168159, RHEL-167917 - Security fix for CVE-2026-4519 Resolves: RHEL-158126 - Rebuilding previous fixes for different build target Related: RHEL-143112, RHEL-143172, RHEL-144895 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143112 Resolves: RHEL-143172 Resolves: RHEL-144895 - Release bump to correct the build for wrong release Related: RHEL-141026 - Security fix for CVE-2025-13836 Resolves: RHEL-141026 - Security fix for CVE-2025-12084 Resolves: RHEL-135399 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180474 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-168159, RHEL-167917 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672 Related: RHEL-168159, RHEL-167917 - Security fix for CVE-2026-4519 Resolves: RHEL-158126 - Rebuilding previous fixes for different build target Related: RHEL-143112, RHEL-143172, RHEL-144895 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143112 Resolves: RHEL-143172 Resolves: RHEL-144895 - Release bump to correct the build for wrong release Related: RHEL-141026 - Security fix for CVE-2025-13836 Resolves: RHEL-141026 - Security fix for CVE-2025-12084 Resolves: RHEL-135399 - Update to 3.12.12 Resolves: RHEL-125856 - Update to Python 3.12.14 Resolves: RHEL-227215 - Security fix for CVE-2026-15308 Resolves: RHEL-193793 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180474 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-168159, RHEL-167917 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672 Related: RHEL-168159, RHEL-167917 - Security fix for CVE-2026-4519 Resolves: RHEL-158126 - Rebuilding previous fixes for different build target Related: RHEL-143112, RHEL-143172, RHEL-144895 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143112 Resolves: RHEL-143172 Resolves: RHEL-144895 - Release bump to correct the build for wrong release Related: RHEL-141026 - Security fix for CVE-2025-13836 Resolves: RHEL-141026 - Update to 3.12.15 - Security fix for CVE-2026-15310 - Security fix for CVE-2026-15806 - Security fix for CVE-2026-17084 - Security fix for CVE-2026-19445 - Security fix for CVE-2026-19553 - Security fix for CVE-2026-19672 - Security fix for CVE-2026-82049 - Security fix for CVE-2026-87910 Resolves: RHEL-274140 Resolves: RHEL-276310 - Update to Python 3.12.14 Resolves: RHEL-227215 - Security fix for CVE-2026-15308 Resolves: RHEL-193793 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180474 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-168159, RHEL-167917 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672 Related: RHEL-168159, RHEL-167917 - Security fix for CVE-2026-4519 Resolves: RHEL-158126 - Rebuilding previous fixes for different build target Related: RHEL-143112, RHEL-143172, RHEL-144895 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143112 Resolves: RHEL-143172 Resolves: RHEL-144895 - Release bump to correct the build for wrong release Related: RHEL-141026 - Security fix for CVE-2025-66471 - Security fix for CVE-2025-66418 - Security fix for CVE-2026-21441 Resolves: RHEL-139403 - Rebase to 1.26.19 to fix CVE-2024-37891 Resolves: RHEL-59998 - Rebuilt for timestamp .pyc invalidation mode - CVE-2026-97689 python3.12-urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser Resolves: RHEL-282261 - CVE-2026-97687 python3.12-urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override HTTPS proxy TLS configuration override Resolves: RHEL-282321 - Security fix for CVE-2026-44431 - Security fix for CVE-2026-44432 Resolves: RHEL-184901, RHEL-185126 - Security fix for CVE-2025-66471 - Security fix for CVE-2025-66418 - Security fix for CVE-2026-21441 Resolves: RHEL-142909, RHEL-139399, RHEL-142922 - Security fix for CVE-2026-44431 - Security fix for CVE-2026-44432 Resolves: RHEL-184901, RHEL-185126 - Security fix for CVE-2025-66471 - Security fix for CVE-2025-66418 - Security fix for CVE-2026-21441 Resolves: RHEL-142909, RHEL-139399, RHEL-142922 - Rebase to 1.26.19 to fix CVE-2024-37891 Resolves: RHEL-59998 - Security fix for CVE-2026-24049 Resolves: RHEL-143652 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.2 - Update to Python 3.14.1 - Disable bootstrap - Initial package - Fedora contributions by: Björn Esser <besser82@fedoraproject.org> Bohuslav Kabrda <bkabrda@redhat.com> Charalampos Stratakis <cstratak@redhat.com> Dan Horák <dan@danny.cz> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Florian Weimer <fweimer@redhat.com> Gwyn Ciesla <limb@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jaroslav Škarvada <jskarvad@redhat.com> Jason ティビツ <tibbs@fedoraproject.org> Kalev Lember <klember@redhat.com> Karolina Surma <ksurma@redhat.com> Karsten Hopp <karsten@redhat.com> Lukáš Zachar <lzachar@redhat.com> Lumir Balhar <lbalhar@redhat.com> Marcel Plch <mplch@redhat.com> Matej Stuchlik <mstuchli@redhat.com> Michal Cyprian <mcyprian@redhat.com> Michal Toman <mtoman@fedoraproject.org> Miro Hrončok <mhroncok@redhat.com> Nicolas Chauvet <kwizart@gmail.com> Orion Poplawski <orion@cora.nwra.com> Patrik Kopkan <pkopkan@redhat.com> Peter Robinson <pbrobinson@gmail.com> Petr Šplíchal <psplicha@redhat.com> Petr Viktorin <pviktori@redhat.com> Rex Dieter <rdieter@fedoraproject.org> Richard W.M. Jones <rjones@redhat.com> Robert Kuska <rkuska@redhat.com> Sahana Prasad <sahana@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Than Ngo <than@redhat.com> Thomas Spura <thomas.spura@gmail.com> Till Maas <opensource@till.name> Tom Stellard <tstellar@redhat.com> Tomas Mraz <tmraz@fedoraproject.org> Tomas Orsava <torsava@redhat.com> Tomas Radej <tradej@redhat.com> Tomáš Hrnčiar <thrnciar@redhat.com> Toshio Kuratomi <toshio@fedoraproject.org> U2FsdGVkX1 <U2FsdGVkX1@gmail.com> Victor Stinner <vstinner@redhat.com> Ville Skyttä <ville.skytta@iki.fi> Yaakov Selkowitz <yselkowi@redhat.com> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.2 - Update to Python 3.14.1 - Disable bootstrap - Initial package - Fedora contributions by: Björn Esser <besser82@fedoraproject.org> Bohuslav Kabrda <bkabrda@redhat.com> Charalampos Stratakis <cstratak@redhat.com> Dan Horák <dan@danny.cz> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Florian Weimer <fweimer@redhat.com> Gwyn Ciesla <limb@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jaroslav Škarvada <jskarvad@redhat.com> Jason ティビツ <tibbs@fedoraproject.org> Kalev Lember <klember@redhat.com> Karolina Surma <ksurma@redhat.com> Karsten Hopp <karsten@redhat.com> Lukáš Zachar <lzachar@redhat.com> Lumir Balhar <lbalhar@redhat.com> Marcel Plch <mplch@redhat.com> Matej Stuchlik <mstuchli@redhat.com> Michal Cyprian <mcyprian@redhat.com> Michal Toman <mtoman@fedoraproject.org> Miro Hrončok <mhroncok@redhat.com> Nicolas Chauvet <kwizart@gmail.com> Orion Poplawski <orion@cora.nwra.com> Patrik Kopkan <pkopkan@redhat.com> Peter Robinson <pbrobinson@gmail.com> Petr Šplíchal <psplicha@redhat.com> Petr Viktorin <pviktori@redhat.com> Rex Dieter <rdieter@fedoraproject.org> Richard W.M. Jones <rjones@redhat.com> Robert Kuska <rkuska@redhat.com> Sahana Prasad <sahana@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Than Ngo <than@redhat.com> Thomas Spura <thomas.spura@gmail.com> Till Maas <opensource@till.name> Tom Stellard <tstellar@redhat.com> Tomas Mraz <tmraz@fedoraproject.org> Tomas Orsava <torsava@redhat.com> Tomas Radej <tradej@redhat.com> Tomáš Hrnčiar <thrnciar@redhat.com> Toshio Kuratomi <toshio@fedoraproject.org> U2FsdGVkX1 <U2FsdGVkX1@gmail.com> Victor Stinner <vstinner@redhat.com> Ville Skyttä <ville.skytta@iki.fi> Yaakov Selkowitz <yselkowi@redhat.com> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Security fix for CVE-2026-15308 Resolves: RHEL-193779 - Update to 3.14.5 Resolves: RHEL-180642 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-180642 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.2 - Update to 3.14.5 Resolves: RHEL-180642 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-180642 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.2 - Update to Python 3.14.1 - On RHEL 9, also supports reparse deferral in expat Related: RHEL-227218 - Update to Python 3.14.7, security fix for CVE-2026-11940 Resolves: RHEL-227218 - Update to Python 3.14.6 Related: RHEL-227218 - Security fix for CVE-2026-15308 Resolves: RHEL-193779 - Update to 3.14.5 Resolves: RHEL-180642 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-180642 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.8 - Security fix for CVE-2026-15310 - Security fix for CVE-2026-15806 - Security fix for CVE-2026-17084 - Security fix for CVE-2026-19445 - Security fix for CVE-2026-19553 - Security fix for CVE-2026-19672 - Security fix for CVE-2026-82049 Resolves: RHEL-274141 Resolves: RHEL-276250 - On RHEL 9, also supports reparse deferral in expat Related: RHEL-227218 - Update to Python 3.14.7, security fix for CVE-2026-11940 Resolves: RHEL-227218 - Update to Python 3.14.6 Related: RHEL-227218 - Security fix for CVE-2026-15308 Resolves: RHEL-193779 - Update to 3.14.5 Resolves: RHEL-180642 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-180642 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Initial package - Fedora contributions by: Benjamin A. Beasley <code@musicinmybrain.net> Carl George <carl@george.computer> Damien Ciabrini <dciabrin@redhat.com> Haïkel Guémar <hguemar@fedoraproject.org> Iryna Shcherbina <ishcherb@redhat.com> Itamar Reis Peixoto <itamar@ispbrasil.com.br> Julien Enselme <jujens@jujens.eu> Lumír Balhar <lbalhar@redhat.com> Michal Schorm <mschorm@redhat.com> Miro Hrončok <mhroncok@redhat.com> Yaakov Selkowitz <yselkowi@redhat.com> - Initial package - Fedora contributions by: Benjamin A. Beasley <code@musicinmybrain.net> Carl George <carl@george.computer> Damien Ciabrini <dciabrin@redhat.com> Haïkel Guémar <hguemar@fedoraproject.org> Iryna Shcherbina <ishcherb@redhat.com> Itamar Reis Peixoto <itamar@ispbrasil.com.br> Julien Enselme <jujens@jujens.eu> Lumír Balhar <lbalhar@redhat.com> Michal Schorm <mschorm@redhat.com> Miro Hrončok <mhroncok@redhat.com> Yaakov Selkowitz <yselkowi@redhat.com> - Fix Py_XDECREF of an unitialized pointer - Resolves: RHEL-120834 - Update to 2.0.0 - taken from Fedora 4e8a485 - Add gating - Convert from Fedora for the Python 3.14 stack in RHEL - RHEL: Rename SPEC to python3.14-cffi.spec - Update to 3.4.4 - taken from Fedora cf7f8a9 - Add gating.yaml - Convert from Fedora for the Python 3.14 stack in RHEL - RHEL: Rename SPEC to python3.14-charset-normalizer.spec - Reuploaded sources - Add gating - Convert from Fedora for the Python 3.14 stack in RHEL - RHEL: Rename SPEC to python3.14-cryptography.spec - Update to 42.0.8, fixes rhbz#2251816 - Rebuilt for Python 3.13 - Bootstrap for Python 3.13 - Update to 41.0.7, fixes rhbz#2255351, CVE-2023-49083 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Fix gating plan - Security fixes for CVE-2026-69248 and CVE-2026-69249 - Reuploaded sources - Add gating - Convert from Fedora for the Python 3.14 stack in RHEL - RHEL: Rename SPEC to python3.14-cryptography.spec - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.2 - Update to Python 3.14.1 - Disable bootstrap - Initial package - Fedora contributions by: Björn Esser <besser82@fedoraproject.org> Bohuslav Kabrda <bkabrda@redhat.com> Charalampos Stratakis <cstratak@redhat.com> Dan Horák <dan@danny.cz> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Florian Weimer <fweimer@redhat.com> Gwyn Ciesla <limb@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jaroslav Škarvada <jskarvad@redhat.com> Jason ティビツ <tibbs@fedoraproject.org> Kalev Lember <klember@redhat.com> Karolina Surma <ksurma@redhat.com> Karsten Hopp <karsten@redhat.com> Lukáš Zachar <lzachar@redhat.com> Lumir Balhar <lbalhar@redhat.com> Marcel Plch <mplch@redhat.com> Matej Stuchlik <mstuchli@redhat.com> Michal Cyprian <mcyprian@redhat.com> Michal Toman <mtoman@fedoraproject.org> Miro Hrončok <mhroncok@redhat.com> Nicolas Chauvet <kwizart@gmail.com> Orion Poplawski <orion@cora.nwra.com> Patrik Kopkan <pkopkan@redhat.com> Peter Robinson <pbrobinson@gmail.com> Petr Šplíchal <psplicha@redhat.com> Petr Viktorin <pviktori@redhat.com> Rex Dieter <rdieter@fedoraproject.org> Richard W.M. Jones <rjones@redhat.com> Robert Kuska <rkuska@redhat.com> Sahana Prasad <sahana@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Than Ngo <than@redhat.com> Thomas Spura <thomas.spura@gmail.com> Till Maas <opensource@till.name> Tom Stellard <tstellar@redhat.com> Tomas Mraz <tmraz@fedoraproject.org> Tomas Orsava <torsava@redhat.com> Tomas Radej <tradej@redhat.com> Tomáš Hrnčiar <thrnciar@redhat.com> Toshio Kuratomi <toshio@fedoraproject.org> U2FsdGVkX1 <U2FsdGVkX1@gmail.com> Victor Stinner <vstinner@redhat.com> Ville Skyttä <ville.skytta@iki.fi> Yaakov Selkowitz <yselkowi@redhat.com> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.2 - Update to Python 3.14.1 - Disable bootstrap - Initial package - Fedora contributions by: Björn Esser <besser82@fedoraproject.org> Bohuslav Kabrda <bkabrda@redhat.com> Charalampos Stratakis <cstratak@redhat.com> Dan Horák <dan@danny.cz> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Florian Weimer <fweimer@redhat.com> Gwyn Ciesla <limb@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jaroslav Škarvada <jskarvad@redhat.com> Jason ティビツ <tibbs@fedoraproject.org> Kalev Lember <klember@redhat.com> Karolina Surma <ksurma@redhat.com> Karsten Hopp <karsten@redhat.com> Lukáš Zachar <lzachar@redhat.com> Lumir Balhar <lbalhar@redhat.com> Marcel Plch <mplch@redhat.com> Matej Stuchlik <mstuchli@redhat.com> Michal Cyprian <mcyprian@redhat.com> Michal Toman <mtoman@fedoraproject.org> Miro Hrončok <mhroncok@redhat.com> Nicolas Chauvet <kwizart@gmail.com> Orion Poplawski <orion@cora.nwra.com> Patrik Kopkan <pkopkan@redhat.com> Peter Robinson <pbrobinson@gmail.com> Petr Šplíchal <psplicha@redhat.com> Petr Viktorin <pviktori@redhat.com> Rex Dieter <rdieter@fedoraproject.org> Richard W.M. Jones <rjones@redhat.com> Robert Kuska <rkuska@redhat.com> Sahana Prasad <sahana@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Than Ngo <than@redhat.com> Thomas Spura <thomas.spura@gmail.com> Till Maas <opensource@till.name> Tom Stellard <tstellar@redhat.com> Tomas Mraz <tmraz@fedoraproject.org> Tomas Orsava <torsava@redhat.com> Tomas Radej <tradej@redhat.com> Tomáš Hrnčiar <thrnciar@redhat.com> Toshio Kuratomi <toshio@fedoraproject.org> U2FsdGVkX1 <U2FsdGVkX1@gmail.com> Victor Stinner <vstinner@redhat.com> Ville Skyttä <ville.skytta@iki.fi> Yaakov Selkowitz <yselkowi@redhat.com> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Security fix for CVE-2026-15308 Resolves: RHEL-193779 - Update to 3.14.5 Resolves: RHEL-180642 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-180642 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.2 - Update to 3.14.5 Resolves: RHEL-180642 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-180642 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.2 - Update to Python 3.14.1 - On RHEL 9, also supports reparse deferral in expat Related: RHEL-227218 - Update to Python 3.14.7, security fix for CVE-2026-11940 Resolves: RHEL-227218 - Update to Python 3.14.6 Related: RHEL-227218 - Security fix for CVE-2026-15308 Resolves: RHEL-193779 - Update to 3.14.5 Resolves: RHEL-180642 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-180642 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.8 - Security fix for CVE-2026-15310 - Security fix for CVE-2026-15806 - Security fix for CVE-2026-17084 - Security fix for CVE-2026-19445 - Security fix for CVE-2026-19553 - Security fix for CVE-2026-19672 - Security fix for CVE-2026-82049 Resolves: RHEL-274141 Resolves: RHEL-276250 - On RHEL 9, also supports reparse deferral in expat Related: RHEL-227218 - Update to Python 3.14.7, security fix for CVE-2026-11940 Resolves: RHEL-227218 - Update to Python 3.14.6 Related: RHEL-227218 - Security fix for CVE-2026-15308 Resolves: RHEL-193779 - Update to 3.14.5 Resolves: RHEL-180642 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-180642 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Update to 3.11 - taken from Fedora 9888320 - Add gating.yaml - Convert from Fedora for the Python 3.14 stack in RHEL - RHEL: Rename SPEC to python3.14-idna.spec - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.2 - Update to Python 3.14.1 - Disable bootstrap - Initial package - Fedora contributions by: Björn Esser <besser82@fedoraproject.org> Bohuslav Kabrda <bkabrda@redhat.com> Charalampos Stratakis <cstratak@redhat.com> Dan Horák <dan@danny.cz> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Florian Weimer <fweimer@redhat.com> Gwyn Ciesla <limb@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jaroslav Škarvada <jskarvad@redhat.com> Jason ティビツ <tibbs@fedoraproject.org> Kalev Lember <klember@redhat.com> Karolina Surma <ksurma@redhat.com> Karsten Hopp <karsten@redhat.com> Lukáš Zachar <lzachar@redhat.com> Lumir Balhar <lbalhar@redhat.com> Marcel Plch <mplch@redhat.com> Matej Stuchlik <mstuchli@redhat.com> Michal Cyprian <mcyprian@redhat.com> Michal Toman <mtoman@fedoraproject.org> Miro Hrončok <mhroncok@redhat.com> Nicolas Chauvet <kwizart@gmail.com> Orion Poplawski <orion@cora.nwra.com> Patrik Kopkan <pkopkan@redhat.com> Peter Robinson <pbrobinson@gmail.com> Petr Šplíchal <psplicha@redhat.com> Petr Viktorin <pviktori@redhat.com> Rex Dieter <rdieter@fedoraproject.org> Richard W.M. Jones <rjones@redhat.com> Robert Kuska <rkuska@redhat.com> Sahana Prasad <sahana@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Than Ngo <than@redhat.com> Thomas Spura <thomas.spura@gmail.com> Till Maas <opensource@till.name> Tom Stellard <tstellar@redhat.com> Tomas Mraz <tmraz@fedoraproject.org> Tomas Orsava <torsava@redhat.com> Tomas Radej <tradej@redhat.com> Tomáš Hrnčiar <thrnciar@redhat.com> Toshio Kuratomi <toshio@fedoraproject.org> U2FsdGVkX1 <U2FsdGVkX1@gmail.com> Victor Stinner <vstinner@redhat.com> Ville Skyttä <ville.skytta@iki.fi> Yaakov Selkowitz <yselkowi@redhat.com> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.2 - Update to Python 3.14.1 - Disable bootstrap - Initial package - Fedora contributions by: Björn Esser <besser82@fedoraproject.org> Bohuslav Kabrda <bkabrda@redhat.com> Charalampos Stratakis <cstratak@redhat.com> Dan Horák <dan@danny.cz> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Florian Weimer <fweimer@redhat.com> Gwyn Ciesla <limb@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jaroslav Škarvada <jskarvad@redhat.com> Jason ティビツ <tibbs@fedoraproject.org> Kalev Lember <klember@redhat.com> Karolina Surma <ksurma@redhat.com> Karsten Hopp <karsten@redhat.com> Lukáš Zachar <lzachar@redhat.com> Lumir Balhar <lbalhar@redhat.com> Marcel Plch <mplch@redhat.com> Matej Stuchlik <mstuchli@redhat.com> Michal Cyprian <mcyprian@redhat.com> Michal Toman <mtoman@fedoraproject.org> Miro Hrončok <mhroncok@redhat.com> Nicolas Chauvet <kwizart@gmail.com> Orion Poplawski <orion@cora.nwra.com> Patrik Kopkan <pkopkan@redhat.com> Peter Robinson <pbrobinson@gmail.com> Petr Šplíchal <psplicha@redhat.com> Petr Viktorin <pviktori@redhat.com> Rex Dieter <rdieter@fedoraproject.org> Richard W.M. Jones <rjones@redhat.com> Robert Kuska <rkuska@redhat.com> Sahana Prasad <sahana@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Than Ngo <than@redhat.com> Thomas Spura <thomas.spura@gmail.com> Till Maas <opensource@till.name> Tom Stellard <tstellar@redhat.com> Tomas Mraz <tmraz@fedoraproject.org> Tomas Orsava <torsava@redhat.com> Tomas Radej <tradej@redhat.com> Tomáš Hrnčiar <thrnciar@redhat.com> Toshio Kuratomi <toshio@fedoraproject.org> U2FsdGVkX1 <U2FsdGVkX1@gmail.com> Victor Stinner <vstinner@redhat.com> Ville Skyttä <ville.skytta@iki.fi> Yaakov Selkowitz <yselkowi@redhat.com> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Security fix for CVE-2026-15308 Resolves: RHEL-193779 - Update to 3.14.5 Resolves: RHEL-180642 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-180642 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.2 - Update to 3.14.5 Resolves: RHEL-180642 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-180642 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.2 - Update to Python 3.14.1 - On RHEL 9, also supports reparse deferral in expat Related: RHEL-227218 - Update to Python 3.14.7, security fix for CVE-2026-11940 Resolves: RHEL-227218 - Update to Python 3.14.6 Related: RHEL-227218 - Security fix for CVE-2026-15308 Resolves: RHEL-193779 - Update to 3.14.5 Resolves: RHEL-180642 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-180642 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.8 - Security fix for CVE-2026-15310 - Security fix for CVE-2026-15806 - Security fix for CVE-2026-17084 - Security fix for CVE-2026-19445 - Security fix for CVE-2026-19553 - Security fix for CVE-2026-19672 - Security fix for CVE-2026-82049 Resolves: RHEL-274141 Resolves: RHEL-276250 - On RHEL 9, also supports reparse deferral in expat Related: RHEL-227218 - Update to Python 3.14.7, security fix for CVE-2026-11940 Resolves: RHEL-227218 - Update to Python 3.14.6 Related: RHEL-227218 - Security fix for CVE-2026-15308 Resolves: RHEL-193779 - Update to 3.14.5 Resolves: RHEL-180642 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-180642 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Fix memory leak when initDocDict() fails - Fix another memory leak - Fix a memory leak - Update of sources file while reuploading to centos lookaside cache - Update to 6.0.2 - taken from Fedora 11da0f3 - Change gating - Convert from Fedora for the Python 3.14 stack in RHEL - RHEL: Rename SPEC to python3.14-lxml.spec - Initial package Fedora contributions by: Adam Williamson <awilliam@redhat.com> Alexander Bokovoy <abokovoy@redhat.com> Bill Nottingham <notting@fedoraproject.org> Dan Callaghan <dcallagh@redhat.com> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Ignacio Vazquez-Abrams <ivazqueznet+rpm@gmail.com> Igor Gnatenko <ignatenko@redhat.com> Iryna Shcherbina <ishcherb@redhat.com> Jakub Dorňák <jdornak@redhat.com> James Bowes <jbowes@redhat.com> 1.0-1 Jan Kaluza <jkaluza@redhat.com> Jesse Keating <jkeating@fedoraproject.org> Joe Orton <jorton@redhat.com> Josh Kayse <joshkayse@fedoraproject.org> Karolina Surma <ksurma@redhat.com> Kevin Fenzi <kevin@fedoraproject.org> Luboš Uhliarik <luhliari@redhat.com> Luke Macken <lmacken@redhat.com> Matthias Runge <mrunge@redhat.com> Miro Hrončok <mhroncok@redhat.com> Orion Poplawski <orion@cora.nwra.com> Peter Robinson <pbrobinson@fedoraproject.org> Richard W.M. Jones <rjones@redhat.com> Ricky Zhou <ricky@fedoraproject.org> Tomas Orsava <torsava@redhat.com> Tomas Hrnciar <thrnciar@redhat.com> Tom Stellard <tstellar@redhat.com> Troy Dawson <tdawson@redhat.com> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Initial import - Fedora contributions by: Benjamin A. Beasley <code@musicinmybrain.net> Bill Nottingham <notting@fedoraproject.org> Charalampos Stratakis <cstratak@redhat.com> Christian Dersch <lupinix@mailbox.org> Dan Horák <dan@danny.cz> David Malcolm <dmalcolm@redhat.com> David Tardon <dtardon@redhat.com> Deji Akingunola <deji@fedoraproject.org> Dennis Gilmore <dennis@ausil.us> dmalcolm <dmalcolm@fedoraproject.org> Elliott Sales de Andrade <quantum.analyst@gmail.com> Gwyn Ciesla <gwync@protonmail.com> Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org> Iñaki Úcar <iucar@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jarod Wilson <jwilson@fedoraproject.org> Jaromir Capik <jcapik@redhat.com> Jef Spaleta <jspaleta@fedoraproject.org> Jerry James <loganjerry@gmail.com> Jesse Keating <jkeating@fedoraproject.org> Kalev Lember <klember@redhat.com> Karolina Surma <ksurma@redhat.com> Lukáš Zaoral <lzaoral@redhat.com> Lumir Balhar <lbalhar@redhat.com> Merlin Mathesius <mmathesi@redhat.com> Miro Hrončok <miro@hroncok.cz> Nikola Forró <nforro@redhat.com> Orion Poplawski <orion@nwra.com> Pavel Šimovec <psimovec@redhat.com> Peter Robinson <pbrobinson@gmail.com> Robert Kuska <rkuska@redhat.com> Scott Talbert <swt@techie.net> Simone Caronni <negativo17@gmail.com> Songsong Zhang <u2fsdgvkx1@gmail.com> Thomas Spura <thomas.spura@gmail.com> Tomáš Hrnčiar <thrnciar@redhat.com> Tomas Orsava <torsava@redhat.com> Tomas Tomecek <ttomecek@redhat.com> Tulio Magno Quites Machado Filho <tuliom@redhat.com> Ville Skyttä <scop@fedoraproject.org> Yaakov Selkowitz <yselkowi@redhat.com> - Initial import - Fedora contributions by: Benjamin A. Beasley <code@musicinmybrain.net> Bill Nottingham <notting@fedoraproject.org> Charalampos Stratakis <cstratak@redhat.com> Christian Dersch <lupinix@mailbox.org> Dan Horák <dan@danny.cz> David Malcolm <dmalcolm@redhat.com> David Tardon <dtardon@redhat.com> Deji Akingunola <deji@fedoraproject.org> Dennis Gilmore <dennis@ausil.us> dmalcolm <dmalcolm@fedoraproject.org> Elliott Sales de Andrade <quantum.analyst@gmail.com> Gwyn Ciesla <gwync@protonmail.com> Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org> Iñaki Úcar <iucar@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jarod Wilson <jwilson@fedoraproject.org> Jaromir Capik <jcapik@redhat.com> Jef Spaleta <jspaleta@fedoraproject.org> Jerry James <loganjerry@gmail.com> Jesse Keating <jkeating@fedoraproject.org> Kalev Lember <klember@redhat.com> Karolina Surma <ksurma@redhat.com> Lukáš Zaoral <lzaoral@redhat.com> Lumir Balhar <lbalhar@redhat.com> Merlin Mathesius <mmathesi@redhat.com> Miro Hrončok <miro@hroncok.cz> Nikola Forró <nforro@redhat.com> Orion Poplawski <orion@nwra.com> Pavel Šimovec <psimovec@redhat.com> Peter Robinson <pbrobinson@gmail.com> Robert Kuska <rkuska@redhat.com> Scott Talbert <swt@techie.net> Simone Caronni <negativo17@gmail.com> Songsong Zhang <u2fsdgvkx1@gmail.com> Thomas Spura <thomas.spura@gmail.com> Tomáš Hrnčiar <thrnciar@redhat.com> Tomas Orsava <torsava@redhat.com> Tomas Tomecek <ttomecek@redhat.com> Tulio Magno Quites Machado Filho <tuliom@redhat.com> Ville Skyttä <scop@fedoraproject.org> Yaakov Selkowitz <yselkowi@redhat.com> - Security fix for the bundled urllib3 for CVE-2025-50181 - Include SBOM in the .whl file in python-pip-wheel - Update to 25.2 (rhbz#2385294) - Gating - Convert from Fedora for the Python 3.14 stack in RHEL - RHEL: Rename SPEC to python3.14-pip.spec - Fix gating plan - removed unnecessary older VERSION= tests - removed bootstrap test - fix pip_install_upgrade to run pip-3.14 - fix bash completion + remove unused metadata file - Security fix for CVE-2026-8643: path traversal in wheel entry points - Security fix for the bundled urllib3 for CVE-2025-50181 - Include SBOM in the .whl file in python-pip-wheel - Update to 25.2 (rhbz#2385294) - Gating - Convert from Fedora for the Python 3.14 stack in RHEL - RHEL: Rename SPEC to python3.14-pip.spec - Security fix for the bundled urllib3 for CVE-2025-50181 - Include SBOM in the .whl file in python-pip-wheel - Update to 25.2 (rhbz#2385294) - Gating - Convert from Fedora for the Python 3.14 stack in RHEL - RHEL: Rename SPEC to python3.14-pip.spec - Fix gating plan - removed unnecessary older VERSION= tests - removed bootstrap test - fix pip_install_upgrade to run pip-3.14 - fix bash completion + remove unused metadata file - Security fix for CVE-2026-8643: path traversal in wheel entry points - Security fix for the bundled urllib3 for CVE-2025-50181 - Include SBOM in the .whl file in python-pip-wheel - Update to 25.2 (rhbz#2385294) - Gating - Convert from Fedora for the Python 3.14 stack in RHEL - RHEL: Rename SPEC to python3.14-pip.spec - Update to the latest and last upstream commit - The project won't have any new releases - Use modern pyproject macros Related: RHEL-120845 - Initial package Fedora contributions by: Dennis Gilmore <dennis@ausil.us> Bill Nottingham <notting@fedoraproject.org> Charalampos Stratakis <cstratak@redhat.com> Christian Heimes <cheimes@redhat.com> David Malcolm <dmalcolm@redhat.com> Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Jesse Keating <jkeating@fedoraproject.org> Miro Hrončok <miro@hroncok.cz> Orion Poplawski <orion@cora.nwra.com> Patrik Kopkan <pkopkan@redhat.com> Rob Crittenden <rcritten@redhat.com> Robert Kuska <rkuska@redhat.com> Slavek Kabrda <bkabrda@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Thomas Spura <tomspur@fedoraproject.org> Tom Callaway <spot@fedoraproject.org> Troy Dawson <tdawson@redhat.com> - Initial package Fedora contributions by: Ales Nezbeda <anezbeda@redhat.com> Bill Nottingham <notting@fedoraproject.org> Bohuslav Kabrda <bkabrda@redhat.com> Charalampos Stratakis <cstratak@redhat.com> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Devrim Gündüz <devrim@gunduz.org> Filip Januš <fjanus@redhat.com> Honza Horak <hhorak@redhat.com> Ignacio Vazquez-Abrams <ivazqueznet+rpm@gmail.com> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Jason L Tibbitts III <tibbs@math.uh.edu> Jesse Keating <jkeating@fedoraproject.org> Jozef Mlich <jmlich@redhat.com> Lumír Balhar <lbalhar@redhat.com> Miro Hrončok <mhroncok@redhat.com> Ondřej Sloup <ondrej.sloup@protonmail.com> Patrik Novotný <panovotn@redhat.com> Pavel Raiskup <praiskup@redhat.com> Petr Kubat <pkubat@redhat.com> Peter Robinson <pbrobinson@fedoraproject.org> Todd Zullinger <tmz@pobox.com> Tomas Hrnciar <thrnciar@redhat.com> Tom Lane <tgl@redhat.com> - Keep the ply library bundled, as intended upstream - Add gating - Convert from Fedora for the Python 3.14 stack in RHEL - RHEL: Rename SPEC to python3.14-pycparser.spec - New upstream release 6.0.3 - Add gating.yaml - Convert from Fedora for the Python 3.14 stack in RHEL - Add gating - Convert from Fedora for the Python 3.14 stack in RHEL - RHEL: Rename SPEC to python3.14-idna.spec - Additional coverity fixes Related: RHEL-120852 - Fix issues uncovered via coverity scanning Related: RHEL-120852 - Rebuild with newer Cython - Initial package - Fedora contributions by: Antonio Trande <anto.trande@gmail.com> Benjamin A. Beasley <code@musicinmybrain.net> Bill Nottingham <notting@fedoraproject.org> Björn Esser <me@besser82.io> Charalampos Stratakis <cstratak@redhat.com> Christian Dersch <lupinix@mailbox.org> David Abdurachmanov <davidlt@rivosinc.com> David Malcolm <dmalcolm@redhat.com> Deji Akingunola <deji@fedoraproject.org> Dennis Gilmore <dennis@ausil.us> dmalcolm <dmalcolm@fedoraproject.org> Elliott Sales de Andrade <quantum.analyst@gmail.com> Florian Weimer <fweimer@redhat.com> Gwyn Ciesla <gwync@protonmail.com> Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org> Igor Gnatenko <ignatenko@redhat.com> Iñaki Úcar <iucar@fedoraproject.org> Jef Spaleta <jspaleta@fedoraproject.org> Jerry James <loganjerry@gmail.com> Jesse Keating <jkeating@fedoraproject.org> Jitka Plesnikova <jplesnik@redhat.com> Jonathan Wakely <jwakely@redhat.com> Kalev Lember <klember@redhat.com> Karolina Surma <ksurma@redhat.com> Kevin Fenzi <kevin@scrye.com> Lumir Balhar <lbalhar@redhat.com> Mamoru TASAKA <mtasaka@fedoraproject.org> Marcel Plch <mplch@redhat.com> Maxwell G <maxwell@gtmx.me> Miro Hrončok <miro@hroncok.cz> Nikola Forró <nforro@redhat.com> Nils Philippsen <nils@redhat.com> Orion Poplawski <orion@nwra.com> Pavel Šimovec <psimovec@redhat.com> Peter Robinson <pbrobinson@fedoraproject.org> Petr Viktorin <pviktori@redhat.com> Robert Kuska <rkuska@redhat.com> Than Ngo <than@redhat.com> Thomas Spura <thomas.spura@gmail.com> Tomas Tomecek <ttomecek@redhat.com> Toshio Kuratomi <toshio@fedoraproject.org> Troy Dawson <tdawson@fedoraproject.org> Yaakov Selkowitz <yselkowi@redhat.com> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.2 - Update to Python 3.14.1 - Disable bootstrap - Initial package - Fedora contributions by: Björn Esser <besser82@fedoraproject.org> Bohuslav Kabrda <bkabrda@redhat.com> Charalampos Stratakis <cstratak@redhat.com> Dan Horák <dan@danny.cz> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Florian Weimer <fweimer@redhat.com> Gwyn Ciesla <limb@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jaroslav Škarvada <jskarvad@redhat.com> Jason ティビツ <tibbs@fedoraproject.org> Kalev Lember <klember@redhat.com> Karolina Surma <ksurma@redhat.com> Karsten Hopp <karsten@redhat.com> Lukáš Zachar <lzachar@redhat.com> Lumir Balhar <lbalhar@redhat.com> Marcel Plch <mplch@redhat.com> Matej Stuchlik <mstuchli@redhat.com> Michal Cyprian <mcyprian@redhat.com> Michal Toman <mtoman@fedoraproject.org> Miro Hrončok <mhroncok@redhat.com> Nicolas Chauvet <kwizart@gmail.com> Orion Poplawski <orion@cora.nwra.com> Patrik Kopkan <pkopkan@redhat.com> Peter Robinson <pbrobinson@gmail.com> Petr Šplíchal <psplicha@redhat.com> Petr Viktorin <pviktori@redhat.com> Rex Dieter <rdieter@fedoraproject.org> Richard W.M. Jones <rjones@redhat.com> Robert Kuska <rkuska@redhat.com> Sahana Prasad <sahana@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Than Ngo <than@redhat.com> Thomas Spura <thomas.spura@gmail.com> Till Maas <opensource@till.name> Tom Stellard <tstellar@redhat.com> Tomas Mraz <tmraz@fedoraproject.org> Tomas Orsava <torsava@redhat.com> Tomas Radej <tradej@redhat.com> Tomáš Hrnčiar <thrnciar@redhat.com> Toshio Kuratomi <toshio@fedoraproject.org> U2FsdGVkX1 <U2FsdGVkX1@gmail.com> Victor Stinner <vstinner@redhat.com> Ville Skyttä <ville.skytta@iki.fi> Yaakov Selkowitz <yselkowi@redhat.com> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.2 - Update to Python 3.14.1 - Disable bootstrap - Initial package - Fedora contributions by: Björn Esser <besser82@fedoraproject.org> Bohuslav Kabrda <bkabrda@redhat.com> Charalampos Stratakis <cstratak@redhat.com> Dan Horák <dan@danny.cz> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Florian Weimer <fweimer@redhat.com> Gwyn Ciesla <limb@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jaroslav Škarvada <jskarvad@redhat.com> Jason ティビツ <tibbs@fedoraproject.org> Kalev Lember <klember@redhat.com> Karolina Surma <ksurma@redhat.com> Karsten Hopp <karsten@redhat.com> Lukáš Zachar <lzachar@redhat.com> Lumir Balhar <lbalhar@redhat.com> Marcel Plch <mplch@redhat.com> Matej Stuchlik <mstuchli@redhat.com> Michal Cyprian <mcyprian@redhat.com> Michal Toman <mtoman@fedoraproject.org> Miro Hrončok <mhroncok@redhat.com> Nicolas Chauvet <kwizart@gmail.com> Orion Poplawski <orion@cora.nwra.com> Patrik Kopkan <pkopkan@redhat.com> Peter Robinson <pbrobinson@gmail.com> Petr Šplíchal <psplicha@redhat.com> Petr Viktorin <pviktori@redhat.com> Rex Dieter <rdieter@fedoraproject.org> Richard W.M. Jones <rjones@redhat.com> Robert Kuska <rkuska@redhat.com> Sahana Prasad <sahana@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Than Ngo <than@redhat.com> Thomas Spura <thomas.spura@gmail.com> Till Maas <opensource@till.name> Tom Stellard <tstellar@redhat.com> Tomas Mraz <tmraz@fedoraproject.org> Tomas Orsava <torsava@redhat.com> Tomas Radej <tradej@redhat.com> Tomáš Hrnčiar <thrnciar@redhat.com> Toshio Kuratomi <toshio@fedoraproject.org> U2FsdGVkX1 <U2FsdGVkX1@gmail.com> Victor Stinner <vstinner@redhat.com> Ville Skyttä <ville.skytta@iki.fi> Yaakov Selkowitz <yselkowi@redhat.com> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Security fix for CVE-2026-15308 Resolves: RHEL-193779 - Update to 3.14.5 Resolves: RHEL-180642 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-180642 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.2 - Update to 3.14.5 Resolves: RHEL-180642 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-180642 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.2 - Update to Python 3.14.1 - On RHEL 9, also supports reparse deferral in expat Related: RHEL-227218 - Update to Python 3.14.7, security fix for CVE-2026-11940 Resolves: RHEL-227218 - Update to Python 3.14.6 Related: RHEL-227218 - Security fix for CVE-2026-15308 Resolves: RHEL-193779 - Update to 3.14.5 Resolves: RHEL-180642 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-180642 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.8 - Security fix for CVE-2026-15310 - Security fix for CVE-2026-15806 - Security fix for CVE-2026-17084 - Security fix for CVE-2026-19445 - Security fix for CVE-2026-19553 - Security fix for CVE-2026-19672 - Security fix for CVE-2026-82049 Resolves: RHEL-274141 Resolves: RHEL-276250 - On RHEL 9, also supports reparse deferral in expat Related: RHEL-227218 - Update to Python 3.14.7, security fix for CVE-2026-11940 Resolves: RHEL-227218 - Update to Python 3.14.6 Related: RHEL-227218 - Security fix for CVE-2026-15308 Resolves: RHEL-193779 - Update to 3.14.5 Resolves: RHEL-180642 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-180642 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Update to 2.6.3 - Fixes CVE-2026-21441 / GHSA-38jv-5279-wg99 - Update to 2.6.2 - Update to 2.6.1 - Fixes CVE-2025-66471 / GHSA-2xpw-w6gg-jr37 - Fixes CVE-2025-66418 / GHSA-gm62-xv2j-4w53 - Add gating - Convert from Fedora for the Python 3.14 stack in RHEL - RHEL: Rename SPEC to python3.14-urllib3.spec - Fix a regression with Python 3.14.8 - Fix test_start_closed_socket with latest Python - CVE-2026-97689 python3.14-urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser - CVE-2026-97687 python3.14-urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override - Security fix for CVE-2026-44431 and CVE-2026-44432 - Resolves: RHEL-184902 - Resolves: RHEL-185127 - Update to 2.6.3 - Fixes CVE-2026-21441 / GHSA-38jv-5279-wg99 - Update to 2.6.2 - Update to 2.6.1 - Fixes CVE-2025-66471 / GHSA-2xpw-w6gg-jr37 - Fixes CVE-2025-66418 / GHSA-gm62-xv2j-4w53 - Add gating - Convert from Fedora for the Python 3.14 stack in RHEL - Security fix for CVE-2026-44431 and CVE-2026-44432 - Resolves: RHEL-184902 - Resolves: RHEL-185127 - Update to 2.6.3 - Fixes CVE-2026-21441 / GHSA-38jv-5279-wg99 - Update to 2.6.2 - Update to 2.6.1 - Fixes CVE-2025-66471 / GHSA-2xpw-w6gg-jr37 - Fixes CVE-2025-66418 / GHSA-gm62-xv2j-4w53 - Add gating - Convert from Fedora for the Python 3.14 stack in RHEL - RHEL: Rename SPEC to python3.14-urllib3.spec - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187] - kvm-q35-increase-default-tseg-size.patch [RHEL-139057] - Resolves: RHEL-132989 (Expose block limits of block nodes in QMP and qemu-img [rhel-9]) - Resolves: RHEL-140187 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8]) - Resolves: RHEL-139057 ([qemu, rhel-9] increase default TSEG size) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527] - Resolves: RHEL-184527 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207387] - kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207387] - kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207387] - Resolves: RHEL-207387 (qemu-img create/convert fails on target block device with 4k sector size [rhel-9.8.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527] - Resolves: RHEL-184527 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187] - kvm-q35-increase-default-tseg-size.patch [RHEL-139057] - Resolves: RHEL-132989 (Expose block limits of block nodes in QMP and qemu-img [rhel-9]) - Resolves: RHEL-140187 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8]) - Resolves: RHEL-139057 ([qemu, rhel-9] increase default TSEG size) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-138240] - Resolves: RHEL-138240 (QEMU crashes when stopping source VM during live migration [rhel-9]) - kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-132193] - Resolves: RHEL-132193 ([rhel 9.8]L1VH qemu downstream initial merge RHEL9) - kvm-pcie_sriov-make-pcie_sriov_pf_exit-safe-on-non-SR-IO.patch [RHEL-131144] - kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-132193] - kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-132193] - kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-132193] - kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-132193] - kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-132193] - kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-132193] - kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-132193] - kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-132193] - kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-132193] - kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-132193] - kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-132193] - kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-132193] - kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-132193] - kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-132193] - kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-132193] - kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-132193] - kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-132193] - kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-132193] - kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-132193] - kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-132193] - kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-132193] - kvm-docs-Add-mshv-to-documentation.patch [RHEL-132193] - kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-132193] - kvm-accel-mshv-initialize-thread-name.patch [RHEL-132193] - kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-132193] - Resolves: RHEL-131144 (qemu crash after hot-unplug disk from the multifunction enabled bus [RHEL.9.8]) - Resolves: RHEL-132193 ([rhel 9.8]L1VH qemu downstream initial merge RHEL9) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187] - kvm-q35-increase-default-tseg-size.patch [RHEL-139057] - Resolves: RHEL-132989 (Expose block limits of block nodes in QMP and qemu-img [rhel-9]) - Resolves: RHEL-140187 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8]) - Resolves: RHEL-139057 ([qemu, rhel-9] increase default TSEG size) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527] - Resolves: RHEL-184527 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207387] - kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207387] - kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207387] - Resolves: RHEL-207387 (qemu-img create/convert fails on target block device with 4k sector size [rhel-9.8.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527] - Resolves: RHEL-184527 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187] - kvm-q35-increase-default-tseg-size.patch [RHEL-139057] - Resolves: RHEL-132989 (Expose block limits of block nodes in QMP and qemu-img [rhel-9]) - Resolves: RHEL-140187 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8]) - Resolves: RHEL-139057 ([qemu, rhel-9] increase default TSEG size) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-138240] - Resolves: RHEL-138240 (QEMU crashes when stopping source VM during live migration [rhel-9]) - kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-132193] - Resolves: RHEL-132193 ([rhel 9.8]L1VH qemu downstream initial merge RHEL9) - kvm-pcie_sriov-make-pcie_sriov_pf_exit-safe-on-non-SR-IO.patch [RHEL-131144] - kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-132193] - kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-132193] - kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-132193] - kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-132193] - kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-132193] - kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-132193] - kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-132193] - kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-132193] - kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-132193] - kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-132193] - kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-132193] - kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-132193] - kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-132193] - kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-132193] - kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-132193] - kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-132193] - kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-132193] - kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-132193] - kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-132193] - kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-132193] - kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-132193] - kvm-docs-Add-mshv-to-documentation.patch [RHEL-132193] - kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-132193] - kvm-accel-mshv-initialize-thread-name.patch [RHEL-132193] - kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-132193] - Resolves: RHEL-131144 (qemu crash after hot-unplug disk from the multifunction enabled bus [RHEL.9.8]) - Resolves: RHEL-132193 ([rhel 9.8]L1VH qemu downstream initial merge RHEL9) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187] - kvm-q35-increase-default-tseg-size.patch [RHEL-139057] - Resolves: RHEL-132989 (Expose block limits of block nodes in QMP and qemu-img [rhel-9]) - Resolves: RHEL-140187 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8]) - Resolves: RHEL-139057 ([qemu, rhel-9] increase default TSEG size) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527] - Resolves: RHEL-184527 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207387] - kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207387] - kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207387] - Resolves: RHEL-207387 (qemu-img create/convert fails on target block device with 4k sector size [rhel-9.8.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527] - Resolves: RHEL-184527 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187] - kvm-q35-increase-default-tseg-size.patch [RHEL-139057] - Resolves: RHEL-132989 (Expose block limits of block nodes in QMP and qemu-img [rhel-9]) - Resolves: RHEL-140187 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8]) - Resolves: RHEL-139057 ([qemu, rhel-9] increase default TSEG size) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-138240] - Resolves: RHEL-138240 (QEMU crashes when stopping source VM during live migration [rhel-9]) - kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-132193] - Resolves: RHEL-132193 ([rhel 9.8]L1VH qemu downstream initial merge RHEL9) - kvm-pcie_sriov-make-pcie_sriov_pf_exit-safe-on-non-SR-IO.patch [RHEL-131144] - kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-132193] - kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-132193] - kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-132193] - kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-132193] - kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-132193] - kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-132193] - kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-132193] - kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-132193] - kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-132193] - kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-132193] - kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-132193] - kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-132193] - kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-132193] - kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-132193] - kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-132193] - kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-132193] - kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-132193] - kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-132193] - kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-132193] - kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-132193] - kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-132193] - kvm-docs-Add-mshv-to-documentation.patch [RHEL-132193] - kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-132193] - kvm-accel-mshv-initialize-thread-name.patch [RHEL-132193] - kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-132193] - Resolves: RHEL-131144 (qemu crash after hot-unplug disk from the multifunction enabled bus [RHEL.9.8]) - Resolves: RHEL-132193 ([rhel 9.8]L1VH qemu downstream initial merge RHEL9) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187] - kvm-q35-increase-default-tseg-size.patch [RHEL-139057] - Resolves: RHEL-132989 (Expose block limits of block nodes in QMP and qemu-img [rhel-9]) - Resolves: RHEL-140187 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8]) - Resolves: RHEL-139057 ([qemu, rhel-9] increase default TSEG size) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527] - Resolves: RHEL-184527 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207387] - kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207387] - kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207387] - Resolves: RHEL-207387 (qemu-img create/convert fails on target block device with 4k sector size [rhel-9.8.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527] - Resolves: RHEL-184527 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187] - kvm-q35-increase-default-tseg-size.patch [RHEL-139057] - Resolves: RHEL-132989 (Expose block limits of block nodes in QMP and qemu-img [rhel-9]) - Resolves: RHEL-140187 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8]) - Resolves: RHEL-139057 ([qemu, rhel-9] increase default TSEG size) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-138240] - Resolves: RHEL-138240 (QEMU crashes when stopping source VM during live migration [rhel-9]) - kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-132193] - Resolves: RHEL-132193 ([rhel 9.8]L1VH qemu downstream initial merge RHEL9) - kvm-pcie_sriov-make-pcie_sriov_pf_exit-safe-on-non-SR-IO.patch [RHEL-131144] - kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-132193] - kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-132193] - kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-132193] - kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-132193] - kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-132193] - kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-132193] - kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-132193] - kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-132193] - kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-132193] - kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-132193] - kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-132193] - kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-132193] - kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-132193] - kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-132193] - kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-132193] - kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-132193] - kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-132193] - kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-132193] - kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-132193] - kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-132193] - kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-132193] - kvm-docs-Add-mshv-to-documentation.patch [RHEL-132193] - kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-132193] - kvm-accel-mshv-initialize-thread-name.patch [RHEL-132193] - kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-132193] - Resolves: RHEL-131144 (qemu crash after hot-unplug disk from the multifunction enabled bus [RHEL.9.8]) - Resolves: RHEL-132193 ([rhel 9.8]L1VH qemu downstream initial merge RHEL9) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187] - kvm-q35-increase-default-tseg-size.patch [RHEL-139057] - Resolves: RHEL-132989 (Expose block limits of block nodes in QMP and qemu-img [rhel-9]) - Resolves: RHEL-140187 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8]) - Resolves: RHEL-139057 ([qemu, rhel-9] increase default TSEG size) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527] - Resolves: RHEL-184527 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207387] - kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207387] - kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207387] - Resolves: RHEL-207387 (qemu-img create/convert fails on target block device with 4k sector size [rhel-9.8.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527] - Resolves: RHEL-184527 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187] - kvm-q35-increase-default-tseg-size.patch [RHEL-139057] - Resolves: RHEL-132989 (Expose block limits of block nodes in QMP and qemu-img [rhel-9]) - Resolves: RHEL-140187 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8]) - Resolves: RHEL-139057 ([qemu, rhel-9] increase default TSEG size) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-138240] - Resolves: RHEL-138240 (QEMU crashes when stopping source VM during live migration [rhel-9]) - kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-132193] - Resolves: RHEL-132193 ([rhel 9.8]L1VH qemu downstream initial merge RHEL9) - kvm-pcie_sriov-make-pcie_sriov_pf_exit-safe-on-non-SR-IO.patch [RHEL-131144] - kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-132193] - kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-132193] - kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-132193] - kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-132193] - kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-132193] - kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-132193] - kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-132193] - kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-132193] - kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-132193] - kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-132193] - kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-132193] - kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-132193] - kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-132193] - kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-132193] - kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-132193] - kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-132193] - kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-132193] - kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-132193] - kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-132193] - kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-132193] - kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-132193] - kvm-docs-Add-mshv-to-documentation.patch [RHEL-132193] - kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-132193] - kvm-accel-mshv-initialize-thread-name.patch [RHEL-132193] - kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-132193] - Resolves: RHEL-131144 (qemu crash after hot-unplug disk from the multifunction enabled bus [RHEL.9.8]) - Resolves: RHEL-132193 ([rhel 9.8]L1VH qemu downstream initial merge RHEL9) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187] - kvm-q35-increase-default-tseg-size.patch [RHEL-139057] - Resolves: RHEL-132989 (Expose block limits of block nodes in QMP and qemu-img [rhel-9]) - Resolves: RHEL-140187 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8]) - Resolves: RHEL-139057 ([qemu, rhel-9] increase default TSEG size) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527] - Resolves: RHEL-184527 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207387] - kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207387] - kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207387] - Resolves: RHEL-207387 (qemu-img create/convert fails on target block device with 4k sector size [rhel-9.8.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527] - Resolves: RHEL-184527 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187] - kvm-q35-increase-default-tseg-size.patch [RHEL-139057] - Resolves: RHEL-132989 (Expose block limits of block nodes in QMP and qemu-img [rhel-9]) - Resolves: RHEL-140187 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8]) - Resolves: RHEL-139057 ([qemu, rhel-9] increase default TSEG size) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-138240] - Resolves: RHEL-138240 (QEMU crashes when stopping source VM during live migration [rhel-9]) - kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-132193] - Resolves: RHEL-132193 ([rhel 9.8]L1VH qemu downstream initial merge RHEL9) - kvm-pcie_sriov-make-pcie_sriov_pf_exit-safe-on-non-SR-IO.patch [RHEL-131144] - kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-132193] - kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-132193] - kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-132193] - kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-132193] - kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-132193] - kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-132193] - kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-132193] - kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-132193] - kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-132193] - kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-132193] - kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-132193] - kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-132193] - kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-132193] - kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-132193] - kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-132193] - kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-132193] - kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-132193] - kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-132193] - kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-132193] - kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-132193] - kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-132193] - kvm-docs-Add-mshv-to-documentation.patch [RHEL-132193] - kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-132193] - kvm-accel-mshv-initialize-thread-name.patch [RHEL-132193] - kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-132193] - Resolves: RHEL-131144 (qemu crash after hot-unplug disk from the multifunction enabled bus [RHEL.9.8]) - Resolves: RHEL-132193 ([rhel 9.8]L1VH qemu downstream initial merge RHEL9) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187] - kvm-q35-increase-default-tseg-size.patch [RHEL-139057] - Resolves: RHEL-132989 (Expose block limits of block nodes in QMP and qemu-img [rhel-9]) - Resolves: RHEL-140187 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8]) - Resolves: RHEL-139057 ([qemu, rhel-9] increase default TSEG size) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527] - Resolves: RHEL-184527 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207387] - kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207387] - kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207387] - Resolves: RHEL-207387 (qemu-img create/convert fails on target block device with 4k sector size [rhel-9.8.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527] - Resolves: RHEL-184527 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187] - kvm-q35-increase-default-tseg-size.patch [RHEL-139057] - Resolves: RHEL-132989 (Expose block limits of block nodes in QMP and qemu-img [rhel-9]) - Resolves: RHEL-140187 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8]) - Resolves: RHEL-139057 ([qemu, rhel-9] increase default TSEG size) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-138240] - Resolves: RHEL-138240 (QEMU crashes when stopping source VM during live migration [rhel-9]) - kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-132193] - Resolves: RHEL-132193 ([rhel 9.8]L1VH qemu downstream initial merge RHEL9) - kvm-pcie_sriov-make-pcie_sriov_pf_exit-safe-on-non-SR-IO.patch [RHEL-131144] - kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-132193] - kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-132193] - kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-132193] - kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-132193] - kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-132193] - kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-132193] - kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-132193] - kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-132193] - kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-132193] - kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-132193] - kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-132193] - kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-132193] - kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-132193] - kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-132193] - kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-132193] - kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-132193] - kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-132193] - kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-132193] - kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-132193] - kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-132193] - kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-132193] - kvm-docs-Add-mshv-to-documentation.patch [RHEL-132193] - kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-132193] - kvm-accel-mshv-initialize-thread-name.patch [RHEL-132193] - kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-132193] - Resolves: RHEL-131144 (qemu crash after hot-unplug disk from the multifunction enabled bus [RHEL.9.8]) - Resolves: RHEL-132193 ([rhel 9.8]L1VH qemu downstream initial merge RHEL9) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187] - kvm-q35-increase-default-tseg-size.patch [RHEL-139057] - Resolves: RHEL-132989 (Expose block limits of block nodes in QMP and qemu-img [rhel-9]) - Resolves: RHEL-140187 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8]) - Resolves: RHEL-139057 ([qemu, rhel-9] increase default TSEG size) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527] - Resolves: RHEL-184527 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207387] - kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207387] - kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207387] - Resolves: RHEL-207387 (qemu-img create/convert fails on target block device with 4k sector size [rhel-9.8.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527] - Resolves: RHEL-184527 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187] - kvm-q35-increase-default-tseg-size.patch [RHEL-139057] - Resolves: RHEL-132989 (Expose block limits of block nodes in QMP and qemu-img [rhel-9]) - Resolves: RHEL-140187 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8]) - Resolves: RHEL-139057 ([qemu, rhel-9] increase default TSEG size) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-138240] - Resolves: RHEL-138240 (QEMU crashes when stopping source VM during live migration [rhel-9]) - kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-132193] - Resolves: RHEL-132193 ([rhel 9.8]L1VH qemu downstream initial merge RHEL9) - kvm-pcie_sriov-make-pcie_sriov_pf_exit-safe-on-non-SR-IO.patch [RHEL-131144] - kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-132193] - kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-132193] - kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-132193] - kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-132193] - kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-132193] - kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-132193] - kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-132193] - kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-132193] - kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-132193] - kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-132193] - kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-132193] - kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-132193] - kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-132193] - kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-132193] - kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-132193] - kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-132193] - kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-132193] - kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-132193] - kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-132193] - kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-132193] - kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-132193] - kvm-docs-Add-mshv-to-documentation.patch [RHEL-132193] - kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-132193] - kvm-accel-mshv-initialize-thread-name.patch [RHEL-132193] - kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-132193] - Resolves: RHEL-131144 (qemu crash after hot-unplug disk from the multifunction enabled bus [RHEL.9.8]) - Resolves: RHEL-132193 ([rhel 9.8]L1VH qemu downstream initial merge RHEL9) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187] - kvm-q35-increase-default-tseg-size.patch [RHEL-139057] - Resolves: RHEL-132989 (Expose block limits of block nodes in QMP and qemu-img [rhel-9]) - Resolves: RHEL-140187 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8]) - Resolves: RHEL-139057 ([qemu, rhel-9] increase default TSEG size) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527] - Resolves: RHEL-184527 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207387] - kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207387] - kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207387] - Resolves: RHEL-207387 (qemu-img create/convert fails on target block device with 4k sector size [rhel-9.8.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527] - Resolves: RHEL-184527 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187] - kvm-q35-increase-default-tseg-size.patch [RHEL-139057] - Resolves: RHEL-132989 (Expose block limits of block nodes in QMP and qemu-img [rhel-9]) - Resolves: RHEL-140187 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8]) - Resolves: RHEL-139057 ([qemu, rhel-9] increase default TSEG size) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-138240] - Resolves: RHEL-138240 (QEMU crashes when stopping source VM during live migration [rhel-9]) - kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-132193] - Resolves: RHEL-132193 ([rhel 9.8]L1VH qemu downstream initial merge RHEL9) - kvm-pcie_sriov-make-pcie_sriov_pf_exit-safe-on-non-SR-IO.patch [RHEL-131144] - kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-132193] - kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-132193] - kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-132193] - kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-132193] - kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-132193] - kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-132193] - kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-132193] - kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-132193] - kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-132193] - kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-132193] - kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-132193] - kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-132193] - kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-132193] - kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-132193] - kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-132193] - kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-132193] - kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-132193] - kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-132193] - kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-132193] - kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-132193] - kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-132193] - kvm-docs-Add-mshv-to-documentation.patch [RHEL-132193] - kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-132193] - kvm-accel-mshv-initialize-thread-name.patch [RHEL-132193] - kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-132193] - Resolves: RHEL-131144 (qemu crash after hot-unplug disk from the multifunction enabled bus [RHEL.9.8]) - Resolves: RHEL-132193 ([rhel 9.8]L1VH qemu downstream initial merge RHEL9) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187] - kvm-q35-increase-default-tseg-size.patch [RHEL-139057] - Resolves: RHEL-132989 (Expose block limits of block nodes in QMP and qemu-img [rhel-9]) - Resolves: RHEL-140187 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8]) - Resolves: RHEL-139057 ([qemu, rhel-9] increase default TSEG size) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527] - Resolves: RHEL-184527 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207387] - kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207387] - kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207387] - Resolves: RHEL-207387 (qemu-img create/convert fails on target block device with 4k sector size [rhel-9.8.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527] - Resolves: RHEL-184527 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187] - kvm-q35-increase-default-tseg-size.patch [RHEL-139057] - Resolves: RHEL-132989 (Expose block limits of block nodes in QMP and qemu-img [rhel-9]) - Resolves: RHEL-140187 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8]) - Resolves: RHEL-139057 ([qemu, rhel-9] increase default TSEG size) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-138240] - Resolves: RHEL-138240 (QEMU crashes when stopping source VM during live migration [rhel-9]) - kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-132193] - Resolves: RHEL-132193 ([rhel 9.8]L1VH qemu downstream initial merge RHEL9) - kvm-pcie_sriov-make-pcie_sriov_pf_exit-safe-on-non-SR-IO.patch [RHEL-131144] - kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-132193] - kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-132193] - kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-132193] - kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-132193] - kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-132193] - kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-132193] - kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-132193] - kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-132193] - kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-132193] - kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-132193] - kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-132193] - kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-132193] - kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-132193] - kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-132193] - kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-132193] - kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-132193] - kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-132193] - kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-132193] - kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-132193] - kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-132193] - kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-132193] - kvm-docs-Add-mshv-to-documentation.patch [RHEL-132193] - kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-132193] - kvm-accel-mshv-initialize-thread-name.patch [RHEL-132193] - kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-132193] - Resolves: RHEL-131144 (qemu crash after hot-unplug disk from the multifunction enabled bus [RHEL.9.8]) - Resolves: RHEL-132193 ([rhel 9.8]L1VH qemu downstream initial merge RHEL9) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187] - kvm-q35-increase-default-tseg-size.patch [RHEL-139057] - Resolves: RHEL-132989 (Expose block limits of block nodes in QMP and qemu-img [rhel-9]) - Resolves: RHEL-140187 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8]) - Resolves: RHEL-139057 ([qemu, rhel-9] increase default TSEG size) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527] - Resolves: RHEL-184527 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207387] - kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207387] - kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207387] - Resolves: RHEL-207387 (qemu-img create/convert fails on target block device with 4k sector size [rhel-9.8.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527] - Resolves: RHEL-184527 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187] - kvm-q35-increase-default-tseg-size.patch [RHEL-139057] - Resolves: RHEL-132989 (Expose block limits of block nodes in QMP and qemu-img [rhel-9]) - Resolves: RHEL-140187 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8]) - Resolves: RHEL-139057 ([qemu, rhel-9] increase default TSEG size) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-138240] - Resolves: RHEL-138240 (QEMU crashes when stopping source VM during live migration [rhel-9]) - kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-132193] - Resolves: RHEL-132193 ([rhel 9.8]L1VH qemu downstream initial merge RHEL9) - kvm-pcie_sriov-make-pcie_sriov_pf_exit-safe-on-non-SR-IO.patch [RHEL-131144] - kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-132193] - kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-132193] - kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-132193] - kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-132193] - kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-132193] - kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-132193] - kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-132193] - kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-132193] - kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-132193] - kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-132193] - kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-132193] - kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-132193] - kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-132193] - kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-132193] - kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-132193] - kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-132193] - kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-132193] - kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-132193] - kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-132193] - kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-132193] - kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-132193] - kvm-docs-Add-mshv-to-documentation.patch [RHEL-132193] - kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-132193] - kvm-accel-mshv-initialize-thread-name.patch [RHEL-132193] - kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-132193] - Resolves: RHEL-131144 (qemu crash after hot-unplug disk from the multifunction enabled bus [RHEL.9.8]) - Resolves: RHEL-132193 ([rhel 9.8]L1VH qemu downstream initial merge RHEL9) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187] - kvm-q35-increase-default-tseg-size.patch [RHEL-139057] - Resolves: RHEL-132989 (Expose block limits of block nodes in QMP and qemu-img [rhel-9]) - Resolves: RHEL-140187 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8]) - Resolves: RHEL-139057 ([qemu, rhel-9] increase default TSEG size) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527] - Resolves: RHEL-184527 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207387] - kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207387] - kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207387] - Resolves: RHEL-207387 (qemu-img create/convert fails on target block device with 4k sector size [rhel-9.8.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527] - Resolves: RHEL-184527 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187] - kvm-q35-increase-default-tseg-size.patch [RHEL-139057] - Resolves: RHEL-132989 (Expose block limits of block nodes in QMP and qemu-img [rhel-9]) - Resolves: RHEL-140187 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8]) - Resolves: RHEL-139057 ([qemu, rhel-9] increase default TSEG size) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-138240] - Resolves: RHEL-138240 (QEMU crashes when stopping source VM during live migration [rhel-9]) - kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-132193] - Resolves: RHEL-132193 ([rhel 9.8]L1VH qemu downstream initial merge RHEL9) - kvm-pcie_sriov-make-pcie_sriov_pf_exit-safe-on-non-SR-IO.patch [RHEL-131144] - kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-132193] - kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-132193] - kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-132193] - kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-132193] - kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-132193] - kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-132193] - kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-132193] - kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-132193] - kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-132193] - kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-132193] - kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-132193] - kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-132193] - kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-132193] - kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-132193] - kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-132193] - kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-132193] - kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-132193] - kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-132193] - kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-132193] - kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-132193] - kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-132193] - kvm-docs-Add-mshv-to-documentation.patch [RHEL-132193] - kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-132193] - kvm-accel-mshv-initialize-thread-name.patch [RHEL-132193] - kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-132193] - Resolves: RHEL-131144 (qemu crash after hot-unplug disk from the multifunction enabled bus [RHEL.9.8]) - Resolves: RHEL-132193 ([rhel 9.8]L1VH qemu downstream initial merge RHEL9) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187] - kvm-q35-increase-default-tseg-size.patch [RHEL-139057] - Resolves: RHEL-132989 (Expose block limits of block nodes in QMP and qemu-img [rhel-9]) - Resolves: RHEL-140187 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8]) - Resolves: RHEL-139057 ([qemu, rhel-9] increase default TSEG size) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527] - Resolves: RHEL-184527 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207387] - kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207387] - kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207387] - Resolves: RHEL-207387 (qemu-img create/convert fails on target block device with 4k sector size [rhel-9.8.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527] - Resolves: RHEL-184527 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187] - kvm-q35-increase-default-tseg-size.patch [RHEL-139057] - Resolves: RHEL-132989 (Expose block limits of block nodes in QMP and qemu-img [rhel-9]) - Resolves: RHEL-140187 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8]) - Resolves: RHEL-139057 ([qemu, rhel-9] increase default TSEG size) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-138240] - Resolves: RHEL-138240 (QEMU crashes when stopping source VM during live migration [rhel-9]) - kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-132193] - Resolves: RHEL-132193 ([rhel 9.8]L1VH qemu downstream initial merge RHEL9) - kvm-pcie_sriov-make-pcie_sriov_pf_exit-safe-on-non-SR-IO.patch [RHEL-131144] - kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-132193] - kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-132193] - kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-132193] - kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-132193] - kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-132193] - kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-132193] - kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-132193] - kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-132193] - kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-132193] - kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-132193] - kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-132193] - kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-132193] - kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-132193] - kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-132193] - kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-132193] - kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-132193] - kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-132193] - kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-132193] - kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-132193] - kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-132193] - kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-132193] - kvm-docs-Add-mshv-to-documentation.patch [RHEL-132193] - kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-132193] - kvm-accel-mshv-initialize-thread-name.patch [RHEL-132193] - kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-132193] - Resolves: RHEL-131144 (qemu crash after hot-unplug disk from the multifunction enabled bus [RHEL.9.8]) - Resolves: RHEL-132193 ([rhel 9.8]L1VH qemu downstream initial merge RHEL9) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187] - kvm-q35-increase-default-tseg-size.patch [RHEL-139057] - Resolves: RHEL-132989 (Expose block limits of block nodes in QMP and qemu-img [rhel-9]) - Resolves: RHEL-140187 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8]) - Resolves: RHEL-139057 ([qemu, rhel-9] increase default TSEG size) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527] - Resolves: RHEL-184527 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207387] - kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207387] - kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207387] - Resolves: RHEL-207387 (qemu-img create/convert fails on target block device with 4k sector size [rhel-9.8.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527] - Resolves: RHEL-184527 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187] - kvm-q35-increase-default-tseg-size.patch [RHEL-139057] - Resolves: RHEL-132989 (Expose block limits of block nodes in QMP and qemu-img [rhel-9]) - Resolves: RHEL-140187 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8]) - Resolves: RHEL-139057 ([qemu, rhel-9] increase default TSEG size) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-138240] - Resolves: RHEL-138240 (QEMU crashes when stopping source VM during live migration [rhel-9]) - kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-132193] - Resolves: RHEL-132193 ([rhel 9.8]L1VH qemu downstream initial merge RHEL9) - kvm-pcie_sriov-make-pcie_sriov_pf_exit-safe-on-non-SR-IO.patch [RHEL-131144] - kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-132193] - kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-132193] - kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-132193] - kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-132193] - kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-132193] - kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-132193] - kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-132193] - kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-132193] - kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-132193] - kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-132193] - kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-132193] - kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-132193] - kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-132193] - kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-132193] - kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-132193] - kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-132193] - kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-132193] - kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-132193] - kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-132193] - kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-132193] - kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-132193] - kvm-docs-Add-mshv-to-documentation.patch [RHEL-132193] - kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-132193] - kvm-accel-mshv-initialize-thread-name.patch [RHEL-132193] - kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-132193] - Resolves: RHEL-131144 (qemu crash after hot-unplug disk from the multifunction enabled bus [RHEL.9.8]) - Resolves: RHEL-132193 ([rhel 9.8]L1VH qemu downstream initial merge RHEL9) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187] - kvm-q35-increase-default-tseg-size.patch [RHEL-139057] - Resolves: RHEL-132989 (Expose block limits of block nodes in QMP and qemu-img [rhel-9]) - Resolves: RHEL-140187 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8]) - Resolves: RHEL-139057 ([qemu, rhel-9] increase default TSEG size) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527] - Resolves: RHEL-184527 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207387] - kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207387] - kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207387] - Resolves: RHEL-207387 (qemu-img create/convert fails on target block device with 4k sector size [rhel-9.8.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527] - Resolves: RHEL-184527 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187] - kvm-q35-increase-default-tseg-size.patch [RHEL-139057] - Resolves: RHEL-132989 (Expose block limits of block nodes in QMP and qemu-img [rhel-9]) - Resolves: RHEL-140187 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8]) - Resolves: RHEL-139057 ([qemu, rhel-9] increase default TSEG size) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-138240] - Resolves: RHEL-138240 (QEMU crashes when stopping source VM during live migration [rhel-9]) - kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-132193] - Resolves: RHEL-132193 ([rhel 9.8]L1VH qemu downstream initial merge RHEL9) - kvm-pcie_sriov-make-pcie_sriov_pf_exit-safe-on-non-SR-IO.patch [RHEL-131144] - kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-132193] - kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-132193] - kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-132193] - kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-132193] - kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-132193] - kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-132193] - kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-132193] - kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-132193] - kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-132193] - kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-132193] - kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-132193] - kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-132193] - kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-132193] - kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-132193] - kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-132193] - kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-132193] - kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-132193] - kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-132193] - kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-132193] - kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-132193] - kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-132193] - kvm-docs-Add-mshv-to-documentation.patch [RHEL-132193] - kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-132193] - kvm-accel-mshv-initialize-thread-name.patch [RHEL-132193] - kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-132193] - Resolves: RHEL-131144 (qemu crash after hot-unplug disk from the multifunction enabled bus [RHEL.9.8]) - Resolves: RHEL-132193 ([rhel 9.8]L1VH qemu downstream initial merge RHEL9) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187] - kvm-q35-increase-default-tseg-size.patch [RHEL-139057] - Resolves: RHEL-132989 (Expose block limits of block nodes in QMP and qemu-img [rhel-9]) - Resolves: RHEL-140187 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8]) - Resolves: RHEL-139057 ([qemu, rhel-9] increase default TSEG size) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527] - Resolves: RHEL-184527 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207387] - kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207387] - kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207387] - Resolves: RHEL-207387 (qemu-img create/convert fails on target block device with 4k sector size [rhel-9.8.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527] - Resolves: RHEL-184527 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187] - kvm-q35-increase-default-tseg-size.patch [RHEL-139057] - Resolves: RHEL-132989 (Expose block limits of block nodes in QMP and qemu-img [rhel-9]) - Resolves: RHEL-140187 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8]) - Resolves: RHEL-139057 ([qemu, rhel-9] increase default TSEG size) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-138240] - Resolves: RHEL-138240 (QEMU crashes when stopping source VM during live migration [rhel-9]) - kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-132193] - Resolves: RHEL-132193 ([rhel 9.8]L1VH qemu downstream initial merge RHEL9) - kvm-pcie_sriov-make-pcie_sriov_pf_exit-safe-on-non-SR-IO.patch [RHEL-131144] - kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-132193] - kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-132193] - kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-132193] - kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-132193] - kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-132193] - kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-132193] - kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-132193] - kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-132193] - kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-132193] - kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-132193] - kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-132193] - kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-132193] - kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-132193] - kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-132193] - kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-132193] - kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-132193] - kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-132193] - kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-132193] - kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-132193] - kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-132193] - kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-132193] - kvm-docs-Add-mshv-to-documentation.patch [RHEL-132193] - kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-132193] - kvm-accel-mshv-initialize-thread-name.patch [RHEL-132193] - kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-132193] - Resolves: RHEL-131144 (qemu crash after hot-unplug disk from the multifunction enabled bus [RHEL.9.8]) - Resolves: RHEL-132193 ([rhel 9.8]L1VH qemu downstream initial merge RHEL9) - 0.9.0 Resolves: bz#2175753 - Rebuild (Qt 5.15.3) Resolves: bz#2061415 - 0.8.4 (sync with Fedora) Resolves: bz#2041342 - 0.8.0 Resolves: bz#1968290 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Sync with Fedora - update to 0.7.1 Resolves: bz#1951151 - 2157765 - Ship qpdf-devel in CRB - 2106940 - FIPS breaks pdftopdf and bannertopdf - 2095993 - Move qpdf to CRB repository - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 1950033 - Possible changes in zlib output causes FTBFS for qpdf - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - 1937988 - qpdf-10.3.1 is available - 1935799 - qpdf-10.3.0 is available - 1932052 - qpdf-10.2.0 is available - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 5.15.9 Resolves: bz#2175724 - 5.15.3 Resolves: bz#2061352 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Use more robust regular expressions Resolves: bz#1969433 - Use more precise regular expression for python shebangs Resolves: bz#1969433 - Handle additional spaces python shebangs Resolves: bz#1969433 - Let qt5_install_tests macro to handle mangling python shebangs Resolves: bz#1969433 - Add support for building upstream tests for gating Resolves: bz#1969433 - Rebuild (LLVM-21) Resolves: RHEL-108348 - Rebuild (LLVM-20) Resolves: RHEL-81777 - Rebuild (LLVM-19) Resolves: RHEL-66115 - Rebuild (LLVM-18) Resolves: RHEL-28681 - Rebuild (LLVM-21) Resolves: RHEL-108348 - Rebuild (LLVM-20) Resolves: RHEL-81777 - Rebuild (LLVM-19) Resolves: RHEL-66115 - Rebuild (LLVM-18) Resolves: RHEL-28681 - Rebuild (LLVM-21) Resolves: RHEL-108348 - Rebuild (LLVM-20) Resolves: RHEL-81777 - Rebuild (LLVM-19) Resolves: RHEL-66115 - Rebuild (LLVM-18) Resolves: RHEL-28681 - Rebuild (LLVM-21) Resolves: RHEL-108348 - Rebuild (LLVM-20) Resolves: RHEL-81777 - Rebuild (LLVM-19) Resolves: RHEL-66115 - Rebuild (LLVM-18) Resolves: RHEL-28681 - Rebuild (LLVM-21) Resolves: RHEL-108348 - Rebuild (LLVM-20) Resolves: RHEL-81777 - Rebuild (LLVM-19) Resolves: RHEL-66115 - Rebuild (LLVM-18) Resolves: RHEL-28681 - Assimp: Fix heap-based overflow in Q3DLoader::InternReadFile Resolves: RHEL-120985 - Assimp: Fix heap-based overflow in Assimp::LWO::AnimResolver::UpdateAnimRangeSetup Resolves: RHEL-104999 - Assimp: Fix heap-based overflow in Assimp::ASE::Parser::ParseLV4MeshBonesVertices Resolves: RHEL-105004 - Assimp: Fix heap-based overflow in Q3DLoader::InternReadFile Resolves: RHEL-120985 - Assimp: Fix heap-based overflow in Assimp::LWO::AnimResolver::UpdateAnimRangeSetup Resolves: RHEL-104999 - Assimp: Fix heap-based overflow in Assimp::ASE::Parser::ParseLV4MeshBonesVertices Resolves: RHEL-105004 - 5.15.9 Resolves: bz#2175726 - 5.15.3 Resolves: bz#2061353 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Assimp: Fix heap-based overflow in Q3DLoader::InternReadFile Resolves: RHEL-120985 - Assimp: Fix heap-based overflow in Assimp::LWO::AnimResolver::UpdateAnimRangeSetup Resolves: RHEL-104999 - Assimp: Fix heap-based overflow in Assimp::ASE::Parser::ParseLV4MeshBonesVertices Resolves: RHEL-105004 - qt5: QtCore Assertion Failure Denial of Service Resolves: RHEL-96231 - HTTP2: Delay any communication until encrypted() can be responded to Resolves: RHEL-46351 - Fix CVE-2024-25580: potential buffer overflow when reading KTX images Resolves: RHEL-25726 - Fix incorrect integer overflow check in HTTP2 implementation Resolves: RHEL-20239 - Fix infinite loops in QXmlStreamReader (CVE-2023-38197) Resolves: bz#2222771 - Fix CVE-2026-9499: out-of-bounds read in QTextCodec::codecForName() Resolves: RHEL-247216 - qt5: QtCore Assertion Failure Denial of Service Resolves: RHEL-96231 - Fix CVE-2026-19248: unbounded recursion and O(N²) behavior in QDom Resolves: RHEL-261136 - Fix CVE-2026-11573: denial of services via uncontrolled recursion in XML serialization Resolves: RHEL-277670 - Fix CVE-2026-9499: out-of-bounds read in QTextCodec::codecForName() Resolves: RHEL-247216 - qt5: QtCore Assertion Failure Denial of Service Resolves: RHEL-96231 - qt5: QtCore Assertion Failure Denial of Service Resolves: RHEL-96231 - HTTP2: Delay any communication until encrypted() can be responded to Resolves: RHEL-46351 - Fix CVE-2024-25580: potential buffer overflow when reading KTX images Resolves: RHEL-25726 - Fix incorrect integer overflow check in HTTP2 implementation Resolves: RHEL-20239 - Fix infinite loops in QXmlStreamReader (CVE-2023-38197) Resolves: bz#2222771 - Fix CVE-2026-9499: out-of-bounds read in QTextCodec::codecForName() Resolves: RHEL-247216 - qt5: QtCore Assertion Failure Denial of Service Resolves: RHEL-96231 - Fix CVE-2026-19248: unbounded recursion and O(N²) behavior in QDom Resolves: RHEL-261136 - Fix CVE-2026-11573: denial of services via uncontrolled recursion in XML serialization Resolves: RHEL-277670 - Fix CVE-2026-9499: out-of-bounds read in QTextCodec::codecForName() Resolves: RHEL-247216 - qt5: QtCore Assertion Failure Denial of Service Resolves: RHEL-96231 - qt5: QtCore Assertion Failure Denial of Service Resolves: RHEL-96231 - HTTP2: Delay any communication until encrypted() can be responded to Resolves: RHEL-46351 - Fix CVE-2024-25580: potential buffer overflow when reading KTX images Resolves: RHEL-25726 - Fix incorrect integer overflow check in HTTP2 implementation Resolves: RHEL-20239 - Fix infinite loops in QXmlStreamReader (CVE-2023-38197) Resolves: bz#2222771 - Fix CVE-2026-9499: out-of-bounds read in QTextCodec::codecForName() Resolves: RHEL-247216 - qt5: QtCore Assertion Failure Denial of Service Resolves: RHEL-96231 - Fix CVE-2026-19248: unbounded recursion and O(N²) behavior in QDom Resolves: RHEL-261136 - Fix CVE-2026-11573: denial of services via uncontrolled recursion in XML serialization Resolves: RHEL-277670 - Fix CVE-2026-9499: out-of-bounds read in QTextCodec::codecForName() Resolves: RHEL-247216 - qt5: QtCore Assertion Failure Denial of Service Resolves: RHEL-96231 - 5.15.9 Resolves: bz#2175726 - 5.15.3 Resolves: bz#2061353 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - qt5: QtCore Assertion Failure Denial of Service Resolves: RHEL-96231 - HTTP2: Delay any communication until encrypted() can be responded to Resolves: RHEL-46351 - Fix CVE-2024-25580: potential buffer overflow when reading KTX images Resolves: RHEL-25726 - Fix incorrect integer overflow check in HTTP2 implementation Resolves: RHEL-20239 - Fix infinite loops in QXmlStreamReader (CVE-2023-38197) Resolves: bz#2222771 - Fix CVE-2026-9499: out-of-bounds read in QTextCodec::codecForName() Resolves: RHEL-247216 - qt5: QtCore Assertion Failure Denial of Service Resolves: RHEL-96231 - Fix CVE-2026-19248: unbounded recursion and O(N²) behavior in QDom Resolves: RHEL-261136 - Fix CVE-2026-11573: denial of services via uncontrolled recursion in XML serialization Resolves: RHEL-277670 - Fix CVE-2026-9499: out-of-bounds read in QTextCodec::codecForName() Resolves: RHEL-247216 - qt5: QtCore Assertion Failure Denial of Service Resolves: RHEL-96231 - qt5: QtCore Assertion Failure Denial of Service Resolves: RHEL-96231 - HTTP2: Delay any communication until encrypted() can be responded to Resolves: RHEL-46351 - Fix CVE-2024-25580: potential buffer overflow when reading KTX images Resolves: RHEL-25726 - Fix incorrect integer overflow check in HTTP2 implementation Resolves: RHEL-20239 - Fix infinite loops in QXmlStreamReader (CVE-2023-38197) Resolves: bz#2222771 - Fix CVE-2026-9499: out-of-bounds read in QTextCodec::codecForName() Resolves: RHEL-247216 - qt5: QtCore Assertion Failure Denial of Service Resolves: RHEL-96231 - Fix CVE-2026-19248: unbounded recursion and O(N²) behavior in QDom Resolves: RHEL-261136 - Fix CVE-2026-11573: denial of services via uncontrolled recursion in XML serialization Resolves: RHEL-277670 - Fix CVE-2026-9499: out-of-bounds read in QTextCodec::codecForName() Resolves: RHEL-247216 - qt5: QtCore Assertion Failure Denial of Service Resolves: RHEL-96231 - qt5: QtCore Assertion Failure Denial of Service Resolves: RHEL-96231 - HTTP2: Delay any communication until encrypted() can be responded to Resolves: RHEL-46351 - Fix CVE-2024-25580: potential buffer overflow when reading KTX images Resolves: RHEL-25726 - Fix incorrect integer overflow check in HTTP2 implementation Resolves: RHEL-20239 - Fix infinite loops in QXmlStreamReader (CVE-2023-38197) Resolves: bz#2222771 - Fix CVE-2026-9499: out-of-bounds read in QTextCodec::codecForName() Resolves: RHEL-247216 - qt5: QtCore Assertion Failure Denial of Service Resolves: RHEL-96231 - Fix CVE-2026-19248: unbounded recursion and O(N²) behavior in QDom Resolves: RHEL-261136 - Fix CVE-2026-11573: denial of services via uncontrolled recursion in XML serialization Resolves: RHEL-277670 - Fix CVE-2026-9499: out-of-bounds read in QTextCodec::codecForName() Resolves: RHEL-247216 - qt5: QtCore Assertion Failure Denial of Service Resolves: RHEL-96231 - qt5: QtCore Assertion Failure Denial of Service Resolves: RHEL-96231 - HTTP2: Delay any communication until encrypted() can be responded to Resolves: RHEL-46351 - Fix CVE-2024-25580: potential buffer overflow when reading KTX images Resolves: RHEL-25726 - Fix incorrect integer overflow check in HTTP2 implementation Resolves: RHEL-20239 - Fix infinite loops in QXmlStreamReader (CVE-2023-38197) Resolves: bz#2222771 - Fix CVE-2026-9499: out-of-bounds read in QTextCodec::codecForName() Resolves: RHEL-247216 - qt5: QtCore Assertion Failure Denial of Service Resolves: RHEL-96231 - Fix CVE-2026-19248: unbounded recursion and O(N²) behavior in QDom Resolves: RHEL-261136 - Fix CVE-2026-11573: denial of services via uncontrolled recursion in XML serialization Resolves: RHEL-277670 - Fix CVE-2026-9499: out-of-bounds read in QTextCodec::codecForName() Resolves: RHEL-247216 - qt5: QtCore Assertion Failure Denial of Service Resolves: RHEL-96231 - qt5: QtCore Assertion Failure Denial of Service Resolves: RHEL-96231 - HTTP2: Delay any communication until encrypted() can be responded to Resolves: RHEL-46351 - Fix CVE-2024-25580: potential buffer overflow when reading KTX images Resolves: RHEL-25726 - Fix incorrect integer overflow check in HTTP2 implementation Resolves: RHEL-20239 - Fix infinite loops in QXmlStreamReader (CVE-2023-38197) Resolves: bz#2222771 - Fix CVE-2026-9499: out-of-bounds read in QTextCodec::codecForName() Resolves: RHEL-247216 - qt5: QtCore Assertion Failure Denial of Service Resolves: RHEL-96231 - Fix CVE-2026-19248: unbounded recursion and O(N²) behavior in QDom Resolves: RHEL-261136 - Fix CVE-2026-11573: denial of services via uncontrolled recursion in XML serialization Resolves: RHEL-277670 - Fix CVE-2026-9499: out-of-bounds read in QTextCodec::codecForName() Resolves: RHEL-247216 - qt5: QtCore Assertion Failure Denial of Service Resolves: RHEL-96231 - qt5: QtCore Assertion Failure Denial of Service Resolves: RHEL-96231 - HTTP2: Delay any communication until encrypted() can be responded to Resolves: RHEL-46351 - Fix CVE-2024-25580: potential buffer overflow when reading KTX images Resolves: RHEL-25726 - Fix incorrect integer overflow check in HTTP2 implementation Resolves: RHEL-20239 - Fix infinite loops in QXmlStreamReader (CVE-2023-38197) Resolves: bz#2222771 - Fix CVE-2026-9499: out-of-bounds read in QTextCodec::codecForName() Resolves: RHEL-247216 - qt5: QtCore Assertion Failure Denial of Service Resolves: RHEL-96231 - Fix CVE-2026-19248: unbounded recursion and O(N²) behavior in QDom Resolves: RHEL-261136 - Fix CVE-2026-11573: denial of services via uncontrolled recursion in XML serialization Resolves: RHEL-277670 - Fix CVE-2026-9499: out-of-bounds read in QTextCodec::codecForName() Resolves: RHEL-247216 - qt5: QtCore Assertion Failure Denial of Service Resolves: RHEL-96231 - Rebuild (elfutils#2188064) Resolves: bz#2175730 - 5.15.9 Resolves: bz#2175730 - 5.15.3 Resolves: bz#2061357 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add gating tests Resolves: bz#1968461 - Rebuild (elfutils#2188064) Resolves: bz#2175730 - 5.15.9 Resolves: bz#2175730 - 5.15.3 Resolves: bz#2061357 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add gating tests Resolves: bz#1968461 - 5.15.9 Resolves: bz#2175726 - 5.15.3 Resolves: bz#2061353 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild (elfutils#2188064) Resolves: bz#2175730 - 5.15.9 Resolves: bz#2175730 - 5.15.3 Resolves: bz#2061357 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add gating tests Resolves: bz#1968461 - Rebuild (elfutils#2188064) Resolves: bz#2175728 - Disable tests failing in gating Resolves: bz#2175728 - 5.15.9 + sync with Fedora Resolves: bz#2178624 Resolves: bz#2175728 - 5.15.3 + sync with Fedora Resolves: bz#2061355 - Sync with Fedora Resolves: bz#2025420 - Sync with Fedora: - sync kde/5.15 branch fixes - pull in candidate fix QTBUG-83890 Resolves: bz#1988934 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Let qt5_install_tests macro handle mangling python shebangs Resolves: bz#1968462 - Add gating tests Resolves: bz#1968462 - Rebuild (elfutils#2188064) Resolves: bz#2175728 - Disable tests failing in gating Resolves: bz#2175728 - 5.15.9 + sync with Fedora Resolves: bz#2178624 Resolves: bz#2175728 - 5.15.3 + sync with Fedora Resolves: bz#2061355 - Sync with Fedora Resolves: bz#2025420 - Sync with Fedora: - sync kde/5.15 branch fixes - pull in candidate fix QTBUG-83890 Resolves: bz#1988934 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Let qt5_install_tests macro handle mangling python shebangs Resolves: bz#1968462 - Add gating tests Resolves: bz#1968462 - 5.15.9 Resolves: bz#2175726 - 5.15.3 Resolves: bz#2061353 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild (elfutils#2188064) Resolves: bz#2175728 - Disable tests failing in gating Resolves: bz#2175728 - 5.15.9 + sync with Fedora Resolves: bz#2178624 Resolves: bz#2175728 - 5.15.3 + sync with Fedora Resolves: bz#2061355 - Sync with Fedora Resolves: bz#2025420 - Sync with Fedora: - sync kde/5.15 branch fixes - pull in candidate fix QTBUG-83890 Resolves: bz#1988934 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Let qt5_install_tests macro handle mangling python shebangs Resolves: bz#1968462 - Add gating tests Resolves: bz#1968462 - 5.15.9 Resolves: bz#2175731 - Bump build to build against correct Qt version Resolves: bz#2061358 - 5.15.3 Resolves: bz#2061358 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.9 Resolves: bz#2175733 - 5.15.3 Resolves: bz#2061359 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add gating tests Resolves: bz#1968464 - 5.15.9 Resolves: bz#2175726 - 5.15.3 Resolves: bz#2061353 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.9 Resolves: bz#2175734 - 5.15.3 Resolves: bz#2061360 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add gating tests Resolves: bz#1968465 - 5.15.9 Resolves: bz#2175726 - 5.15.3 Resolves: bz#2061353 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.9 Resolves: bz#2175735 - 5.15.3 Resolves: bz#2061361 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Add gating tests Resolves: bz#1968466 - 5.15.9 Resolves: bz#2175735 - 5.15.3 Resolves: bz#2061361 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Add gating tests Resolves: bz#1968466 - 5.15.9 Resolves: bz#2175726 - 5.15.3 Resolves: bz#2061353 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.9 Resolves: bz#2175735 - 5.15.3 Resolves: bz#2061361 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Add gating tests Resolves: bz#1968466 - 5.15.9 Resolves: bz#2175736 - 5.15.3 Resolves: bz#2061361 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Let qt5_install_tests macro handle mangling python shebangs Resolves: bz#1968467 - Add gating tests Resolves: bz#1968467 - 5.15.9 Resolves: bz#2175736 - 5.15.3 Resolves: bz#2061361 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Let qt5_install_tests macro handle mangling python shebangs Resolves: bz#1968467 - Add gating tests Resolves: bz#1968467 - 5.15.9 Resolves: bz#2175726 - 5.15.3 Resolves: bz#2061353 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.9 Resolves: bz#2175736 - 5.15.3 Resolves: bz#2061361 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Let qt5_install_tests macro handle mangling python shebangs Resolves: bz#1968467 - Add gating tests Resolves: bz#1968467 - 5.15.9 Resolves: bz#2175737 - 5.15.3 Resolves: bz#2061363 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add gating tests Resolves: bz#1968468 - 5.15.9 Resolves: bz#2175726 - 5.15.3 Resolves: bz#2061353 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.9 Resolves: bz#2175737 - 5.15.3 Resolves: bz#2061363 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add gating tests Resolves: bz#1968468 - 5.15.9 Resolves: bz#2175738 - 5.15.3 Resolves: bz#2061364 - Rebuild (move -devel subpkg to AppStream) Resolves: bz#2028779 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add gating tests Resolves: bz#1968469 - 5.15.9 Resolves: bz#2175738 - 5.15.3 Resolves: bz#2061364 - Rebuild (move -devel subpkg to AppStream) Resolves: bz#2028779 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add gating tests Resolves: bz#1968469 - 5.15.9 Resolves: bz#2175726 - 5.15.3 Resolves: bz#2061353 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.9 Resolves: bz#2175738 - 5.15.3 Resolves: bz#2061364 - Rebuild (move -devel subpkg to AppStream) Resolves: bz#2028779 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add gating tests Resolves: bz#1968469 - 5.15.9 Resolves: bz#2175745 - 5.15.3 Resolves: bz#2061365 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add gating tests Resolves: bz#1968470 - 5.15.9 Resolves: bz#2175745 - 5.15.3 Resolves: bz#2061365 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add gating tests Resolves: bz#1968470 - 5.15.9 Resolves: bz#2175726 - 5.15.3 Resolves: bz#2061353 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.9 Resolves: bz#2175745 - 5.15.3 Resolves: bz#2061365 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add gating tests Resolves: bz#1968470 - 5.15.9 Resolves: bz#2175739 - 5.15.3 Resolves: bz#2061366 - Sync with Fedora - add recommends: iio-sensor-proxy Resolves: bz#1971438 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add gating tests Resolves: bz#1968471 - 5.15.9 Resolves: bz#2175739 - 5.15.3 Resolves: bz#2061366 - Sync with Fedora - add recommends: iio-sensor-proxy Resolves: bz#1971438 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add gating tests Resolves: bz#1968471 - 5.15.9 Resolves: bz#2175726 - 5.15.3 Resolves: bz#2061353 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.9 Resolves: bz#2175739 - 5.15.3 Resolves: bz#2061366 - Sync with Fedora - add recommends: iio-sensor-proxy Resolves: bz#1971438 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add gating tests Resolves: bz#1968471 - 5.15.9 Resolves: bz#2175740 - 5.15.3 Resolves: bz#2061367 - Rebuild to include -devel subpkg in AppStream Resolves: bz#2028567 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Properly build unit tests Resolves: bz#1968472 - Add gating tests Resolves: bz#1968472 - 5.15.9 Resolves: bz#2175740 - 5.15.3 Resolves: bz#2061367 - Rebuild to include -devel subpkg in AppStream Resolves: bz#2028567 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Properly build unit tests Resolves: bz#1968472 - Add gating tests Resolves: bz#1968472 - 5.15.9 Resolves: bz#2175726 - 5.15.3 Resolves: bz#2061353 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.9 Resolves: bz#2175740 - 5.15.3 Resolves: bz#2061367 - Rebuild to include -devel subpkg in AppStream Resolves: bz#2028567 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Properly build unit tests Resolves: bz#1968472 - Add gating tests Resolves: bz#1968472 - 5.15.9 Resolves: bz#2175741 - 5.15.3 Resolves: bz#2061368 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add gating tests Resolves: bz#1968473 - 5.15.9 Resolves: bz#2175741 - 5.15.3 Resolves: bz#2061368 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add gating tests Resolves: bz#1968473 - 5.15.9 Resolves: bz#2175726 - 5.15.3 Resolves: bz#2061353 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.9 Resolves: bz#2175741 - 5.15.3 Resolves: bz#2061368 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add gating tests Resolves: bz#1968473 - Fix uninitialized variable usage in m_unitsPerEm (CVE-2023-32573) Resolves: bz#2208140 - 5.15.9 Resolves: bz#2175742 - 5.15.3 Resolves: bz#2061369 - Fix out-of-bound write that may lead to DoS Resolves: bz#2038488 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add gating tests Resolves: bz#1968474 - Fix uninitialized variable usage in m_unitsPerEm (CVE-2023-32573) Resolves: bz#2208140 - 5.15.9 Resolves: bz#2175742 - 5.15.3 Resolves: bz#2061369 - Fix out-of-bound write that may lead to DoS Resolves: bz#2038488 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add gating tests Resolves: bz#1968474 - 5.15.9 Resolves: bz#2175726 - 5.15.3 Resolves: bz#2061353 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix uninitialized variable usage in m_unitsPerEm (CVE-2023-32573) Resolves: bz#2208140 - 5.15.9 Resolves: bz#2175742 - 5.15.3 Resolves: bz#2061369 - Fix out-of-bound write that may lead to DoS Resolves: bz#2038488 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add gating tests Resolves: bz#1968474 - Rebuild (LLVM-21) Resolves: RHEL-108348 - Rebuild (LLVM-20) Resolves: RHEL-81777 - Rebuild (LLVM-19) Resolves: RHEL-66115 - Rebuild (LLVM-18) Resolves: RHEL-28681 - Rebuild (LLVM-21) Resolves: RHEL-108348 - Rebuild (LLVM-20) Resolves: RHEL-81777 - Rebuild (LLVM-19) Resolves: RHEL-66115 - Rebuild (LLVM-18) Resolves: RHEL-28681 - Rebuild (LLVM-21) Resolves: RHEL-108348 - Rebuild (LLVM-20) Resolves: RHEL-81777 - Rebuild (LLVM-19) Resolves: RHEL-66115 - Rebuild (LLVM-18) Resolves: RHEL-28681 - 5.15.9 Resolves: bz#2175726 - 5.15.3 Resolves: bz#2061353 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild (LLVM-21) Resolves: RHEL-108348 - Rebuild (LLVM-20) Resolves: RHEL-81777 - Rebuild (LLVM-19) Resolves: RHEL-66115 - Rebuild (LLVM-18) Resolves: RHEL-28681 - Rebuild (LLVM-21) Resolves: RHEL-108348 - Rebuild (LLVM-20) Resolves: RHEL-81777 - Rebuild (LLVM-19) Resolves: RHEL-66115 - Rebuild (LLVM-18) Resolves: RHEL-28681 - Rebuild (LLVM-21) Resolves: RHEL-108348 - Rebuild (LLVM-20) Resolves: RHEL-81777 - Rebuild (LLVM-19) Resolves: RHEL-66115 - Rebuild (LLVM-18) Resolves: RHEL-28681 - Rebuild (LLVM-21) Resolves: RHEL-108348 - Rebuild (LLVM-20) Resolves: RHEL-81777 - Rebuild (LLVM-19) Resolves: RHEL-66115 - Rebuild (LLVM-18) Resolves: RHEL-28681 - 5.15.9 Resolves: bz#2175744 - 5.15.3 Resolves: bz#2061371 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.9 Resolves: bz#2175746 - 5.15.3 Resolves: bz#2061372 - Sync with Fedora Resolves: bz#2051384 - Sync with Fedora Resolves: bz#2044169 - Sync with Fedora Resolves: bz#2028778 - Drop BR: tree Resolves: bz#2014080 - Sync with Fedora Resolves: bz#2012714 - Sync with Fedora Resolves: bz#2003935 - Client: expose toplevel window state (change from Qt6) Resolves: bz#1968292 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.9 Resolves: bz#2175746 - 5.15.3 Resolves: bz#2061372 - Sync with Fedora Resolves: bz#2051384 - Sync with Fedora Resolves: bz#2044169 - Sync with Fedora Resolves: bz#2028778 - Drop BR: tree Resolves: bz#2014080 - Sync with Fedora Resolves: bz#2012714 - Sync with Fedora Resolves: bz#2003935 - Client: expose toplevel window state (change from Qt6) Resolves: bz#1968292 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.9 Resolves: bz#2175726 - 5.15.3 Resolves: bz#2061353 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.9 Resolves: bz#2175746 - 5.15.3 Resolves: bz#2061372 - Sync with Fedora Resolves: bz#2051384 - Sync with Fedora Resolves: bz#2044169 - Sync with Fedora Resolves: bz#2028778 - Drop BR: tree Resolves: bz#2014080 - Sync with Fedora Resolves: bz#2012714 - Sync with Fedora Resolves: bz#2003935 - Client: expose toplevel window state (change from Qt6) Resolves: bz#1968292 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.9 Resolves: bz#2175747 - 5.15.3 Resolves: bz#2061373 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add gating tests Resolves: bz#1968478 - 5.15.9 Resolves: bz#2175747 - 5.15.3 Resolves: bz#2061373 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add gating tests Resolves: bz#1968478 - 5.15.9 Resolves: bz#2175726 - 5.15.3 Resolves: bz#2061353 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.9 Resolves: bz#2175747 - 5.15.3 Resolves: bz#2061373 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add gating tests Resolves: bz#1968478 - Move QML imports out of -devel subpackage Resolves: bz#2175749 - 5.15.9 Resolves: bz#2175749 - 5.15.3 Resolves: bz#2061374 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add gating tests Resolves: bz#1968479 - Move QML imports out of -devel subpackage Resolves: bz#2175749 - 5.15.9 Resolves: bz#2175749 - 5.15.3 Resolves: bz#2061374 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add gating tests Resolves: bz#1968479 - 5.15.9 Resolves: bz#2175726 - 5.15.3 Resolves: bz#2061353 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Move QML imports out of -devel subpackage Resolves: bz#2175749 - 5.15.9 Resolves: bz#2175749 - 5.15.3 Resolves: bz#2061374 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add gating tests Resolves: bz#1968479 - 5.15.9 Resolves: bz#2175750 - 5.15.3 Resolves: bz#2061375 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add gating tests Resolves: bz#1968481 - 5.15.9 Resolves: bz#2175750 - 5.15.3 Resolves: bz#2061375 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add gating tests Resolves: bz#1968481 - 5.15.9 Resolves: bz#2175726 - 5.15.3 Resolves: bz#2061353 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild (elfutils#2188064) Resolves: bz#2175751 - 5.15.9 Resolves: bz#2175751 - 5.15.3 Resolves: bz#2061376 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add gating tests Resolves: bz#1968480 - Rebuild (elfutils#2188064) Resolves: bz#2175751 - 5.15.9 Resolves: bz#2175751 - 5.15.3 Resolves: bz#2061376 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add gating tests Resolves: bz#1968480 - 5.15.9 Resolves: bz#2175726 - 5.15.3 Resolves: bz#2061353 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild (elfutils#2188064) Resolves: bz#2175751 - 5.15.9 Resolves: bz#2175751 - 5.15.3 Resolves: bz#2061376 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add gating tests Resolves: bz#1968480 - 5.15.9 Resolves: bz#2175724 - 5.15.3 Resolves: bz#2061352 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Use more robust regular expressions Resolves: bz#1969433 - Use more precise regular expression for python shebangs Resolves: bz#1969433 - Handle additional spaces python shebangs Resolves: bz#1969433 - Let qt5_install_tests macro to handle mangling python shebangs Resolves: bz#1969433 - Add support for building upstream tests for gating Resolves: bz#1969433 - 5.15.9 Resolves: bz#2175724 - 5.15.3 Resolves: bz#2061352 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Use more robust regular expressions Resolves: bz#1969433 - Use more precise regular expression for python shebangs Resolves: bz#1969433 - Handle additional spaces python shebangs Resolves: bz#1969433 - Let qt5_install_tests macro to handle mangling python shebangs Resolves: bz#1969433 - Add support for building upstream tests for gating Resolves: bz#1969433 - Fix patch application - Related: RHEL-50914 - Fix memory leak - Related: RHEL-50914 - Fix regression - Related: RHEL-50644 - Update to new upstream version - Add tmpfs quota support - Remove rhel-only patches that were merged upstream - Fix patch application - Related: RHEL-50914 - Fix memory leak - Related: RHEL-50914 - Fix regression - Related: RHEL-50644 - Update to new upstream version - Add tmpfs quota support - Remove rhel-only patches that were merged upstream - Fix patch application - Related: RHEL-50914 - Fix memory leak - Related: RHEL-50914 - Fix regression - Related: RHEL-50644 - Update to new upstream version - Add tmpfs quota support - Remove rhel-only patches that were merged upstream - Fix patch application - Related: RHEL-50914 - Fix memory leak - Related: RHEL-50914 - Fix regression - Related: RHEL-50644 - Update to new upstream version - Add tmpfs quota support - Remove rhel-only patches that were merged upstream - Use systemd-sysusers for radvd user and group (#2095457) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Remove gtest dependency and turn off tests Resolves: #1977656 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add patch for C++20 support - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Install pkg-config and cmake files to arched location - Build documentation as noarch - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Remove gtest dependency and turn off tests Resolves: #1977656 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add patch for C++20 support - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Install pkg-config and cmake files to arched location - Build documentation as noarch - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Bump NVR - Resolves: CVE-2024-57823 integer underflow when normalizing a URI with the turtle parser - Add support for vendor specific information [RHEL-68673] - ras-events: quit loop in read_ras_event when kbuf data is broken [RHEL-68127] - rasdaemon: Add support to parse the PPIN field of mce tracepoint [RHEL-52911] - rasdaemon: Add support to parse microcode field of mce tracepoint [RHEL-52911] - rasdaemon: Update SMCA bank error descriptions [RHEL-52911] - rasdaemon: ras-mc-ctl: Add support to display mcastatus_msg string [RHEL-52911] - rasdaemon: mce-amd-smca: Optimizing decoding of MCA_CTL_SMU bits [RHEL-48819] - rasdaemon: Add error decoding for MCA_CTL_SMU extended bits [RHEL-35718] - mce-amd-smca: update smca_hwid to use smca_bank_types [RHEL-24170] - Fix excessive block messages [RHEL-8708] - Update License string to use SPDX [RHELMISC-1262] - Update SMCA support for AMD processors [RHEL-11092] - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - BR: libgcrypt-devel, enforce use of non-bundled crypto digest implementations (RHBZ #1099251) - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuild for mpfr 4 - Rebuilt for gating testing - Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331 - Rebase to upstream release v61.0 - Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331 - bump release to rebuild in sidetag - Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331 - bump release to rebuild in sidetag - Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331 - Rebase to upstream release v60.0 - Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331 - Fix pyverbs tests - Resolves: RHEL-107929, RHEL-107930 - Rebase to upstream release v57.0 - Resolves: RHEL-76570, RHEL-45644, RHEL-72077, RHEL-68506, RHEL-94449 - Fix data corruption in bnxt_re - Resolves: RHEL-89179 - Rebase to upstream release v54.0 - Resolves: RHEL-52886, RHEL-54647, RHEL-51876 - Rebase to upstream release v51.0 - Resolves: RHEL-24473, RHEL-23180 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebase to readline-8.1 Resolves: #1904867 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebased to latest upstream version - Dropped previously applied patches - Cleaned up spec file Resolves: RHEL-86704 - Added patch Fix-rt-tests-build-with-glibc-2.41.patch - Added patch Revert-Fix-rt-tests-build-with-glibc-2.41.patch - Added patch sched_attr-Do-not-define-for-glibc-2.41.patch Resolves: RHEL-88469 - Add a usleep option to pip_stress Resolves: RHEL-77110 - Remove unused parameter warning and annotations - Add -Werror Resolves: RHEL-77108 - Fix building against libcpupower Resolves: RHEL-65487 - Rebase to rt-tests-2.8 upstream Resolves: RHEL-68658 - Added a patch to fix -s option in hackbench. - Added a patch to prevent the user from erroneously passing negative numbers to hackbench. Resolves: RHEL-36746 - Rebase to upstream rt-tests-2.7 Resolves: RHEL-30166 - Strip o+rx permissions from the cyclictest executable Resolves: RHEL-33785 - Fix specfile to apply all patches Resolves: RHEL-23909 - use git to apply downstream patches - copy an sshd helper to the rescue ramdisk (RHEL-146037) - fix support for PowerNV machines without PPC PReP partitions (RHEL-134217) - add support for dbus broker (RHEL-31749) - abort when sourcing fails due to a syntax error (RHEL-104289) - fix recreation of multi-disk volume groups in migration mode (RHEL-23887) - skip unsupported partition tables (RHEL-78583) - do not attempt to use the disk with backup for recovery (RHEL-111612) - add dependency on grub2-tools-extra and GRUB EFI modules on EFI machines - add dependency on syslinux-extlinux on x86 - add initial support for aarch64 machines with UEFI - enhance the 300_map_disks.sh script to also print the disk sizes - support generation of ed25519 SSH host keys in the rescue image - create sshd home directory in the rescue image on systems upgraded from EL8 - fix recovery of LUKS encrypted systems with multiple keyslots - fix PPC PReP Boot detection on GPT layouts - skip longhorn iscsi devices in disklayout.conf - error out if any unsupported OUTPUT used on s390x - Install GRUB on multipath disks, PR 3334 - Improve docs of layout configuration in user guide, PR 3125 - Backport PR 3250 to fix useless warning that libsystemd-core requires additional libraries and ReaR recovery system needs additional libraries - Backport PR 3242 to fix IPv6 address in nfs:// and sshfs:// BACKUP/OUTPUT_URL - Backport PR 2576 to remove obsolete FAT16 options to avoid kernel warning - Support "export TMPDIR" in user configuration again, print a warning when this is used - revert commit f464eae2, adapt PR 3163, add commit b422845f. Will be supported only until the update to 2.7 - Resolve libs for executable links in COPY_AS_IS, PR 3073 - Skip invalid disk drives when saving layout PR 3047 - Do not delete NetBackup logs in case of errors and save /usr/openv/netbackup/logs to the restored system after a successful recovery - Add /usr/openv/var to COPY_AS_IS_NBU, fixes an issue seen with NetBackup 10.2.0.1 - Support saving and restoring hybrid BIOS/UEFI bootloader, PRs 3145 3136 - make initrd accessible only by root (CVE-2024-23301), PR 3123 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix missing bz number in spec file (bz1951095) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Fix parsing HostConfig for DHCP (bz1944243) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild -Fixup interpreter (bz 1770861) - Update to latest upstream (bz1730589) - Drop duplicate font files. - Correct broken font metadata in fontconfig. - Drop Italic variant of the variable fonts to workaround unexpected italic rendering and crash. Resolves: RHEL-1617 - Drop duplicate font files. - Correct broken font metadata in fontconfig. - Drop Italic variant of the variable fonts to workaround unexpected italic rendering and crash. Resolves: RHEL-1617 - Fix AlmaLinux detection - Use Fat LTO with Clang - Add java_arches macro - brp-mangle-shebangs: Strip env flags when mangling shebangs (RHEL-26961) - Fix automatic soname requires on non-versioned symlink targets (RHEL-28767) - brp-python-bytecompile: Pass --invalidation-mode=timestamp to compileall - Resolves: RHEL-22139 - Use correct format specifier in brp-llvm-compile-lto-elf - Fix the fix for brp-llvm-compile-lto-elf - Enable PIC mode for assembler files (RHEL-6298) - Drop duplicate font files. - Correct broken font metadata in fontconfig. - Drop Italic variant of the variable fonts to workaround unexpected italic rendering and crash. Resolves: RHEL-1617 - add sysusers.d file for user management - add tmpfiles.d file for temporary dir management - rebase to 6.2.20 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 - fix ownership of /usr/lib64/redis RHEL-6784 - rebase to 6.2.19 for CVE-2025-32023 and CVE-2025-48367 - rebase to 6.2.18 for CVE-2025-21605 - rebase to 6.2.17 for CVE-2024-46981 - rebase to 6.2.16 RHEL-26627 - rebase to 6.2.22 for CVE-2026-25243 - add sysusers.d file for user management - add tmpfiles.d file for temporary dir management - rebase to 6.2.20 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 - fix ownership of /usr/lib64/redis RHEL-6784 - rebase to 6.2.19 for CVE-2025-32023 and CVE-2025-48367 - rebase to 6.2.18 for CVE-2025-21605 - rebase to 6.2.17 for CVE-2024-46981 - rebase to 6.2.16 RHEL-26627 - rebase to 6.2.24 for CVE-2026-66373 - change pagefile size for aarch64 and ppcle64 - rebase to 6.2.22 for CVE-2026-25243 - add sysusers.d file for user management - add tmpfiles.d file for temporary dir management - rebase to 6.2.20 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 - fix ownership of /usr/lib64/redis RHEL-6784 - rebase to 6.2.19 for CVE-2025-32023 and CVE-2025-48367 - rebase to 6.2.18 for CVE-2025-21605 - rebase to 6.2.17 for CVE-2024-46981 - rebase to 6.2.16 RHEL-26627 - add sysusers.d file for user management - add tmpfiles.d file for temporary dir management - rebase to 7.2.11 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 - rebase to 7.2.10 for CVE-2025-27151 CVE-2025-32023 and CVE-2025-48367 - rebase to 7.2.8 for CVE-2025-21605 - rebase to 7.2.7 for CVE-2024-46981 and CVE-2024-51741 - rebase to 7.2.6 RHEL-26628 - rebase to 7.2.14 for CVE-2026-23479 CVE-2026-25243 CVE-2026-23631 - add sysusers.d file for user management - add tmpfiles.d file for temporary dir management - rebase to 7.2.11 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 - rebase to 7.2.10 for CVE-2025-27151 CVE-2025-32023 and CVE-2025-48367 - rebase to 7.2.8 for CVE-2025-21605 - rebase to 7.2.7 for CVE-2024-46981 and CVE-2024-51741 - rebase to 7.2.6 RHEL-26628 - rebase to 7.2.16 for CVE-2026-66373 and backport CVE-2026-72568 - rebase to 7.2.14 for CVE-2026-23479 CVE-2026-25243 CVE-2026-23631 - add sysusers.d file for user management - add tmpfiles.d file for temporary dir management - rebase to 7.2.11 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 - rebase to 7.2.10 for CVE-2025-27151 CVE-2025-32023 and CVE-2025-48367 - rebase to 7.2.8 for CVE-2025-21605 - rebase to 7.2.7 for CVE-2024-46981 and CVE-2024-51741 - rebase to 7.2.6 RHEL-26628 - add sysusers.d file for user management - add tmpfiles.d file for temporary dir management - rebase to 6.2.20 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 - fix ownership of /usr/lib64/redis RHEL-6784 - rebase to 6.2.19 for CVE-2025-32023 and CVE-2025-48367 - rebase to 6.2.18 for CVE-2025-21605 - rebase to 6.2.17 for CVE-2024-46981 - rebase to 6.2.16 RHEL-26627 - rebase to 6.2.22 for CVE-2026-25243 - add sysusers.d file for user management - add tmpfiles.d file for temporary dir management - rebase to 6.2.20 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 - fix ownership of /usr/lib64/redis RHEL-6784 - rebase to 6.2.19 for CVE-2025-32023 and CVE-2025-48367 - rebase to 6.2.18 for CVE-2025-21605 - rebase to 6.2.17 for CVE-2024-46981 - rebase to 6.2.16 RHEL-26627 - rebase to 6.2.24 for CVE-2026-66373 - change pagefile size for aarch64 and ppcle64 - rebase to 6.2.22 for CVE-2026-25243 - add sysusers.d file for user management - add tmpfiles.d file for temporary dir management - rebase to 6.2.20 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 - fix ownership of /usr/lib64/redis RHEL-6784 - rebase to 6.2.19 for CVE-2025-32023 and CVE-2025-48367 - rebase to 6.2.18 for CVE-2025-21605 - rebase to 6.2.17 for CVE-2024-46981 - rebase to 6.2.16 RHEL-26627 - add sysusers.d file for user management - add tmpfiles.d file for temporary dir management - rebase to 7.2.11 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 - rebase to 7.2.10 for CVE-2025-27151 CVE-2025-32023 and CVE-2025-48367 - rebase to 7.2.8 for CVE-2025-21605 - rebase to 7.2.7 for CVE-2024-46981 and CVE-2024-51741 - rebase to 7.2.6 RHEL-26628 - rebase to 7.2.14 for CVE-2026-23479 CVE-2026-25243 CVE-2026-23631 - add sysusers.d file for user management - add tmpfiles.d file for temporary dir management - rebase to 7.2.11 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 - rebase to 7.2.10 for CVE-2025-27151 CVE-2025-32023 and CVE-2025-48367 - rebase to 7.2.8 for CVE-2025-21605 - rebase to 7.2.7 for CVE-2024-46981 and CVE-2024-51741 - rebase to 7.2.6 RHEL-26628 - rebase to 7.2.16 for CVE-2026-66373 and backport CVE-2026-72568 - rebase to 7.2.14 for CVE-2026-23479 CVE-2026-25243 CVE-2026-23631 - add sysusers.d file for user management - add tmpfiles.d file for temporary dir management - rebase to 7.2.11 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 - rebase to 7.2.10 for CVE-2025-27151 CVE-2025-32023 and CVE-2025-48367 - rebase to 7.2.8 for CVE-2025-21605 - rebase to 7.2.7 for CVE-2024-46981 and CVE-2024-51741 - rebase to 7.2.6 RHEL-26628 - add sysusers.d file for user management - add tmpfiles.d file for temporary dir management - rebase to 6.2.20 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 - fix ownership of /usr/lib64/redis RHEL-6784 - rebase to 6.2.19 for CVE-2025-32023 and CVE-2025-48367 - rebase to 6.2.18 for CVE-2025-21605 - rebase to 6.2.17 for CVE-2024-46981 - rebase to 6.2.16 RHEL-26627 - rebase to 6.2.22 for CVE-2026-25243 - add sysusers.d file for user management - add tmpfiles.d file for temporary dir management - rebase to 6.2.20 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 - fix ownership of /usr/lib64/redis RHEL-6784 - rebase to 6.2.19 for CVE-2025-32023 and CVE-2025-48367 - rebase to 6.2.18 for CVE-2025-21605 - rebase to 6.2.17 for CVE-2024-46981 - rebase to 6.2.16 RHEL-26627 - rebase to 6.2.24 for CVE-2026-66373 - change pagefile size for aarch64 and ppcle64 - rebase to 6.2.22 for CVE-2026-25243 - add sysusers.d file for user management - add tmpfiles.d file for temporary dir management - rebase to 6.2.20 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 - fix ownership of /usr/lib64/redis RHEL-6784 - rebase to 6.2.19 for CVE-2025-32023 and CVE-2025-48367 - rebase to 6.2.18 for CVE-2025-21605 - rebase to 6.2.17 for CVE-2024-46981 - rebase to 6.2.16 RHEL-26627 - add sysusers.d file for user management - add tmpfiles.d file for temporary dir management - rebase to 7.2.11 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 - rebase to 7.2.10 for CVE-2025-27151 CVE-2025-32023 and CVE-2025-48367 - rebase to 7.2.8 for CVE-2025-21605 - rebase to 7.2.7 for CVE-2024-46981 and CVE-2024-51741 - rebase to 7.2.6 RHEL-26628 - rebase to 7.2.14 for CVE-2026-23479 CVE-2026-25243 CVE-2026-23631 - add sysusers.d file for user management - add tmpfiles.d file for temporary dir management - rebase to 7.2.11 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 - rebase to 7.2.10 for CVE-2025-27151 CVE-2025-32023 and CVE-2025-48367 - rebase to 7.2.8 for CVE-2025-21605 - rebase to 7.2.7 for CVE-2024-46981 and CVE-2024-51741 - rebase to 7.2.6 RHEL-26628 - rebase to 7.2.16 for CVE-2026-66373 and backport CVE-2026-72568 - rebase to 7.2.14 for CVE-2026-23479 CVE-2026-25243 CVE-2026-23631 - add sysusers.d file for user management - add tmpfiles.d file for temporary dir management - rebase to 7.2.11 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 - rebase to 7.2.10 for CVE-2025-27151 CVE-2025-32023 and CVE-2025-48367 - rebase to 7.2.8 for CVE-2025-21605 - rebase to 7.2.7 for CVE-2024-46981 and CVE-2024-51741 - rebase to 7.2.6 RHEL-26628 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - rhbz#1952816 rdfproc: Failed to open hashes storage - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - rhbz#1936659 disable rhel redland digests and stub deprecated librdf_uri_get_digest - rhbz#1936659 rhel redland uses deprecated SHA-1 algorithm by default - reduce rhel dependencies to what's needed - rebuild for libpq ABI fix rhbz#1908268 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Fix FTBFS in ELN - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update Java source/target to 1.8 - Install license files in licensedir instead of docdir - Add noarch to ExclusiveArch - Disable building on i686 - Fix patch usage - Rebuild with regenerated Requires on Java - Ship rest-devel in CRB Resolves: RHEL-122661 - Resolves: RHEL-151438 : storage - fix: ensure libblockdev-loop package on EL7 for loop mounts - Resolves: RHEL-150782 : firewall - fix: el7 interface functionality requires NetworkManager - firewall - test: ensure interface chosen is managed by NetworkManager - Resolves: RHEL-150782 : firewall - fix: el7 interface functionality requires NetworkManager [rhel-9] - Resolves: RHEL-145248 : selinux - [v 1.10.4] Prepare module installation -> "Template error: object of type 'dict' has no attribute 'path'" [rhel-9] - ha_cluster - fix: ostree - add dnf/dnf5 package, add firewall packages - metrics - test: ostree - add package pcp-pmda-apache, role certificate - systemd - test: ostree requires cronie package for testing - Resolves: RHEL-145215 : selinux - Missing proto 'sctp' and 'dccp' - timesync - fix: use ansible_facts timesync_ntp_provider_current - Resolves: RHEL-145215 : selinux - Missing proto 'sctp' and 'dccp' - Resolves: RHEL-145220 : vpn - [ERROR]: Task failed: object of type 'dict' has no attribute '1.1.1.1' - Resolves: RHEL-122958 : postgresql - add PostgreSQL 18 - fixes test issue - Resolves: RHEL-147822 : snapshot - Snapshot role ignores snapshot_lvm_bootable: true setting when creating a snapset [rhel-9] - Resolves: RHEL-147823 : storage - [RHEL10.2] ZeroDivisionError when creating LVM volume without size specification [rhel-9] - Resolves: RHEL-122958 : postgresql - add PostgreSQL 18 - fix upstream shellcheck issue in nbde_client role - Resolves: RHEL-144588 : Templates in some role license files - Fix ansible-test issue with community.general.ini_file module 11.4.4 in documentation string - Resolves: RHEL-144588 : Templates in some role license files [rhel-9] - Resolves: RHEL-144589 : ha_cluster - ha_cluster role does not work in container builds [rhel-9] - Resolves: RHEL-144592 : metrics - [RFE] configure TLS certificates in grafana using the metrics system role [rhel-9] - Resolves: RHEL-138279 : ssh - feat: Add new configuration option VersionAddendum [rhel-9] - Resolves: RHEL-144496 : sshd - feat: New OpenSSH configuration option GSSAPIDelegateCredentials [rhel-9] - Resolves: RHEL-138058 : storage - [RHEL10.2] in _get_device_id IndexError: list index out of range [rhel-9] - All roles support INJECT_FACTS_AS_VARS=false - metrics - test: do not restore service if final state not-found - sshd - feat: Add systemd ephemeral authorized_keys to the instantiated service file on Fedora - storage - fix: add vdo package for Fedora OSTree - Resolves: RHEL-129416 : aide - cannot manage rhel9.7/10.1 or earlier - unexpected character - line database=file - Resolves: RHEL-136599 : ha_cluster - feat: add support for fencing-watchdog-timeout - remove hpc role - Add fix to avoid using deprecated sosreport command. - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Improve error handling on keystore load (RHEL-114837) - Sort files before passing to file attr dependency generators (RHEL-95376) - Allow an optional "override clock" for deterministic timestamps (RHEL-106672) - Add support for spec local file attributes and generators (RHEL-52772) - Store configurable digest(s) on packages in rpmdb (RHEL-35619) - Fix a hard link race condition in brp-strip (RHEL-74011) - Allow parametric macros to opt out of option processing (RHEL-67161) - Report unsafe symlinks during installation as a specific case (RHEL-33393) - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63070) - Improve newly added %patch warning/error messages (RHEL-6294) - Fix %patch N applying Patch0 implicitly (RHEL-6294) - Issue deprecation warning for number-less %patch (RHEL-6294) - Fix discarded const qualifier in previous patch (RHEL-22607) - Fix root relocation regression (RHEL-28967) - Don't confuse OpenScanHub with false array overrun (RHEL-22607) - Revert incorrect fix for false array overrun (RHEL-22607) - Fix potential use of uninitialized pipe array (RHEL-22604) - Fix potential use of uninitialized pgp struct (RHEL-22605) - Don't confuse OpenScanHub with false array overrun (RHEL-22607) - Add SourceLicense tag to spec syntax (RHEL-28798) - Talk about rpmsign in the rpmsign(8) man page (RHEL-40895) - Improve error handling on keystore load (RHEL-114837) - Sort files before passing to file attr dependency generators (RHEL-95376) - Allow an optional "override clock" for deterministic timestamps (RHEL-106672) - Add support for spec local file attributes and generators (RHEL-52772) - Store configurable digest(s) on packages in rpmdb (RHEL-35619) - Fix a hard link race condition in brp-strip (RHEL-74011) - Allow parametric macros to opt out of option processing (RHEL-67161) - Report unsafe symlinks during installation as a specific case (RHEL-33393) - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63070) - Improve newly added %patch warning/error messages (RHEL-6294) - Fix %patch N applying Patch0 implicitly (RHEL-6294) - Issue deprecation warning for number-less %patch (RHEL-6294) - Fix discarded const qualifier in previous patch (RHEL-22607) - Fix root relocation regression (RHEL-28967) - Don't confuse OpenScanHub with false array overrun (RHEL-22607) - Revert incorrect fix for false array overrun (RHEL-22607) - Fix potential use of uninitialized pipe array (RHEL-22604) - Fix potential use of uninitialized pgp struct (RHEL-22605) - Don't confuse OpenScanHub with false array overrun (RHEL-22607) - Add SourceLicense tag to spec syntax (RHEL-28798) - Talk about rpmsign in the rpmsign(8) man page (RHEL-40895) - Improve error handling on keystore load (RHEL-114837) - Sort files before passing to file attr dependency generators (RHEL-95376) - Allow an optional "override clock" for deterministic timestamps (RHEL-106672) - Add support for spec local file attributes and generators (RHEL-52772) - Store configurable digest(s) on packages in rpmdb (RHEL-35619) - Fix a hard link race condition in brp-strip (RHEL-74011) - Allow parametric macros to opt out of option processing (RHEL-67161) - Report unsafe symlinks during installation as a specific case (RHEL-33393) - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63070) - Improve newly added %patch warning/error messages (RHEL-6294) - Fix %patch N applying Patch0 implicitly (RHEL-6294) - Issue deprecation warning for number-less %patch (RHEL-6294) - Fix discarded const qualifier in previous patch (RHEL-22607) - Fix root relocation regression (RHEL-28967) - Don't confuse OpenScanHub with false array overrun (RHEL-22607) - Revert incorrect fix for false array overrun (RHEL-22607) - Fix potential use of uninitialized pipe array (RHEL-22604) - Fix potential use of uninitialized pgp struct (RHEL-22605) - Don't confuse OpenScanHub with false array overrun (RHEL-22607) - Add SourceLicense tag to spec syntax (RHEL-28798) - Talk about rpmsign in the rpmsign(8) man page (RHEL-40895) - Improve error handling on keystore load (RHEL-114837) - Sort files before passing to file attr dependency generators (RHEL-95376) - Allow an optional "override clock" for deterministic timestamps (RHEL-106672) - Add support for spec local file attributes and generators (RHEL-52772) - Store configurable digest(s) on packages in rpmdb (RHEL-35619) - Fix a hard link race condition in brp-strip (RHEL-74011) - Allow parametric macros to opt out of option processing (RHEL-67161) - Report unsafe symlinks during installation as a specific case (RHEL-33393) - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63070) - Improve newly added %patch warning/error messages (RHEL-6294) - Fix %patch N applying Patch0 implicitly (RHEL-6294) - Issue deprecation warning for number-less %patch (RHEL-6294) - Fix discarded const qualifier in previous patch (RHEL-22607) - Fix root relocation regression (RHEL-28967) - Don't confuse OpenScanHub with false array overrun (RHEL-22607) - Revert incorrect fix for false array overrun (RHEL-22607) - Fix potential use of uninitialized pipe array (RHEL-22604) - Fix potential use of uninitialized pgp struct (RHEL-22605) - Don't confuse OpenScanHub with false array overrun (RHEL-22607) - Add SourceLicense tag to spec syntax (RHEL-28798) - Talk about rpmsign in the rpmsign(8) man page (RHEL-40895) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Sync with latest Fedora repo - Resolves: rhbz#1972736 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Fix left-over argument shift in mpi.prov and mpi.req (#1930096) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Allow for no MPI_PYTHON{2}_SITEARCH - Backport https://github.com/coreos/rpm-ostree/pull/5558 Resolves: RHEL-147222 - Revert conditional change for ostree_ext Resolves: RHEL-144611 - Rebase to 2026.1 Resolves: RHEL-143217 Resolves: RHEL-143210 - Rebase to 2025.11 Resolves: #RHEL-113381 - Rebase to 2025.10 Resolves: #RHEL-106848 - Rebase to 2025.9 Resolves: #RHEL-103135 - Move `ostree container` to bootc Resolves: #RHEL-72863 - Rebase to 2025.8 Resolves: #RHEL-90254 - Backport https://github.com/coreos/rpm-ostree/pull/5351 Resolves: #RHEL-85684 - Rebase to 2025.7 Resolves: #RHEL-85392 - Backport: https://github.com/coreos/rpm-ostree/pull/5575 Resolves: RHEL-154807 - Rebuilt for RHEL 9.8 Resolves: RHEL-154807 - Backport https://github.com/coreos/rpm-ostree/pull/5569 Resolves: RHEL-154808 - Backport https://github.com/coreos/rpm-ostree/pull/5558 Resolves: RHEL-147222 - Revert conditional change for ostree_ext Resolves: RHEL-144611 - Rebase to 2026.1 Resolves: RHEL-143217 Resolves: RHEL-143210 - Rebase to 2025.11 Resolves: #RHEL-113381 - Rebase to 2025.10 Resolves: #RHEL-106848 - Rebase to 2025.9 Resolves: #RHEL-103135 - Move `ostree container` to bootc Resolves: #RHEL-72863 - Backport https://github.com/coreos/rpm-ostree/pull/5558 Resolves: RHEL-147222 - Revert conditional change for ostree_ext Resolves: RHEL-144611 - Rebase to 2026.1 Resolves: RHEL-143217 Resolves: RHEL-143210 - Rebase to 2025.11 Resolves: #RHEL-113381 - Rebase to 2025.10 Resolves: #RHEL-106848 - Rebase to 2025.9 Resolves: #RHEL-103135 - Move `ostree container` to bootc Resolves: #RHEL-72863 - Rebase to 2025.8 Resolves: #RHEL-90254 - Backport https://github.com/coreos/rpm-ostree/pull/5351 Resolves: #RHEL-85684 - Rebase to 2025.7 Resolves: #RHEL-85392 - Backport: https://github.com/coreos/rpm-ostree/pull/5575 Resolves: RHEL-154807 - Rebuilt for RHEL 9.8 Resolves: RHEL-154807 - Backport https://github.com/coreos/rpm-ostree/pull/5569 Resolves: RHEL-154808 - Backport https://github.com/coreos/rpm-ostree/pull/5558 Resolves: RHEL-147222 - Revert conditional change for ostree_ext Resolves: RHEL-144611 - Rebase to 2026.1 Resolves: RHEL-143217 Resolves: RHEL-143210 - Rebase to 2025.11 Resolves: #RHEL-113381 - Rebase to 2025.10 Resolves: #RHEL-106848 - Rebase to 2025.9 Resolves: #RHEL-103135 - Move `ostree container` to bootc Resolves: #RHEL-72863 - Improve error handling on keystore load (RHEL-114837) - Sort files before passing to file attr dependency generators (RHEL-95376) - Allow an optional "override clock" for deterministic timestamps (RHEL-106672) - Add support for spec local file attributes and generators (RHEL-52772) - Store configurable digest(s) on packages in rpmdb (RHEL-35619) - Fix a hard link race condition in brp-strip (RHEL-74011) - Allow parametric macros to opt out of option processing (RHEL-67161) - Report unsafe symlinks during installation as a specific case (RHEL-33393) - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63070) - Improve newly added %patch warning/error messages (RHEL-6294) - Fix %patch N applying Patch0 implicitly (RHEL-6294) - Issue deprecation warning for number-less %patch (RHEL-6294) - Fix discarded const qualifier in previous patch (RHEL-22607) - Fix root relocation regression (RHEL-28967) - Don't confuse OpenScanHub with false array overrun (RHEL-22607) - Revert incorrect fix for false array overrun (RHEL-22607) - Fix potential use of uninitialized pipe array (RHEL-22604) - Fix potential use of uninitialized pgp struct (RHEL-22605) - Don't confuse OpenScanHub with false array overrun (RHEL-22607) - Add SourceLicense tag to spec syntax (RHEL-28798) - Talk about rpmsign in the rpmsign(8) man page (RHEL-40895) - Improve error handling on keystore load (RHEL-114837) - Sort files before passing to file attr dependency generators (RHEL-95376) - Allow an optional "override clock" for deterministic timestamps (RHEL-106672) - Add support for spec local file attributes and generators (RHEL-52772) - Store configurable digest(s) on packages in rpmdb (RHEL-35619) - Fix a hard link race condition in brp-strip (RHEL-74011) - Allow parametric macros to opt out of option processing (RHEL-67161) - Report unsafe symlinks during installation as a specific case (RHEL-33393) - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63070) - Improve newly added %patch warning/error messages (RHEL-6294) - Fix %patch N applying Patch0 implicitly (RHEL-6294) - Issue deprecation warning for number-less %patch (RHEL-6294) - Fix discarded const qualifier in previous patch (RHEL-22607) - Fix root relocation regression (RHEL-28967) - Don't confuse OpenScanHub with false array overrun (RHEL-22607) - Revert incorrect fix for false array overrun (RHEL-22607) - Fix potential use of uninitialized pipe array (RHEL-22604) - Fix potential use of uninitialized pgp struct (RHEL-22605) - Don't confuse OpenScanHub with false array overrun (RHEL-22607) - Add SourceLicense tag to spec syntax (RHEL-28798) - Talk about rpmsign in the rpmsign(8) man page (RHEL-40895) - Improve error handling on keystore load (RHEL-114837) - Sort files before passing to file attr dependency generators (RHEL-95376) - Allow an optional "override clock" for deterministic timestamps (RHEL-106672) - Add support for spec local file attributes and generators (RHEL-52772) - Store configurable digest(s) on packages in rpmdb (RHEL-35619) - Fix a hard link race condition in brp-strip (RHEL-74011) - Allow parametric macros to opt out of option processing (RHEL-67161) - Report unsafe symlinks during installation as a specific case (RHEL-33393) - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63070) - Improve newly added %patch warning/error messages (RHEL-6294) - Fix %patch N applying Patch0 implicitly (RHEL-6294) - Issue deprecation warning for number-less %patch (RHEL-6294) - Fix discarded const qualifier in previous patch (RHEL-22607) - Fix root relocation regression (RHEL-28967) - Don't confuse OpenScanHub with false array overrun (RHEL-22607) - Revert incorrect fix for false array overrun (RHEL-22607) - Fix potential use of uninitialized pipe array (RHEL-22604) - Fix potential use of uninitialized pgp struct (RHEL-22605) - Don't confuse OpenScanHub with false array overrun (RHEL-22607) - Add SourceLicense tag to spec syntax (RHEL-28798) - Talk about rpmsign in the rpmsign(8) man page (RHEL-40895) - Improve error handling on keystore load (RHEL-114837) - Sort files before passing to file attr dependency generators (RHEL-95376) - Allow an optional "override clock" for deterministic timestamps (RHEL-106672) - Add support for spec local file attributes and generators (RHEL-52772) - Store configurable digest(s) on packages in rpmdb (RHEL-35619) - Fix a hard link race condition in brp-strip (RHEL-74011) - Allow parametric macros to opt out of option processing (RHEL-67161) - Report unsafe symlinks during installation as a specific case (RHEL-33393) - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63070) - Improve newly added %patch warning/error messages (RHEL-6294) - Fix %patch N applying Patch0 implicitly (RHEL-6294) - Issue deprecation warning for number-less %patch (RHEL-6294) - Fix discarded const qualifier in previous patch (RHEL-22607) - Fix root relocation regression (RHEL-28967) - Don't confuse OpenScanHub with false array overrun (RHEL-22607) - Revert incorrect fix for false array overrun (RHEL-22607) - Fix potential use of uninitialized pipe array (RHEL-22604) - Fix potential use of uninitialized pgp struct (RHEL-22605) - Don't confuse OpenScanHub with false array overrun (RHEL-22607) - Add SourceLicense tag to spec syntax (RHEL-28798) - Talk about rpmsign in the rpmsign(8) man page (RHEL-40895) - Rebase to 9.5 (#2005756) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Drop progressbar2 dependency and bundle a tiny replacement (#1927784) - Drop fakeroot dependency and qa-robot scripts (#1905465) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - spectool: Download text as text - Replace requests-download dependency with requests - Update to 9.3 - Force legacy datestamp by default until rhbz#1715412 is resolved - Update to 9.2 - Update to 9.1 - Disable flake8 self-test (#1929210) - Enable bash-completion (#1999654) - Handle missing language error during spellcheck (#1929210) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - correct hard-coded version in Makefile - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Filter out empty py.typed files in Python site-packages - Filter out empty REQUESTED files in pip installed Python metadata dist-info dirs - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Don't use the %python_sitelib macro, because it errors - See https://fedoraproject.org/wiki/Changes/PythonMacroError - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Removed rpath from python bindings better way Related: rhbz#1960385 - Removed rpath from python bindings Resolves: rhbz#1960385 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - F-34: rebuild against ruby 3.0 - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Used macros for make - Fixed stack buffer overflow in rrdcached and added more security checks Resolves: RHEL-173257 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Removed rpath from python bindings better way Related: rhbz#1960385 - Removed rpath from python bindings Resolves: rhbz#1960385 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - F-34: rebuild against ruby 3.0 - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Used macros for make - Fixed stack buffer overflow in rrdcached and added more security checks Resolves: RHEL-173257 - Update user-space rshim driver source to version 2.0.8 - Modify rshim.spec accordingly - Resolves: rhbz#2196626 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix integer overflow in compressed-token decoding (CVE-2026-43618) - Resolves: RHEL-174932 - Fix TOCTOU symlink race in daemon no-chroot mode (CVE-2026-29518) - Resolves: RHEL-174952 - Resolves: RHEL-104404 - Do not clear DISPLAY unconditionally - Resolves: RHEL-70265 - Rebase rsync to 3.2.5 - Resolves: RHEL-70158 - Info Leak via Uninitialized Stack Contents - Resolves: RHEL-70208 - Path traversal vulnerability in rsync - Resolves: RHEL-70210 - --safe-links option bypass leads to path traversal - Resolves: RHEL-71657 - Race Condition in rsync Handling Symbolic Links - Resolves: RHEL-70265 - Rebase rsync to 3.2.5 - Resolves: RHEL-67142 - Wrong progress reported by rsync when using copy-devices - Resolves: RHEL-29340 - Slowness in rsync due to extra validation steps. - Resolves: RHEL-18216 - rysnc script /usr/share/doc/rsync/support/rrsync is unsecure - Resolves: RHEL-173468 - CVE-2024-12086 rsync server leaks arbitrary client files - Resolves: RHEL-169151 - CVE-2026-41035 - Use-after-free vulnerability in extended attribute handling - Resolves: RHEL-152536 - CVE-2025-10158 Out of bounds array access via negative index - Resolves: RHEL-104404 - Do not clear DISPLAY unconditionally - Resolves: RHEL-70265 - Rebase rsync to 3.2.5 - Resolves: RHEL-70158 - Info Leak via Uninitialized Stack Contents - Resolves: RHEL-70208 - Path traversal vulnerability in rsync - Resolves: RHEL-70210 - --safe-links option bypass leads to path traversal - Resolves: RHEL-71657 - Race Condition in rsync Handling Symbolic Links - Resolves: RHEL-70265 - Rebase rsync to 3.2.5 - Resolves: RHEL-67142 - Wrong progress reported by rsync when using copy-devices - Resolves: RHEL-29340 - Slowness in rsync due to extra validation steps. - Resolves: RHEL-18216 - rysnc script /usr/share/doc/rsync/support/rrsync is unsecure - Resolves: RHEL-248836 - Rebase rsync to version 3.2.7 in RHEL9 - Fix integer overflow in compressed-token decoding (CVE-2026-43618) - Resolves: RHEL-174932 - Fix TOCTOU symlink race in daemon no-chroot mode (CVE-2026-29518) - Resolves: RHEL-174952 - Resolves: RHEL-104404 - Do not clear DISPLAY unconditionally - Resolves: RHEL-70265 - Rebase rsync to 3.2.5 - Resolves: RHEL-70158 - Info Leak via Uninitialized Stack Contents - Resolves: RHEL-70208 - Path traversal vulnerability in rsync - Resolves: RHEL-70210 - --safe-links option bypass leads to path traversal - Resolves: RHEL-71657 - Race Condition in rsync Handling Symbolic Links - Resolves: RHEL-70265 - Rebase rsync to 3.2.5 - Resolves: RHEL-67142 - Wrong progress reported by rsync when using copy-devices - Resolves: RHEL-29340 - Slowness in rsync due to extra validation steps. - Resolves: RHEL-18216 - rysnc script /usr/share/doc/rsync/support/rrsync is unsecure - Fix integer overflow in compressed-token decoding (CVE-2026-43618) - Resolves: RHEL-174932 - Fix TOCTOU symlink race in daemon no-chroot mode (CVE-2026-29518) - Resolves: RHEL-174952 - Resolves: RHEL-104404 - Do not clear DISPLAY unconditionally - Resolves: RHEL-70265 - Rebase rsync to 3.2.5 - Resolves: RHEL-70158 - Info Leak via Uninitialized Stack Contents - Resolves: RHEL-70208 - Path traversal vulnerability in rsync - Resolves: RHEL-70210 - --safe-links option bypass leads to path traversal - Resolves: RHEL-71657 - Race Condition in rsync Handling Symbolic Links - Resolves: RHEL-70265 - Rebase rsync to 3.2.5 - Resolves: RHEL-67142 - Wrong progress reported by rsync when using copy-devices - Resolves: RHEL-29340 - Slowness in rsync due to extra validation steps. - Resolves: RHEL-18216 - rysnc script /usr/share/doc/rsync/support/rrsync is unsecure - Resolves: RHEL-173468 - CVE-2024-12086 rsync server leaks arbitrary client files - Resolves: RHEL-169151 - CVE-2026-41035 - Use-after-free vulnerability in extended attribute handling - Resolves: RHEL-152536 - CVE-2025-10158 Out of bounds array access via negative index - Resolves: RHEL-104404 - Do not clear DISPLAY unconditionally - Resolves: RHEL-70265 - Rebase rsync to 3.2.5 - Resolves: RHEL-70158 - Info Leak via Uninitialized Stack Contents - Resolves: RHEL-70208 - Path traversal vulnerability in rsync - Resolves: RHEL-70210 - --safe-links option bypass leads to path traversal - Resolves: RHEL-71657 - Race Condition in rsync Handling Symbolic Links - Resolves: RHEL-70265 - Rebase rsync to 3.2.5 - Resolves: RHEL-67142 - Wrong progress reported by rsync when using copy-devices - Resolves: RHEL-29340 - Slowness in rsync due to extra validation steps. - Resolves: RHEL-18216 - rysnc script /usr/share/doc/rsync/support/rrsync is unsecure - Resolves: RHEL-248836 - Rebase rsync to version 3.2.7 in RHEL9 - Fix integer overflow in compressed-token decoding (CVE-2026-43618) - Resolves: RHEL-174932 - Fix TOCTOU symlink race in daemon no-chroot mode (CVE-2026-29518) - Resolves: RHEL-174952 - Resolves: RHEL-104404 - Do not clear DISPLAY unconditionally - Resolves: RHEL-70265 - Rebase rsync to 3.2.5 - Resolves: RHEL-70158 - Info Leak via Uninitialized Stack Contents - Resolves: RHEL-70208 - Path traversal vulnerability in rsync - Resolves: RHEL-70210 - --safe-links option bypass leads to path traversal - Resolves: RHEL-71657 - Race Condition in rsync Handling Symbolic Links - Resolves: RHEL-70265 - Rebase rsync to 3.2.5 - Resolves: RHEL-67142 - Wrong progress reported by rsync when using copy-devices - Resolves: RHEL-29340 - Slowness in rsync due to extra validation steps. - Resolves: RHEL-18216 - rysnc script /usr/share/doc/rsync/support/rrsync is unsecure - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - new directory for arbitrary external programs needed by omprog module Resolves: RHEL-8676 - Rebase to 8.2310.0 Resolves: RHEL-5196 - Allow setting certificates for separate connections Resolves: RHEL-937 - Capability dropping feature can be turned off Resolves: RHEL-943 - imjournal: new module parameter filecreatemode Resolves: RHEL-949 - Backport: imptcp: guard regex-framing match against iCurrLine == 0 Resolves: RHEL-212699 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - Fix CVE-2026-78002: heap buffer overflow in RainerScript replace() function Resolves: RHEL-246641 - Backport: imptcp: guard regex-framing match against iCurrLine == 0 Resolves: RHEL-212699 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - new directory for arbitrary external programs needed by omprog module Resolves: RHEL-8676 - Rebase to 8.2310.0 Resolves: RHEL-5196 - Allow setting certificates for separate connections Resolves: RHEL-937 - Capability dropping feature can be turned off Resolves: RHEL-943 - imjournal: new module parameter filecreatemode Resolves: RHEL-949 - Backport: imptcp: guard regex-framing match against iCurrLine == 0 Resolves: RHEL-212699 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - Fix CVE-2026-78002: heap buffer overflow in RainerScript replace() function Resolves: RHEL-246641 - Backport: imptcp: guard regex-framing match against iCurrLine == 0 Resolves: RHEL-212699 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - new directory for arbitrary external programs needed by omprog module Resolves: RHEL-8676 - Rebase to 8.2310.0 Resolves: RHEL-5196 - Allow setting certificates for separate connections Resolves: RHEL-937 - Capability dropping feature can be turned off Resolves: RHEL-943 - imjournal: new module parameter filecreatemode Resolves: RHEL-949 - Backport: imptcp: guard regex-framing match against iCurrLine == 0 Resolves: RHEL-212699 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - Fix CVE-2026-78002: heap buffer overflow in RainerScript replace() function Resolves: RHEL-246641 - Backport: imptcp: guard regex-framing match against iCurrLine == 0 Resolves: RHEL-212699 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - new directory for arbitrary external programs needed by omprog module Resolves: RHEL-8676 - Rebase to 8.2310.0 Resolves: RHEL-5196 - Allow setting certificates for separate connections Resolves: RHEL-937 - Capability dropping feature can be turned off Resolves: RHEL-943 - imjournal: new module parameter filecreatemode Resolves: RHEL-949 - Backport: imptcp: guard regex-framing match against iCurrLine == 0 Resolves: RHEL-212699 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - Fix CVE-2026-78002: heap buffer overflow in RainerScript replace() function Resolves: RHEL-246641 - Backport: imptcp: guard regex-framing match against iCurrLine == 0 Resolves: RHEL-212699 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - new directory for arbitrary external programs needed by omprog module Resolves: RHEL-8676 - Rebase to 8.2310.0 Resolves: RHEL-5196 - Allow setting certificates for separate connections Resolves: RHEL-937 - Capability dropping feature can be turned off Resolves: RHEL-943 - imjournal: new module parameter filecreatemode Resolves: RHEL-949 - Backport: imptcp: guard regex-framing match against iCurrLine == 0 Resolves: RHEL-212699 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - Fix CVE-2026-78002: heap buffer overflow in RainerScript replace() function Resolves: RHEL-246641 - Backport: imptcp: guard regex-framing match against iCurrLine == 0 Resolves: RHEL-212699 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - new directory for arbitrary external programs needed by omprog module Resolves: RHEL-8676 - Rebase to 8.2310.0 Resolves: RHEL-5196 - Allow setting certificates for separate connections Resolves: RHEL-937 - Capability dropping feature can be turned off Resolves: RHEL-943 - imjournal: new module parameter filecreatemode Resolves: RHEL-949 - Backport: imptcp: guard regex-framing match against iCurrLine == 0 Resolves: RHEL-212699 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - Fix CVE-2026-78002: heap buffer overflow in RainerScript replace() function Resolves: RHEL-246641 - Backport: imptcp: guard regex-framing match against iCurrLine == 0 Resolves: RHEL-212699 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - new directory for arbitrary external programs needed by omprog module Resolves: RHEL-8676 - Rebase to 8.2310.0 Resolves: RHEL-5196 - Allow setting certificates for separate connections Resolves: RHEL-937 - Capability dropping feature can be turned off Resolves: RHEL-943 - imjournal: new module parameter filecreatemode Resolves: RHEL-949 - Backport: imptcp: guard regex-framing match against iCurrLine == 0 Resolves: RHEL-212699 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - Fix CVE-2026-78002: heap buffer overflow in RainerScript replace() function Resolves: RHEL-246641 - Backport: imptcp: guard regex-framing match against iCurrLine == 0 Resolves: RHEL-212699 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - new directory for arbitrary external programs needed by omprog module Resolves: RHEL-8676 - Rebase to 8.2310.0 Resolves: RHEL-5196 - Allow setting certificates for separate connections Resolves: RHEL-937 - Capability dropping feature can be turned off Resolves: RHEL-943 - imjournal: new module parameter filecreatemode Resolves: RHEL-949 - Backport: imptcp: guard regex-framing match against iCurrLine == 0 Resolves: RHEL-212699 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - Fix CVE-2026-78002: heap buffer overflow in RainerScript replace() function Resolves: RHEL-246641 - Backport: imptcp: guard regex-framing match against iCurrLine == 0 Resolves: RHEL-212699 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - new directory for arbitrary external programs needed by omprog module Resolves: RHEL-8676 - Rebase to 8.2310.0 Resolves: RHEL-5196 - Allow setting certificates for separate connections Resolves: RHEL-937 - Capability dropping feature can be turned off Resolves: RHEL-943 - imjournal: new module parameter filecreatemode Resolves: RHEL-949 - Backport: imptcp: guard regex-framing match against iCurrLine == 0 Resolves: RHEL-212699 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - Fix CVE-2026-78002: heap buffer overflow in RainerScript replace() function Resolves: RHEL-246641 - Backport: imptcp: guard regex-framing match against iCurrLine == 0 Resolves: RHEL-212699 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - new directory for arbitrary external programs needed by omprog module Resolves: RHEL-8676 - Rebase to 8.2310.0 Resolves: RHEL-5196 - Allow setting certificates for separate connections Resolves: RHEL-937 - Capability dropping feature can be turned off Resolves: RHEL-943 - imjournal: new module parameter filecreatemode Resolves: RHEL-949 - Backport: imptcp: guard regex-framing match against iCurrLine == 0 Resolves: RHEL-212699 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - Fix CVE-2026-78002: heap buffer overflow in RainerScript replace() function Resolves: RHEL-246641 - Backport: imptcp: guard regex-framing match against iCurrLine == 0 Resolves: RHEL-212699 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - new directory for arbitrary external programs needed by omprog module Resolves: RHEL-8676 - Rebase to 8.2310.0 Resolves: RHEL-5196 - Allow setting certificates for separate connections Resolves: RHEL-937 - Capability dropping feature can be turned off Resolves: RHEL-943 - imjournal: new module parameter filecreatemode Resolves: RHEL-949 - Backport: imptcp: guard regex-framing match against iCurrLine == 0 Resolves: RHEL-212699 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - Fix CVE-2026-78002: heap buffer overflow in RainerScript replace() function Resolves: RHEL-246641 - Backport: imptcp: guard regex-framing match against iCurrLine == 0 Resolves: RHEL-212699 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - new directory for arbitrary external programs needed by omprog module Resolves: RHEL-8676 - Rebase to 8.2310.0 Resolves: RHEL-5196 - Allow setting certificates for separate connections Resolves: RHEL-937 - Capability dropping feature can be turned off Resolves: RHEL-943 - imjournal: new module parameter filecreatemode Resolves: RHEL-949 - Backport: imptcp: guard regex-framing match against iCurrLine == 0 Resolves: RHEL-212699 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - Fix CVE-2026-78002: heap buffer overflow in RainerScript replace() function Resolves: RHEL-246641 - Backport: imptcp: guard regex-framing match against iCurrLine == 0 Resolves: RHEL-212699 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - new directory for arbitrary external programs needed by omprog module Resolves: RHEL-8676 - Rebase to 8.2310.0 Resolves: RHEL-5196 - Allow setting certificates for separate connections Resolves: RHEL-937 - Capability dropping feature can be turned off Resolves: RHEL-943 - imjournal: new module parameter filecreatemode Resolves: RHEL-949 - Backport: imptcp: guard regex-framing match against iCurrLine == 0 Resolves: RHEL-212699 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - Fix CVE-2026-78002: heap buffer overflow in RainerScript replace() function Resolves: RHEL-246641 - Backport: imptcp: guard regex-framing match against iCurrLine == 0 Resolves: RHEL-212699 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - new directory for arbitrary external programs needed by omprog module Resolves: RHEL-8676 - Rebase to 8.2310.0 Resolves: RHEL-5196 - Allow setting certificates for separate connections Resolves: RHEL-937 - Capability dropping feature can be turned off Resolves: RHEL-943 - imjournal: new module parameter filecreatemode Resolves: RHEL-949 - Backport: imptcp: guard regex-framing match against iCurrLine == 0 Resolves: RHEL-212699 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - Fix CVE-2026-78002: heap buffer overflow in RainerScript replace() function Resolves: RHEL-246641 - Backport: imptcp: guard regex-framing match against iCurrLine == 0 Resolves: RHEL-212699 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - new directory for arbitrary external programs needed by omprog module Resolves: RHEL-8676 - Rebase to 8.2310.0 Resolves: RHEL-5196 - Allow setting certificates for separate connections Resolves: RHEL-937 - Capability dropping feature can be turned off Resolves: RHEL-943 - imjournal: new module parameter filecreatemode Resolves: RHEL-949 - Backport: imptcp: guard regex-framing match against iCurrLine == 0 Resolves: RHEL-212699 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - Fix CVE-2026-78002: heap buffer overflow in RainerScript replace() function Resolves: RHEL-246641 - Backport: imptcp: guard regex-framing match against iCurrLine == 0 Resolves: RHEL-212699 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - new directory for arbitrary external programs needed by omprog module Resolves: RHEL-8676 - Rebase to 8.2310.0 Resolves: RHEL-5196 - Allow setting certificates for separate connections Resolves: RHEL-937 - Capability dropping feature can be turned off Resolves: RHEL-943 - imjournal: new module parameter filecreatemode Resolves: RHEL-949 - Backport: imptcp: guard regex-framing match against iCurrLine == 0 Resolves: RHEL-212699 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - Fix CVE-2026-78002: heap buffer overflow in RainerScript replace() function Resolves: RHEL-246641 - Backport: imptcp: guard regex-framing match against iCurrLine == 0 Resolves: RHEL-212699 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - new directory for arbitrary external programs needed by omprog module Resolves: RHEL-8676 - Rebase to 8.2310.0 Resolves: RHEL-5196 - Allow setting certificates for separate connections Resolves: RHEL-937 - Capability dropping feature can be turned off Resolves: RHEL-943 - imjournal: new module parameter filecreatemode Resolves: RHEL-949 - Backport: imptcp: guard regex-framing match against iCurrLine == 0 Resolves: RHEL-212699 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - Fix CVE-2026-78002: heap buffer overflow in RainerScript replace() function Resolves: RHEL-246641 - Backport: imptcp: guard regex-framing match against iCurrLine == 0 Resolves: RHEL-212699 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - new directory for arbitrary external programs needed by omprog module Resolves: RHEL-8676 - Rebase to 8.2310.0 Resolves: RHEL-5196 - Allow setting certificates for separate connections Resolves: RHEL-937 - Capability dropping feature can be turned off Resolves: RHEL-943 - imjournal: new module parameter filecreatemode Resolves: RHEL-949 - Backport: imptcp: guard regex-framing match against iCurrLine == 0 Resolves: RHEL-212699 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - Fix CVE-2026-78002: heap buffer overflow in RainerScript replace() function Resolves: RHEL-246641 - Backport: imptcp: guard regex-framing match against iCurrLine == 0 Resolves: RHEL-212699 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - new directory for arbitrary external programs needed by omprog module Resolves: RHEL-8676 - Rebase to 8.2310.0 Resolves: RHEL-5196 - Allow setting certificates for separate connections Resolves: RHEL-937 - Capability dropping feature can be turned off Resolves: RHEL-943 - imjournal: new module parameter filecreatemode Resolves: RHEL-949 - Backport: imptcp: guard regex-framing match against iCurrLine == 0 Resolves: RHEL-212699 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - Fix CVE-2026-78002: heap buffer overflow in RainerScript replace() function Resolves: RHEL-246641 - Backport: imptcp: guard regex-framing match against iCurrLine == 0 Resolves: RHEL-212699 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - new directory for arbitrary external programs needed by omprog module Resolves: RHEL-8676 - Rebase to 8.2310.0 Resolves: RHEL-5196 - Allow setting certificates for separate connections Resolves: RHEL-937 - Capability dropping feature can be turned off Resolves: RHEL-943 - imjournal: new module parameter filecreatemode Resolves: RHEL-949 - Backport: imptcp: guard regex-framing match against iCurrLine == 0 Resolves: RHEL-212699 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - Fix CVE-2026-78002: heap buffer overflow in RainerScript replace() function Resolves: RHEL-246641 - Backport: imptcp: guard regex-framing match against iCurrLine == 0 Resolves: RHEL-212699 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - new directory for arbitrary external programs needed by omprog module Resolves: RHEL-8676 - Rebase to 8.2310.0 Resolves: RHEL-5196 - Allow setting certificates for separate connections Resolves: RHEL-937 - Capability dropping feature can be turned off Resolves: RHEL-943 - imjournal: new module parameter filecreatemode Resolves: RHEL-949 - Backport: imptcp: guard regex-framing match against iCurrLine == 0 Resolves: RHEL-212699 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - Fix CVE-2026-78002: heap buffer overflow in RainerScript replace() function Resolves: RHEL-246641 - Backport: imptcp: guard regex-framing match against iCurrLine == 0 Resolves: RHEL-212699 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - migrate rtkit to systemd-sysusers (RHEL-5843) - Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable backports (SOURCES/1100-1196) - Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto authencesn/algif) - Keep the smb cifs.spnego ahead-fix (retained as 1197) - RHEL changelog for 687.6.1..687.10.1 follows: - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163} - RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128} - usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607} - can: raw: fix ro->uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401} - powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125] - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742] - Revert "lpfc: don't use file->f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742] - drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822] - drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853] - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404] - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402} - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741} - smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988] - ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378] - RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966] - net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207] - ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095] - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766} - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766} - rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075} - Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable backports (SOURCES/1198-1252) - RHEL changelog for 687.11.1..687.12.1 follows: - dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110} - Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020} - crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914] - proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653} - proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653} - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470] - mm/page_alloc: clear page->private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303} - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158} - redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927] - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859] - ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829] - ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829] - ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179] - ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257] - dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442] - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378] - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684} - cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701] - ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701] - ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701] - ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701] - drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179] - nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089} - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724} - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183} - i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312] - ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182] - ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185] - Revert "mm: pcp: increase pcp->free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464] - netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392} - Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269) - RHEL changelog for 687.13.1 follows: - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243} - s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472] - s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472] - s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472] - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745] - nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745] - Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786} - crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167] - crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167] - smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613} - mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778] - mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778] - mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778] - mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778] - mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778] - mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778] - mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778] - mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778] - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.18.1..687.19.1 follows: - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176} - init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183] - update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183] - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183] - work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183] - compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183] - powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183] - sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776] - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189} - sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273] - netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273] - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993] - iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993] - iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993] - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993] - iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993] - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057] - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057] - IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057] - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057] - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057] - net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057] - net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057] - net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057] - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057] - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057] - net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057] - net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057] - net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057] - net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057] - net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057] - net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057] - net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057] - net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057] - net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057] - net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057] - net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057] - mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057] - net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057] - net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057] - net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057] - net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057] - net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057] - net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057] - net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057] - net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057] - net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057] - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057] - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057] - mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057] - net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057] - net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057] - net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057] - net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057] - net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057] - net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057] - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057] - net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057] - net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057] - net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057] - net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057] - net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057] - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057] - net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057] - net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057] - net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057] - net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057] - net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057] - net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057] - net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057] - net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057] - net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057] - net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057] - eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057] - net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057] - net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057] - net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057] - net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057] - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057] - RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057] - net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057] - net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057] - net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057] - net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057] - net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057] - net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057] - net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057] - net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057] - net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057] - net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057] - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057] - net: Fix typos (Kamal Heib) [RHEL-169057] - net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057] - net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057] - net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057] - net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057] - net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057] - net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057] - net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057] - net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057] - net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057] - net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057] - net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057] - eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Kamal Heib) [RHEL-169057] - net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057] - net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057] - net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057] - net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057] - net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057] - net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057] - net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057] - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057] - net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057] - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057] - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057] - net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057] - net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057] - net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057] - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057] - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444] - ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444] - ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444] - ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488} - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329} - Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312) - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.19.1..687.20.1 follows: - crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540] - crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540] - crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540] - crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540] - tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198} - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739} - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760] - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760] - scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886] - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411} - Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.18.1..687.19.1 follows: - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176} - init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183] - update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183] - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183] - work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183] - compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183] - powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183] - sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776] - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189} - sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273] - netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273] - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993] - iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993] - iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993] - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993] - iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993] - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057] - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057] - IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057] - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057] - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057] - net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057] - net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057] - net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057] - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057] - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057] - net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057] - net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057] - net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057] - net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057] - net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057] - net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057] - net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057] - net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057] - net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057] - net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057] - net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057] - mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057] - net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057] - net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057] - net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057] - net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057] - net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057] - net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057] - net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057] - net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057] - net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057] - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057] - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057] - mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057] - net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057] - net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057] - net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057] - net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057] - net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057] - net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057] - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057] - net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057] - net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057] - net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057] - net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057] - net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057] - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057] - net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057] - net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057] - net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057] - net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057] - net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057] - net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057] - net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057] - net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057] - net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057] - net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057] - eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057] - net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057] - net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057] - net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057] - net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057] - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057] - RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057] - net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057] - net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057] - net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057] - net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057] - net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057] - net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057] - net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057] - net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057] - net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057] - net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057] - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057] - net: Fix typos (Kamal Heib) [RHEL-169057] - net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057] - net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057] - net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057] - net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057] - net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057] - net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057] - net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057] - net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057] - net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057] - net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057] - net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057] - eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Kamal Heib) [RHEL-169057] - net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057] - net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057] - net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057] - net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057] - net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057] - net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057] - net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057] - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057] - net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057] - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057] - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057] - net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057] - net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057] - net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057] - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057] - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444] - ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444] - ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444] - ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488} - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329} - Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312) - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735) - Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll ep_remove use-after-free CVE-2026-46242 (1712) - RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux ahead-patch (1312) is retained and RHEL's duplicate copy omitted - CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263) - RHEL changelog for 687.21.1..687.22.1 follows: - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041] - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116} - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263} - KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316} - netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227} - nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966] - Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755) - The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by RHEL's eventpoll series carrying the same fix and is dropped - Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738) - RHEL changelog for 687.23.1 follows: - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1756, 1757) are superseded by RHEL's copies and dropped - RHEL changelog for 687.25.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770) - RHEL changelog for 687.26.1 follows: - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1756, 1757) are superseded by RHEL's copies and dropped - RHEL changelog for 687.25.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041] - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116} - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619] - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619] - Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762] - Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762] - Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762] - Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762] - Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762] - Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762] - Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762] - Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762] - nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489] - pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489] - net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508] - cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548] - spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129] - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431) - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619] - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619] - Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762] - Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762] - Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762] - Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762] - Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762] - Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762] - Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762] - Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762] - nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489] - net: skbuff: propagate shared-frag marker through frag-transfer helpers (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300 "Fragnesia") - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431) - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (Mohammadfaiz Bawa) [RHEL-243814] {CVE-2026-72288} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275058] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275076] {CVE-2026-93228} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270929] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270929] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271453] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268122] {CVE-2026-74705} - net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CKI Backport Bot) [RHEL-270908] {CVE-2026-81003} - wifi: cfg80211: use wiphy work for socket owner autodisconnect (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-263788] {CVE-2026-68409} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (Jose Ignacio Tornos Martinez) [RHEL-259560] {CVE-2026-64030} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261686] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260511] {CVE-2026-68140} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261293] {CVE-2026-72320} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256448] {CVE-2026-74641} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-237219] {CVE-2026-68377} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229654] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226490] {CVE-2026-53011} - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net: always dissect GSO packets in __virtio_net_hdr_to_skb() (Davide Caratti) [RHEL-284987] - ipv4: validate checksum_start before completing checksum (CKI Backport Bot) [RHEL-284987] {CVE-2026-99999} - smb: client: reject a tree connect response whose byte count is too small (Alisher Mazhirinov) [RHEL-271284] {CVE-2026-89631} - exec: Cleanup POSIX timers right after de_thread() (Luiz Capitulino) [RHEL-282063] {CVE-2026-98260} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271871] {CVE-2026-93817} - smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (Frank Sorenson) [RHEL-271487] {CVE-2026-89633} - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270747] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256697] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256697] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256697] - bridge: mcast: Fix a possible use-after-free when removing a bridge port (Jakub Ramaseuski) [RHEL-232528] {CVE-2026-64032} - net: bridge: Flush multicast groups when snooping is disabled (Jakub Ramaseuski) [RHEL-232528] - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Antoine Tenart) [RHEL-231693] {CVE-2026-64024} - ipv4: fib: free fib_alias with kfree_rcu() on insert error path (Jamie Bainbridge) [RHEL-233131] {CVE-2026-64572} - inet: frags: strip GSO state from fragments before reassembly (Jamie Bainbridge) [RHEL-254224] {CVE-2026-80590} - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Jamie Bainbridge) [RHEL-225452] {CVE-2026-64114} - usb: typec: ucsi: validate connector number in ucsi_connector_change() (Desnes Nunes) [RHEL-259429] {CVE-2026-63958} - usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO (Desnes Nunes) [RHEL-259429] - usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (Desnes Nunes) [RHEL-259429] {CVE-2026-63962} - usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (Desnes Nunes) [RHEL-259429] {CVE-2026-63963} - usb: typec: altmodes/displayport: validate count before reading Status Update VDO (Desnes Nunes) [RHEL-259429] {CVE-2026-63961} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63899} - Bluetooth: hci_sync: Fix advertising data UAFs (CKI Backport Bot) [RHEL-254674] {CVE-2026-74509} - openvswitch: vport: fix self-deadlock on release of tunnel ports (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222958] {CVE-2026-52935} - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (Mohammadfaiz Bawa) [RHEL-243814] {CVE-2026-72288} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275058] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275076] {CVE-2026-93228} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270929] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270929] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271453] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268122] {CVE-2026-74705} - net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CKI Backport Bot) [RHEL-270908] {CVE-2026-81003} - wifi: cfg80211: use wiphy work for socket owner autodisconnect (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-263788] {CVE-2026-68409} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (Jose Ignacio Tornos Martinez) [RHEL-259560] {CVE-2026-64030} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261686] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260511] {CVE-2026-68140} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261293] {CVE-2026-72320} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256448] {CVE-2026-74641} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-237219] {CVE-2026-68377} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229654] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226490] {CVE-2026-53011} - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: skbuff: propagate shared-frag marker in skb_zerocopy() - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - xfs: bounds-check buffer log item's dirty bitmap (Pavel Reichl) [RHEL-253366] {CVE-2026-80536} - ovl: check access to copy_file_range source with src mounter creds (Miklos Szeredi) [RHEL-238870] {CVE-2026-68448} - ALSA: seq: close a re-opened queue timer in the destructor (CKI Backport Bot) [RHEL-263709] {CVE-2026-68202} - calipso: unlock rcu before returning -EAFNOSUPPORT (CKI Backport Bot) [RHEL-257685] {CVE-2025-38147} - calipso: Don't call calipso functions for AF_INET sk. (CKI Backport Bot) [RHEL-257685] {CVE-2025-38147} - netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (CKI Backport Bot) [RHEL-257666] {CVE-2025-22063} - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (CKI Backport Bot) [RHEL-255258] {CVE-2026-80530} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252811] {CVE-2026-68299} - ALSA: hda/cs35l41: Fix firmware load work teardown (CKI Backport Bot) [RHEL-234099] {CVE-2026-64481} - rtla: Fix segfault on multiple SIGINTs (Tomas Glozar) [RHEL-193029] - net: always dissect GSO packets in __virtio_net_hdr_to_skb() (Davide Caratti) [RHEL-284987] - ipv4: validate checksum_start before completing checksum (CKI Backport Bot) [RHEL-284987] {CVE-2026-99999} - smb: client: reject a tree connect response whose byte count is too small (Alisher Mazhirinov) [RHEL-271284] {CVE-2026-89631} - exec: Cleanup POSIX timers right after de_thread() (Luiz Capitulino) [RHEL-282063] {CVE-2026-98260} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271871] {CVE-2026-93817} - smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (Frank Sorenson) [RHEL-271487] {CVE-2026-89633} - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270747] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256697] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256697] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256697] - bridge: mcast: Fix a possible use-after-free when removing a bridge port (Jakub Ramaseuski) [RHEL-232528] {CVE-2026-64032} - net: bridge: Flush multicast groups when snooping is disabled (Jakub Ramaseuski) [RHEL-232528] - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Antoine Tenart) [RHEL-231693] {CVE-2026-64024} - ipv4: fib: free fib_alias with kfree_rcu() on insert error path (Jamie Bainbridge) [RHEL-233131] {CVE-2026-64572} - inet: frags: strip GSO state from fragments before reassembly (Jamie Bainbridge) [RHEL-254224] {CVE-2026-80590} - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Jamie Bainbridge) [RHEL-225452] {CVE-2026-64114} - usb: typec: ucsi: validate connector number in ucsi_connector_change() (Desnes Nunes) [RHEL-259429] {CVE-2026-63958} - usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO (Desnes Nunes) [RHEL-259429] - usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (Desnes Nunes) [RHEL-259429] {CVE-2026-63962} - usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (Desnes Nunes) [RHEL-259429] {CVE-2026-63963} - usb: typec: altmodes/displayport: validate count before reading Status Update VDO (Desnes Nunes) [RHEL-259429] {CVE-2026-63961} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63899} - Bluetooth: hci_sync: Fix advertising data UAFs (CKI Backport Bot) [RHEL-254674] {CVE-2026-74509} - openvswitch: vport: fix self-deadlock on release of tunnel ports (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222958] {CVE-2026-52935} - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (Mohammadfaiz Bawa) [RHEL-243814] {CVE-2026-72288} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275058] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275076] {CVE-2026-93228} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270929] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270929] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271453] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268122] {CVE-2026-74705} - net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CKI Backport Bot) [RHEL-270908] {CVE-2026-81003} - wifi: cfg80211: use wiphy work for socket owner autodisconnect (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-263788] {CVE-2026-68409} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (Jose Ignacio Tornos Martinez) [RHEL-259560] {CVE-2026-64030} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261686] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260511] {CVE-2026-68140} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261293] {CVE-2026-72320} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256448] {CVE-2026-74641} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-237219] {CVE-2026-68377} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229654] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226490] {CVE-2026-53011} - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - net: skbuff: propagate shared-frag marker in skb_zerocopy() - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - netfilter: flowtable: hold reference on ct until flow is released (CKI Backport Bot) [RHEL-280075] {CVE-2026-98320} - vfio/pci: clear vdev->msi_perm after freeing it on init failure (Rodolfo Vick) [RHEL-270901] {CVE-2026-89777} - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278089] {CVE-2026-93262} - KEYS: encrypted: fix integer overflow of datablob_len (Bruno Meneguele) [RHEL-279504] {CVE-2026-98222} - KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (CKI Backport Bot) [RHEL-277620] {CVE-2026-74515} - smb: client: guard against tailsz underflow in wdata_send_pages() (Paulo Alcantara) [RHEL-257205] - smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-257205] - smb: client: fix rlist race and missing initialization (Paulo Alcantara) [RHEL-257205] {CVE-2026-98174} - smb: client: cancel reconnect work in clean_demultiplex_info() (Paulo Alcantara) [RHEL-257205] {CVE-2026-98175} - smb/client: send lease break ACKs thru correct session for multiuser mounts (Paulo Alcantara) [RHEL-257205] - smb: client: fix cifsFileInfo reference leak in deferred close (Paulo Alcantara) [RHEL-257205] {CVE-2026-97558} - smb: client: avoid leaking refcount when cifs_sb_tlink() fails (Paulo Alcantara) [RHEL-257205] {CVE-2026-97556} - smb: client: avoid leaking refcount in cifs_queue_oplock_break() (Paulo Alcantara) [RHEL-257205] {CVE-2026-97557} - smb: client: fix data corruption with concurrent writes and O_TRUNC (Paulo Alcantara) [RHEL-257205] - cifs: don't update i_size in cifs_do_truncate without a cached handle (Paulo Alcantara) [RHEL-257205] - smb: client: invalidate fscache for fallocate range operations (Paulo Alcantara) [RHEL-257205] {CVE-2026-98124} - smb: client: fix stale page cache in insert/collapse range (Paulo Alcantara) [RHEL-257205] {CVE-2026-98125} - smb: client: fix integer truncation in collapse range (Paulo Alcantara) [RHEL-257205] - smb: client: fix data corruption in emulated insert range (Paulo Alcantara) [RHEL-257205] - smb/client: mark file sparse before emulating insert range (Paulo Alcantara) [RHEL-257205] - smb/client: validate new EOF for zero range (Paulo Alcantara) [RHEL-257205] {CVE-2026-98126} - smb/client: validate new EOF for insert range (Paulo Alcantara) [RHEL-257205] {CVE-2026-98127} - cifs: add revalidation on FSCTL failure in smb2_duplicate_extents() (Paulo Alcantara) [RHEL-257205] - cifs: fix loff_t underflow in cifs_remap_file_range() when len == 0 (Paulo Alcantara) [RHEL-257205] {CVE-2026-89640} - cifs: call pagecache_isize_extended() in cifs_setsize() when extending (Paulo Alcantara) [RHEL-257205] {CVE-2026-89642} - cifs: clear tcon after cifsFileInfo_put() in cifs_file_set_size() (Paulo Alcantara) [RHEL-257205] {CVE-2026-89641} - smb/client: decode reparse metadata using its payload type (Paulo Alcantara) [RHEL-257205] - smb/client: preserve open info type across compound queries (Paulo Alcantara) [RHEL-257205] - smb/client: mark missing nlink values as unknown (Paulo Alcantara) [RHEL-257205] - smb/client: fix nlink of an overwritten open file (Paulo Alcantara) [RHEL-257205] - cifs: remove dead size-update blocks in cifs_setattr_unix/nounix (Paulo Alcantara) [RHEL-257205] - cifs: remove redundant size-update block in cifs_remap_file_range() (Paulo Alcantara) [RHEL-257205] - cifs: add cifs_resize_file_locked() to guard fscache_resize_cookie() under i_rwsem (Paulo Alcantara) [RHEL-257205] - cifs: use cifs_invalidate_cache() in cifs_do_truncate() for O_TRUNC (Paulo Alcantara) [RHEL-257205] {CVE-2026-89639} - cifs: add fscache_resize_cookie() to cifs_setsize() (Paulo Alcantara) [RHEL-257205] - smb: client: simplify cifs_fscache_get_super_cookie() (Paulo Alcantara) [RHEL-257205] - smb/client: flush dirty data before punching a hole (Paulo Alcantara) [RHEL-257205] {CVE-2026-93794} - smb/client: refresh allocation after EOF-extending fallocate (Paulo Alcantara) [RHEL-257205] - smb/client: emulate small EOF-extending mode 0 fallocate ranges (Paulo Alcantara) [RHEL-257205] - smb/client: reduce fallocate zero buffer allocation (Paulo Alcantara) [RHEL-257205] - smb/client: refresh allocation size after duplicate extents (Paulo Alcantara) [RHEL-257205] - smb: client: use kvzalloc() for megabyte buffer in simple fallocate (Paulo Alcantara) [RHEL-257205] - smb/client: fix incorrect nlink returned by fstat() (Paulo Alcantara) [RHEL-257205] - smb/client: zero-initialize stack-allocated cifs_open_info_data (Paulo Alcantara) [RHEL-257205] {CVE-2026-93801} - smb/client: pass cifs_open_info_data to SMB2_open() (Paulo Alcantara) [RHEL-257205] - smb/client: use stack-allocated smb2_file_all_info in smb3_query_mf_symlink() (Paulo Alcantara) [RHEL-257205] - smb: client: refactor cifs_revalidate_mapping() to use clear_and_wake_up_bit() (Paulo Alcantara) [RHEL-257205] - smb/client: do not account EOF extension as allocation (Paulo Alcantara) [RHEL-257205] - smb/client: preserve errors from smb2_set_sparse() (Paulo Alcantara) [RHEL-257205] - smb/client: name the default fallocate mode (Paulo Alcantara) [RHEL-257205] - smb/client: update i_blocks after contiguous writes (Paulo Alcantara) [RHEL-257205] - smb: client: fix races in cifsd thread creation (Paulo Alcantara) [RHEL-257205] {CVE-2026-93829} - cifs: invalidate cfid on unlink/rename/rmdir (Paulo Alcantara) [RHEL-257205] - cifs: abort open_cached_dir if we don't request leases (Paulo Alcantara) [RHEL-257205] - cifs: change_conf needs to be called for session setup (Paulo Alcantara) [RHEL-257205] - smb: client: fix generic/694 due to wrong ->i_blocks (Paulo Alcantara) [RHEL-257205] - smb: client: fix open handle lookup in cifs_open() (Paulo Alcantara) [RHEL-257205] - smb: client: fix in-place encryption corruption in SMB2_write() (Paulo Alcantara) [RHEL-257205] {CVE-2026-43362} - smb: client: fix atomic open with O_DIRECT & O_SYNC (Paulo Alcantara) [RHEL-257205] - cifs: Scripted clean up fs/smb/client/cifsglob.h (Paulo Alcantara) [RHEL-257205] - cifs: Scripted clean up fs/smb/client/fscache.h (Paulo Alcantara) [RHEL-257205] - cifs: Scripted clean up fs/smb/client/cifsfs.h (Paulo Alcantara) [RHEL-257205] - cifs: Scripted clean up fs/smb/client/cifsproto.h (Paulo Alcantara) [RHEL-257205] - udp: Deal with race between UDP socket address change and rehash (Jamie Bainbridge) [RHEL-257635] {CVE-2024-57974} - smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (CKI Backport Bot) [RHEL-271257] {CVE-2026-89638} - net/handshake: Drain pending requests at net namespace exit (Xin Long) [RHEL-232134] {CVE-2026-63978} - net/handshake: Use spin_lock_bh for hn_lock (Xin Long) [RHEL-232134] - net/handshake: hand off the pinned file reference to accept_doit (Xin Long) [RHEL-230363] {CVE-2026-63979} - net/handshake: Take a long-lived file reference at submit (Xin Long) [RHEL-234159] {CVE-2026-64523} - fuse: re-lock request before replacing page cache folio (Miklos Szeredi) [RHEL-226093] {CVE-2026-53388} - fuse: release pipe buf after last use (Miklos Szeredi) [RHEL-226093] {CVE-2026-53388} - fuse: fix page stealing (Miklos Szeredi) [RHEL-226093] {CVE-2026-53388} - ipvs: reload ip header after head reallocation (Phil Sutter) [RHEL-263800] {CVE-2026-68476} - selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() (CKI Backport Bot) [RHEL-243225] {CVE-2026-72242} - usb: usbfs: fix use-after-free of usb_device in usbdev_release() (CKI Backport Bot) [RHEL-258557] {CVE-2026-80824} - fuse: re-lock request before returning from fuse_ref_folio() (CKI Backport Bot) [RHEL-234250] {CVE-2026-64266} - xfs: bounds-check buffer log item's dirty bitmap (Pavel Reichl) [RHEL-253366] {CVE-2026-80536} - ovl: check access to copy_file_range source with src mounter creds (Miklos Szeredi) [RHEL-238870] {CVE-2026-68448} - ALSA: seq: close a re-opened queue timer in the destructor (CKI Backport Bot) [RHEL-263709] {CVE-2026-68202} - calipso: unlock rcu before returning -EAFNOSUPPORT (CKI Backport Bot) [RHEL-257685] {CVE-2025-38147} - calipso: Don't call calipso functions for AF_INET sk. (CKI Backport Bot) [RHEL-257685] {CVE-2025-38147} - netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (CKI Backport Bot) [RHEL-257666] {CVE-2025-22063} - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (CKI Backport Bot) [RHEL-255258] {CVE-2026-80530} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252811] {CVE-2026-68299} - ALSA: hda/cs35l41: Fix firmware load work teardown (CKI Backport Bot) [RHEL-234099] {CVE-2026-64481} - rtla: Fix segfault on multiple SIGINTs (Tomas Glozar) [RHEL-193029] - net: always dissect GSO packets in __virtio_net_hdr_to_skb() (Davide Caratti) [RHEL-284987] - ipv4: validate checksum_start before completing checksum (CKI Backport Bot) [RHEL-284987] {CVE-2026-99999} - smb: client: reject a tree connect response whose byte count is too small (Alisher Mazhirinov) [RHEL-271284] {CVE-2026-89631} - exec: Cleanup POSIX timers right after de_thread() (Luiz Capitulino) [RHEL-282063] {CVE-2026-98260} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271871] {CVE-2026-93817} - smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (Frank Sorenson) [RHEL-271487] {CVE-2026-89633} - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270747] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256697] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256697] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256697] - bridge: mcast: Fix a possible use-after-free when removing a bridge port (Jakub Ramaseuski) [RHEL-232528] {CVE-2026-64032} - net: bridge: Flush multicast groups when snooping is disabled (Jakub Ramaseuski) [RHEL-232528] - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Antoine Tenart) [RHEL-231693] {CVE-2026-64024} - ipv4: fib: free fib_alias with kfree_rcu() on insert error path (Jamie Bainbridge) [RHEL-233131] {CVE-2026-64572} - inet: frags: strip GSO state from fragments before reassembly (Jamie Bainbridge) [RHEL-254224] {CVE-2026-80590} - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Jamie Bainbridge) [RHEL-225452] {CVE-2026-64114} - usb: typec: ucsi: validate connector number in ucsi_connector_change() (Desnes Nunes) [RHEL-259429] {CVE-2026-63958} - usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO (Desnes Nunes) [RHEL-259429] - usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (Desnes Nunes) [RHEL-259429] {CVE-2026-63962} - usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (Desnes Nunes) [RHEL-259429] {CVE-2026-63963} - usb: typec: altmodes/displayport: validate count before reading Status Update VDO (Desnes Nunes) [RHEL-259429] {CVE-2026-63961} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63899} - Bluetooth: hci_sync: Fix advertising data UAFs (CKI Backport Bot) [RHEL-254674] {CVE-2026-74509} - openvswitch: vport: fix self-deadlock on release of tunnel ports (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222958] {CVE-2026-52935} - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (Mohammadfaiz Bawa) [RHEL-243814] {CVE-2026-72288} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275058] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275076] {CVE-2026-93228} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270929] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270929] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271453] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268122] {CVE-2026-74705} - net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CKI Backport Bot) [RHEL-270908] {CVE-2026-81003} - wifi: cfg80211: use wiphy work for socket owner autodisconnect (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-263788] {CVE-2026-68409} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (Jose Ignacio Tornos Martinez) [RHEL-259560] {CVE-2026-64030} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261686] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260511] {CVE-2026-68140} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261293] {CVE-2026-72320} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256448] {CVE-2026-74641} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-237219] {CVE-2026-68377} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229654] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226490] {CVE-2026-53011} - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171254 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Upgrade to Ruby 3.0.7. Resolves: RHEL-35740 - Fix HTTP response splitting in CGI. Resolves: RHEL-35741 - Fix ReDoS vulnerability in URI. Resolves: RHEL-35742 - Fix ReDoS vulnerability in Time. Resolves: RHEL-35743 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-35744 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-35746 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-35747 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252044 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Upgrade to Ruby 3.1.7. Resolves: RHEL-85235 - Fix DoS vulnerability in REXML. (CVE-2024-39908) Resolves: RHEL-57050 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68526 - Upgrade to Ruby 3.1.5. Resolves: RHEL-33978 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34129 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34121 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33871 - Upgrade to Ruby 3.1.4. Resolves: RHEL-5586 - Fix HTTP response splitting in CGI. Resolves: RHEL-5591 - Fix ReDos vulnerability in URI. Resolves: RHEL-28919 Resolves: RHEL-5612 - Fix ReDos vulnerability in Time. Resolves: RHEL-28920 - Make RDoc soft dependency in IRB. Resolves: RHEL-5613 - Bypass git submodule test failure on Git >= 2.38.1. - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b. - Fix for tzdata-2022g. - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS. Resolves: RHEL-5590 - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters Related: RHEL-5590 - Disable fiddle tests that use FFI closures. Related: RHEL-5590 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171255 - Upgrade to Ruby 3.3.10. Resolves: RHEL-127912 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122015 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252039 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.0. Resolves: RHEL-17089 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Fix resolv: do not register on-demand classes for unknown DNS types and SvcParamKeys to prevent memory exhaustion (CVE-2026-80212) Resolves: RHEL-252035 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.1.7. Resolves: RHEL-85235 - Fix DoS vulnerability in REXML. (CVE-2024-39908) Resolves: RHEL-57050 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68526 - Upgrade to Ruby 3.1.5. Resolves: RHEL-33978 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34129 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34121 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33871 - Upgrade to Ruby 3.1.4. Resolves: RHEL-5586 - Fix HTTP response splitting in CGI. Resolves: RHEL-5591 - Fix ReDos vulnerability in URI. Resolves: RHEL-28919 Resolves: RHEL-5612 - Fix ReDos vulnerability in Time. Resolves: RHEL-28920 - Make RDoc soft dependency in IRB. Resolves: RHEL-5613 - Bypass git submodule test failure on Git >= 2.38.1. - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b. - Fix for tzdata-2022g. - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS. Resolves: RHEL-5590 - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters Related: RHEL-5590 - Disable fiddle tests that use FFI closures. Related: RHEL-5590 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171255 - Upgrade to Ruby 3.3.10. Resolves: RHEL-127912 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122015 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252039 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.0. Resolves: RHEL-17089 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Fix resolv: do not register on-demand classes for unknown DNS types and SvcParamKeys to prevent memory exhaustion (CVE-2026-80212) Resolves: RHEL-252035 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171254 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Upgrade to Ruby 3.0.7. Resolves: RHEL-35740 - Fix HTTP response splitting in CGI. Resolves: RHEL-35741 - Fix ReDoS vulnerability in URI. Resolves: RHEL-35742 - Fix ReDoS vulnerability in Time. Resolves: RHEL-35743 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-35744 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-35746 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-35747 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252044 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Upgrade to Ruby 3.1.7. Resolves: RHEL-85235 - Fix DoS vulnerability in REXML. (CVE-2024-39908) Resolves: RHEL-57050 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68526 - Upgrade to Ruby 3.1.5. Resolves: RHEL-33978 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34129 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34121 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33871 - Upgrade to Ruby 3.1.4. Resolves: RHEL-5586 - Fix HTTP response splitting in CGI. Resolves: RHEL-5591 - Fix ReDos vulnerability in URI. Resolves: RHEL-28919 Resolves: RHEL-5612 - Fix ReDos vulnerability in Time. Resolves: RHEL-28920 - Make RDoc soft dependency in IRB. Resolves: RHEL-5613 - Bypass git submodule test failure on Git >= 2.38.1. - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b. - Fix for tzdata-2022g. - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS. Resolves: RHEL-5590 - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters Related: RHEL-5590 - Disable fiddle tests that use FFI closures. Related: RHEL-5590 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171255 - Upgrade to Ruby 3.3.10. Resolves: RHEL-127912 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122015 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252039 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.0. Resolves: RHEL-17089 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Fix resolv: do not register on-demand classes for unknown DNS types and SvcParamKeys to prevent memory exhaustion (CVE-2026-80212) Resolves: RHEL-252035 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171254 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Upgrade to Ruby 3.0.7. Resolves: RHEL-35740 - Fix HTTP response splitting in CGI. Resolves: RHEL-35741 - Fix ReDoS vulnerability in URI. Resolves: RHEL-35742 - Fix ReDoS vulnerability in Time. Resolves: RHEL-35743 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-35744 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-35746 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-35747 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252044 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Upgrade to Ruby 3.1.7. Resolves: RHEL-85235 - Fix DoS vulnerability in REXML. (CVE-2024-39908) Resolves: RHEL-57050 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68526 - Upgrade to Ruby 3.1.5. Resolves: RHEL-33978 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34129 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34121 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33871 - Upgrade to Ruby 3.1.4. Resolves: RHEL-5586 - Fix HTTP response splitting in CGI. Resolves: RHEL-5591 - Fix ReDos vulnerability in URI. Resolves: RHEL-28919 Resolves: RHEL-5612 - Fix ReDos vulnerability in Time. Resolves: RHEL-28920 - Make RDoc soft dependency in IRB. Resolves: RHEL-5613 - Bypass git submodule test failure on Git >= 2.38.1. - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b. - Fix for tzdata-2022g. - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS. Resolves: RHEL-5590 - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters Related: RHEL-5590 - Disable fiddle tests that use FFI closures. Related: RHEL-5590 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171255 - Upgrade to Ruby 3.3.10. Resolves: RHEL-127912 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122015 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252039 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.0. Resolves: RHEL-17089 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Fix resolv: do not register on-demand classes for unknown DNS types and SvcParamKeys to prevent memory exhaustion (CVE-2026-80212) Resolves: RHEL-252035 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.1.7. Resolves: RHEL-85235 - Fix DoS vulnerability in REXML. (CVE-2024-39908) Resolves: RHEL-57050 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68526 - Upgrade to Ruby 3.1.5. Resolves: RHEL-33978 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34129 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34121 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33871 - Upgrade to Ruby 3.1.4. Resolves: RHEL-5586 - Fix HTTP response splitting in CGI. Resolves: RHEL-5591 - Fix ReDos vulnerability in URI. Resolves: RHEL-28919 Resolves: RHEL-5612 - Fix ReDos vulnerability in Time. Resolves: RHEL-28920 - Make RDoc soft dependency in IRB. Resolves: RHEL-5613 - Bypass git submodule test failure on Git >= 2.38.1. - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b. - Fix for tzdata-2022g. - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS. Resolves: RHEL-5590 - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters Related: RHEL-5590 - Disable fiddle tests that use FFI closures. Related: RHEL-5590 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171255 - Upgrade to Ruby 3.3.10. Resolves: RHEL-127912 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122015 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252039 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.0. Resolves: RHEL-17089 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Fix resolv: do not register on-demand classes for unknown DNS types and SvcParamKeys to prevent memory exhaustion (CVE-2026-80212) Resolves: RHEL-252035 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171254 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Upgrade to Ruby 3.0.7. Resolves: RHEL-35740 - Fix HTTP response splitting in CGI. Resolves: RHEL-35741 - Fix ReDoS vulnerability in URI. Resolves: RHEL-35742 - Fix ReDoS vulnerability in Time. Resolves: RHEL-35743 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-35744 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-35746 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-35747 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252044 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Upgrade to Ruby 3.1.7. Resolves: RHEL-85235 - Fix DoS vulnerability in REXML. (CVE-2024-39908) Resolves: RHEL-57050 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68526 - Upgrade to Ruby 3.1.5. Resolves: RHEL-33978 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34129 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34121 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33871 - Upgrade to Ruby 3.1.4. Resolves: RHEL-5586 - Fix HTTP response splitting in CGI. Resolves: RHEL-5591 - Fix ReDos vulnerability in URI. Resolves: RHEL-28919 Resolves: RHEL-5612 - Fix ReDos vulnerability in Time. Resolves: RHEL-28920 - Make RDoc soft dependency in IRB. Resolves: RHEL-5613 - Bypass git submodule test failure on Git >= 2.38.1. - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b. - Fix for tzdata-2022g. - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS. Resolves: RHEL-5590 - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters Related: RHEL-5590 - Disable fiddle tests that use FFI closures. Related: RHEL-5590 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171255 - Upgrade to Ruby 3.3.10. Resolves: RHEL-127912 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122015 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252039 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.0. Resolves: RHEL-17089 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Fix resolv: do not register on-demand classes for unknown DNS types and SvcParamKeys to prevent memory exhaustion (CVE-2026-80212) Resolves: RHEL-252035 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171254 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Upgrade to Ruby 3.0.7. Resolves: RHEL-35740 - Fix HTTP response splitting in CGI. Resolves: RHEL-35741 - Fix ReDoS vulnerability in URI. Resolves: RHEL-35742 - Fix ReDoS vulnerability in Time. Resolves: RHEL-35743 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-35744 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-35746 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-35747 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252044 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Upgrade to Ruby 3.1.7. Resolves: RHEL-85235 - Fix DoS vulnerability in REXML. (CVE-2024-39908) Resolves: RHEL-57050 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68526 - Upgrade to Ruby 3.1.5. Resolves: RHEL-33978 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34129 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34121 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33871 - Upgrade to Ruby 3.1.4. Resolves: RHEL-5586 - Fix HTTP response splitting in CGI. Resolves: RHEL-5591 - Fix ReDos vulnerability in URI. Resolves: RHEL-28919 Resolves: RHEL-5612 - Fix ReDos vulnerability in Time. Resolves: RHEL-28920 - Make RDoc soft dependency in IRB. Resolves: RHEL-5613 - Bypass git submodule test failure on Git >= 2.38.1. - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b. - Fix for tzdata-2022g. - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS. Resolves: RHEL-5590 - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters Related: RHEL-5590 - Disable fiddle tests that use FFI closures. Related: RHEL-5590 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171255 - Upgrade to Ruby 3.3.10. Resolves: RHEL-127912 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122015 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252039 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.0. Resolves: RHEL-17089 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Fix resolv: do not register on-demand classes for unknown DNS types and SvcParamKeys to prevent memory exhaustion (CVE-2026-80212) Resolves: RHEL-252035 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171254 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Upgrade to Ruby 3.0.7. Resolves: RHEL-35740 - Fix HTTP response splitting in CGI. Resolves: RHEL-35741 - Fix ReDoS vulnerability in URI. Resolves: RHEL-35742 - Fix ReDoS vulnerability in Time. Resolves: RHEL-35743 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-35744 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-35746 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-35747 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252044 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Upgrade to Ruby 3.1.7. Resolves: RHEL-85235 - Fix DoS vulnerability in REXML. (CVE-2024-39908) Resolves: RHEL-57050 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68526 - Upgrade to Ruby 3.1.5. Resolves: RHEL-33978 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34129 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34121 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33871 - Upgrade to Ruby 3.1.4. Resolves: RHEL-5586 - Fix HTTP response splitting in CGI. Resolves: RHEL-5591 - Fix ReDos vulnerability in URI. Resolves: RHEL-28919 Resolves: RHEL-5612 - Fix ReDos vulnerability in Time. Resolves: RHEL-28920 - Make RDoc soft dependency in IRB. Resolves: RHEL-5613 - Bypass git submodule test failure on Git >= 2.38.1. - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b. - Fix for tzdata-2022g. - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS. Resolves: RHEL-5590 - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters Related: RHEL-5590 - Disable fiddle tests that use FFI closures. Related: RHEL-5590 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171255 - Upgrade to Ruby 3.3.10. Resolves: RHEL-127912 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122015 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252039 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Fix resolv: do not register on-demand classes for unknown DNS types and SvcParamKeys to prevent memory exhaustion (CVE-2026-80212) Resolves: RHEL-252035 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.0. Resolves: RHEL-17089 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.1.7. Resolves: RHEL-85235 - Fix DoS vulnerability in REXML. (CVE-2024-39908) Resolves: RHEL-57050 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68526 - Upgrade to Ruby 3.1.5. Resolves: RHEL-33978 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34129 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34121 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33871 - Upgrade to Ruby 3.1.4. Resolves: RHEL-5586 - Fix HTTP response splitting in CGI. Resolves: RHEL-5591 - Fix ReDos vulnerability in URI. Resolves: RHEL-28919 Resolves: RHEL-5612 - Fix ReDos vulnerability in Time. Resolves: RHEL-28920 - Make RDoc soft dependency in IRB. Resolves: RHEL-5613 - Bypass git submodule test failure on Git >= 2.38.1. - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b. - Fix for tzdata-2022g. - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS. Resolves: RHEL-5590 - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters Related: RHEL-5590 - Disable fiddle tests that use FFI closures. Related: RHEL-5590 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171254 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Upgrade to Ruby 3.0.7. Resolves: RHEL-35740 - Fix HTTP response splitting in CGI. Resolves: RHEL-35741 - Fix ReDoS vulnerability in URI. Resolves: RHEL-35742 - Fix ReDoS vulnerability in Time. Resolves: RHEL-35743 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-35744 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-35746 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-35747 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252044 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171255 - Upgrade to Ruby 3.3.10. Resolves: RHEL-127912 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122015 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252039 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.0. Resolves: RHEL-17089 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Fix resolv: do not register on-demand classes for unknown DNS types and SvcParamKeys to prevent memory exhaustion (CVE-2026-80212) Resolves: RHEL-252035 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171255 - Upgrade to Ruby 3.3.10. Resolves: RHEL-127912 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122015 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252039 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.0. Resolves: RHEL-17089 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Fix resolv: do not register on-demand classes for unknown DNS types and SvcParamKeys to prevent memory exhaustion (CVE-2026-80212) Resolves: RHEL-252035 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171254 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Upgrade to Ruby 3.0.7. Resolves: RHEL-35740 - Fix HTTP response splitting in CGI. Resolves: RHEL-35741 - Fix ReDoS vulnerability in URI. Resolves: RHEL-35742 - Fix ReDoS vulnerability in Time. Resolves: RHEL-35743 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-35744 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-35746 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-35747 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252044 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Upgrade to Ruby 3.1.7. Resolves: RHEL-85235 - Fix DoS vulnerability in REXML. (CVE-2024-39908) Resolves: RHEL-57050 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68526 - Upgrade to Ruby 3.1.5. Resolves: RHEL-33978 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34129 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34121 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33871 - Upgrade to Ruby 3.1.4. Resolves: RHEL-5586 - Fix HTTP response splitting in CGI. Resolves: RHEL-5591 - Fix ReDos vulnerability in URI. Resolves: RHEL-28919 Resolves: RHEL-5612 - Fix ReDos vulnerability in Time. Resolves: RHEL-28920 - Make RDoc soft dependency in IRB. Resolves: RHEL-5613 - Bypass git submodule test failure on Git >= 2.38.1. - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b. - Fix for tzdata-2022g. - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS. Resolves: RHEL-5590 - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters Related: RHEL-5590 - Disable fiddle tests that use FFI closures. Related: RHEL-5590 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.0. Resolves: RHEL-17089 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Fix resolv: do not register on-demand classes for unknown DNS types and SvcParamKeys to prevent memory exhaustion (CVE-2026-80212) Resolves: RHEL-252035 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171254 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Upgrade to Ruby 3.0.7. Resolves: RHEL-35740 - Fix HTTP response splitting in CGI. Resolves: RHEL-35741 - Fix ReDoS vulnerability in URI. Resolves: RHEL-35742 - Fix ReDoS vulnerability in Time. Resolves: RHEL-35743 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-35744 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-35746 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-35747 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252044 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Upgrade to Ruby 3.1.7. Resolves: RHEL-85235 - Fix DoS vulnerability in REXML. (CVE-2024-39908) Resolves: RHEL-57050 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68526 - Upgrade to Ruby 3.1.5. Resolves: RHEL-33978 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34129 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34121 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33871 - Upgrade to Ruby 3.1.4. Resolves: RHEL-5586 - Fix HTTP response splitting in CGI. Resolves: RHEL-5591 - Fix ReDos vulnerability in URI. Resolves: RHEL-28919 Resolves: RHEL-5612 - Fix ReDos vulnerability in Time. Resolves: RHEL-28920 - Make RDoc soft dependency in IRB. Resolves: RHEL-5613 - Bypass git submodule test failure on Git >= 2.38.1. - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b. - Fix for tzdata-2022g. - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS. Resolves: RHEL-5590 - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters Related: RHEL-5590 - Disable fiddle tests that use FFI closures. Related: RHEL-5590 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171255 - Upgrade to Ruby 3.3.10. Resolves: RHEL-127912 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122015 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252039 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171254 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Upgrade to Ruby 3.0.7. Resolves: RHEL-35740 - Fix HTTP response splitting in CGI. Resolves: RHEL-35741 - Fix ReDoS vulnerability in URI. Resolves: RHEL-35742 - Fix ReDoS vulnerability in Time. Resolves: RHEL-35743 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-35744 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-35746 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-35747 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252044 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Upgrade to Ruby 3.1.7. Resolves: RHEL-85235 - Fix DoS vulnerability in REXML. (CVE-2024-39908) Resolves: RHEL-57050 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68526 - Upgrade to Ruby 3.1.5. Resolves: RHEL-33978 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34129 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34121 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33871 - Upgrade to Ruby 3.1.4. Resolves: RHEL-5586 - Fix HTTP response splitting in CGI. Resolves: RHEL-5591 - Fix ReDos vulnerability in URI. Resolves: RHEL-28919 Resolves: RHEL-5612 - Fix ReDos vulnerability in Time. Resolves: RHEL-28920 - Make RDoc soft dependency in IRB. Resolves: RHEL-5613 - Bypass git submodule test failure on Git >= 2.38.1. - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b. - Fix for tzdata-2022g. - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS. Resolves: RHEL-5590 - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters Related: RHEL-5590 - Disable fiddle tests that use FFI closures. Related: RHEL-5590 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171255 - Upgrade to Ruby 3.3.10. Resolves: RHEL-127912 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122015 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252039 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.0. Resolves: RHEL-17089 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Fix resolv: do not register on-demand classes for unknown DNS types and SvcParamKeys to prevent memory exhaustion (CVE-2026-80212) Resolves: RHEL-252035 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Fix the broken SSL tests with MariaDB 10.5.18. Resolves: RHEL-80220 - New upstream release 0.5.4 by merging Fedora rawhide branch (commit: e21b5b9) Resolves: rhbz#2063773 - New upstream release 0.5.3 by merging Fedora master branch (commit: 674d475) Resolves: rhbz#1817135 - Disable tests on the 32bit platforms ix86. Related: RHEL-80222 - Adapt tests to openssl 3.2 Resolves: RHEL-80222 - Upgrade to mysql2 0.5.5. Related: RHEL-17089 - Upgrade to mysql2 0.5.7. Related: RHEL-142278 - Disable tests on the 32bit platforms ix86. Related: RHEL-80222 - Adapt tests to openssl 3.2 Resolves: RHEL-80222 - New upstream release 0.5.4 by merging Fedora rawhide branch (commit: e21b5b9) Resolves: rhbz#2063773 - New upstream release 0.5.3 by merging Fedora master branch (commit: 674d475) Resolves: rhbz#1817135 - Disable tests on the 32bit platforms ix86. Related: RHEL-80222 - Adapt tests to openssl 3.2 Resolves: RHEL-80222 - Upgrade to mysql2 0.5.5. Related: RHEL-17089 - Upgrade to mysql2 0.5.7. Related: RHEL-142278 - Disable tests on the 32bit platforms ix86. Related: RHEL-80222 - Adapt tests to openssl 3.2 Resolves: RHEL-80222 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - rebuild for libpq ABI fix rhbz#1908268 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_3.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to pg 1.2.3. - Update to pg 1.2.2. - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_2.7 - Update to pg 1.3.5 Related: rhbz#2063773 - Update to pg 1.2.3 by merging Fedora master branch (commit: 5db4d26) Resolves: rhbz#1817135 - Fix encoding issue in spec suite. Resolves: RHEL-159200 - Upgrade to pg 1.6.3 Related: RHEL-142278 - Update to pg 1.3.5 Related: rhbz#2063773 - Update to pg 1.2.3 by merging Fedora master branch (commit: 5db4d26) Resolves: rhbz#1817135 - Fix encoding issue in spec suite. Resolves: RHEL-159200 - Upgrade to pg 1.6.3 Related: RHEL-142278 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171254 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Upgrade to Ruby 3.0.7. Resolves: RHEL-35740 - Fix HTTP response splitting in CGI. Resolves: RHEL-35741 - Fix ReDoS vulnerability in URI. Resolves: RHEL-35742 - Fix ReDoS vulnerability in Time. Resolves: RHEL-35743 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-35744 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-35746 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-35747 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252044 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Upgrade to Ruby 3.1.7. Resolves: RHEL-85235 - Fix DoS vulnerability in REXML. (CVE-2024-39908) Resolves: RHEL-57050 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68526 - Upgrade to Ruby 3.1.5. Resolves: RHEL-33978 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34129 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34121 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33871 - Upgrade to Ruby 3.1.4. Resolves: RHEL-5586 - Fix HTTP response splitting in CGI. Resolves: RHEL-5591 - Fix ReDos vulnerability in URI. Resolves: RHEL-28919 Resolves: RHEL-5612 - Fix ReDos vulnerability in Time. Resolves: RHEL-28920 - Make RDoc soft dependency in IRB. Resolves: RHEL-5613 - Bypass git submodule test failure on Git >= 2.38.1. - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b. - Fix for tzdata-2022g. - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS. Resolves: RHEL-5590 - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters Related: RHEL-5590 - Disable fiddle tests that use FFI closures. Related: RHEL-5590 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171255 - Upgrade to Ruby 3.3.10. Resolves: RHEL-127912 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122015 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252039 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.0. Resolves: RHEL-17089 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Fix resolv: do not register on-demand classes for unknown DNS types and SvcParamKeys to prevent memory exhaustion (CVE-2026-80212) Resolves: RHEL-252035 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171254 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Upgrade to Ruby 3.0.7. Resolves: RHEL-35740 - Fix HTTP response splitting in CGI. Resolves: RHEL-35741 - Fix ReDoS vulnerability in URI. Resolves: RHEL-35742 - Fix ReDoS vulnerability in Time. Resolves: RHEL-35743 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-35744 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-35746 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-35747 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252044 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Upgrade to Ruby 3.1.7. Resolves: RHEL-85235 - Fix DoS vulnerability in REXML. (CVE-2024-39908) Resolves: RHEL-57050 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68526 - Upgrade to Ruby 3.1.5. Resolves: RHEL-33978 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34129 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34121 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33871 - Upgrade to Ruby 3.1.4. Resolves: RHEL-5586 - Fix HTTP response splitting in CGI. Resolves: RHEL-5591 - Fix ReDos vulnerability in URI. Resolves: RHEL-28919 Resolves: RHEL-5612 - Fix ReDos vulnerability in Time. Resolves: RHEL-28920 - Make RDoc soft dependency in IRB. Resolves: RHEL-5613 - Bypass git submodule test failure on Git >= 2.38.1. - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b. - Fix for tzdata-2022g. - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS. Resolves: RHEL-5590 - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters Related: RHEL-5590 - Disable fiddle tests that use FFI closures. Related: RHEL-5590 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171255 - Upgrade to Ruby 3.3.10. Resolves: RHEL-127912 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122015 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252039 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.0. Resolves: RHEL-17089 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Fix resolv: do not register on-demand classes for unknown DNS types and SvcParamKeys to prevent memory exhaustion (CVE-2026-80212) Resolves: RHEL-252035 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171255 - Upgrade to Ruby 3.3.10. Resolves: RHEL-127912 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122015 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252039 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.0. Resolves: RHEL-17089 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Fix resolv: do not register on-demand classes for unknown DNS types and SvcParamKeys to prevent memory exhaustion (CVE-2026-80212) Resolves: RHEL-252035 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171254 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Upgrade to Ruby 3.0.7. Resolves: RHEL-35740 - Fix HTTP response splitting in CGI. Resolves: RHEL-35741 - Fix ReDoS vulnerability in URI. Resolves: RHEL-35742 - Fix ReDoS vulnerability in Time. Resolves: RHEL-35743 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-35744 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-35746 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-35747 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252044 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Upgrade to Ruby 3.1.7. Resolves: RHEL-85235 - Fix DoS vulnerability in REXML. (CVE-2024-39908) Resolves: RHEL-57050 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68526 - Upgrade to Ruby 3.1.5. Resolves: RHEL-33978 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34129 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34121 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33871 - Upgrade to Ruby 3.1.4. Resolves: RHEL-5586 - Fix HTTP response splitting in CGI. Resolves: RHEL-5591 - Fix ReDos vulnerability in URI. Resolves: RHEL-28919 Resolves: RHEL-5612 - Fix ReDos vulnerability in Time. Resolves: RHEL-28920 - Make RDoc soft dependency in IRB. Resolves: RHEL-5613 - Bypass git submodule test failure on Git >= 2.38.1. - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b. - Fix for tzdata-2022g. - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS. Resolves: RHEL-5590 - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters Related: RHEL-5590 - Disable fiddle tests that use FFI closures. Related: RHEL-5590 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171255 - Upgrade to Ruby 3.3.10. Resolves: RHEL-127912 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122015 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252039 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.0. Resolves: RHEL-17089 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Fix resolv: do not register on-demand classes for unknown DNS types and SvcParamKeys to prevent memory exhaustion (CVE-2026-80212) Resolves: RHEL-252035 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171254 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Upgrade to Ruby 3.0.7. Resolves: RHEL-35740 - Fix HTTP response splitting in CGI. Resolves: RHEL-35741 - Fix ReDoS vulnerability in URI. Resolves: RHEL-35742 - Fix ReDoS vulnerability in Time. Resolves: RHEL-35743 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-35744 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-35746 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-35747 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252044 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Upgrade to Ruby 3.1.7. Resolves: RHEL-85235 - Fix DoS vulnerability in REXML. (CVE-2024-39908) Resolves: RHEL-57050 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68526 - Upgrade to Ruby 3.1.5. Resolves: RHEL-33978 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34129 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34121 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33871 - Upgrade to Ruby 3.1.4. Resolves: RHEL-5586 - Fix HTTP response splitting in CGI. Resolves: RHEL-5591 - Fix ReDos vulnerability in URI. Resolves: RHEL-28919 Resolves: RHEL-5612 - Fix ReDos vulnerability in Time. Resolves: RHEL-28920 - Make RDoc soft dependency in IRB. Resolves: RHEL-5613 - Bypass git submodule test failure on Git >= 2.38.1. - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b. - Fix for tzdata-2022g. - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS. Resolves: RHEL-5590 - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters Related: RHEL-5590 - Disable fiddle tests that use FFI closures. Related: RHEL-5590 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.0. Resolves: RHEL-17089 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Fix resolv: do not register on-demand classes for unknown DNS types and SvcParamKeys to prevent memory exhaustion (CVE-2026-80212) Resolves: RHEL-252035 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171255 - Upgrade to Ruby 3.3.10. Resolves: RHEL-127912 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122015 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252039 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171254 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Upgrade to Ruby 3.0.7. Resolves: RHEL-35740 - Fix HTTP response splitting in CGI. Resolves: RHEL-35741 - Fix ReDoS vulnerability in URI. Resolves: RHEL-35742 - Fix ReDoS vulnerability in Time. Resolves: RHEL-35743 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-35744 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-35746 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-35747 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252044 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Upgrade to Ruby 3.1.7. Resolves: RHEL-85235 - Fix DoS vulnerability in REXML. (CVE-2024-39908) Resolves: RHEL-57050 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68526 - Upgrade to Ruby 3.1.5. Resolves: RHEL-33978 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34129 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34121 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33871 - Upgrade to Ruby 3.1.4. Resolves: RHEL-5586 - Fix HTTP response splitting in CGI. Resolves: RHEL-5591 - Fix ReDos vulnerability in URI. Resolves: RHEL-28919 Resolves: RHEL-5612 - Fix ReDos vulnerability in Time. Resolves: RHEL-28920 - Make RDoc soft dependency in IRB. Resolves: RHEL-5613 - Bypass git submodule test failure on Git >= 2.38.1. - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b. - Fix for tzdata-2022g. - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS. Resolves: RHEL-5590 - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters Related: RHEL-5590 - Disable fiddle tests that use FFI closures. Related: RHEL-5590 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171255 - Upgrade to Ruby 3.3.10. Resolves: RHEL-127912 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122015 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252039 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.0. Resolves: RHEL-17089 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Fix resolv: do not register on-demand classes for unknown DNS types and SvcParamKeys to prevent memory exhaustion (CVE-2026-80212) Resolves: RHEL-252035 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171254 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Upgrade to Ruby 3.0.7. Resolves: RHEL-35740 - Fix HTTP response splitting in CGI. Resolves: RHEL-35741 - Fix ReDoS vulnerability in URI. Resolves: RHEL-35742 - Fix ReDoS vulnerability in Time. Resolves: RHEL-35743 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-35744 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-35746 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-35747 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252044 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Upgrade to Ruby 3.1.7. Resolves: RHEL-85235 - Fix DoS vulnerability in REXML. (CVE-2024-39908) Resolves: RHEL-57050 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68526 - Upgrade to Ruby 3.1.5. Resolves: RHEL-33978 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34129 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34121 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33871 - Upgrade to Ruby 3.1.4. Resolves: RHEL-5586 - Fix HTTP response splitting in CGI. Resolves: RHEL-5591 - Fix ReDos vulnerability in URI. Resolves: RHEL-28919 Resolves: RHEL-5612 - Fix ReDos vulnerability in Time. Resolves: RHEL-28920 - Make RDoc soft dependency in IRB. Resolves: RHEL-5613 - Bypass git submodule test failure on Git >= 2.38.1. - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b. - Fix for tzdata-2022g. - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS. Resolves: RHEL-5590 - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters Related: RHEL-5590 - Disable fiddle tests that use FFI closures. Related: RHEL-5590 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.0. Resolves: RHEL-17089 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Fix resolv: do not register on-demand classes for unknown DNS types and SvcParamKeys to prevent memory exhaustion (CVE-2026-80212) Resolves: RHEL-252035 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171255 - Upgrade to Ruby 3.3.10. Resolves: RHEL-127912 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122015 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252039 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171254 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Upgrade to Ruby 3.0.7. Resolves: RHEL-35740 - Fix HTTP response splitting in CGI. Resolves: RHEL-35741 - Fix ReDoS vulnerability in URI. Resolves: RHEL-35742 - Fix ReDoS vulnerability in Time. Resolves: RHEL-35743 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-35744 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-35746 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-35747 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252044 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Upgrade to Ruby 3.1.7. Resolves: RHEL-85235 - Fix DoS vulnerability in REXML. (CVE-2024-39908) Resolves: RHEL-57050 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68526 - Upgrade to Ruby 3.1.5. Resolves: RHEL-33978 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34129 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34121 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33871 - Upgrade to Ruby 3.1.4. Resolves: RHEL-5586 - Fix HTTP response splitting in CGI. Resolves: RHEL-5591 - Fix ReDos vulnerability in URI. Resolves: RHEL-28919 Resolves: RHEL-5612 - Fix ReDos vulnerability in Time. Resolves: RHEL-28920 - Make RDoc soft dependency in IRB. Resolves: RHEL-5613 - Bypass git submodule test failure on Git >= 2.38.1. - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b. - Fix for tzdata-2022g. - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS. Resolves: RHEL-5590 - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters Related: RHEL-5590 - Disable fiddle tests that use FFI closures. Related: RHEL-5590 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171255 - Upgrade to Ruby 3.3.10. Resolves: RHEL-127912 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122015 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252039 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.0. Resolves: RHEL-17089 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Fix resolv: do not register on-demand classes for unknown DNS types and SvcParamKeys to prevent memory exhaustion (CVE-2026-80212) Resolves: RHEL-252035 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171254 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Upgrade to Ruby 3.0.7. Resolves: RHEL-35740 - Fix HTTP response splitting in CGI. Resolves: RHEL-35741 - Fix ReDoS vulnerability in URI. Resolves: RHEL-35742 - Fix ReDoS vulnerability in Time. Resolves: RHEL-35743 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-35744 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-35746 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-35747 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252044 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Upgrade to Ruby 3.1.7. Resolves: RHEL-85235 - Fix DoS vulnerability in REXML. (CVE-2024-39908) Resolves: RHEL-57050 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68526 - Upgrade to Ruby 3.1.5. Resolves: RHEL-33978 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34129 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34121 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33871 - Upgrade to Ruby 3.1.4. Resolves: RHEL-5586 - Fix HTTP response splitting in CGI. Resolves: RHEL-5591 - Fix ReDos vulnerability in URI. Resolves: RHEL-28919 Resolves: RHEL-5612 - Fix ReDos vulnerability in Time. Resolves: RHEL-28920 - Make RDoc soft dependency in IRB. Resolves: RHEL-5613 - Bypass git submodule test failure on Git >= 2.38.1. - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b. - Fix for tzdata-2022g. - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS. Resolves: RHEL-5590 - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters Related: RHEL-5590 - Disable fiddle tests that use FFI closures. Related: RHEL-5590 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171255 - Upgrade to Ruby 3.3.10. Resolves: RHEL-127912 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122015 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252039 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.0. Resolves: RHEL-17089 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Fix resolv: do not register on-demand classes for unknown DNS types and SvcParamKeys to prevent memory exhaustion (CVE-2026-80212) Resolves: RHEL-252035 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171254 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Upgrade to Ruby 3.0.7. Resolves: RHEL-35740 - Fix HTTP response splitting in CGI. Resolves: RHEL-35741 - Fix ReDoS vulnerability in URI. Resolves: RHEL-35742 - Fix ReDoS vulnerability in Time. Resolves: RHEL-35743 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-35744 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-35746 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-35747 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252044 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Upgrade to Ruby 3.1.7. Resolves: RHEL-85235 - Fix DoS vulnerability in REXML. (CVE-2024-39908) Resolves: RHEL-57050 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68526 - Upgrade to Ruby 3.1.5. Resolves: RHEL-33978 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34129 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34121 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33871 - Upgrade to Ruby 3.1.4. Resolves: RHEL-5586 - Fix HTTP response splitting in CGI. Resolves: RHEL-5591 - Fix ReDos vulnerability in URI. Resolves: RHEL-28919 Resolves: RHEL-5612 - Fix ReDos vulnerability in Time. Resolves: RHEL-28920 - Make RDoc soft dependency in IRB. Resolves: RHEL-5613 - Bypass git submodule test failure on Git >= 2.38.1. - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b. - Fix for tzdata-2022g. - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS. Resolves: RHEL-5590 - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters Related: RHEL-5590 - Disable fiddle tests that use FFI closures. Related: RHEL-5590 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171255 - Upgrade to Ruby 3.3.10. Resolves: RHEL-127912 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122015 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252039 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.0. Resolves: RHEL-17089 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Fix resolv: do not register on-demand classes for unknown DNS types and SvcParamKeys to prevent memory exhaustion (CVE-2026-80212) Resolves: RHEL-252035 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171254 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Upgrade to Ruby 3.0.7. Resolves: RHEL-35740 - Fix HTTP response splitting in CGI. Resolves: RHEL-35741 - Fix ReDoS vulnerability in URI. Resolves: RHEL-35742 - Fix ReDoS vulnerability in Time. Resolves: RHEL-35743 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-35744 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-35746 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-35747 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252044 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Upgrade to Ruby 3.1.7. Resolves: RHEL-85235 - Fix DoS vulnerability in REXML. (CVE-2024-39908) Resolves: RHEL-57050 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68526 - Upgrade to Ruby 3.1.5. Resolves: RHEL-33978 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34129 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34121 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33871 - Upgrade to Ruby 3.1.4. Resolves: RHEL-5586 - Fix HTTP response splitting in CGI. Resolves: RHEL-5591 - Fix ReDos vulnerability in URI. Resolves: RHEL-28919 Resolves: RHEL-5612 - Fix ReDos vulnerability in Time. Resolves: RHEL-28920 - Make RDoc soft dependency in IRB. Resolves: RHEL-5613 - Bypass git submodule test failure on Git >= 2.38.1. - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b. - Fix for tzdata-2022g. - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS. Resolves: RHEL-5590 - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters Related: RHEL-5590 - Disable fiddle tests that use FFI closures. Related: RHEL-5590 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171255 - Upgrade to Ruby 3.3.10. Resolves: RHEL-127912 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122015 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252039 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Fix resolv: do not register on-demand classes for unknown DNS types and SvcParamKeys to prevent memory exhaustion (CVE-2026-80212) Resolves: RHEL-252035 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.0. Resolves: RHEL-17089 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171254 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Upgrade to Ruby 3.0.7. Resolves: RHEL-35740 - Fix HTTP response splitting in CGI. Resolves: RHEL-35741 - Fix ReDoS vulnerability in URI. Resolves: RHEL-35742 - Fix ReDoS vulnerability in Time. Resolves: RHEL-35743 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-35744 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-35746 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-35747 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252044 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Upgrade to Ruby 3.1.7. Resolves: RHEL-85235 - Fix DoS vulnerability in REXML. (CVE-2024-39908) Resolves: RHEL-57050 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68526 - Upgrade to Ruby 3.1.5. Resolves: RHEL-33978 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34129 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34121 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33871 - Upgrade to Ruby 3.1.4. Resolves: RHEL-5586 - Fix HTTP response splitting in CGI. Resolves: RHEL-5591 - Fix ReDos vulnerability in URI. Resolves: RHEL-28919 Resolves: RHEL-5612 - Fix ReDos vulnerability in Time. Resolves: RHEL-28920 - Make RDoc soft dependency in IRB. Resolves: RHEL-5613 - Bypass git submodule test failure on Git >= 2.38.1. - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b. - Fix for tzdata-2022g. - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS. Resolves: RHEL-5590 - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters Related: RHEL-5590 - Disable fiddle tests that use FFI closures. Related: RHEL-5590 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171255 - Upgrade to Ruby 3.3.10. Resolves: RHEL-127912 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122015 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Fix memory exhaustion via unknown DNS resource types in resolv. (CVE-2026-80212) Resolves: RHEL-252039 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Fix resolv: do not register on-demand classes for unknown DNS types and SvcParamKeys to prevent memory exhaustion (CVE-2026-80212) Resolves: RHEL-252035 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.0. Resolves: RHEL-17089 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Update to https://github.com/opencontainers/runc/releases/tag/v1.4.2 - Resolves: RHEL-165497 - Rebuild for new golang to address CVE-2025-61726 - Resolves: RHEL-146111 - update to https://github.com/opencontainers/runc/releases/tag/v1.4.0 - Resolves: RHEL-132769 - update to https://github.com/opencontainers/runc/releases/tag/v1.3.3 - Related: RHEL-111919 - update to https://github.com/opencontainers/runc/releases/tag/v1.3.2 - Resolves: RHEL-124800 - update to https://github.com/opencontainers/runc/releases/tag/v1.3.1 - Related: RHEL-111919 - update to https://github.com/opencontainers/runc/releases/tag/v1.3.0 - Related: RHEL-80816 - update to https://github.com/opencontainers/runc/releases/tag/v1.2.6 - Related: RHEL-80816 - update to https://github.com/opencontainers/runc/releases/tag/v1.2.5 - Related: RHEL-60277 - Implement CPU affinity patch from Kir Kolishkin - Related: RHEL-60277 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158787 - Update to https://github.com/opencontainers/runc/releases/tag/v1.4.2 - Resolves: RHEL-165497 - Rebuild for new golang to address CVE-2025-61726 - Resolves: RHEL-146111 - update to https://github.com/opencontainers/runc/releases/tag/v1.4.0 - Resolves: RHEL-132769 - update to https://github.com/opencontainers/runc/releases/tag/v1.3.3 - Related: RHEL-111919 - update to https://github.com/opencontainers/runc/releases/tag/v1.3.2 - Resolves: RHEL-124800 - update to https://github.com/opencontainers/runc/releases/tag/v1.3.1 - Related: RHEL-111919 - update to https://github.com/opencontainers/runc/releases/tag/v1.3.0 - Related: RHEL-80816 - update to https://github.com/opencontainers/runc/releases/tag/v1.2.6 - Related: RHEL-80816 - update to https://github.com/opencontainers/runc/releases/tag/v1.2.5 - Related: RHEL-60277 - rebuild for CVE-2026-56860 - Resolves: RHEL-241703 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158787 - Update to https://github.com/opencontainers/runc/releases/tag/v1.4.2 - Resolves: RHEL-165497 - Rebuild for new golang to address CVE-2025-61726 - Resolves: RHEL-146111 - update to https://github.com/opencontainers/runc/releases/tag/v1.4.0 - Resolves: RHEL-132769 - update to https://github.com/opencontainers/runc/releases/tag/v1.3.3 - Related: RHEL-111919 - update to https://github.com/opencontainers/runc/releases/tag/v1.3.2 - Resolves: RHEL-124800 - update to https://github.com/opencontainers/runc/releases/tag/v1.3.1 - Related: RHEL-111919 - update to https://github.com/opencontainers/runc/releases/tag/v1.3.0 - Related: RHEL-80816 - update to https://github.com/opencontainers/runc/releases/tag/v1.2.6 - Related: RHEL-80816 - Update to Rust 1.92.0 - Update to Rust 1.91.0 - Update to Rust 1.90 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.89.0 - Sync rust-toolset's rpm macros with RHEL 10 - Update to Rust 1.88.0 - Update to 1.87.0 - Temporarily skip PGO on RHEL ppc64le - Update to 1.86.0 - Apply libgit2 fix for CVE-2026-53587 - Update to Rust 1.92.0 - Update to Rust 1.91.0 - Update to Rust 1.90 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.89.0 - Sync rust-toolset's rpm macros with RHEL 10 - Update to Rust 1.88.0 - Update to 1.87.0 - Temporarily skip PGO on RHEL ppc64le - Update to Rust 1.92.0 - Update to Rust 1.91.0 - Update to Rust 1.90 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.89.0 - Sync rust-toolset's rpm macros with RHEL 10 - Update to Rust 1.88.0 - Update to 1.87.0 - Temporarily skip PGO on RHEL ppc64le - Update to 1.86.0 - Apply libgit2 fix for CVE-2026-53587 - Update to Rust 1.92.0 - Update to Rust 1.91.0 - Update to Rust 1.90 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.89.0 - Sync rust-toolset's rpm macros with RHEL 10 - Update to Rust 1.88.0 - Update to 1.87.0 - Temporarily skip PGO on RHEL ppc64le - Update to Rust 1.92.0 - Update to Rust 1.91.0 - Update to Rust 1.90 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.89.0 - Sync rust-toolset's rpm macros with RHEL 10 - Update to Rust 1.88.0 - Update to 1.87.0 - Temporarily skip PGO on RHEL ppc64le - Update to 1.86.0 - Apply libgit2 fix for CVE-2026-53587 - Update to Rust 1.92.0 - Update to Rust 1.91.0 - Update to Rust 1.90 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.89.0 - Sync rust-toolset's rpm macros with RHEL 10 - Update to Rust 1.88.0 - Update to 1.87.0 - Temporarily skip PGO on RHEL ppc64le - Update to Rust 1.92.0 - Update to Rust 1.91.0 - Update to Rust 1.90 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.89.0 - Sync rust-toolset's rpm macros with RHEL 10 - Update to Rust 1.88.0 - Update to 1.87.0 - Temporarily skip PGO on RHEL ppc64le - Update to 1.86.0 - Apply libgit2 fix for CVE-2026-53587 - Update to Rust 1.92.0 - Update to Rust 1.91.0 - Update to Rust 1.90 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.89.0 - Sync rust-toolset's rpm macros with RHEL 10 - Update to Rust 1.88.0 - Update to 1.87.0 - Temporarily skip PGO on RHEL ppc64le - Update to Rust 1.92.0 - Update to Rust 1.91.0 - Update to Rust 1.90 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.89.0 - Sync rust-toolset's rpm macros with RHEL 10 - Update to Rust 1.88.0 - Update to 1.87.0 - Temporarily skip PGO on RHEL ppc64le - Update to 1.86.0 - Apply libgit2 fix for CVE-2026-53587 - Update to Rust 1.92.0 - Update to Rust 1.91.0 - Update to Rust 1.90 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.89.0 - Sync rust-toolset's rpm macros with RHEL 10 - Update to Rust 1.88.0 - Update to 1.87.0 - Temporarily skip PGO on RHEL ppc64le - Update to Rust 1.92.0 - Update to Rust 1.91.0 - Update to Rust 1.90 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.89.0 - Sync rust-toolset's rpm macros with RHEL 10 - Update to Rust 1.88.0 - Update to 1.87.0 - Temporarily skip PGO on RHEL ppc64le - Update to 1.86.0 - Apply libgit2 fix for CVE-2026-53587 - Update to Rust 1.92.0 - Update to Rust 1.91.0 - Update to Rust 1.90 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.89.0 - Sync rust-toolset's rpm macros with RHEL 10 - Update to Rust 1.88.0 - Update to 1.87.0 - Temporarily skip PGO on RHEL ppc64le - Update to Rust 1.92.0 - Update to Rust 1.91.0 - Update to Rust 1.90 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.89.0 - Sync rust-toolset's rpm macros with RHEL 10 - Update to Rust 1.88.0 - Update to 1.87.0 - Temporarily skip PGO on RHEL ppc64le - Update to 1.86.0 - Apply libgit2 fix for CVE-2026-53587 - Update to Rust 1.92.0 - Update to Rust 1.91.0 - Update to Rust 1.90 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.89.0 - Sync rust-toolset's rpm macros with RHEL 10 - Update to Rust 1.88.0 - Update to 1.87.0 - Temporarily skip PGO on RHEL ppc64le - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 17 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 15 - Update to 14 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 13 - Update to 12 - Update to Rust 1.92.0 - Update to Rust 1.91.0 - Update to Rust 1.90 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.89.0 - Sync rust-toolset's rpm macros with RHEL 10 - Update to Rust 1.88.0 - Update to 1.87.0 - Temporarily skip PGO on RHEL ppc64le - Update to 1.86.0 - Apply libgit2 fix for CVE-2026-53587 - Update to Rust 1.92.0 - Update to Rust 1.91.0 - Update to Rust 1.90 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.89.0 - Sync rust-toolset's rpm macros with RHEL 10 - Update to Rust 1.88.0 - Update to 1.87.0 - Temporarily skip PGO on RHEL ppc64le - Update to Rust 1.92.0 - Update to Rust 1.91.0 - Update to Rust 1.90 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.89.0 - Sync rust-toolset's rpm macros with RHEL 10 - Update to Rust 1.88.0 - Update to 1.87.0 - Temporarily skip PGO on RHEL ppc64le - Update to 1.86.0 - Apply libgit2 fix for CVE-2026-53587 - Update to Rust 1.92.0 - Update to Rust 1.91.0 - Update to Rust 1.90 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.89.0 - Sync rust-toolset's rpm macros with RHEL 10 - Update to Rust 1.88.0 - Update to 1.87.0 - Temporarily skip PGO on RHEL ppc64le - Update to Rust 1.92.0 - Update to Rust 1.91.0 - Update to Rust 1.90 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.89.0 - Sync rust-toolset's rpm macros with RHEL 10 - Update to Rust 1.88.0 - Update to 1.87.0 - Temporarily skip PGO on RHEL ppc64le - Update to 1.86.0 - Apply libgit2 fix for CVE-2026-53587 - Update to Rust 1.92.0 - Update to Rust 1.91.0 - Update to Rust 1.90 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.89.0 - Sync rust-toolset's rpm macros with RHEL 10 - Update to Rust 1.88.0 - Update to 1.87.0 - Temporarily skip PGO on RHEL ppc64le - Update to Rust 1.92.0 - Update to Rust 1.91.0 - Update to Rust 1.90 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.89.0 - Sync rust-toolset's rpm macros with RHEL 10 - Update to Rust 1.88.0 - Update to 1.87.0 - Temporarily skip PGO on RHEL ppc64le - Update to 1.86.0 - Apply libgit2 fix for CVE-2026-53587 - Update to Rust 1.92.0 - Update to Rust 1.91.0 - Update to Rust 1.90 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.89.0 - Sync rust-toolset's rpm macros with RHEL 10 - Update to Rust 1.88.0 - Update to 1.87.0 - Temporarily skip PGO on RHEL ppc64le - Update to Rust 1.92.0 - Update to Rust 1.91.0 - Update to Rust 1.90 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.89.0 - Sync rust-toolset's rpm macros with RHEL 10 - Update to Rust 1.88.0 - Update to 1.87.0 - Temporarily skip PGO on RHEL ppc64le - Update to 1.86.0 - Apply libgit2 fix for CVE-2026-53587 - Update to Rust 1.92.0 - Update to Rust 1.91.0 - Update to Rust 1.90 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.89.0 - Sync rust-toolset's rpm macros with RHEL 10 - Update to Rust 1.88.0 - Update to 1.87.0 - Temporarily skip PGO on RHEL ppc64le - Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable backports (SOURCES/1100-1196) - Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto authencesn/algif) - Keep the smb cifs.spnego ahead-fix (retained as 1197) - RHEL changelog for 687.6.1..687.10.1 follows: - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163} - RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128} - usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607} - can: raw: fix ro->uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401} - powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125] - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742] - Revert "lpfc: don't use file->f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742] - drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822] - drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853] - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404] - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402} - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741} - smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988] - ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378] - RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966] - net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207] - ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095] - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766} - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766} - rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075} - Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable backports (SOURCES/1198-1252) - RHEL changelog for 687.11.1..687.12.1 follows: - dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110} - Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020} - crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914] - proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653} - proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653} - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470] - mm/page_alloc: clear page->private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303} - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158} - redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927] - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859] - ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829] - ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829] - ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179] - ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257] - dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442] - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378] - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684} - cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701] - ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701] - ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701] - ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701] - drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179] - nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089} - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724} - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183} - i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312] - ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182] - ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185] - Revert "mm: pcp: increase pcp->free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464] - netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392} - Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269) - RHEL changelog for 687.13.1 follows: - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243} - s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472] - s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472] - s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472] - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745] - nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745] - Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786} - crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167] - crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167] - smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613} - mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778] - mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778] - mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778] - mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778] - mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778] - mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778] - mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778] - mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778] - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.18.1..687.19.1 follows: - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176} - init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183] - update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183] - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183] - work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183] - compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183] - powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183] - sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776] - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189} - sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273] - netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273] - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993] - iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993] - iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993] - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993] - iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993] - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057] - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057] - IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057] - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057] - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057] - net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057] - net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057] - net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057] - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057] - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057] - net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057] - net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057] - net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057] - net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057] - net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057] - net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057] - net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057] - net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057] - net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057] - net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057] - net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057] - mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057] - net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057] - net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057] - net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057] - net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057] - net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057] - net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057] - net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057] - net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057] - net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057] - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057] - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057] - mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057] - net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057] - net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057] - net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057] - net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057] - net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057] - net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057] - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057] - net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057] - net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057] - net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057] - net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057] - net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057] - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057] - net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057] - net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057] - net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057] - net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057] - net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057] - net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057] - net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057] - net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057] - net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057] - net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057] - eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057] - net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057] - net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057] - net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057] - net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057] - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057] - RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057] - net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057] - net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057] - net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057] - net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057] - net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057] - net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057] - net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057] - net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057] - net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057] - net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057] - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057] - net: Fix typos (Kamal Heib) [RHEL-169057] - net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057] - net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057] - net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057] - net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057] - net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057] - net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057] - net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057] - net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057] - net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057] - net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057] - net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057] - eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Kamal Heib) [RHEL-169057] - net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057] - net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057] - net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057] - net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057] - net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057] - net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057] - net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057] - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057] - net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057] - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057] - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057] - net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057] - net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057] - net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057] - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057] - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444] - ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444] - ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444] - ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488} - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329} - Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312) - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.19.1..687.20.1 follows: - crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540] - crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540] - crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540] - crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540] - tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198} - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739} - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760] - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760] - scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886] - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411} - Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.18.1..687.19.1 follows: - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176} - init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183] - update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183] - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183] - work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183] - compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183] - powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183] - sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776] - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189} - sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273] - netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273] - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993] - iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993] - iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993] - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993] - iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993] - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057] - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057] - IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057] - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057] - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057] - net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057] - net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057] - net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057] - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057] - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057] - net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057] - net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057] - net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057] - net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057] - net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057] - net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057] - net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057] - net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057] - net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057] - net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057] - net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057] - mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057] - net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057] - net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057] - net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057] - net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057] - net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057] - net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057] - net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057] - net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057] - net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057] - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057] - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057] - mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057] - net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057] - net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057] - net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057] - net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057] - net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057] - net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057] - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057] - net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057] - net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057] - net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057] - net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057] - net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057] - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057] - net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057] - net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057] - net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057] - net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057] - net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057] - net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057] - net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057] - net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057] - net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057] - net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057] - eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057] - net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057] - net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057] - net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057] - net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057] - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057] - RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057] - net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057] - net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057] - net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057] - net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057] - net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057] - net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057] - net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057] - net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057] - net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057] - net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057] - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057] - net: Fix typos (Kamal Heib) [RHEL-169057] - net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057] - net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057] - net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057] - net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057] - net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057] - net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057] - net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057] - net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057] - net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057] - net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057] - net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057] - eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Kamal Heib) [RHEL-169057] - net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057] - net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057] - net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057] - net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057] - net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057] - net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057] - net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057] - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057] - net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057] - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057] - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057] - net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057] - net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057] - net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057] - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057] - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444] - ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444] - ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444] - ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488} - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329} - Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312) - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735) - Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll ep_remove use-after-free CVE-2026-46242 (1712) - RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux ahead-patch (1312) is retained and RHEL's duplicate copy omitted - CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263) - RHEL changelog for 687.21.1..687.22.1 follows: - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041] - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116} - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263} - KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316} - netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227} - nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966] - Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755) - The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by RHEL's eventpoll series carrying the same fix and is dropped - Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738) - RHEL changelog for 687.23.1 follows: - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1756, 1757) are superseded by RHEL's copies and dropped - RHEL changelog for 687.25.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770) - RHEL changelog for 687.26.1 follows: - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1756, 1757) are superseded by RHEL's copies and dropped - RHEL changelog for 687.25.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041] - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116} - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888} - smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811] - drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136} - drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143} - drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884} - drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237} - wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065] - crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065] - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952} - mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523] - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549] - udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343} - posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560} - posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370} - posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844] - posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844] - posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844] - posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844] - posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388} - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232554] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991} - smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386} - smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581} - s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333] - s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333] - s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333] - s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277} - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211} - crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398] - zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185} - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114} - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619] - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619] - Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762] - Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762] - Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762] - Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762] - Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762] - Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762] - Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762] - Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762] - nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489] - pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489] - net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508] - cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548] - spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129] - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431) - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619] - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619] - Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762] - Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762] - Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762] - Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762] - Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762] - Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762] - Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762] - Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762] - nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489] - net: skbuff: propagate shared-frag marker through frag-transfer helpers (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300 "Fragnesia") - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431) - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (Maurizio Lombardi) [RHEL-213202] {CVE-2026-63887} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] {CVE-2026-72130} - sched/rt: Skip currently executing CPU in rto_next_cpu() (CKI Backport Bot) [RHEL-240634] - smc: Fix use-after-free in __pnet_find_base_ndev(). (Ramesh Chhetri) [RHEL-152651] {CVE-2025-40064} - userfaultfd: prevent registration of special VMAs (Rafael Aquini) [RHEL-240761] {CVE-2026-68166} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234043] {CVE-2026-64298} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227785] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229407] {CVE-2026-53392} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228038] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226457] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225521] {CVE-2026-53397} - crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() (Vladislav Dronov) [RHEL-234488] {CVE-2026-64438} - KEYS: fix overflow in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - KEYS: fix length validation in keyctl_pkey_params_get_2() (Bruno Meneguele) [RHEL-229627] {CVE-2026-63824} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230496] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230496] - crypto: qat - validate RSA CRT component lengths (CKI Backport Bot) [RHEL-234535] {CVE-2026-64304} - tpm: tpm_tis: stop transmit if retries are exhausted (Štěpán Horáček) [RHEL-213940] - tpm: tpm_tis: add error logging for data transfer (Štěpán Horáček) [RHEL-213940] - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Štěpán Horáček) [RHEL-213940] - tpm_tis: Resend command to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - tpm_tis: Use responseRetry to recover from data transfer errors (Štěpán Horáček) [RHEL-213940] - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231664] {CVE-2026-63886} - ALSA: virtio: Validate control metadata from the device (CKI Backport Bot) [RHEL-230139] {CVE-2026-64490} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229228] {CVE-2026-64018} - smb/client: fix out-of-bounds read in symlink_data() (CKI Backport Bot) [RHEL-229064] {CVE-2026-46185} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225285] {CVE-2026-45970} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219525] {CVE-2026-64268} - smb: client: fix query directory replay double-free (CKI Backport Bot) [RHEL-219152] {CVE-2026-64387} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Štěpán Horáček) [RHEL-189953] {CVE-2025-71147} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] {CVE-2026-72069} - locking/rt: Add sparse annotation for RCU. (Waiman Long) [RHEL-242684] - iomap: fix out-of-bounds bitmap_set() with zero-length range (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - iomap: hold state_lock over call to ifs_set_range_uptodate() (CKI Backport Bot) [RHEL-240191] {CVE-2026-68145} - exfat: fix potential use-after-free in exfat_find_dir_entry() (CKI Backport Bot) [RHEL-231461] {CVE-2026-63808} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CKI Backport Bot) [RHEL-227266] {CVE-2026-64002} - Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CKI Backport Bot) [RHEL-223126] {CVE-2026-53073} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU (Jon Maloy) [RHEL-234207] {CVE-2026-64287} - nvmet-auth: validate reply message payload bounds against transfer length (CKI Backport Bot) [RHEL-234145] {CVE-2026-64319} - smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() (CKI Backport Bot) [RHEL-228852] {CVE-2026-64136} - io_uring/poll: fix signed comparison in io_poll_get_ownership() (CKI Backport Bot) [RHEL-227107] {CVE-2026-52933} - smb: client: fix change notify replay double-free (CKI Backport Bot) [RHEL-226985] {CVE-2026-64384} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (CKI Backport Bot) [RHEL-219614] {CVE-2026-64320} - can: bcm: extend bcm_tx_lock usage for data and timer updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking when updating filter and timer values (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: fix locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - can: bcm: add locking for bcm_op runtime updates (CKI Backport Bot) [RHEL-216699] {CVE-2025-38004} - netfilter: nat: use kfree_rcu to release ops (Florian Westphal) [RHEL-188518] {CVE-2026-53000} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - tcp: call sk_data_ready() after listener migration (Felix Maurer) [RHEL-232236] {CVE-2026-46015} - flow_dissector: do not dissect PPPoE PFC frames (Felix Maurer) [RHEL-232633] {CVE-2026-46306} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Felix Maurer) [RHEL-226126] {CVE-2026-46266} - ipv4: icmp: convert to dev_net_rcu() (Felix Maurer) [RHEL-226126] - ipv6: mcast: Fix use-after-free when processing MLD queries (Felix Maurer) [RHEL-226071] {CVE-2026-53275} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Felix Maurer) [RHEL-225592] {CVE-2026-43339} - ipv6: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] - ipv4: account for fraggap on the paged allocation path (Felix Maurer) [RHEL-212891] {CVE-2026-53366} - inet: ping: fix recent breakage (Felix Maurer) [RHEL-212891] - net: unify alloclen calculation for paged requests (Felix Maurer) [RHEL-212891] - net: guard timestamp cmsgs to real error queue skbs (Felix Maurer) [RHEL-225858] {CVE-2026-53223} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248451] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246930] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244971] {CVE-2026-72129} - Revert "net/smc: Introduce TCP ULP support" (Jan Polensky) [RHEL-227559] {CVE-2026-46330} - smb: client: fix double-free in SMB2_close() replay (CKI Backport Bot) [RHEL-240049] {CVE-2026-64597} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226689] {CVE-2026-43493} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230988] {CVE-2026-64034} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225785] {CVE-2026-46149} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224454] {CVE-2026-53002} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189457] {CVE-2026-43133} - mm/ksm: add option to deduplicate only zero pages (Andrea Arcangeli) [RHEL-249161] - mm/ksm: don't waste time searching stable tree for fast changing page (Andrea Arcangeli) [RHEL-249161] - mm/hugetlb.c: undo errant change (Andrea Arcangeli) [RHEL-249161] - mm/ksm: refactor out try_to_merge_with_zero_page() (Andrea Arcangeli) [RHEL-249161] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254594] {CVE-2026-74556} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-178223] - gfs2: Remove trans_drain code duplication (Andreas Gruenbacher) [RHEL-178223] - gfs2: Move gfs2_remove_from_journal to log.c (Andreas Gruenbacher) [RHEL-178223] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-178223] - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (Michal Schmidt) [RHEL-242822] {CVE-2026-72045} - octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify (Michal Schmidt) [RHEL-231042] {CVE-2026-63923} - net: qrtr: restrict socket creation to the initial network namespace (CKI Backport Bot) [RHEL-240242] {CVE-2026-68294} - net: slip: serialize receive against buffer reallocation (CKI Backport Bot) [RHEL-237383] {CVE-2026-68143} - security/keys: fix missed RCU read section on lookup (CKI Backport Bot) [RHEL-225660] {CVE-2026-64015} - vhost: move vdpa group bound check to vhost_vdpa (Jon Maloy) [RHEL-174277] {CVE-2026-43248} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244958] {CVE-2026-72098} - mm/khugepaged: write all dirty file folios when collapsing (Rafael Aquini) [RHEL-236332] {CVE-2026-68086} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222396] {CVE-2026-43370} - drm/i915: Fix potential overflow of shmem scatterlist length (CKI Backport Bot) [RHEL-222481] {CVE-2026-43368} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat (CKI Backport Bot) [RHEL-222417] {CVE-2026-31656} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221275] {CVE-2026-31566} - drm/xe: always keep track of remap prev/next (CKI Backport Bot) [RHEL-222300] {CVE-2026-31479} - drm/xe: Issue GGTT invalidation under lock in ggtt_node_remove (José Expósito) [RHEL-222458] - drm/xe: Open-code GGTT MMIO access protection (CKI Backport Bot) [RHEL-222458] {CVE-2026-23466} - drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (José Expósito) [RHEL-236583] {CVE-2026-68264} - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228880] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238037] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229470] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231574] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236147] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237395] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237093] {CVE-2026-68300} - selftests: nft_queue.sh: add a parallel stress test (Florian Westphal) [RHEL-224489] - kselftest: add test for nfqueue induced conntrack race (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: avoid flakes on debug kernels (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: fix spurious timeout on debug kernel (Florian Westphal) [RHEL-224489] - selftests: netfilter: nft_queue.sh: reduce test file size for debug build (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [RHEL-224489] {CVE-2026-43084} - netfilter: nfnetlink_queue: optimize verdict lookup with hash table (Florian Westphal) [RHEL-224489] - netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation (Florian Westphal) [RHEL-224489] - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-235907] {CVE-2025-68745} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190206] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190206] {CVE-2026-53246} - wifi: cfg80211: reject empty PMSR peer lists (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: reject unsupported PMSR FTM location requests (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR measurement type data (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: validate PMSR FTM preamble range (Jose Ignacio Tornos Martinez) [RHEL-237652] {CVE-2026-68406} - wifi: cfg80211: bound element ID read when checking non-inheritance (Jose Ignacio Tornos Martinez) [RHEL-236961] {CVE-2026-68402} - wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers (Jose Ignacio Tornos Martinez) [RHEL-232010] {CVE-2026-64255} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231682] {CVE-2026-64117} - wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled (Jose Ignacio Tornos Martinez) [RHEL-230975] {CVE-2026-64037} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230587] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229728] {CVE-2026-52947} - wifi: mac80211: fix multi-link element inheritance (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - wifi: mac80211: fix MLE defragmentation (Jose Ignacio Tornos Martinez) [RHEL-227619] {CVE-2026-64515} - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER (CKI Backport Bot) [RHEL-232670] {CVE-2026-53072} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231059] {CVE-2026-63947} - Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend (CKI Backport Bot) [RHEL-230073] {CVE-2026-53209} - Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (CKI Backport Bot) [RHEL-230005] {CVE-2026-63944} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228756] {CVE-2026-63975} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228721] {CVE-2026-63889} - Bluetooth: ISO: fix UAF in iso_recv_frame (CKI Backport Bot) [RHEL-227910] {CVE-2026-63946} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227882] {CVE-2026-64113} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227536] {CVE-2026-43334} - iommu/amd: Fix clone_alias() to use the original device's devid (CKI Backport Bot) [RHEL-227454] {CVE-2026-53053} - Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (CKI Backport Bot) [RHEL-226431] {CVE-2026-63945} - Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225646] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225576] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225553] {CVE-2026-52918} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188228] {CVE-2026-53091} - rtla/timerlat_top: Fix on-threshold actions firing on signal (Tomas Glozar) [RHEL-193025] - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-193025] - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193050] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172532] {CVE-2026-31692} - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-178219] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-178219] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-178219] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-178219] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-178219] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-178219] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-178219] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] {CVE-2026-72243} - gfs2: Get rid of sd_async_glock_wait (Andreas Gruenbacher) [RHEL-253986] - watchdog: fix hrtimer start when pretimeout is zero (Krzysztof Pawlinski) [RHEL-255217] - iommu/vt-d: Fix UCTP context table slot when copying root entries (Desnes Nunes) [RHEL-256733] - wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (Izabela Bakollari) [RHEL-246399] {CVE-2026-63869} - wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (Izabela Bakollari) [RHEL-240350] {CVE-2026-64174} - wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (Izabela Bakollari) [RHEL-242723] {CVE-2026-72003} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244100] {CVE-2026-72298} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Izabela Bakollari) [RHEL-241012] {CVE-2026-68363} - wifi: iwlwifi: mld: stop TX during firmware restart (Izabela Bakollari) [RHEL-243302] {CVE-2026-64175} - wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (Izabela Bakollari) [RHEL-243366] {CVE-2026-64176} - net: wwan: t7xx: fix potential skb->frags overflow in RX path (Izabela Bakollari) [RHEL-245512] {CVE-2026-23172} - gfs2: Remove the glock lru list and shrinker (Andreas Gruenbacher) [RHEL-252544] - gfs2: Skip dlm unlocks earlier (Andreas Gruenbacher) [RHEL-252544] - gfs2: Don't cache unreferenced glocks (Andreas Gruenbacher) [RHEL-252544] - gfs2: Enable automatic glock hash table shrinking (Andreas Gruenbacher) [RHEL-252544] - gfs2: Introduce glock_{type,number,sbd} helpers (Andreas Gruenbacher) [RHEL-252544] - gfs2: Minor gfs2_glock_cb cleanup (Andreas Gruenbacher) [RHEL-252544] - gfs2: Clean up glock demote logic (Andreas Gruenbacher) [RHEL-252544] - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237156] {CVE-2026-68159} - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-252540] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-252540] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-252540] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-252540] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-252540] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-252540] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-252540] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-252540] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-252540] - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-252540] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-252540] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-252540] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-252540] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-252540] - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232965] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227508] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236120] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-228016] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231753] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228936] {CVE-2026-63921} - dm_early_create: fix freeing used table on dm_resume failure (CKI Backport Bot) [RHEL-244932] {CVE-2026-72102} - ALSA: timer: don't re-enter an instance callback that is still running (CKI Backport Bot) [RHEL-243028] {CVE-2026-68200} - ice: reject out-of-range ptype in ice_parser_profile_init (CKI Backport Bot) [RHEL-240325] {CVE-2026-68128} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233826] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226877] {CVE-2026-46133} - RDMA/rxe: Fix race condition in QP timer handlers (Kamal Heib) [RHEL-226914] {CVE-2026-45910} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228182] {CVE-2026-46043} - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (Kamal Heib) [RHEL-226315] {CVE-2026-46114} - net: ena: PHC: Fix potential use-after-free in get_timestamp (CKI Backport Bot) [RHEL-230627] {CVE-2026-52971} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228693] {CVE-2026-53192} - ALSA: seq: Serialize UMP output teardown with event_input (CKI Backport Bot) [RHEL-227713] {CVE-2026-64029} - ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - ALSA: timer: Forcibly close timer instances at closing (CKI Backport Bot) [RHEL-227087] {CVE-2026-53193} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-226406] {CVE-2026-63913} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191605] {CVE-2026-53176} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191035] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191035] {CVE-2026-53196} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264235] {CVE-2025-39964} - mm/hugetlb: fix list corruption in allocate_file_region_entries() (Rafael Aquini) [RHEL-254487] {CVE-2026-74518} - smb: client: fix multiuser mount with krb5 (Jorge San Emeterio Villalain) [RHEL-254108] - net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] {CVE-2026-72072} - iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry (Eder Zulian) [RHEL-228484] - iommu/vt-d: Fix race condition during PASID entry replacement (Eder Zulian) [RHEL-228484] {CVE-2026-45945} - iommu/vt-d: Clear Present bit before tearing down context entry (Eder Zulian) [RHEL-228484] {CVE-2026-45944} - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228484] {CVE-2026-45894} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237896] {CVE-2026-68155} - libceph: guard missing CRUSH type name lookup (CKI Backport Bot) [RHEL-237554] {CVE-2026-68157} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237486] {CVE-2026-68156} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237311] {CVE-2026-68188} - Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds (CKI Backport Bot) [RHEL-236850] {CVE-2026-68391} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236791] {CVE-2026-68293} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231819] {CVE-2026-53062} - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree (CKI Backport Bot) [RHEL-230406] {CVE-2026-45959} - keys: Pin request_key_auth payload in instantiate paths (CKI Backport Bot) [RHEL-225501] {CVE-2026-63823} - ice: call netif_keep_dst() once when entering switchdev mode (Jakub Ramaseuski) [RHEL-213003] - ice: fix ice_init_link() error return preventing probe (Jakub Ramaseuski) [RHEL-213003] - ice: fix AQ error code comparison in ice_set_pauseparam() (Jakub Ramaseuski) [RHEL-213003] - ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix memory leak in ice_dpll_init_info error paths (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info (Jakub Ramaseuski) [RHEL-213003] - ice: remove redundant checks from PTP init (Jakub Ramaseuski) [RHEL-213003] - ice: implement E825 TX ref clock control and TXC hardware sync status (Jakub Ramaseuski) [RHEL-213003] - ice: add Tx reference clock index handling to AN restart command (Jakub Ramaseuski) [RHEL-213003] - ice: implement CPI support for E825C (Jakub Ramaseuski) [RHEL-213003] - ice: introduce TXC DPLL device and TX ref clock pin framework for E825 (Jakub Ramaseuski) [RHEL-213003] - ice: fix missing priority callbacks for U.FL DPLL pins (Jakub Ramaseuski) [RHEL-213003] - ice: restore PTP Rx timestamp config after ethtool set-channels (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: use primary NAC semaphore on E825 (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: serialize E825 PHY timer start with PTP lock (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting promisc mode while adding VID filter (Jakub Ramaseuski) [RHEL-213003] - ice: fix VF queue configuration with low MTU values (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking around wait_event_interruptible_locked_irq (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: Fix compilation warning (Jakub Ramaseuski) [RHEL-213003] - ice: mention fw_activate action along with devlink reload (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix misplaced header macros (Jakub Ramaseuski) [RHEL-213003] - ice: dpll: fix rclk pin state get for E810 (Jakub Ramaseuski) [RHEL-213003] - Revert "ice: dpll: fix rclk pin state get and misplaced header macros" (Jakub Ramaseuski) [RHEL-213003] - ice: fix locking in ice_dcb_rebuild() (Jakub Ramaseuski) [RHEL-213003] - ice: fix setting RSS VSI hash for E830 (Jakub Ramaseuski) [RHEL-213003] - ice: fix potential NULL pointer deref in error path of ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53007} - ice: fix race condition in TX timestamp ring cleanup (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53008} - ice: fix ICE_AQ_LINK_SPEED_M for 200G (Jakub Ramaseuski) [RHEL-213003] - ice: fix PHY config on media change with link-down-on-close (Jakub Ramaseuski) [RHEL-213003] - ice: Fix memory leak in ice_set_ringparam() (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23389} - ice: fix double-free of tx_buf skb (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-53009} - ice: fix double free in ice_sf_eth_activate() error path (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-46162} - ice: update PCS latency settings for E825 10G/25Gb modes (Jakub Ramaseuski) [RHEL-213003] - ice: fix 'adjust' timer programming for E830 devices (Jakub Ramaseuski) [RHEL-213003] - ice: use bitmap_empty() in ice_vf_has_no_qs_ena (Jakub Ramaseuski) [RHEL-213003] - ice: ptp: don't WARN when controlling PF is unavailable (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-43346} - ice: use ice_update_eth_stats() for representor stats (Jakub Ramaseuski) [RHEL-213003] - ice: fix inverted ready check for VF representors (Jakub Ramaseuski) [RHEL-213003] - drivers: net: ice: fix devlink parameters get without irdma (Jakub Ramaseuski) [RHEL-213003] - ice: fix retry for AQ command 0x06EE (Jakub Ramaseuski) [RHEL-213003] - ice: reintroduce retry mechanism for indirect AQ (Jakub Ramaseuski) [RHEL-213003] - ice: fix adding AQ LLDP filter for VF (Jakub Ramaseuski) [RHEL-213003] - ice: recap the VSI and QoS info after rebuild (Jakub Ramaseuski) [RHEL-213003] - ice: stop counting UDP csum mismatch as rx_errors (Jakub Ramaseuski) [RHEL-213003] - ice: convert all ring stats to u64_stats_t (Jakub Ramaseuski) [RHEL-213003] - ice: shorten ring stat names and add accessors (Jakub Ramaseuski) [RHEL-213003] - ice: use u64_stats API to access pkts/bytes in dim sample (Jakub Ramaseuski) [RHEL-213003] - ice: remove ice_q_stats struct and use struct_group (Jakub Ramaseuski) [RHEL-213003] - ice: pass pointer to ice_fetch_u64_stats_per_ring (Jakub Ramaseuski) [RHEL-213003] - ice: unify PHY FW loading status handler for E800 devices (Jakub Ramaseuski) [RHEL-213003] - ice: Make name member of struct ice_cgu_pin_desc const (Jakub Ramaseuski) [RHEL-213003] - dpll: use pin owner's dpll ref for pin-level attribute reporting (Jakub Ramaseuski) [RHEL-213003] - dpll: allow fwnode pins to attempt state change without capability bit (Jakub Ramaseuski) [RHEL-213003] - dpll: extend pin notifier with notification source ID (Jakub Ramaseuski) [RHEL-213003] - dpll: balance create/delete notifications in __dpll_pin_(un)register (Jakub Ramaseuski) [RHEL-213003] - dpll: guard sync-pair removal on full pin unregister (Jakub Ramaseuski) [RHEL-213003] - dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: send delete notification before unregister in on-pin rollback (Jakub Ramaseuski) [RHEL-213003] - dpll: fix stale iteration in dpll_pin_on_pin_unregister() (Jakub Ramaseuski) [RHEL-213003] - dpll: allow registering FW-identified pin with a different DPLL (Jakub Ramaseuski) [RHEL-213003] - dpll: add generic DPLL type (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: make frequency monitor a per-device attribute (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-63977} - dpll: export __dpll_device_change_ntf() for use under dpll_lock (Jakub Ramaseuski) [RHEL-213003] - dpll: change dpll_netdev_pin_handle_size() to assume DPLL_A_PIN_ID will be used (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: fix memory leak on pin registration failure (Jakub Ramaseuski) [RHEL-213003] - dpll: zl3073x: Use named initializers for struct i2c_device_id (Jakub Ramaseuski) [RHEL-213003] - dpll: Prevent duplicate registrations (Jakub Ramaseuski) [RHEL-213003] {CVE-2026-23129} - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (Mohammadfaiz Bawa) [RHEL-243814] {CVE-2026-72288} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275058] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275076] {CVE-2026-93228} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270929] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270929] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271453] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268122] {CVE-2026-74705} - net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CKI Backport Bot) [RHEL-270908] {CVE-2026-81003} - wifi: cfg80211: use wiphy work for socket owner autodisconnect (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-263788] {CVE-2026-68409} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (Jose Ignacio Tornos Martinez) [RHEL-259560] {CVE-2026-64030} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261686] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260511] {CVE-2026-68140} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261293] {CVE-2026-72320} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256448] {CVE-2026-74641} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-237219] {CVE-2026-68377} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229654] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226490] {CVE-2026-53011} - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264401] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264350] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262595] {CVE-2026-89846} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260449] {CVE-2026-64534} - af_unix: Drop all SCM attributes for SOCKMAP. (Davide Caratti) [RHEL-229264] {CVE-2026-53005} - smb: client: fix double-free in SMB2_flush() replay (CKI Backport Bot) [RHEL-253169] {CVE-2026-64383} - RHEL: revert "block: only zero non-PI metadata tuples in bio_integrity_prep" (Jeff Moyer) [RHEL-189969] {CVE-2026-23007} - block: don't overwrite bip_vcnt in bio_integrity_copy_user() (Jeff Moyer) [RHEL-232369] {CVE-2026-64053} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230287] {CVE-2026-63802} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243625] {CVE-2026-72261} - netfilter: nft_fib: reject fib expression on the netdev egress hook (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't leak bad clone into future transaction (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: expectation timeouts are passed in milliseconds (Florian Westphal) [RHEL-236634] - netfilter: nft_compat: ebtables emulation must reject non-bridge targets (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (Florian Westphal) [RHEL-236634] - netfilter: nft_flow_offload: zero device address for non-ether case (Florian Westphal) [RHEL-236634] - netfilter: nft_meta_bridge: add validate callback for get operations (Florian Westphal) [RHEL-236634] - netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: drop device refcount on error (Florian Westphal) [RHEL-236634] - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-236634] - netfilter: nft_byteorder: remove multi-register support (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: fix dst corruption in same register operation (Florian Westphal) [RHEL-236634] {CVE-2026-64006} - netfilter: nft_fib: fix stale stack leak via the OIFNAME register (Florian Westphal) [RHEL-236634] {CVE-2026-53134} - netfilter: nft_exthdr: fix register tracking for F_PRESENT flag (Florian Westphal) [RHEL-236634] {CVE-2026-53218} - netfilter: nft_ct: bail out on template ct in get eval (Florian Westphal) [RHEL-236634] {CVE-2026-53267} - netfilter: nft_tunnel: fix use-after-free on object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-53212} - netfilter: disable payload mangling in userns (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix missing expect put in obj eval (Florian Westphal) [RHEL-236634] {CVE-2026-52970} - netfilter: nft_compat: run xt_check_hooks_{match,target}() from .validate (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: use recursion counter in neigh egress path (Florian Westphal) [RHEL-236634] - netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding (Florian Westphal) [RHEL-236634] - netfilter: replace skb_try_make_writable() by skb_ensure_writable() (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use list_del_rcu for netlink hooks (Florian Westphal) [RHEL-236634] {CVE-2026-46324} - netfilter: nf_tables: Introduce functions freeing nft_hook objects (Florian Westphal) [RHEL-236634] - netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check (Florian Westphal) [RHEL-236634] {CVE-2026-52998} - netfilter: nfnetlink_osf: fix out-of-bounds read on option matching (Florian Westphal) [RHEL-236634] {CVE-2026-52999} - netfilter: nft_osf: restrict it to ipv4 (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: fix use-after-free in timeout object destroy (Florian Westphal) [RHEL-236634] {CVE-2026-31665} - netfilter: nft_set_pipapo_avx2: remove redundant loop in lookup_slow (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: increment data in one step (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: reject immediate NF_QUEUE verdict (Florian Westphal) [RHEL-236634] {CVE-2026-43024} - netfilter: nfnetlink_log: account for netlink header size (Florian Westphal) [RHEL-236634] {CVE-2026-31416} - selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: always walk all pending catchall elements (Florian Westphal) [RHEL-236634] {CVE-2026-23278} - netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (Florian Westphal) [RHEL-236634] {CVE-2026-23351} - netfilter: nf_tables: clone set on flush only (Florian Westphal) [RHEL-236634] {CVE-2026-23385} - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add check for overlap detection bug (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: add seqadj extension for natted connections (Florian Westphal) [RHEL-236634] {CVE-2025-68206} - netfilter: nf_tables: use C99 struct initializer for nft_set_iter (Florian Westphal) [RHEL-236634] - netfilter: nft_objref: validate objref and objrefmap expressions (Florian Westphal) [RHEL-236634] {CVE-2025-40206} - selftests: netfilter: nft_concat_range.sh: add check for double-create bug (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: fix skip of expired entries (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: all transaction allocations can now sleep (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow iter callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: Store real pointer, adjust later. (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: split lookup function in two parts (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: send packets to empty set (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: adjust lockdep assertions handling (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add datapath check for map fill bug (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: prefer per element counters for testing (Florian Westphal) [RHEL-236634] - netfilter: nft_tunnel: fix geneve_opt dump (Florian Westphal) [RHEL-236634] - selftests: netfilter: nft_concat_range.sh: add coverage for 4bit group representation (Florian Westphal) [RHEL-236634] - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: Flowtable hook's pf value never varies (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: remove the genmask parameter (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-236634] {CVE-2024-56655} - netfilter: nf_tables: wait for rcu grace period on net_device removal (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [RHEL-236634] {CVE-2025-39867} - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal) [RHEL-236634] - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Florian Westphal) [RHEL-236634] {CVE-2025-38201} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Florian Westphal) [RHEL-236634] {CVE-2025-38162} - netfilter: nf_tables: missing objects with no memcg accounting (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: remove dirty flag (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move cloning of match info to insert/removal path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: merge deactivate helper into caller (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare walk function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: prepare destroy function for on-demand clone (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: make pipapo_clone helper return NULL (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: move prove_locking helper around (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: use GFP_KERNEL for insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: speed up bulk element insertions (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo: shrink data structures (Florian Westphal) [RHEL-236634] - netfilter: nft_set_pipapo_avx2: remove redundant pointer lt (Florian Westphal) [RHEL-236634] - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-236634] {CVE-2026-43060} - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-236634] - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-236634] {CVE-2026-23399} - netfilter: x_tables: add .check_hooks to matches and targets (Florian Westphal) [RHEL-236634] - netfilter: xtables: restrict several matches to inet family (Florian Westphal) [RHEL-236634] {CVE-2026-53001} - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-236634] - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-236634] - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-236634] - ALSA: timer: drain a slave's callback before its master detaches it (CKI Backport Bot) [RHEL-236081] {CVE-2026-68201} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234304] {CVE-2026-64564} - mac802154: llsec: add skb_cow_data() before in-place crypto (CKI Backport Bot) [RHEL-231022] {CVE-2026-63831} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216251] - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - net: always dissect GSO packets in __virtio_net_hdr_to_skb() (Davide Caratti) [RHEL-284987] - ipv4: validate checksum_start before completing checksum (CKI Backport Bot) [RHEL-284987] {CVE-2026-99999} - smb: client: reject a tree connect response whose byte count is too small (Alisher Mazhirinov) [RHEL-271284] {CVE-2026-89631} - exec: Cleanup POSIX timers right after de_thread() (Luiz Capitulino) [RHEL-282063] {CVE-2026-98260} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271871] {CVE-2026-93817} - smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (Frank Sorenson) [RHEL-271487] {CVE-2026-89633} - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270747] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256697] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256697] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256697] - bridge: mcast: Fix a possible use-after-free when removing a bridge port (Jakub Ramaseuski) [RHEL-232528] {CVE-2026-64032} - net: bridge: Flush multicast groups when snooping is disabled (Jakub Ramaseuski) [RHEL-232528] - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Antoine Tenart) [RHEL-231693] {CVE-2026-64024} - ipv4: fib: free fib_alias with kfree_rcu() on insert error path (Jamie Bainbridge) [RHEL-233131] {CVE-2026-64572} - inet: frags: strip GSO state from fragments before reassembly (Jamie Bainbridge) [RHEL-254224] {CVE-2026-80590} - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Jamie Bainbridge) [RHEL-225452] {CVE-2026-64114} - usb: typec: ucsi: validate connector number in ucsi_connector_change() (Desnes Nunes) [RHEL-259429] {CVE-2026-63958} - usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO (Desnes Nunes) [RHEL-259429] - usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (Desnes Nunes) [RHEL-259429] {CVE-2026-63962} - usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (Desnes Nunes) [RHEL-259429] {CVE-2026-63963} - usb: typec: altmodes/displayport: validate count before reading Status Update VDO (Desnes Nunes) [RHEL-259429] {CVE-2026-63961} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63899} - Bluetooth: hci_sync: Fix advertising data UAFs (CKI Backport Bot) [RHEL-254674] {CVE-2026-74509} - openvswitch: vport: fix self-deadlock on release of tunnel ports (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222958] {CVE-2026-52935} - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (Mohammadfaiz Bawa) [RHEL-243814] {CVE-2026-72288} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275058] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275076] {CVE-2026-93228} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270929] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270929] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271453] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268122] {CVE-2026-74705} - net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CKI Backport Bot) [RHEL-270908] {CVE-2026-81003} - wifi: cfg80211: use wiphy work for socket owner autodisconnect (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-263788] {CVE-2026-68409} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (Jose Ignacio Tornos Martinez) [RHEL-259560] {CVE-2026-64030} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261686] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260511] {CVE-2026-68140} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261293] {CVE-2026-72320} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256448] {CVE-2026-74641} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-237219] {CVE-2026-68377} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229654] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226490] {CVE-2026-53011} - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237295] {CVE-2026-68121} - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (John J. Coleman) [RHEL-260938] - smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() (Paulo Alcantara) [RHEL-230561] - smb: client: let send_done handle a completion without IB_SEND_SIGNALED (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: fix last send credit problem causing disconnects (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.send_io.bcredits (Paulo Alcantara) [RHEL-230561] - smb: client: use smbdirect_send_batch processing (Paulo Alcantara) [RHEL-230561] - smb: client: introduce and use smbd_{alloc, free}_send_io() (Paulo Alcantara) [RHEL-230561] - smb: client: split out smbd_ib_post_send() (Paulo Alcantara) [RHEL-230561] - smb: client: let smbd_post_send() make use of request->wr (Paulo Alcantara) [RHEL-230561] - smb: client: port and use the wait_for_credits logic used by server (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() (Paulo Alcantara) [RHEL-230561] - smb: client: remove pointless sc->recv_io.credits.count rollback (Paulo Alcantara) [RHEL-230561] - smb: client: make use of smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* (Paulo Alcantara) [RHEL-230561] - smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available (Paulo Alcantara) [RHEL-230561] {CVE-2026-31539} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255848] {CVE-2026-80714} - drm/amdgpu/userq: fix access to stale wptr mapping (José Expósito) [RHEL-225416] {CVE-2026-46311} - drm/amdgpu: do not use amdgpu_bo_gpu_offset_no_check individually (José Expósito) [RHEL-225416] - drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] {CVE-2026-68266} - drm/amdgpu: Fix context pstate override handling (CKI Backport Bot) [RHEL-236711] {CVE-2026-68273} - drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] {CVE-2026-68267} - drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting (CKI Backport Bot) [RHEL-237964] - drm/xe/xe3: Apply wa_14024997852 (CKI Backport Bot) [RHEL-237964] - drm/amdkfd: fix 32-bit overflow in CWSR total size calculation (CKI Backport Bot) [RHEL-237833] {CVE-2026-68257} - drm/virtio: use uninterruptible resv lock for plane updates (CKI Backport Bot) [RHEL-229328] {CVE-2026-64098} - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (José Expósito) [RHEL-225299] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225299] {CVE-2026-46230} - fbcon: Set fb_display[i]->mode to NULL when the mode is released (José Expósito) [RHEL-250107] {CVE-2025-40323} - drm/amdgpu/vce: fix integer overflow in image size (CKI Backport Bot) [RHEL-237636] {CVE-2026-68108} - drm/xe/eustall: Fix drm_dev_put called before stream disable in close (CKI Backport Bot) [RHEL-229378] {CVE-2026-53290} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CKI Backport Bot) [RHEL-226050] {CVE-2026-46204} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (José Expósito) [RHEL-225443] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (José Expósito) [RHEL-225443] {CVE-2026-46199} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231247] {CVE-2026-52912} - accel/ivpu: Add buffer overflow check in MS get_info_ioctl (CKI Backport Bot) [RHEL-230650] {CVE-2026-53203} - net: skbuff: propagate shared-frag marker in skb_zerocopy() - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - xfs: bounds-check buffer log item's dirty bitmap (Pavel Reichl) [RHEL-253366] {CVE-2026-80536} - ovl: check access to copy_file_range source with src mounter creds (Miklos Szeredi) [RHEL-238870] {CVE-2026-68448} - ALSA: seq: close a re-opened queue timer in the destructor (CKI Backport Bot) [RHEL-263709] {CVE-2026-68202} - calipso: unlock rcu before returning -EAFNOSUPPORT (CKI Backport Bot) [RHEL-257685] {CVE-2025-38147} - calipso: Don't call calipso functions for AF_INET sk. (CKI Backport Bot) [RHEL-257685] {CVE-2025-38147} - netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (CKI Backport Bot) [RHEL-257666] {CVE-2025-22063} - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (CKI Backport Bot) [RHEL-255258] {CVE-2026-80530} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252811] {CVE-2026-68299} - ALSA: hda/cs35l41: Fix firmware load work teardown (CKI Backport Bot) [RHEL-234099] {CVE-2026-64481} - rtla: Fix segfault on multiple SIGINTs (Tomas Glozar) [RHEL-193029] - net: always dissect GSO packets in __virtio_net_hdr_to_skb() (Davide Caratti) [RHEL-284987] - ipv4: validate checksum_start before completing checksum (CKI Backport Bot) [RHEL-284987] {CVE-2026-99999} - smb: client: reject a tree connect response whose byte count is too small (Alisher Mazhirinov) [RHEL-271284] {CVE-2026-89631} - exec: Cleanup POSIX timers right after de_thread() (Luiz Capitulino) [RHEL-282063] {CVE-2026-98260} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271871] {CVE-2026-93817} - smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (Frank Sorenson) [RHEL-271487] {CVE-2026-89633} - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270747] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256697] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256697] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256697] - bridge: mcast: Fix a possible use-after-free when removing a bridge port (Jakub Ramaseuski) [RHEL-232528] {CVE-2026-64032} - net: bridge: Flush multicast groups when snooping is disabled (Jakub Ramaseuski) [RHEL-232528] - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Antoine Tenart) [RHEL-231693] {CVE-2026-64024} - ipv4: fib: free fib_alias with kfree_rcu() on insert error path (Jamie Bainbridge) [RHEL-233131] {CVE-2026-64572} - inet: frags: strip GSO state from fragments before reassembly (Jamie Bainbridge) [RHEL-254224] {CVE-2026-80590} - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Jamie Bainbridge) [RHEL-225452] {CVE-2026-64114} - usb: typec: ucsi: validate connector number in ucsi_connector_change() (Desnes Nunes) [RHEL-259429] {CVE-2026-63958} - usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO (Desnes Nunes) [RHEL-259429] - usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (Desnes Nunes) [RHEL-259429] {CVE-2026-63962} - usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (Desnes Nunes) [RHEL-259429] {CVE-2026-63963} - usb: typec: altmodes/displayport: validate count before reading Status Update VDO (Desnes Nunes) [RHEL-259429] {CVE-2026-63961} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63899} - Bluetooth: hci_sync: Fix advertising data UAFs (CKI Backport Bot) [RHEL-254674] {CVE-2026-74509} - openvswitch: vport: fix self-deadlock on release of tunnel ports (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222958] {CVE-2026-52935} - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (Mohammadfaiz Bawa) [RHEL-243814] {CVE-2026-72288} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275058] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275076] {CVE-2026-93228} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270929] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270929] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271453] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268122] {CVE-2026-74705} - net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CKI Backport Bot) [RHEL-270908] {CVE-2026-81003} - wifi: cfg80211: use wiphy work for socket owner autodisconnect (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-263788] {CVE-2026-68409} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (Jose Ignacio Tornos Martinez) [RHEL-259560] {CVE-2026-64030} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261686] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260511] {CVE-2026-68140} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261293] {CVE-2026-72320} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256448] {CVE-2026-74641} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-237219] {CVE-2026-68377} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229654] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226490] {CVE-2026-53011} - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259312] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258817] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250504] {CVE-2026-64556} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225944] {CVE-2026-45942} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (CKI Backport Bot) [RHEL-259061] {CVE-2026-52972} - fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh() (Abhi Das) [RHEL-231391] {CVE-2026-53341} - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-256437] - crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req() (CKI Backport Bot) [RHEL-254308] {CVE-2026-80522} - RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE (Kamal Heib) [RHEL-230788] {CVE-2026-46325} - RDMA/rxe: Remove unused page_offset member (Kamal Heib) [RHEL-230788] - RDMA/rxe: Remove redundant assignment to variable page_offset (Kamal Heib) [RHEL-230788] - Revert "RDMA/rxe: RHEL-only revert for page size vars in rxe" (Kamal Heib) [RHEL-230788] - KVM: s390: selftests: Add IRQ routing address offset tests (Christoph Schlameuss) [RHEL-188656] - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-188656] - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232566] {CVE-2026-64102} - rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (Marc Dionne) [RHEL-179563] - rxrpc: Fix potential UAF after skb_unshare() failure (Marc Dionne) [RHEL-179563] {CVE-2026-45998} - net: skbuff: propagate shared-frag marker in skb_zerocopy() - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - netfilter: flowtable: hold reference on ct until flow is released (CKI Backport Bot) [RHEL-280075] {CVE-2026-98320} - vfio/pci: clear vdev->msi_perm after freeing it on init failure (Rodolfo Vick) [RHEL-270901] {CVE-2026-89777} - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278089] {CVE-2026-93262} - KEYS: encrypted: fix integer overflow of datablob_len (Bruno Meneguele) [RHEL-279504] {CVE-2026-98222} - KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (CKI Backport Bot) [RHEL-277620] {CVE-2026-74515} - smb: client: guard against tailsz underflow in wdata_send_pages() (Paulo Alcantara) [RHEL-257205] - smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-257205] - smb: client: fix rlist race and missing initialization (Paulo Alcantara) [RHEL-257205] {CVE-2026-98174} - smb: client: cancel reconnect work in clean_demultiplex_info() (Paulo Alcantara) [RHEL-257205] {CVE-2026-98175} - smb/client: send lease break ACKs thru correct session for multiuser mounts (Paulo Alcantara) [RHEL-257205] - smb: client: fix cifsFileInfo reference leak in deferred close (Paulo Alcantara) [RHEL-257205] {CVE-2026-97558} - smb: client: avoid leaking refcount when cifs_sb_tlink() fails (Paulo Alcantara) [RHEL-257205] {CVE-2026-97556} - smb: client: avoid leaking refcount in cifs_queue_oplock_break() (Paulo Alcantara) [RHEL-257205] {CVE-2026-97557} - smb: client: fix data corruption with concurrent writes and O_TRUNC (Paulo Alcantara) [RHEL-257205] - cifs: don't update i_size in cifs_do_truncate without a cached handle (Paulo Alcantara) [RHEL-257205] - smb: client: invalidate fscache for fallocate range operations (Paulo Alcantara) [RHEL-257205] {CVE-2026-98124} - smb: client: fix stale page cache in insert/collapse range (Paulo Alcantara) [RHEL-257205] {CVE-2026-98125} - smb: client: fix integer truncation in collapse range (Paulo Alcantara) [RHEL-257205] - smb: client: fix data corruption in emulated insert range (Paulo Alcantara) [RHEL-257205] - smb/client: mark file sparse before emulating insert range (Paulo Alcantara) [RHEL-257205] - smb/client: validate new EOF for zero range (Paulo Alcantara) [RHEL-257205] {CVE-2026-98126} - smb/client: validate new EOF for insert range (Paulo Alcantara) [RHEL-257205] {CVE-2026-98127} - cifs: add revalidation on FSCTL failure in smb2_duplicate_extents() (Paulo Alcantara) [RHEL-257205] - cifs: fix loff_t underflow in cifs_remap_file_range() when len == 0 (Paulo Alcantara) [RHEL-257205] {CVE-2026-89640} - cifs: call pagecache_isize_extended() in cifs_setsize() when extending (Paulo Alcantara) [RHEL-257205] {CVE-2026-89642} - cifs: clear tcon after cifsFileInfo_put() in cifs_file_set_size() (Paulo Alcantara) [RHEL-257205] {CVE-2026-89641} - smb/client: decode reparse metadata using its payload type (Paulo Alcantara) [RHEL-257205] - smb/client: preserve open info type across compound queries (Paulo Alcantara) [RHEL-257205] - smb/client: mark missing nlink values as unknown (Paulo Alcantara) [RHEL-257205] - smb/client: fix nlink of an overwritten open file (Paulo Alcantara) [RHEL-257205] - cifs: remove dead size-update blocks in cifs_setattr_unix/nounix (Paulo Alcantara) [RHEL-257205] - cifs: remove redundant size-update block in cifs_remap_file_range() (Paulo Alcantara) [RHEL-257205] - cifs: add cifs_resize_file_locked() to guard fscache_resize_cookie() under i_rwsem (Paulo Alcantara) [RHEL-257205] - cifs: use cifs_invalidate_cache() in cifs_do_truncate() for O_TRUNC (Paulo Alcantara) [RHEL-257205] {CVE-2026-89639} - cifs: add fscache_resize_cookie() to cifs_setsize() (Paulo Alcantara) [RHEL-257205] - smb: client: simplify cifs_fscache_get_super_cookie() (Paulo Alcantara) [RHEL-257205] - smb/client: flush dirty data before punching a hole (Paulo Alcantara) [RHEL-257205] {CVE-2026-93794} - smb/client: refresh allocation after EOF-extending fallocate (Paulo Alcantara) [RHEL-257205] - smb/client: emulate small EOF-extending mode 0 fallocate ranges (Paulo Alcantara) [RHEL-257205] - smb/client: reduce fallocate zero buffer allocation (Paulo Alcantara) [RHEL-257205] - smb/client: refresh allocation size after duplicate extents (Paulo Alcantara) [RHEL-257205] - smb: client: use kvzalloc() for megabyte buffer in simple fallocate (Paulo Alcantara) [RHEL-257205] - smb/client: fix incorrect nlink returned by fstat() (Paulo Alcantara) [RHEL-257205] - smb/client: zero-initialize stack-allocated cifs_open_info_data (Paulo Alcantara) [RHEL-257205] {CVE-2026-93801} - smb/client: pass cifs_open_info_data to SMB2_open() (Paulo Alcantara) [RHEL-257205] - smb/client: use stack-allocated smb2_file_all_info in smb3_query_mf_symlink() (Paulo Alcantara) [RHEL-257205] - smb: client: refactor cifs_revalidate_mapping() to use clear_and_wake_up_bit() (Paulo Alcantara) [RHEL-257205] - smb/client: do not account EOF extension as allocation (Paulo Alcantara) [RHEL-257205] - smb/client: preserve errors from smb2_set_sparse() (Paulo Alcantara) [RHEL-257205] - smb/client: name the default fallocate mode (Paulo Alcantara) [RHEL-257205] - smb/client: update i_blocks after contiguous writes (Paulo Alcantara) [RHEL-257205] - smb: client: fix races in cifsd thread creation (Paulo Alcantara) [RHEL-257205] {CVE-2026-93829} - cifs: invalidate cfid on unlink/rename/rmdir (Paulo Alcantara) [RHEL-257205] - cifs: abort open_cached_dir if we don't request leases (Paulo Alcantara) [RHEL-257205] - cifs: change_conf needs to be called for session setup (Paulo Alcantara) [RHEL-257205] - smb: client: fix generic/694 due to wrong ->i_blocks (Paulo Alcantara) [RHEL-257205] - smb: client: fix open handle lookup in cifs_open() (Paulo Alcantara) [RHEL-257205] - smb: client: fix in-place encryption corruption in SMB2_write() (Paulo Alcantara) [RHEL-257205] {CVE-2026-43362} - smb: client: fix atomic open with O_DIRECT & O_SYNC (Paulo Alcantara) [RHEL-257205] - cifs: Scripted clean up fs/smb/client/cifsglob.h (Paulo Alcantara) [RHEL-257205] - cifs: Scripted clean up fs/smb/client/fscache.h (Paulo Alcantara) [RHEL-257205] - cifs: Scripted clean up fs/smb/client/cifsfs.h (Paulo Alcantara) [RHEL-257205] - cifs: Scripted clean up fs/smb/client/cifsproto.h (Paulo Alcantara) [RHEL-257205] - udp: Deal with race between UDP socket address change and rehash (Jamie Bainbridge) [RHEL-257635] {CVE-2024-57974} - smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (CKI Backport Bot) [RHEL-271257] {CVE-2026-89638} - net/handshake: Drain pending requests at net namespace exit (Xin Long) [RHEL-232134] {CVE-2026-63978} - net/handshake: Use spin_lock_bh for hn_lock (Xin Long) [RHEL-232134] - net/handshake: hand off the pinned file reference to accept_doit (Xin Long) [RHEL-230363] {CVE-2026-63979} - net/handshake: Take a long-lived file reference at submit (Xin Long) [RHEL-234159] {CVE-2026-64523} - fuse: re-lock request before replacing page cache folio (Miklos Szeredi) [RHEL-226093] {CVE-2026-53388} - fuse: release pipe buf after last use (Miklos Szeredi) [RHEL-226093] {CVE-2026-53388} - fuse: fix page stealing (Miklos Szeredi) [RHEL-226093] {CVE-2026-53388} - ipvs: reload ip header after head reallocation (Phil Sutter) [RHEL-263800] {CVE-2026-68476} - selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() (CKI Backport Bot) [RHEL-243225] {CVE-2026-72242} - usb: usbfs: fix use-after-free of usb_device in usbdev_release() (CKI Backport Bot) [RHEL-258557] {CVE-2026-80824} - fuse: re-lock request before returning from fuse_ref_folio() (CKI Backport Bot) [RHEL-234250] {CVE-2026-64266} - xfs: bounds-check buffer log item's dirty bitmap (Pavel Reichl) [RHEL-253366] {CVE-2026-80536} - ovl: check access to copy_file_range source with src mounter creds (Miklos Szeredi) [RHEL-238870] {CVE-2026-68448} - ALSA: seq: close a re-opened queue timer in the destructor (CKI Backport Bot) [RHEL-263709] {CVE-2026-68202} - calipso: unlock rcu before returning -EAFNOSUPPORT (CKI Backport Bot) [RHEL-257685] {CVE-2025-38147} - calipso: Don't call calipso functions for AF_INET sk. (CKI Backport Bot) [RHEL-257685] {CVE-2025-38147} - netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (CKI Backport Bot) [RHEL-257666] {CVE-2025-22063} - xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (CKI Backport Bot) [RHEL-255258] {CVE-2026-80530} - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252811] {CVE-2026-68299} - ALSA: hda/cs35l41: Fix firmware load work teardown (CKI Backport Bot) [RHEL-234099] {CVE-2026-64481} - rtla: Fix segfault on multiple SIGINTs (Tomas Glozar) [RHEL-193029] - net: always dissect GSO packets in __virtio_net_hdr_to_skb() (Davide Caratti) [RHEL-284987] - ipv4: validate checksum_start before completing checksum (CKI Backport Bot) [RHEL-284987] {CVE-2026-99999} - smb: client: reject a tree connect response whose byte count is too small (Alisher Mazhirinov) [RHEL-271284] {CVE-2026-89631} - exec: Cleanup POSIX timers right after de_thread() (Luiz Capitulino) [RHEL-282063] {CVE-2026-98260} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271871] {CVE-2026-93817} - smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (Frank Sorenson) [RHEL-271487] {CVE-2026-89633} - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270747] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256697] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256697] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256697] - bridge: mcast: Fix a possible use-after-free when removing a bridge port (Jakub Ramaseuski) [RHEL-232528] {CVE-2026-64032} - net: bridge: Flush multicast groups when snooping is disabled (Jakub Ramaseuski) [RHEL-232528] - tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (Antoine Tenart) [RHEL-231693] {CVE-2026-64024} - ipv4: fib: free fib_alias with kfree_rcu() on insert error path (Jamie Bainbridge) [RHEL-233131] {CVE-2026-64572} - inet: frags: strip GSO state from fragments before reassembly (Jamie Bainbridge) [RHEL-254224] {CVE-2026-80590} - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Jamie Bainbridge) [RHEL-225452] {CVE-2026-64114} - usb: typec: ucsi: validate connector number in ucsi_connector_change() (Desnes Nunes) [RHEL-259429] {CVE-2026-63958} - usb: typec: ucsi: displayport: NAK DP_CMD_CONFIGURE without a payload VDO (Desnes Nunes) [RHEL-259429] - usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() (Desnes Nunes) [RHEL-259429] {CVE-2026-63962} - usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (Desnes Nunes) [RHEL-259429] {CVE-2026-63963} - usb: typec: altmodes/displayport: validate count before reading Status Update VDO (Desnes Nunes) [RHEL-259429] {CVE-2026-63961} - USB: serial: cypress_m8: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63956} - USB: serial: safe_serial: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63957} - USB: serial: omninet: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63928} - USB: serial: mxuport: fix memory corruption with small endpoint (Desnes Nunes) [RHEL-259322] {CVE-2026-63899} - Bluetooth: hci_sync: Fix advertising data UAFs (CKI Backport Bot) [RHEL-254674] {CVE-2026-74509} - openvswitch: vport: fix self-deadlock on release of tunnel ports (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (CKI Backport Bot) [RHEL-253856] {CVE-2026-31678} - Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CKI Backport Bot) [RHEL-244764] {CVE-2026-63974} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222958] {CVE-2026-52935} - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link() (Jan Polensky) [RHEL-271472] {CVE-2026-80985} - KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (Mohammadfaiz Bawa) [RHEL-243814] {CVE-2026-72288} - SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (Olga Kornievskaia) [RHEL-275058] {CVE-2026-93207} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275076] {CVE-2026-93228} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270929] {CVE-2026-90036} - NFSD: Prevent client use-after-free during delegation revoke (Olga Kornievskaia) [RHEL-270929] {CVE-2026-89659} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271453] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268122] {CVE-2026-74705} - net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CKI Backport Bot) [RHEL-270908] {CVE-2026-81003} - wifi: cfg80211: use wiphy work for socket owner autodisconnect (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down (Jose Ignacio Tornos Martinez) [RHEL-240485] {CVE-2026-68404} - wifi: mac80211: defer link RX stats percpu free to RCU (Jose Ignacio Tornos Martinez) [RHEL-263788] {CVE-2026-68409} - wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (Jose Ignacio Tornos Martinez) [RHEL-259560] {CVE-2026-64030} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261686] {CVE-2026-72262} - net/iucv: fix use-after-free of a severed iucv_path (CKI Backport Bot) [RHEL-260511] {CVE-2026-68140} - netfilter: nft_lookup: fix catchall element handling with inverted lookups (CKI Backport Bot) [RHEL-261293] {CVE-2026-72320} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256448] {CVE-2026-74641} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-237219] {CVE-2026-68377} - net/sched: act_ct: Only release RCU read lock after ct_ft (CKI Backport Bot) [RHEL-229654] {CVE-2026-46319} - net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CKI Backport Bot) [RHEL-226490] {CVE-2026-53011} - nvmet-auth: Synchronize timeout work during SQ teardown (CKI Backport Bot) [RHEL-276348] {CVE-2026-89970} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (José Expósito) [RHEL-262131] {CVE-2026-89811} - drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise (José Expósito) [RHEL-250806] {CVE-2026-46309} - drm/xe: Fix memory leak in xe_vm_madvise_ioctl (José Expósito) [RHEL-250806] - drm/amd/display: set new_stream to NULL after release (CKI Backport Bot) [RHEL-260532] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (CKI Backport Bot) [RHEL-258162] {CVE-2026-80887} - drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() (CKI Backport Bot) [RHEL-236241] {CVE-2026-68245} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (CKI Backport Bot) [RHEL-240851] {CVE-2026-68278} - bpf: Restrict JIT predictor flush to cBPF (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - x86/bugs: Enable IBPB flush on BPF JIT allocation (Viktor Malik) [RHEL-273998] {CVE-2026-64507} - bpf: Support for hardening against JIT spraying (Viktor Malik) [RHEL-273882] {CVE-2026-64508} - openvswitch: fix GSO userspace truncation underflow (CKI Backport Bot) [RHEL-263867] {CVE-2026-68123} - media: cx231xx: reject geometry changes while the VBI queue is busy (CKI Backport Bot) [RHEL-262527] {CVE-2026-89894} - macsec: fix replay protection at XPN lower-PN wrap (Abhishek Rawal) [RHEL-226673] {CVE-2026-63925} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261999] {CVE-2026-72318} - ice: use per-interface clock_id for E825 generic DPLLs (Jakub Ramaseuski) [RHEL-183201] - ice: add TSPLL DPLL device and TIME_REF pin for E825 (Jakub Ramaseuski) [RHEL-183201] - ice: monitor TSPLL lock from PTP periodic worker (Jakub Ramaseuski) [RHEL-183201] - ice: suppress DPLL errors during reset recovery (Jakub Ramaseuski) [RHEL-183201] - redhat/configs: Enable Epson RX8111 RTC driver (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: Adapt upstream driver for kernel 5.14 (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: handle VLOW flag (CKI Backport Bot) [RHEL-212014] - rtc: rx8111: demote warnings to debug level (CKI Backport Bot) [RHEL-212014] - rtc: Add driver for Epson RX8111 (CKI Backport Bot) [RHEL-212014] - nfsd: defer vfree of compound ops to fix rpc_status UAF (Roberto Bergantinos Corpas) [RHEL-264950] {CVE-2026-89690} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187734] {CVE-2026-89530} - nfsd: initialize copy-notify stateid before publishing it (Roberto Bergantinos Corpas) [RHEL-264186] {CVE-2026-89669} - nfsd: revoke copy-notify stateids before dropping their reference (Roberto Bergantinos Corpas) [RHEL-264152] {CVE-2026-89663} - nfsd: check client ownership when cancelling a copy-notify stateid (Roberto Bergantinos Corpas) [RHEL-264152] - nfsd: fix cpntf publish race in nfs4_init_cp_state (Roberto Bergantinos Corpas) [RHEL-264152] - NFSD: Fix SECINFO_NO_NAME decode error cleanup (Roberto Bergantinos Corpas) [RHEL-259240] {CVE-2026-53398} - SUNRPC: pin upper rpc_clnt across the TLS connect_worker (Roberto Bergantinos Corpas) [RHEL-261480] {CVE-2026-72317} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Vb Vasu) [RHEL-254246] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Vb Vasu) [RHEL-254246] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Vb Vasu) [RHEL-254246] {CVE-2026-74744} - ipvlan: Make the addrs_lock be per port (Vb Vasu) [RHEL-246115] {CVE-2026-23103} - sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate (Herton R. Krzesinski) [RHEL-256279] - sched: Make class_schedulers avoid pushing current, and get rid of proxy_tag_curr() [partial] (Herton R. Krzesinski) [RHEL-256279] - vsock/virtio: bind uarg before filling zerocopy skb (Jon Maloy) [RHEL-229027] {CVE-2026-63970} - vsock/virtio: fix zerocopy completion for multi-skb sends (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (Jon Maloy) [RHEL-232843] {CVE-2026-53365} - idpf: fix max_vport related crash on allocation error during init (Michal Schmidt) [RHEL-243408] {CVE-2026-68291} - idpf: fix double free and use-after-free in aux device error paths (Michal Schmidt) [RHEL-243408] {CVE-2026-53286} - idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (Michal Schmidt) [RHEL-243408] {CVE-2026-64162} - idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (Michal Schmidt) [RHEL-243408] {CVE-2026-31647} - KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Check PSC request indices against the actual size of the buffer (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Don't explicitly pass PSC buffer to snp_begin_psc() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: WARN if KVM attempts to setup scratch area with min_len==0 (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Compute the correct max length of the in-GHCB scratch area (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Use the size of the PSC header as the minimum size for PSC requests (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore Port I/O requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Reject MMIO requests larger than 8 bytes with GHCB v2+ (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Provide helpers to set the error code (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SVM: Convert plain error code numbers to defines (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Ignore MMIO requests of length '0' (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Consolidate SEV-ES MMIO emulation into a single public API (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Dedup kvm_sev_es_mmio_{read,write}() (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: x86: Harden SEV-ES MMIO against on-stack use-after-free (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (Rahul Kumar) [RHEL-192284] {CVE-2026-53360} - x86/vmware: Fix hypercall clobbers (Jon Maloy) [RHEL-186577] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232270] {CVE-2026-64115} - igc: set tx buffer type for SMD frames (CKI Backport Bot) [RHEL-227034] {CVE-2026-64035} - iavf: fix wrong VLAN mask for legacy Rx descriptors L2TAG2 (CKI Backport Bot) [RHEL-169480] - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-274410] - nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CKI Backport Bot) [RHEL-269504] {CVE-2026-90227} - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (Jan Polensky) [RHEL-270892] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271672] {CVE-2026-93288} - thermal: core: Fix thermal zone device registration error path (Dennis Chen) [RHEL-226822] {CVE-2026-43332} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270902] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270670] {CVE-2026-97417} - KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jon Maloy) [RHEL-227040] {CVE-2026-46317} - Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CKI Backport Bot) [RHEL-232611] {CVE-2026-46275} - io_uring/kbuf: check if target buffer list is still legacy on recycle (David Jeffery) [RHEL-254192] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263460] {CVE-2026-89481} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263369] {CVE-2026-89480} - ipv6: add NULL checks for idev in SRv6 paths (Antoine Tenart) [RHEL-257690] {CVE-2026-23442} - ipv6: fix use-after-free in ip6_finish_output2() (Antoine Tenart) [RHEL-258675] {CVE-2026-80792} - ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (Antoine Tenart) [RHEL-259361] {CVE-2026-63924} - ipv6: exthdrs: refresh nh after handling HAO option (Antoine Tenart) [RHEL-259413] {CVE-2026-63922} - ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (Antoine Tenart) [RHEL-231279] {CVE-2026-63984} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225381] {CVE-2026-63920} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() (CKI Backport Bot) [RHEL-231351] {CVE-2026-64557} - vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (Abhishek Rawal) [RHEL-231721] {CVE-2026-63993} - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Abhishek Rawal) [RHEL-259588] {CVE-2026-63994} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Abhishek Rawal) [RHEL-230774] {CVE-2026-63992} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-238889] {CVE-2026-68432} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247004] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Abhishek Rawal) [RHEL-247040] {CVE-2026-63829} - hwmon: (core) Use device name as a fallback in devm_hwmon_device_register_with_info (CKI Backport Bot) [RHEL-262029] - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260635] {CVE-2026-74569} - smb: client: fix double-free in SMB2_ioctl() replay (CKI Backport Bot) [RHEL-259778] {CVE-2026-64385} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258123] {CVE-2026-80921} - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257771] {CVE-2026-72099} - KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (Jon Maloy) [RHEL-227374] {CVE-2026-46076} - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - KVM: SVM: Move x2AVIC MSR interception helper to avic.c (Jon Maloy) [RHEL-254524] {CVE-2026-74516} - Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (David Marlin) [RHEL-229777] - Bluetooth: fix UAF in bt_accept_dequeue() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CKI Backport Bot) [RHEL-229777] {CVE-2026-53357} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (CKI Backport Bot) [RHEL-254400] {CVE-2026-74669} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252427] {CVE-2026-72255} - KVM: arm64: vgic: Check the interrupt is still ours before migrating it (CKI Backport Bot) [RHEL-252481] {CVE-2026-72289} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250570] {CVE-2026-74746} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232060] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232031] {CVE-2026-52986} - gfs2: add some missing log locking (CKI Backport Bot) [RHEL-230316] {CVE-2026-53049} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227553] {CVE-2026-45861} - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (CKI Backport Bot) [RHEL-189937] {CVE-2025-40149} - Revert "mm/memcg: refactor try_charge_memcg retry logic to use for loop" (Audra Mitchell) [RHEL-269060] - futex: Prevent rcuwait use-after-free during requeue PI (Waiman Long) [RHEL-263481] {CVE-2026-90003} - futex: Fix might_sleep() warning in futex_pivot_pending() (Waiman Long) [RHEL-263481] - futex: Fix race on the initial mm->futex.phash.ref allocation (Waiman Long) [RHEL-263481] {CVE-2026-80775} - futex/pi: Reject cross-mm private futex owners (Waiman Long) [RHEL-263481] {CVE-2026-80778} - futex: Avoid private hash use-after-free on final put (Waiman Long) [RHEL-263481] {CVE-2026-80758} - futex: Fix race in futex_pivot_pending() during private hash resize (Waiman Long) [RHEL-263481] {CVE-2026-80776} - futex: Prevent robust futex exit race some more (Waiman Long) [RHEL-263481] {CVE-2026-74658} - futex: Optimize futex hash bucket access patterns (Waiman Long) [RHEL-263481] - compiler_types.h: add "auto" as a macro for "__auto_type" (Waiman Long) [RHEL-263481] - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-169936] - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-169936] - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-169936] - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-169936] - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232599] {CVE-2026-45856} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214951] {CVE-2026-63794} - Stop adding BCC lines to subject - Resolves: RHEL-110823 - rebased to 2.40.0 (RHEL-100439) - zipl/boot: Fix unused loadparm when SCLP line-mode console is absent - Secure Execution: Add tool to verify host-key documents (RHEL-136796) - Resolves: RHEL-100439 RHEL-136796 - rebased to 2.39.0 (RHEL-100439) - udev/rules.d: Set default io scheduler to 'none' for virtio-blk (RHEL-126743) - udev/rules.d: make virtio-blk devices non-rotational (RHEL-126745) - zipl: makedumpfile is required for ngdump support (RHEL-114663) - libekmfweb: Fix gen of cert or CSR to use RSA not RSA-PSS (RHEL-114885) - chpstat: Fix DPU utilization scaling in reports (RHEL-109215) - Resolves: RHEL-100439 RHEL-126743 RHEL-126745 RHEL-114663 RHEL-114885 RHEL-109215 - cpi: Disable CPI for SEL guests by default (RHEL-76931) - Resolves: RHEL-76931 - rebased to 2.38.0 (RHEL-73342) - LPAR level power consumption reporting (RHEL-72675) - Provide Topology-Map information to userspace (RHEL-72682) - Add CCK secret type for updating the Customer Communication Key (RHEL-73021) - Convert LUKS2 volume from AES keys to retrievable PAES keys (RHEL-85390) - Resolves: RHEL-73342 RHEL-72675 RHEL-72682 RHEL-73021 RHEL-85390 - pvimg/genprotimg: Fix confidential dump support (RHEL-76912) - Resolves: RHEL-76912 - rebased to 2.36.0 (RHEL-50026) - cpacfinfo: new tool to provide CPACF information (RHEL-50020) - chpstat: Additional Channel Measurements (RHEL-50023) - zPCI: Optics Monitoring for PF Access Mode (RHEL-50024) - KVM: Support extended attestation for Secure Execution (RHEL-50009) - KVM: genprotimg: validate if SE image can run on particular host(s) (RHEL-50008) - Vertical CPU Polarization Support Stage 2 (RHEL-64705) - KVM: Support unencrypted SE images by exposing resp. SE header flag (RHEL-70853) - KVM: Rewrite genprotimg in Rust (RHEL-72023) - Provide genprotimg / pvimg info command to display encrypted & unencrypted SE image information (RHEL-71819) - KVM: Support retrievable secrets in Secure Execution guests (RHEL-50019) - zkey key support for dm-crypt with XTS keys (RHEL-50010) - Resolves: RHEL-50026 RHEL-50020 RHEL-50023 RHEL-50024 RHEL-50009 RHEL-50008 RHEL-64705 RHEL-70853 RHEL-72023 RHEL-71819 RHEL-50019 RHEL-50010 - rebased to 2.35.0 (RHEL-50026) - cpacfstats: support MSA 10 and MSA 11 (RHEL-50030) - Resolves: RHEL-50026 RHEL-50030 - avoid usage of the which tool (RHEL-38488) - Related: RHEL-38488 - rebased to 2.33.1 (RHEL-23704) - dbginfo.sh: missing data of new ROCE cards (RHEL-24109) - SE-tooling: New IBM host-key subject locality (RHEL-30273) - Fix disk type detection when running under QEMU (RHEL-40358) - Resolves: RHEL-23704 RHEL-24109 RHEL-30273 RHEL-40358 - add s390utils-se-data as a noarch subpackage with Secure Execution data files - Resolves: RHEL-10567 - rebased to 2.40.0 (RHEL-100439) - zipl/boot: Fix unused loadparm when SCLP line-mode console is absent - Secure Execution: Add tool to verify host-key documents (RHEL-136796) - Resolves: RHEL-100439 RHEL-136796 - rebased to 2.39.0 (RHEL-100439) - udev/rules.d: Set default io scheduler to 'none' for virtio-blk (RHEL-126743) - udev/rules.d: make virtio-blk devices non-rotational (RHEL-126745) - zipl: makedumpfile is required for ngdump support (RHEL-114663) - libekmfweb: Fix gen of cert or CSR to use RSA not RSA-PSS (RHEL-114885) - chpstat: Fix DPU utilization scaling in reports (RHEL-109215) - Resolves: RHEL-100439 RHEL-126743 RHEL-126745 RHEL-114663 RHEL-114885 RHEL-109215 - cpi: Disable CPI for SEL guests by default (RHEL-76931) - Resolves: RHEL-76931 - rebased to 2.38.0 (RHEL-73342) - LPAR level power consumption reporting (RHEL-72675) - Provide Topology-Map information to userspace (RHEL-72682) - Add CCK secret type for updating the Customer Communication Key (RHEL-73021) - Convert LUKS2 volume from AES keys to retrievable PAES keys (RHEL-85390) - Resolves: RHEL-73342 RHEL-72675 RHEL-72682 RHEL-73021 RHEL-85390 - pvimg/genprotimg: Fix confidential dump support (RHEL-76912) - Resolves: RHEL-76912 - rebased to 2.36.0 (RHEL-50026) - cpacfinfo: new tool to provide CPACF information (RHEL-50020) - chpstat: Additional Channel Measurements (RHEL-50023) - zPCI: Optics Monitoring for PF Access Mode (RHEL-50024) - KVM: Support extended attestation for Secure Execution (RHEL-50009) - KVM: genprotimg: validate if SE image can run on particular host(s) (RHEL-50008) - Vertical CPU Polarization Support Stage 2 (RHEL-64705) - KVM: Support unencrypted SE images by exposing resp. SE header flag (RHEL-70853) - KVM: Rewrite genprotimg in Rust (RHEL-72023) - Provide genprotimg / pvimg info command to display encrypted & unencrypted SE image information (RHEL-71819) - KVM: Support retrievable secrets in Secure Execution guests (RHEL-50019) - zkey key support for dm-crypt with XTS keys (RHEL-50010) - Resolves: RHEL-50026 RHEL-50020 RHEL-50023 RHEL-50024 RHEL-50009 RHEL-50008 RHEL-64705 RHEL-70853 RHEL-72023 RHEL-71819 RHEL-50019 RHEL-50010 - rebased to 2.35.0 (RHEL-50026) - cpacfstats: support MSA 10 and MSA 11 (RHEL-50030) - Resolves: RHEL-50026 RHEL-50030 - avoid usage of the which tool (RHEL-38488) - Related: RHEL-38488 - rebased to 2.33.1 (RHEL-23704) - dbginfo.sh: missing data of new ROCE cards (RHEL-24109) - SE-tooling: New IBM host-key subject locality (RHEL-30273) - Fix disk type detection when running under QEMU (RHEL-40358) - Resolves: RHEL-23704 RHEL-24109 RHEL-30273 RHEL-40358 - add s390utils-se-data as a noarch subpackage with Secure Execution data files - Resolves: RHEL-10567 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves:rhbz#1990810 - Typo in the fontconfig file - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Bump build number - Security release for CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-4480 CVE-2026-40170 CVE-2026-4408 - resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba: various flaws - resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing - resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2 - resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169665 - Fix samba automount triggering for more file systems - resolves: RHEL-169726 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150824 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147419 - Fix samba-bgqd to load [printers] share - resolves: RHEL-147858 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144590 - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144480 - Update to version 4.23.5 - resolves: RHEL-143401 - Fix winbind group resolution - resolves: RHEL-141027 - Fix winbind crash - Fix winbind mkhomedir ownership handling - resolves: RHEL-180756 - Bump build number - Security release for CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-4480 CVE-2026-40170 CVE-2026-4408 - resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba: various flaws - resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing - resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2 - resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169665 - Fix samba automount triggering for more file systems - resolves: RHEL-169726 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150824 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147419 - Fix samba-bgqd to load [printers] share - resolves: RHEL-147858 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144590 - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144480 - Fix winbind lsa_OpenPolicy() lsa connection failure (NT_STATUS_RPC_CANNOT_SUPPORT) - resolves: RHEL-257111 - Fix winbind mkhomedir ownership handling - resolves: RHEL-180756 - Bump build number - Security release for CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-4480 CVE-2026-40170 CVE-2026-4408 - resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba: various flaws - resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing - resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2 - resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169665 - Fix samba automount triggering for more file systems - resolves: RHEL-169726 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150824 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147419 - Fix samba-bgqd to load [printers] share - resolves: RHEL-147858 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144590 - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169665 - Fix samba automount triggering for more file systems - resolves: RHEL-169726 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150824 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147419 - Fix samba-bgqd to load [printers] share - resolves: RHEL-147858 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144590 - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144480 - Update to version 4.23.5 - resolves: RHEL-143401 - Fix winbind group resolution - resolves: RHEL-141027 - Fix winbind crash - Remove libldb dependency to samba-common-libs - resolves: RHEL-133003 - Update to version 4.23.4 - resolves: RHEL-114548 - Update to version 4.23.4 - resolves: RHEL-132995 - Fix Time Machine backup - resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba - Bump build number - Security release for CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-4480 CVE-2026-40170 CVE-2026-4408 - resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba: various flaws - resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing - resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2 - resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169665 - Fix samba automount triggering for more file systems - resolves: RHEL-169726 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150824 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147419 - Fix samba-bgqd to load [printers] share - resolves: RHEL-147858 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144590 - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144480 - Update to version 4.23.5 - resolves: RHEL-143401 - Fix winbind group resolution - resolves: RHEL-141027 - Fix winbind crash - Fix winbind mkhomedir ownership handling - resolves: RHEL-180756 - Bump build number - Security release for CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-4480 CVE-2026-40170 CVE-2026-4408 - resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba: various flaws - resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing - resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2 - resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169665 - Fix samba automount triggering for more file systems - resolves: RHEL-169726 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150824 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147419 - Fix samba-bgqd to load [printers] share - resolves: RHEL-147858 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144590 - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144480 - Fix winbind lsa_OpenPolicy() lsa connection failure (NT_STATUS_RPC_CANNOT_SUPPORT) - resolves: RHEL-257111 - Fix winbind mkhomedir ownership handling - resolves: RHEL-180756 - Bump build number - Security release for CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-4480 CVE-2026-40170 CVE-2026-4408 - resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba: various flaws - resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing - resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2 - resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169665 - Fix samba automount triggering for more file systems - resolves: RHEL-169726 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150824 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147419 - Fix samba-bgqd to load [printers] share - resolves: RHEL-147858 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144590 - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169665 - Fix samba automount triggering for more file systems - resolves: RHEL-169726 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150824 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147419 - Fix samba-bgqd to load [printers] share - resolves: RHEL-147858 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144590 - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144480 - Update to version 4.23.5 - resolves: RHEL-143401 - Fix winbind group resolution - resolves: RHEL-141027 - Fix winbind crash - Remove libldb dependency to samba-common-libs - resolves: RHEL-133003 - Update to version 4.23.4 - resolves: RHEL-114548 - Update to version 4.23.4 - resolves: RHEL-132995 - Fix Time Machine backup - resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba - Bump build number - Security release for CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-4480 CVE-2026-40170 CVE-2026-4408 - resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba: various flaws - resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing - resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2 - resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169665 - Fix samba automount triggering for more file systems - resolves: RHEL-169726 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150824 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147419 - Fix samba-bgqd to load [printers] share - resolves: RHEL-147858 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144590 - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144480 - Update to version 4.23.5 - resolves: RHEL-143401 - Fix winbind group resolution - resolves: RHEL-141027 - Fix winbind crash - Fix winbind mkhomedir ownership handling - resolves: RHEL-180756 - Bump build number - Security release for CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-4480 CVE-2026-40170 CVE-2026-4408 - resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba: various flaws - resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing - resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2 - resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169665 - Fix samba automount triggering for more file systems - resolves: RHEL-169726 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150824 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147419 - Fix samba-bgqd to load [printers] share - resolves: RHEL-147858 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144590 - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144480 - Fix winbind lsa_OpenPolicy() lsa connection failure (NT_STATUS_RPC_CANNOT_SUPPORT) - resolves: RHEL-257111 - Fix winbind mkhomedir ownership handling - resolves: RHEL-180756 - Bump build number - Security release for CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-4480 CVE-2026-40170 CVE-2026-4408 - resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba: various flaws - resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing - resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2 - resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169665 - Fix samba automount triggering for more file systems - resolves: RHEL-169726 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150824 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147419 - Fix samba-bgqd to load [printers] share - resolves: RHEL-147858 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144590 - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169665 - Fix samba automount triggering for more file systems - resolves: RHEL-169726 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150824 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147419 - Fix samba-bgqd to load [printers] share - resolves: RHEL-147858 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144590 - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144480 - Update to version 4.23.5 - resolves: RHEL-143401 - Fix winbind group resolution - resolves: RHEL-141027 - Fix winbind crash - Remove libldb dependency to samba-common-libs - resolves: RHEL-133003 - Update to version 4.23.4 - resolves: RHEL-114548 - Update to version 4.23.4 - resolves: RHEL-132995 - Fix Time Machine backup - resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba - Bump build number - Security release for CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-4480 CVE-2026-40170 CVE-2026-4408 - resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba: various flaws - resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing - resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2 - resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169665 - Fix samba automount triggering for more file systems - resolves: RHEL-169726 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150824 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147419 - Fix samba-bgqd to load [printers] share - resolves: RHEL-147858 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144590 - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144480 - Update to version 4.23.5 - resolves: RHEL-143401 - Fix winbind group resolution - resolves: RHEL-141027 - Fix winbind crash - Fix winbind mkhomedir ownership handling - resolves: RHEL-180756 - Bump build number - Security release for CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-4480 CVE-2026-40170 CVE-2026-4408 - resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba: various flaws - resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing - resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2 - resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169665 - Fix samba automount triggering for more file systems - resolves: RHEL-169726 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150824 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147419 - Fix samba-bgqd to load [printers] share - resolves: RHEL-147858 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144590 - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144480 - Fix winbind lsa_OpenPolicy() lsa connection failure (NT_STATUS_RPC_CANNOT_SUPPORT) - resolves: RHEL-257111 - Fix winbind mkhomedir ownership handling - resolves: RHEL-180756 - Bump build number - Security release for CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-4480 CVE-2026-40170 CVE-2026-4408 - resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba: various flaws - resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing - resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2 - resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169665 - Fix samba automount triggering for more file systems - resolves: RHEL-169726 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150824 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147419 - Fix samba-bgqd to load [printers] share - resolves: RHEL-147858 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144590 - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169665 - Fix samba automount triggering for more file systems - resolves: RHEL-169726 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150824 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147419 - Fix samba-bgqd to load [printers] share - resolves: RHEL-147858 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144590 - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144480 - Update to version 4.23.5 - resolves: RHEL-143401 - Fix winbind group resolution - resolves: RHEL-141027 - Fix winbind crash - Remove libldb dependency to samba-common-libs - resolves: RHEL-133003 - Update to version 4.23.4 - resolves: RHEL-114548 - Update to version 4.23.4 - resolves: RHEL-132995 - Fix Time Machine backup - resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba - Bump build number - Security release for CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-4480 CVE-2026-40170 CVE-2026-4408 - resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba: various flaws - resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing - resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2 - resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169665 - Fix samba automount triggering for more file systems - resolves: RHEL-169726 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150824 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147419 - Fix samba-bgqd to load [printers] share - resolves: RHEL-147858 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144590 - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144480 - Update to version 4.23.5 - resolves: RHEL-143401 - Fix winbind group resolution - resolves: RHEL-141027 - Fix winbind crash - Fix winbind mkhomedir ownership handling - resolves: RHEL-180756 - Bump build number - Security release for CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-4480 CVE-2026-40170 CVE-2026-4408 - resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba: various flaws - resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing - resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2 - resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169665 - Fix samba automount triggering for more file systems - resolves: RHEL-169726 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150824 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147419 - Fix samba-bgqd to load [printers] share - resolves: RHEL-147858 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144590 - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144480 - Fix winbind lsa_OpenPolicy() lsa connection failure (NT_STATUS_RPC_CANNOT_SUPPORT) - resolves: RHEL-257111 - Fix winbind mkhomedir ownership handling - resolves: RHEL-180756 - Bump build number - Security release for CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-4480 CVE-2026-40170 CVE-2026-4408 - resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba: various flaws - resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing - resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2 - resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169665 - Fix samba automount triggering for more file systems - resolves: RHEL-169726 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150824 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147419 - Fix samba-bgqd to load [printers] share - resolves: RHEL-147858 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144590 - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169665 - Fix samba automount triggering for more file systems - resolves: RHEL-169726 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150824 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147419 - Fix samba-bgqd to load [printers] share - resolves: RHEL-147858 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144590 - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144480 - Update to version 4.23.5 - resolves: RHEL-143401 - Fix winbind group resolution - resolves: RHEL-141027 - Fix winbind crash - Remove libldb dependency to samba-common-libs - resolves: RHEL-133003 - Update to version 4.23.4 - resolves: RHEL-114548 - Update to version 4.23.4 - resolves: RHEL-132995 - Fix Time Machine backup - resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba - Bump build number - Security release for CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-4480 CVE-2026-40170 CVE-2026-4408 - resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba: various flaws - resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing - resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2 - resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169665 - Fix samba automount triggering for more file systems - resolves: RHEL-169726 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150824 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147419 - Fix samba-bgqd to load [printers] share - resolves: RHEL-147858 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144590 - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144480 - Update to version 4.23.5 - resolves: RHEL-143401 - Fix winbind group resolution - resolves: RHEL-141027 - Fix winbind crash - Fix winbind mkhomedir ownership handling - resolves: RHEL-180756 - Bump build number - Security release for CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-4480 CVE-2026-40170 CVE-2026-4408 - resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba: various flaws - resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing - resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2 - resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169665 - Fix samba automount triggering for more file systems - resolves: RHEL-169726 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150824 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147419 - Fix samba-bgqd to load [printers] share - resolves: RHEL-147858 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144590 - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144480 - Fix winbind lsa_OpenPolicy() lsa connection failure (NT_STATUS_RPC_CANNOT_SUPPORT) - resolves: RHEL-257111 - Fix winbind mkhomedir ownership handling - resolves: RHEL-180756 - Bump build number - Security release for CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-4480 CVE-2026-40170 CVE-2026-4408 - resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba: various flaws - resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing - resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2 - resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169665 - Fix samba automount triggering for more file systems - resolves: RHEL-169726 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150824 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147419 - Fix samba-bgqd to load [printers] share - resolves: RHEL-147858 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144590 - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169665 - Fix samba automount triggering for more file systems - resolves: RHEL-169726 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150824 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147419 - Fix samba-bgqd to load [printers] share - resolves: RHEL-147858 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144590 - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144480 - Update to version 4.23.5 - resolves: RHEL-143401 - Fix winbind group resolution - resolves: RHEL-141027 - Fix winbind crash - Remove libldb dependency to samba-common-libs - resolves: RHEL-133003 - Update to version 4.23.4 - resolves: RHEL-114548 - Update to version 4.23.4 - resolves: RHEL-132995 - Fix Time Machine backup - resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - 1922563 - sane-airscan-0.99.24 is available - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 1914565 - sane-airscan-0.99.23 is available - 1906510 - sane-airscan-0.99.22 is available - 0.99.21 - 1900160 - sane-airscan-0.99.20 is available - 1897935 - Crash on libsane-airscan when trying to activate scanner - 1890866 - sane-airscan-0.99.19 is available - make is no longer in buildroot by default - use smaller git-core instead of git - 2095461 - [RFE] sane-backends use systems-sysusers - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - 1934308 - Several Epson devices cannot scan because they fail to set focus - Rebuilt for updated systemd-rpm-macros See https://pagure.io/fesco/issue/2583. - python3 is now needed for building pixma backend - 1928484 - sane-backends-1.0.32 is available - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - make is no longer in buildroot by default - 1750899 - CANOSCAN N650U scanner device not correctly detected via USB - 2095461 - [RFE] sane-backends use systems-sysusers - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - 1934308 - Several Epson devices cannot scan because they fail to set focus - Rebuilt for updated systemd-rpm-macros See https://pagure.io/fesco/issue/2583. - python3 is now needed for building pixma backend - 1928484 - sane-backends-1.0.32 is available - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - make is no longer in buildroot by default - 1750899 - CANOSCAN N650U scanner device not correctly detected via USB - 2095461 - [RFE] sane-backends use systems-sysusers - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - 1934308 - Several Epson devices cannot scan because they fail to set focus - Rebuilt for updated systemd-rpm-macros See https://pagure.io/fesco/issue/2583. - python3 is now needed for building pixma backend - 1928484 - sane-backends-1.0.32 is available - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - make is no longer in buildroot by default - 1750899 - CANOSCAN N650U scanner device not correctly detected via USB - 2095461 - [RFE] sane-backends use systems-sysusers - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - 1934308 - Several Epson devices cannot scan because they fail to set focus - Rebuilt for updated systemd-rpm-macros See https://pagure.io/fesco/issue/2583. - python3 is now needed for building pixma backend - 1928484 - sane-backends-1.0.32 is available - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - make is no longer in buildroot by default - 1750899 - CANOSCAN N650U scanner device not correctly detected via USB - 2095461 - [RFE] sane-backends use systems-sysusers - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - 1934308 - Several Epson devices cannot scan because they fail to set focus - Rebuilt for updated systemd-rpm-macros See https://pagure.io/fesco/issue/2583. - python3 is now needed for building pixma backend - 1928484 - sane-backends-1.0.32 is available - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - make is no longer in buildroot by default - 1750899 - CANOSCAN N650U scanner device not correctly detected via USB - 2095461 - [RFE] sane-backends use systems-sysusers - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - 1934308 - Several Epson devices cannot scan because they fail to set focus - Rebuilt for updated systemd-rpm-macros See https://pagure.io/fesco/issue/2583. - python3 is now needed for building pixma backend - 1928484 - sane-backends-1.0.32 is available - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - make is no longer in buildroot by default - 1750899 - CANOSCAN N650U scanner device not correctly detected via USB - 2095461 - [RFE] sane-backends use systems-sysusers - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - 1934308 - Several Epson devices cannot scan because they fail to set focus - Rebuilt for updated systemd-rpm-macros See https://pagure.io/fesco/issue/2583. - python3 is now needed for building pixma backend - 1928484 - sane-backends-1.0.32 is available - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - make is no longer in buildroot by default - 1750899 - CANOSCAN N650U scanner device not correctly detected via USB - new upstream release - Bump release. - new upstream release - new nodelay flag for add_lockspace - spec file fixes - upstream release 3.9.5, and udevadm settle patch - fix invalid strcpy in direct dump - upstream release - upstream release, fix rpm issues - fix rpm issues - new upstream release - Bump release. - new upstream release - new nodelay flag for add_lockspace - spec file fixes - upstream release 3.9.5, and udevadm settle patch - fix invalid strcpy in direct dump - upstream release - upstream release, fix rpm issues - fix rpm issues - Rebuild against json-c-0.14-11 Related: rhbz#2023326 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - New upstream version - lib: Use GLib for computing SHA-1 digests - sr_distances_cluster_objects: Check arg safety - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - New upstream version - Fix builds with python3.10 - Add fix for https://bugzilla.redhat.com/show_bug.cgi?id=1898063 - New upstream version - Fix leaks in koops stacktrace- and report-handling code - Replace utility code with GLib functions - Fix unit test portability issue - Add build dependency on make - Remove #define PyString_AsString PyUnicode_AsUTF8 - python: Adapt to changes made in PEP 590 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Bump release to address sbc-devel inclusion to CRB Resolves: RHEL-105435 - rebase to upstream v1.5.2 - convert license naming to SPDX - make static analysis happy with a few checks & rearanges with dynamic-memory-management Resolves: rhbz#2168579 - Be a bit more descriptive on issues opening watchdog-devices Resolves: rhbz#2108122 - obviously autoconf is defining runstatedir - but with a wrong default - directly hand it over to configure and skip --with-runstatedir implemented in configure.ac for older versions of autoconf Resolves: rhbz#2011707 - rebase to upstream v1.5.1 Resolves: rhbz#2013261 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - properly conflict with pacemaker not providing sync-default we need Resolves: rhbz#1979961 Resolves: rhbz#1979573 - sync with fedora sbd-1.5.0-1 Resolves: rhbz#1979961 Resolves: rhbz#1979573 - Add support for Image Mode Resolves: RHEL-132483 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Use make macros, patch by Tom Stellard <tstellar@redhat.com> - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Add support for post-quantum cryptography Resolves: RHEL-127515 - Update OpenSSL certificates set up Resolves: RHEL-118293 - Eliminate use of obsolete %patchN syntax Related: RHEL-91101 - Add sysusers.d config file to allow rpm to create users/groups automatically and drop attempt to delete group Related: RHEL-91101 - Add support for Image Mode Resolves: RHEL-91101 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fix crash when using "cmx" command with no additional parameter Resolves: #2083577 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add AlmaLinux 9 support - Fix inconsistent and missing audit keys in some audit rules (RHEL-141394) - Modify shipped kickstart files so that the size of boot partition aligns with official recommended size (RHEL-145201) - Disable SHA-1 for the RPM component in RHEL 9 CIS profiles (RHEL-138448) - Use correct permissions and consider the log_group option in rules file_permissions_var_log_audit and directory_permissions_var_log_audit (RHEL-138549) - Rule configure_ssh_crypto_policy has been removed from RHEL 9 and RHEL 10 profiles. (RHEL-65737) - Rules of type sshd_use_strong_kex have been removed from RHEL CIS profiles in favor of system wide crypto policies usage. (RHEL-62941) - Rebase scap-security-guide to the latest upstream version 0.1.80 (RHEL-136121) - Update to the latest upstream release (RHEL-135773) - rebase scap-security-guide package to version 0.1.78 (RHEL-118557) - fix incorrect applicability of Grub2 UEFI specific rules - replace grub-mkconfig with grub2-mkconfig in rule descriptions - Turn on SCE for this release (RHEL-94803) - Rebase to scap-security-guide version 0.1.77 (RHEL-94803) - rule networkmanager_dns_mode now checks dropin files and has more resilient regex (RHEL-62843) - rsyslog_remote_loghost checks for Rainer Script syntax as well (RHEL-62731) - improve checking of Grub2 superuser and password configuration (RHEL-58818) - rebase scap-security-guide to the latest upstream version 0.1.76 (RHEL-74240) - modify the rule require_singleuser_auth to honor overriding mechanism offered by Systemd (RHEL-71936) - make the rule sysctl_user_max_user_namespaces informational and unscored in RHEL 9 STIG profile (RHEL-40120) - align checking of approved SSH ciphers with latest STIG policy (RHEL-65432) - Rebase to new release (RHEL-66154) - the rule sshd_use_priv_separation is no longer used (RHEL-66057) - add a rule checking for presence of chrony to CIS RHEL 9 profile (RHEL-60005) - remediation of Networkmanager DNS mode now remediates value "default" (RHEL-53426) - Adjust mount_option_nodev_nonroot_local_partitions to work in Image Builder environments. (RHEL-45018) - Adjusted rules related to sshd ensure constancy in checked values and ensure that drop in configuration files are checked. (RHEL-38206) - Rebase to a new upstream release 0.1.74 (RHEL-53865) - Ensure authselect features are preserved by enable_authselect rule (RHEL-39383) - Fix check for passwords last changed date (RHEL-47129) - Remediations of Journald configuration files now include a correct section (RHEL-38531) - Adjust service requirements for CIS profiles (RHEL-23852) - Update password hashing settings for ANSSI-BP-028 (RHEL-44983) - Add AlmaLinux 9 support - Fix inconsistent and missing audit keys in some audit rules (RHEL-141394) - Modify shipped kickstart files so that the size of boot partition aligns with official recommended size (RHEL-145201) - Disable SHA-1 for the RPM component in RHEL 9 CIS profiles (RHEL-138448) - Use correct permissions and consider the log_group option in rules file_permissions_var_log_audit and directory_permissions_var_log_audit (RHEL-138549) - Rule configure_ssh_crypto_policy has been removed from RHEL 9 and RHEL 10 profiles. (RHEL-65737) - Rules of type sshd_use_strong_kex have been removed from RHEL CIS profiles in favor of system wide crypto policies usage. (RHEL-62941) - Rebase scap-security-guide to the latest upstream version 0.1.80 (RHEL-136121) - Update to the latest upstream release (RHEL-135773) - rebase scap-security-guide package to version 0.1.78 (RHEL-118557) - fix incorrect applicability of Grub2 UEFI specific rules - replace grub-mkconfig with grub2-mkconfig in rule descriptions - Turn on SCE for this release (RHEL-94803) - Rebase to scap-security-guide version 0.1.77 (RHEL-94803) - rule networkmanager_dns_mode now checks dropin files and has more resilient regex (RHEL-62843) - rsyslog_remote_loghost checks for Rainer Script syntax as well (RHEL-62731) - improve checking of Grub2 superuser and password configuration (RHEL-58818) - rebase scap-security-guide to the latest upstream version 0.1.76 (RHEL-74240) - modify the rule require_singleuser_auth to honor overriding mechanism offered by Systemd (RHEL-71936) - make the rule sysctl_user_max_user_namespaces informational and unscored in RHEL 9 STIG profile (RHEL-40120) - align checking of approved SSH ciphers with latest STIG policy (RHEL-65432) - Rebase to new release (RHEL-66154) - the rule sshd_use_priv_separation is no longer used (RHEL-66057) - add a rule checking for presence of chrony to CIS RHEL 9 profile (RHEL-60005) - remediation of Networkmanager DNS mode now remediates value "default" (RHEL-53426) - Adjust mount_option_nodev_nonroot_local_partitions to work in Image Builder environments. (RHEL-45018) - Adjusted rules related to sshd ensure constancy in checked values and ensure that drop in configuration files are checked. (RHEL-38206) - Rebase to a new upstream release 0.1.74 (RHEL-53865) - Ensure authselect features are preserved by enable_authselect rule (RHEL-39383) - Fix check for passwords last changed date (RHEL-47129) - Remediations of Journald configuration files now include a correct section (RHEL-38531) - Adjust service requirements for CIS profiles (RHEL-23852) - Update password hashing settings for ANSSI-BP-028 (RHEL-44983) - Add AlmaLinux 9 support - rule rsyslog_remote_access_monitoring handles Rainer syntax objects as case insensitive (RHEL-171951) - Fixed remediation problems occurring when authselect profiles contain multiple authselect features (RHEL-165050) - Rebase scap-security-guide to 0.1.81 (RHEL-180787) - Fix inconsistent and missing audit keys in some audit rules (RHEL-141394) - Modify shipped kickstart files so that the size of boot partition aligns with official recommended size (RHEL-145201) - Disable SHA-1 for the RPM component in RHEL 9 CIS profiles (RHEL-138448) - Use correct permissions and consider the log_group option in rules file_permissions_var_log_audit and directory_permissions_var_log_audit (RHEL-138549) - Rule configure_ssh_crypto_policy has been removed from RHEL 9 and RHEL 10 profiles. (RHEL-65737) - Rules of type sshd_use_strong_kex have been removed from RHEL CIS profiles in favor of system wide crypto policies usage. (RHEL-62941) - Rebase scap-security-guide to the latest upstream version 0.1.80 (RHEL-136121) - Update to the latest upstream release (RHEL-135773) - rebase scap-security-guide package to version 0.1.78 (RHEL-118557) - fix incorrect applicability of Grub2 UEFI specific rules - replace grub-mkconfig with grub2-mkconfig in rule descriptions - Turn on SCE for this release (RHEL-94803) - Rebase to scap-security-guide version 0.1.77 (RHEL-94803) - rule networkmanager_dns_mode now checks dropin files and has more resilient regex (RHEL-62843) - rsyslog_remote_loghost checks for Rainer Script syntax as well (RHEL-62731) - improve checking of Grub2 superuser and password configuration (RHEL-58818) - rebase scap-security-guide to the latest upstream version 0.1.76 (RHEL-74240) - modify the rule require_singleuser_auth to honor overriding mechanism offered by Systemd (RHEL-71936) - make the rule sysctl_user_max_user_namespaces informational and unscored in RHEL 9 STIG profile (RHEL-40120) - align checking of approved SSH ciphers with latest STIG policy (RHEL-65432) - Rebase to new release (RHEL-66154) - the rule sshd_use_priv_separation is no longer used (RHEL-66057) - add a rule checking for presence of chrony to CIS RHEL 9 profile (RHEL-60005) - remediation of Networkmanager DNS mode now remediates value "default" (RHEL-53426) - Adjust mount_option_nodev_nonroot_local_partitions to work in Image Builder environments. (RHEL-45018) - Adjusted rules related to sshd ensure constancy in checked values and ensure that drop in configuration files are checked. (RHEL-38206) - Add AlmaLinux 9 support - Resolve dropped changelog entry - Rebase scap-security-guide to 0.1.82 in RHEL 9.8.z (RHEL-242528) - Add rule ensure_journald_and_rsyslog_not_active_together to RHEL 9 CIS profiles (RHEL-181671) - Add rule crypto_policy_not_overridden to RHEL 9 STIG profile (RHEL-104411) - rule rsyslog_remote_access_monitoring handles Rainer syntax objects as case insensitive (RHEL-171951) - Fixed remediation problems occurring when authselect profiles contain multiple authselect features (RHEL-165050) - Rebase scap-security-guide to 0.1.81 (RHEL-180787) - Fix inconsistent and missing audit keys in some audit rules (RHEL-141394) - Modify shipped kickstart files so that the size of boot partition aligns with official recommended size (RHEL-145201) - Disable SHA-1 for the RPM component in RHEL 9 CIS profiles (RHEL-138448) - Use correct permissions and consider the log_group option in rules file_permissions_var_log_audit and directory_permissions_var_log_audit (RHEL-138549) - Rule configure_ssh_crypto_policy has been removed from RHEL 9 and RHEL 10 profiles. (RHEL-65737) - Rules of type sshd_use_strong_kex have been removed from RHEL CIS profiles in favor of system wide crypto policies usage. (RHEL-62941) - Rebase scap-security-guide to the latest upstream version 0.1.80 (RHEL-136121) - Update to the latest upstream release (RHEL-135773) - rebase scap-security-guide package to version 0.1.78 (RHEL-118557) - fix incorrect applicability of Grub2 UEFI specific rules - replace grub-mkconfig with grub2-mkconfig in rule descriptions - Turn on SCE for this release (RHEL-94803) - Rebase to scap-security-guide version 0.1.77 (RHEL-94803) - rule networkmanager_dns_mode now checks dropin files and has more resilient regex (RHEL-62843) - rsyslog_remote_loghost checks for Rainer Script syntax as well (RHEL-62731) - improve checking of Grub2 superuser and password configuration (RHEL-58818) - Add AlmaLinux 9 support - Fix inconsistent and missing audit keys in some audit rules (RHEL-141394) - Modify shipped kickstart files so that the size of boot partition aligns with official recommended size (RHEL-145201) - Disable SHA-1 for the RPM component in RHEL 9 CIS profiles (RHEL-138448) - Use correct permissions and consider the log_group option in rules file_permissions_var_log_audit and directory_permissions_var_log_audit (RHEL-138549) - Rule configure_ssh_crypto_policy has been removed from RHEL 9 and RHEL 10 profiles. (RHEL-65737) - Rules of type sshd_use_strong_kex have been removed from RHEL CIS profiles in favor of system wide crypto policies usage. (RHEL-62941) - Rebase scap-security-guide to the latest upstream version 0.1.80 (RHEL-136121) - Update to the latest upstream release (RHEL-135773) - rebase scap-security-guide package to version 0.1.78 (RHEL-118557) - fix incorrect applicability of Grub2 UEFI specific rules - replace grub-mkconfig with grub2-mkconfig in rule descriptions - Turn on SCE for this release (RHEL-94803) - Rebase to scap-security-guide version 0.1.77 (RHEL-94803) - rule networkmanager_dns_mode now checks dropin files and has more resilient regex (RHEL-62843) - rsyslog_remote_loghost checks for Rainer Script syntax as well (RHEL-62731) - improve checking of Grub2 superuser and password configuration (RHEL-58818) - rebase scap-security-guide to the latest upstream version 0.1.76 (RHEL-74240) - modify the rule require_singleuser_auth to honor overriding mechanism offered by Systemd (RHEL-71936) - make the rule sysctl_user_max_user_namespaces informational and unscored in RHEL 9 STIG profile (RHEL-40120) - align checking of approved SSH ciphers with latest STIG policy (RHEL-65432) - Rebase to new release (RHEL-66154) - the rule sshd_use_priv_separation is no longer used (RHEL-66057) - add a rule checking for presence of chrony to CIS RHEL 9 profile (RHEL-60005) - remediation of Networkmanager DNS mode now remediates value "default" (RHEL-53426) - Adjust mount_option_nodev_nonroot_local_partitions to work in Image Builder environments. (RHEL-45018) - Adjusted rules related to sshd ensure constancy in checked values and ensure that drop in configuration files are checked. (RHEL-38206) - Rebase to a new upstream release 0.1.74 (RHEL-53865) - Ensure authselect features are preserved by enable_authselect rule (RHEL-39383) - Fix check for passwords last changed date (RHEL-47129) - Remediations of Journald configuration files now include a correct section (RHEL-38531) - Adjust service requirements for CIS profiles (RHEL-23852) - Update password hashing settings for ANSSI-BP-028 (RHEL-44983) - Add AlmaLinux 9 support - Fix inconsistent and missing audit keys in some audit rules (RHEL-141394) - Modify shipped kickstart files so that the size of boot partition aligns with official recommended size (RHEL-145201) - Disable SHA-1 for the RPM component in RHEL 9 CIS profiles (RHEL-138448) - Use correct permissions and consider the log_group option in rules file_permissions_var_log_audit and directory_permissions_var_log_audit (RHEL-138549) - Rule configure_ssh_crypto_policy has been removed from RHEL 9 and RHEL 10 profiles. (RHEL-65737) - Rules of type sshd_use_strong_kex have been removed from RHEL CIS profiles in favor of system wide crypto policies usage. (RHEL-62941) - Rebase scap-security-guide to the latest upstream version 0.1.80 (RHEL-136121) - Update to the latest upstream release (RHEL-135773) - rebase scap-security-guide package to version 0.1.78 (RHEL-118557) - fix incorrect applicability of Grub2 UEFI specific rules - replace grub-mkconfig with grub2-mkconfig in rule descriptions - Turn on SCE for this release (RHEL-94803) - Rebase to scap-security-guide version 0.1.77 (RHEL-94803) - rule networkmanager_dns_mode now checks dropin files and has more resilient regex (RHEL-62843) - rsyslog_remote_loghost checks for Rainer Script syntax as well (RHEL-62731) - improve checking of Grub2 superuser and password configuration (RHEL-58818) - rebase scap-security-guide to the latest upstream version 0.1.76 (RHEL-74240) - modify the rule require_singleuser_auth to honor overriding mechanism offered by Systemd (RHEL-71936) - make the rule sysctl_user_max_user_namespaces informational and unscored in RHEL 9 STIG profile (RHEL-40120) - align checking of approved SSH ciphers with latest STIG policy (RHEL-65432) - Rebase to new release (RHEL-66154) - the rule sshd_use_priv_separation is no longer used (RHEL-66057) - add a rule checking for presence of chrony to CIS RHEL 9 profile (RHEL-60005) - remediation of Networkmanager DNS mode now remediates value "default" (RHEL-53426) - Adjust mount_option_nodev_nonroot_local_partitions to work in Image Builder environments. (RHEL-45018) - Adjusted rules related to sshd ensure constancy in checked values and ensure that drop in configuration files are checked. (RHEL-38206) - Rebase to a new upstream release 0.1.74 (RHEL-53865) - Ensure authselect features are preserved by enable_authselect rule (RHEL-39383) - Fix check for passwords last changed date (RHEL-47129) - Remediations of Journald configuration files now include a correct section (RHEL-38531) - Adjust service requirements for CIS profiles (RHEL-23852) - Update password hashing settings for ANSSI-BP-028 (RHEL-44983) - Add AlmaLinux 9 support - rule rsyslog_remote_access_monitoring handles Rainer syntax objects as case insensitive (RHEL-171951) - Fixed remediation problems occurring when authselect profiles contain multiple authselect features (RHEL-165050) - Rebase scap-security-guide to 0.1.81 (RHEL-180787) - Fix inconsistent and missing audit keys in some audit rules (RHEL-141394) - Modify shipped kickstart files so that the size of boot partition aligns with official recommended size (RHEL-145201) - Disable SHA-1 for the RPM component in RHEL 9 CIS profiles (RHEL-138448) - Use correct permissions and consider the log_group option in rules file_permissions_var_log_audit and directory_permissions_var_log_audit (RHEL-138549) - Rule configure_ssh_crypto_policy has been removed from RHEL 9 and RHEL 10 profiles. (RHEL-65737) - Rules of type sshd_use_strong_kex have been removed from RHEL CIS profiles in favor of system wide crypto policies usage. (RHEL-62941) - Rebase scap-security-guide to the latest upstream version 0.1.80 (RHEL-136121) - Update to the latest upstream release (RHEL-135773) - rebase scap-security-guide package to version 0.1.78 (RHEL-118557) - fix incorrect applicability of Grub2 UEFI specific rules - replace grub-mkconfig with grub2-mkconfig in rule descriptions - Turn on SCE for this release (RHEL-94803) - Rebase to scap-security-guide version 0.1.77 (RHEL-94803) - rule networkmanager_dns_mode now checks dropin files and has more resilient regex (RHEL-62843) - rsyslog_remote_loghost checks for Rainer Script syntax as well (RHEL-62731) - improve checking of Grub2 superuser and password configuration (RHEL-58818) - rebase scap-security-guide to the latest upstream version 0.1.76 (RHEL-74240) - modify the rule require_singleuser_auth to honor overriding mechanism offered by Systemd (RHEL-71936) - make the rule sysctl_user_max_user_namespaces informational and unscored in RHEL 9 STIG profile (RHEL-40120) - align checking of approved SSH ciphers with latest STIG policy (RHEL-65432) - Rebase to new release (RHEL-66154) - the rule sshd_use_priv_separation is no longer used (RHEL-66057) - add a rule checking for presence of chrony to CIS RHEL 9 profile (RHEL-60005) - remediation of Networkmanager DNS mode now remediates value "default" (RHEL-53426) - Adjust mount_option_nodev_nonroot_local_partitions to work in Image Builder environments. (RHEL-45018) - Adjusted rules related to sshd ensure constancy in checked values and ensure that drop in configuration files are checked. (RHEL-38206) - Add AlmaLinux 9 support - Resolve dropped changelog entry - Rebase scap-security-guide to 0.1.82 in RHEL 9.8.z (RHEL-242528) - Add rule ensure_journald_and_rsyslog_not_active_together to RHEL 9 CIS profiles (RHEL-181671) - Add rule crypto_policy_not_overridden to RHEL 9 STIG profile (RHEL-104411) - rule rsyslog_remote_access_monitoring handles Rainer syntax objects as case insensitive (RHEL-171951) - Fixed remediation problems occurring when authselect profiles contain multiple authselect features (RHEL-165050) - Rebase scap-security-guide to 0.1.81 (RHEL-180787) - Fix inconsistent and missing audit keys in some audit rules (RHEL-141394) - Modify shipped kickstart files so that the size of boot partition aligns with official recommended size (RHEL-145201) - Disable SHA-1 for the RPM component in RHEL 9 CIS profiles (RHEL-138448) - Use correct permissions and consider the log_group option in rules file_permissions_var_log_audit and directory_permissions_var_log_audit (RHEL-138549) - Rule configure_ssh_crypto_policy has been removed from RHEL 9 and RHEL 10 profiles. (RHEL-65737) - Rules of type sshd_use_strong_kex have been removed from RHEL CIS profiles in favor of system wide crypto policies usage. (RHEL-62941) - Rebase scap-security-guide to the latest upstream version 0.1.80 (RHEL-136121) - Update to the latest upstream release (RHEL-135773) - rebase scap-security-guide package to version 0.1.78 (RHEL-118557) - fix incorrect applicability of Grub2 UEFI specific rules - replace grub-mkconfig with grub2-mkconfig in rule descriptions - Turn on SCE for this release (RHEL-94803) - Rebase to scap-security-guide version 0.1.77 (RHEL-94803) - rule networkmanager_dns_mode now checks dropin files and has more resilient regex (RHEL-62843) - rsyslog_remote_loghost checks for Rainer Script syntax as well (RHEL-62731) - improve checking of Grub2 superuser and password configuration (RHEL-58818) - Ported 1.2.2 patches that we are present in el8 packages (rhbz#2029381) - Fix appdata (rhbz#2021212) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Do not set rpath (rhbz#1986352) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Use reference to avoid range-loop-construct diagnostic - Replace obsolete QString::SkipEmptyParts - Remove qt5-devel from "Requires" section https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/message/WO625MVYEAAJNHNRLEEJDVZTIWMQOBRR/ - Update for new CMake out of source builds https://fedoraproject.org/wiki/Changes/CMake_to_do_out-of-source_builds - Fix Qt5 deprecated symbols - Fix FTBS in Rawhide/F33 (RHBZ#1865462) - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Remove tmp file (#2151261) - Don't error out when command receives SIGINT (#2056462) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebase to 2.0.3 (#1986085) - Own directory /etc/scl (#1986040) - Fix problem with python version in the byte compilation script (#1984598) - Fix dist tag syntax (#1958982) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Remove tmp file (#2151261) - Don't error out when command receives SIGINT (#2056462) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebase to 2.0.3 (#1986085) - Own directory /etc/scl (#1986040) - Fix problem with python version in the byte compilation script (#1984598) - Fix dist tag syntax (#1958982) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - apply analyzer fixes from upstream - update to 2.6.1 - update URLs - merge patches from Red Hat and upstream - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebase to 1.2.60 Resolves: rhbz#2127565 - Rebase to 1.2.52 Resolves: rhbz#2060907 - Conflict with all old SDL subpackages properly - Bump for rebuild after resync - Obsolete the SDL package properly - Update to new snapshot release - Update to new snapshot release - Update to new snapshot release - Ensure SDL2 dependency is arched - Update to new snapshot release - Update to new snapshot release - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 40.0 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 40.alpha - Update to 3.38.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 3.38.0.1 - Switch to libhandy1 - Update to 3.37.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 3.37.1 - Allow pkcsslotd read files in /proc and /sys Resolves: RHEL-209599 - Allow pkcsslotd map its private tmpfs files Resolves: RHEL-209599 - Rebuild with the target::exception flag Resolves: RHEL-148247 - Allow nfsd_t domain setuid and setgid capability for rpc.mountd Resolves: RHEL-148247 - Label /run/insights-client.ppid with insights_client_run_t Resolves: RHEL-146688 - Update gpg_role() interface with unix_stream_socket permissions Resolves: RHEL-128542 - Add the fs_write_tmpfs_files() interface Resolves: RHEL-142141 - Dontaudit aide the execmem permission Resolves: RHEL-121480 - Update gpg policy for interactions with rhc-playbook-verifier Resolves: RHEL-132748 - Allow rhc_playbook_verifier_t stream connect to itself Resolves: RHEL-132748 - Update policy for rhc-worker-playbook Resolves: RHEL-132748 - Allow traceroute_t bind rawip sockets to unreserved ports Resolves: RHEL-130267 - Revert "Allow traceroute_t bind rawip sockets to unreserved ports" Related: RHEL-130267 - Allow sudodomain connect to gkeyringd over a unix stream socket Resolves: RHEL-121158 - Allow samba-bgqd send to smbd over a unix datagram socket Resolves: RHEL-95985 - Allow ssh_agent_type manage generic cache home files Resolves: RHEL-121165 - Label /usr/libexec/openssh/ssh-pkcs11-helper with ssh_agent_exec_t Resolves: RHEL-121165 - Allow boothd connect to systemd-machined over a unix socket Resolves: RHEL-140882 - Macros: Require only "stable" version of selinux-policy (RHEL-141433) - Add insights_client service interfaces Related: RHEL-140893 - Confine rhc-worker-playbook.worker and rhc-playbook-verifier Resolves: RHEL-132748 - Allow gpg manage rpm cache Related: RHEL-108775 - Allow gpg read rpm cache Related: RHEL-108775 - Allow aide get attributes of tmpfs and devtmpfs filesystems Resolves: RHEL-121480 - Allow rules for confined users logged in plasma Resolves: RHEL-133898 - Allow login_userdomain watch lnk_files in /usr Resolves: RHEL-133898 - Revert "Allow NM nvme dispatcher script start systemd services" Resolves: RHEL-111946 - Allow ssh_agent_type create a sockfile in /run/user/USERID Resolves: RHEL-121936 - Allow NM nvme dispatcher script start systemd services Resolves: RHEL-111946 - Allow aide get attributes of a filesystem with extended attributes Resolves: RHEL-121480 - Label miscellaneous /dev/papr-* devices Resolves: RHEL-129879 - Add the rpm_signal() interface Related: RHEL-108826 - Allow tuned_t use its private tmpfs files Related: RHEL-108826 - Allow kdump search kdumpctl_tmp_t directories Resolves: RHEL-66119 - Allow sysadm access to TPM Resolves: RHEL-119055 - Update policy for dhcpc_hook_t Resolves: RHEL-113941 - Allow stap server read virtual memory sysctls Resolves: RHEL-114157 - Allow login_userdomain watch /home and /var directories Resolves: RHEL-119686 - Allow login_userdomain read lastlog Resolves: RHEL-119686 - Allow staff role read/write cockpit-session unix stream sockets Resolves: RHEL-108068 - Label /usr/libexec/dhcpcd-run-hooks with dhcpc_hook_exec_t Resolves: RHEL-113941 - Rebuild with the target::exception flag Resolves: RHEL-148247 - Allow nfsd_t domain setuid and setgid capability for rpc.mountd Resolves: RHEL-148247 - Label /run/insights-client.ppid with insights_client_run_t Resolves: RHEL-146688 - Update gpg_role() interface with unix_stream_socket permissions Resolves: RHEL-128542 - Add the fs_write_tmpfs_files() interface Resolves: RHEL-142141 - Dontaudit aide the execmem permission Resolves: RHEL-121480 - Update gpg policy for interactions with rhc-playbook-verifier Resolves: RHEL-132748 - Allow rhc_playbook_verifier_t stream connect to itself Resolves: RHEL-132748 - Update policy for rhc-worker-playbook Resolves: RHEL-132748 - Allow traceroute_t bind rawip sockets to unreserved ports Resolves: RHEL-130267 - Revert "Allow traceroute_t bind rawip sockets to unreserved ports" Related: RHEL-130267 - Allow sudodomain connect to gkeyringd over a unix stream socket Resolves: RHEL-121158 - Allow samba-bgqd send to smbd over a unix datagram socket Resolves: RHEL-95985 - Allow ssh_agent_type manage generic cache home files Resolves: RHEL-121165 - Label /usr/libexec/openssh/ssh-pkcs11-helper with ssh_agent_exec_t Resolves: RHEL-121165 - Allow boothd connect to systemd-machined over a unix socket Resolves: RHEL-140882 - Macros: Require only "stable" version of selinux-policy (RHEL-141433) - Add insights_client service interfaces Related: RHEL-140893 - Confine rhc-worker-playbook.worker and rhc-playbook-verifier Resolves: RHEL-132748 - Allow gpg manage rpm cache Related: RHEL-108775 - Allow gpg read rpm cache Related: RHEL-108775 - Allow aide get attributes of tmpfs and devtmpfs filesystems Resolves: RHEL-121480 - Allow rules for confined users logged in plasma Resolves: RHEL-133898 - Allow login_userdomain watch lnk_files in /usr Resolves: RHEL-133898 - Revert "Allow NM nvme dispatcher script start systemd services" Resolves: RHEL-111946 - Allow ssh_agent_type create a sockfile in /run/user/USERID Resolves: RHEL-121936 - Allow NM nvme dispatcher script start systemd services Resolves: RHEL-111946 - Allow aide get attributes of a filesystem with extended attributes Resolves: RHEL-121480 - Label miscellaneous /dev/papr-* devices Resolves: RHEL-129879 - Add the rpm_signal() interface Related: RHEL-108826 - Allow tuned_t use its private tmpfs files Related: RHEL-108826 - Allow kdump search kdumpctl_tmp_t directories Resolves: RHEL-66119 - Allow sysadm access to TPM Resolves: RHEL-119055 - Update policy for dhcpc_hook_t Resolves: RHEL-113941 - Allow stap server read virtual memory sysctls Resolves: RHEL-114157 - Allow login_userdomain watch /home and /var directories Resolves: RHEL-119686 - Allow login_userdomain read lastlog Resolves: RHEL-119686 - Allow staff role read/write cockpit-session unix stream sockets Resolves: RHEL-108068 - Label /usr/libexec/dhcpcd-run-hooks with dhcpc_hook_exec_t Resolves: RHEL-113941 - Allow insights-client manage /etc symlinks Resolves: RHEL-108826 - Allow insights-client get attributes of the rpm executable Resolves: RHEL-127329 - Allow ras-mc-ctl get attributes of the kmod executable Resolves: RHEL-103975 - Fix files_delete_boot_symlinks() to contain delete_lnk_files_pattern Resolves: RHEL-101155 - Allow bootupd delete symlinks in the /boot directory Resolves: RHEL-101155 - Update policy for bootupd Resolves: RHEL-101155 - Allow create kerberos files in postgresql db home Resolves: RHEL-123225 - Fixed verification of the ghost files Resolves: rhbz#2052091 - Fixed verification of the ghost files Resolves: rhbz#2052091 - Fixed verification of the ghost files Resolves: rhbz#2052091 - SETools 4.4.4 release - SETools 4.4.3 release - Improve man pages - seinfoflow: Add -r option to get flows into the source type. - seinfoflow.1: Remove references to sepolgen permission map. - AVRule/AVRuleXperm: Treat rules with no permissions as invalid policy. - SELinuxPolicy: Add explicit cast for libspol message - Disable sediff --neverallow and --neverallowxperm options - SETools 4.4.2 release - SETools 4.4.1 release - Update required userspace versions to 3.4 - Drop unnecessary Recommends - SETools 4.4.4 release - SETools 4.4.3 release - Improve man pages - seinfoflow: Add -r option to get flows into the source type. - seinfoflow.1: Remove references to sepolgen permission map. - AVRule/AVRuleXperm: Treat rules with no permissions as invalid policy. - SELinuxPolicy: Add explicit cast for libspol message - Disable sediff --neverallow and --neverallowxperm options - SETools 4.4.2 release - SETools 4.4.1 release - Update required userspace versions to 3.4 - Drop unnecessary Recommends - SETools 4.4.4 release - SETools 4.4.3 release - Improve man pages - seinfoflow: Add -r option to get flows into the source type. - seinfoflow.1: Remove references to sepolgen permission map. - AVRule/AVRuleXperm: Treat rules with no permissions as invalid policy. - SELinuxPolicy: Add explicit cast for libspol message - Disable sediff --neverallow and --neverallowxperm options - SETools 4.4.2 release - SETools 4.4.1 release - Update required userspace versions to 3.4 - Drop unnecessary Recommends - audit_data: include syslog when needed (RHEL-39978) - Update tmpfiles.d config (bz#2346971) - Do not hardcode /var/lib/selinux as store_root - data: update app icon - Enable Georgian and Arabic (ar) languages in configure.ac - Update translations - Ship with contemporary app icon - Check that SELinux is enabled before running (rhbz#2178950) - Always reset pending alarms when alarm(0) (rhbz#2112573) - 'imp' module is deprecated in favor of 'importlib' (rhbz#2224393) - Fix build with pip 23.1.2+ - Remove dbus-glib-devel BR as it's only needed when compiled with seappletlegacy - Rename session bus name to org.fedoraproject.sealert - seapplet: wrap SEApplet() to try except - util.py: Add doctext test for build_module_type_cache() - Update translations - restorecon.py: exclude more paths (#1960136) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update translations - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Use get_package_nvr* functions instead of get_rpm_nvr* - Update deprecated type references - Update translations - Add plugin which analyzes execmem denials - Add missing "If " strings - Update qemu_blk_image and qemu_file_image - Update "xen_image" plugin - Update "file" plugin - Update "missing" scripts to automake-1.15 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - audit_data: include syslog when needed (RHEL-39978) - Update tmpfiles.d config (bz#2346971) - Do not hardcode /var/lib/selinux as store_root - data: update app icon - Enable Georgian and Arabic (ar) languages in configure.ac - Update translations - Ship with contemporary app icon - Check that SELinux is enabled before running (rhbz#2178950) - Always reset pending alarms when alarm(0) (rhbz#2112573) - 'imp' module is deprecated in favor of 'importlib' (rhbz#2224393) - Fix build with pip 23.1.2+ - Remove dbus-glib-devel BR as it's only needed when compiled with seappletlegacy - Rename session bus name to org.fedoraproject.sealert - seapplet: wrap SEApplet() to try except - util.py: Add doctext test for build_module_type_cache() - Update translations - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Split setxkbmap out from xorg-x11-xkb-utils into its own package (#1895795) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - fix buffer overflow with high port numbers (RHEL-14440) - Use AlmaLinux cert - Use gcc-toolset-12 - Fix the sbat data Related: RHEL-18969 - Update to shim-16.1 Resolves: RHEL-18969 - Rebuild to fix the commit ident and MAKEFLAGS Resolves: RHEL-11262 - Update to shim-15.8 for CVE-2023-40547 Resolves: RHEL-11262 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Add epoch to rpm spec file for RHEL-based releases. - Sync with mpath_valid changes. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Initial release. - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Add epoch to rpm spec file for RHEL-based releases. - Sync with mpath_valid changes. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Initial release. - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Add epoch to rpm spec file for RHEL-based releases. - Sync with mpath_valid changes. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Initial release. - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Add epoch to rpm spec file for RHEL-based releases. - Sync with mpath_valid changes. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Initial release. - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Add epoch to rpm spec file for RHEL-based releases. - Sync with mpath_valid changes. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Initial release. - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Add epoch to rpm spec file for RHEL-based releases. - Sync with mpath_valid changes. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Initial release. - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Add epoch to rpm spec file for RHEL-based releases. - Sync with mpath_valid changes. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Initial release. - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Add epoch to rpm spec file for RHEL-based releases. - Sync with mpath_valid changes. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Initial release. - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Add epoch to rpm spec file for RHEL-based releases. - Sync with mpath_valid changes. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Initial release. - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update fontconfig DTD id in conf file - Convert to new fonts packaging guidelines - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 2.200 - Corrected shape of U+300D and U+300F - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fixed the handling of exceptions that sub-class C++ exceptions Resolves: bz#2225259 - 6.6.2 Resolves: bz#2118862 - Initial package Resolves: bz#2071748 - Add noarch to ExclusiveArch - Disable building on i686 - Fix patch usage - Rebuild with regenerated Requires on Java - Rebuild to regenerate auto-requires - Rebuild to regenerate auto-requires - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Update to upstream version 0.3.5 - Rebuilt for java-17-openjdk as system jdk - Update javapackages test plan to f42 - Update to upstream version 0.9.0.M3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Switch to a newer patch macro syntax - Rebuilt for java-21-openjdk as system jdk - bump of release for for java-21-openjdk as system jdk - Add plexus-container-default alias - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild to regenerate auto-Requires on java - Convert License tag to SPDX format - update to https://github.com/containers/skopeo/releases/tag/v1.22.2 - fixes signature verification of images which only sign the per-platform manifest in skopeo proxy - Resolves: RHEL-168166 - Rebuild for new golang to address CVE-2025-68121 - Resolves: RHEL-149649 - update to https://github.com/containers/skopeo/releases/tag/v1.22.0 - Related: RHEL-111919 - update to https://github.com/containers/skopeo/releases/tag/v1.21.0 - Related: RHEL-111919 - rebuild for CVE-2025-58183 - Resolves: RHEL-125721 - update to https://github.com/containers/skopeo/releases/tag/v1.20.0 - Related: RHEL-80816 - Do not require BATS on RHEL - Resolves: RHEL-97592 - update to https://github.com/containers/skopeo/releases/tag/v1.19.0 - Related: RHEL-80816 - fix gating.yaml - Related: RHEL-80816 - Fix bats dep on tests subpackage - Resolves: RHEL-80616 - Rebuild for CVE-2026-32283 - Resolves: RHEL-167688 - Rebuild for CVE-2026-25679 - Re-add test file installation to fix tier0 tests - Resolves: RHEL-158789 - update to https://github.com/containers/skopeo/releases/tag/v1.22.2 - fixes signature verification of images which only sign the per-platform manifest in skopeo proxy - Resolves: RHEL-168166 - Rebuild for new golang to address CVE-2025-68121 - Resolves: RHEL-149649 - update to https://github.com/containers/skopeo/releases/tag/v1.22.0 - Related: RHEL-111919 - update to https://github.com/containers/skopeo/releases/tag/v1.21.0 - Related: RHEL-111919 - rebuild for CVE-2025-58183 - Resolves: RHEL-125721 - update to https://github.com/containers/skopeo/releases/tag/v1.20.0 - Related: RHEL-80816 - Do not require BATS on RHEL - Resolves: RHEL-97592 - update to https://github.com/containers/skopeo/releases/tag/v1.19.0 - Related: RHEL-80816 - Rebuild for golang >= 1.26.4 to fix CVE-2026-27145 - Resolves: RHEL-189898 - Rebuild for CVE-2026-32283 - Resolves: RHEL-167688 - Rebuild for CVE-2026-25679 - Re-add test file installation to fix tier0 tests - Resolves: RHEL-158789 - update to https://github.com/containers/skopeo/releases/tag/v1.22.2 - fixes signature verification of images which only sign the per-platform manifest in skopeo proxy - Resolves: RHEL-168166 - Rebuild for new golang to address CVE-2025-68121 - Resolves: RHEL-149649 - update to https://github.com/containers/skopeo/releases/tag/v1.22.0 - Related: RHEL-111919 - update to https://github.com/containers/skopeo/releases/tag/v1.21.0 - Related: RHEL-111919 - rebuild for CVE-2025-58183 - Resolves: RHEL-125721 - update to https://github.com/containers/skopeo/releases/tag/v1.20.0 - Related: RHEL-80816 - Do not require BATS on RHEL - Resolves: RHEL-97592 - rebuild for CVE-2026-56853 CVE-2026-56858 CVE-2026-33818 CVE-2026-56860 CVE-2026-56862 - Resolves: RHEL-242042 - Resolves: RHEL-241280 - Resolves: RHEL-241460 - Resolves: RHEL-241825 - Resolves: RHEL-242268 - Rebuild for golang >= 1.26.4 to fix CVE-2026-27145 - Resolves: RHEL-189898 - Rebuild for CVE-2026-32283 - Resolves: RHEL-167688 - Rebuild for CVE-2026-25679 - Re-add test file installation to fix tier0 tests - Resolves: RHEL-158789 - update to https://github.com/containers/skopeo/releases/tag/v1.22.2 - fixes signature verification of images which only sign the per-platform manifest in skopeo proxy - Resolves: RHEL-168166 - Rebuild for new golang to address CVE-2025-68121 - Resolves: RHEL-149649 - update to https://github.com/containers/skopeo/releases/tag/v1.22.0 - Related: RHEL-111919 - update to https://github.com/containers/skopeo/releases/tag/v1.21.0 - Related: RHEL-111919 - rebuild for CVE-2025-58183 - Resolves: RHEL-125721 - update to https://github.com/containers/skopeo/releases/tag/v1.20.0 - Related: RHEL-80816 - Rebuild for CVE-2026-78667 and CVE-2026-111943 - Resolves: RHEL-279016 - Resolves: RHEL-287514 - rebuild for CVE-2026-56853 CVE-2026-56858 CVE-2026-33818 CVE-2026-56860 CVE-2026-56862 - Resolves: RHEL-242042 - Resolves: RHEL-241280 - Resolves: RHEL-241460 - Resolves: RHEL-241825 - Resolves: RHEL-242268 - Rebuild for golang >= 1.26.4 to fix CVE-2026-27145 - Resolves: RHEL-189898 - Rebuild for CVE-2026-32283 - Resolves: RHEL-167688 - Rebuild for CVE-2026-25679 - Re-add test file installation to fix tier0 tests - Resolves: RHEL-158789 - update to https://github.com/containers/skopeo/releases/tag/v1.22.2 - fixes signature verification of images which only sign the per-platform manifest in skopeo proxy - Resolves: RHEL-168166 - Rebuild for new golang to address CVE-2025-68121 - Resolves: RHEL-149649 - update to https://github.com/containers/skopeo/releases/tag/v1.22.0 - Related: RHEL-111919 - update to https://github.com/containers/skopeo/releases/tag/v1.21.0 - Related: RHEL-111919 - rebuild for CVE-2025-58183 - Resolves: RHEL-125721 - update to https://github.com/containers/skopeo/releases/tag/v1.22.2 - fixes signature verification of images which only sign the per-platform manifest in skopeo proxy - Resolves: RHEL-168166 - Rebuild for new golang to address CVE-2025-68121 - Resolves: RHEL-149649 - update to https://github.com/containers/skopeo/releases/tag/v1.22.0 - Related: RHEL-111919 - update to https://github.com/containers/skopeo/releases/tag/v1.21.0 - Related: RHEL-111919 - rebuild for CVE-2025-58183 - Resolves: RHEL-125721 - update to https://github.com/containers/skopeo/releases/tag/v1.20.0 - Related: RHEL-80816 - Do not require BATS on RHEL - Resolves: RHEL-97592 - update to https://github.com/containers/skopeo/releases/tag/v1.19.0 - Related: RHEL-80816 - fix gating.yaml - Related: RHEL-80816 - Fix bats dep on tests subpackage - Resolves: RHEL-80616 - Rebuild for CVE-2026-32283 - Resolves: RHEL-167688 - Rebuild for CVE-2026-25679 - Re-add test file installation to fix tier0 tests - Resolves: RHEL-158789 - update to https://github.com/containers/skopeo/releases/tag/v1.22.2 - fixes signature verification of images which only sign the per-platform manifest in skopeo proxy - Resolves: RHEL-168166 - Rebuild for new golang to address CVE-2025-68121 - Resolves: RHEL-149649 - update to https://github.com/containers/skopeo/releases/tag/v1.22.0 - Related: RHEL-111919 - update to https://github.com/containers/skopeo/releases/tag/v1.21.0 - Related: RHEL-111919 - rebuild for CVE-2025-58183 - Resolves: RHEL-125721 - update to https://github.com/containers/skopeo/releases/tag/v1.20.0 - Related: RHEL-80816 - Do not require BATS on RHEL - Resolves: RHEL-97592 - update to https://github.com/containers/skopeo/releases/tag/v1.19.0 - Related: RHEL-80816 - Rebuild for golang >= 1.26.4 to fix CVE-2026-27145 - Resolves: RHEL-189898 - Rebuild for CVE-2026-32283 - Resolves: RHEL-167688 - Rebuild for CVE-2026-25679 - Re-add test file installation to fix tier0 tests - Resolves: RHEL-158789 - update to https://github.com/containers/skopeo/releases/tag/v1.22.2 - fixes signature verification of images which only sign the per-platform manifest in skopeo proxy - Resolves: RHEL-168166 - Rebuild for new golang to address CVE-2025-68121 - Resolves: RHEL-149649 - update to https://github.com/containers/skopeo/releases/tag/v1.22.0 - Related: RHEL-111919 - update to https://github.com/containers/skopeo/releases/tag/v1.21.0 - Related: RHEL-111919 - rebuild for CVE-2025-58183 - Resolves: RHEL-125721 - update to https://github.com/containers/skopeo/releases/tag/v1.20.0 - Related: RHEL-80816 - Do not require BATS on RHEL - Resolves: RHEL-97592 - rebuild for CVE-2026-56853 CVE-2026-56858 CVE-2026-33818 CVE-2026-56860 CVE-2026-56862 - Resolves: RHEL-242042 - Resolves: RHEL-241280 - Resolves: RHEL-241460 - Resolves: RHEL-241825 - Resolves: RHEL-242268 - Rebuild for golang >= 1.26.4 to fix CVE-2026-27145 - Resolves: RHEL-189898 - Rebuild for CVE-2026-32283 - Resolves: RHEL-167688 - Rebuild for CVE-2026-25679 - Re-add test file installation to fix tier0 tests - Resolves: RHEL-158789 - update to https://github.com/containers/skopeo/releases/tag/v1.22.2 - fixes signature verification of images which only sign the per-platform manifest in skopeo proxy - Resolves: RHEL-168166 - Rebuild for new golang to address CVE-2025-68121 - Resolves: RHEL-149649 - update to https://github.com/containers/skopeo/releases/tag/v1.22.0 - Related: RHEL-111919 - update to https://github.com/containers/skopeo/releases/tag/v1.21.0 - Related: RHEL-111919 - rebuild for CVE-2025-58183 - Resolves: RHEL-125721 - update to https://github.com/containers/skopeo/releases/tag/v1.20.0 - Related: RHEL-80816 - Rebuild for CVE-2026-78667 and CVE-2026-111943 - Resolves: RHEL-279016 - Resolves: RHEL-287514 - rebuild for CVE-2026-56853 CVE-2026-56858 CVE-2026-33818 CVE-2026-56860 CVE-2026-56862 - Resolves: RHEL-242042 - Resolves: RHEL-241280 - Resolves: RHEL-241460 - Resolves: RHEL-241825 - Resolves: RHEL-242268 - Rebuild for golang >= 1.26.4 to fix CVE-2026-27145 - Resolves: RHEL-189898 - Rebuild for CVE-2026-32283 - Resolves: RHEL-167688 - Rebuild for CVE-2026-25679 - Re-add test file installation to fix tier0 tests - Resolves: RHEL-158789 - update to https://github.com/containers/skopeo/releases/tag/v1.22.2 - fixes signature verification of images which only sign the per-platform manifest in skopeo proxy - Resolves: RHEL-168166 - Rebuild for new golang to address CVE-2025-68121 - Resolves: RHEL-149649 - update to https://github.com/containers/skopeo/releases/tag/v1.22.0 - Related: RHEL-111919 - update to https://github.com/containers/skopeo/releases/tag/v1.21.0 - Related: RHEL-111919 - rebuild for CVE-2025-58183 - Resolves: RHEL-125721 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Ignore updates from non-tracked subtrees during modify/modrdn/update to avoid deadlocks with retro changelog - Resolves: RHEL-11983 - Also handle base searches within the compat tree - Related: rhbz#2183950 - Fix base DN searches outside the compat tree - Resolves: rhbz#2183950 - Rebuild to fix changelog - Related: rhbz#2117299 - upstream release 0.60.0 - Change license from GPLv2 to GPLv3+ to follow 389-ds licensing - Fix ID views integration - Fix base scope lookups - Bump NIS max dgram size to 8KB by default instead of 1KB - Resolves: rhbz#2117299 Allow to rebuild the compat tree - Rebuild against libnsl 2.0.0 - Related: rhbz#2039220 - Add noarch to ExclusiveArch - Disable building on i686 - Rebuild with regenerated Requires on Java - Rebuild to regenerate auto-requires - Rebuild to regenerate auto-requires - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Rebuilt for java-17-openjdk as system jdk - Update javapackages test plan to f42 - Rebuild to regenerate auto-requires - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update to upstream version 1.7.36 - Rebuilt for java-21-openjdk as system jdk - bump of release for for java-21-openjdk as system jdk - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuild to regenerate auto-Requires on java - Convert License tag to SPDX format - Build with default JDK 17 - Add noarch to ExclusiveArch - Disable building on i686 - Rebuild with regenerated Requires on Java - Rebuild to regenerate auto-requires - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.3 - Resolves: RHEL-94765 - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.2 - Related: RHEL-60277 - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.1 - Related: RHEL-27608 - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.0 - Related: RHEL-27608 - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.3 - Related: RHEL-2112 - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.2 - Related: Jira:RHEL-2112 - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.1 - Related: #2176063 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - New release smc-meera-fonts-7.0.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - New release smc-rachana-fonts-7.0.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Resolves: RHEL-100169 - Update to 1.8.6 - Resolves: RHEL-73360 - Update to 1.8.5 - Resolves: RHEL-50215 - Update to 1.8.4 - Resolves: RHEL-185464 - smc-tools: smc_rnics is not listing the NetH/NetD cards inside the guest - Resolves: RHEL-100169 - Update to 1.8.6 - Resolves: RHEL-73360 - Update to 1.8.5 - Resolves: RHEL-50215 - Update to 1.8.4 - Update the version test expectation. - Update to upstream 0.7.0 - schedule: fix TIMELINE policy retention indexing when keep_x > len(x) - Update expected string in TMT version test - Update to upstream 0.5.2 - Update TMT configuration - Update to upstream 0.5.1 - Bump tests/upstream/main.fmf duration to 30m - Update test path in main.fmf - Update to upstream 0.4.3 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Drop BuildRequires dependency on gtest - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use __cmake_in_source_build - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Updated to new release. - Dropped version-related patch which has been applied upstream (BZ #1527850). - Handle EAGAIN on recvmsg() Resolves: RHEL-143222 - Fix for: Client may exit 0 despite connection being reset Resolves: RHEL-107884 - add fix for CVE-2024-54661 Resolves: RHEL-94843 - switch to autopatch, remove unused patches - Fix IPv6 peername segfault (RHEL-32438) - Use systemd-sysusers Resolves: RHEL-76028 - Revert SPDX license change as RHEL 9 does not use it - Prevent access to global C++ variables once they destroyed - Patch from Neil Horman (OpenSSL) - Run p11test tests individually - Resolves: rhbz#2261703 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Make sombok-devel package multilib safe (bug #1853260) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuild for shipping devel subpackage in CRB - Bind token as SQL_BINARY (RHEL-43418) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 0.10.2 - Fix crash with python 3.9 (#1878276) - Update to 0.10.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for Python 3.9 - Fixed FTBFS - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 0.10.2 - Fix crash with python 3.9 (#1878276) - Update to 0.10.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for Python 3.9 - Fixed FTBFS - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 0.10.2 - Fix crash with python 3.9 (#1878276) - Update to 0.10.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for Python 3.9 - Fixed FTBFS - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Link with -Wl,-z,now Resolves: rhbz#2044891 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild Fix building with the latest GCC. - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - CVE-2020-23903 speex: divide by zero in read_samples() via crafted WAV file - Resolves: CVE-2020-23903 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.2.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Avoid crash due use before initialisation of X11 events Related: rhbz#2160750 - Limit session agent to (re)connect to system agent to a minute Related: rhbz#2028013 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Build without pciaccess Resolves: rhbz#1964922 - Fix g_memdup deprecation warning with glib >= 2.68 - Update to spice-vdagent 0.21.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.4.328.1 SDK - Update to 1.4.328.1 SDK Resolves: https://issues.redhat.com/browse/RHEL-127928 - Rebuilt to move the package to AppStream Resolves: https://issues.redhat.com/browse/RHEL-115524 - Update to 1.4.313.0 SDK - Update to 1.4.304.0 SDK - Update to 1.3.283.0 SDK - Update to 1.3.268.0 SDK - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - make is no longer in buildroot by default - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - use a proper build macros - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Enable sqlite3_deserialize and sqlite3_serialize interfaces - Resolves: RHEL-155950 - Fixes CVE-2025-6965 - Enabled sqlite-session feature - Resolves: RHEL-89962 - Fixes CVE-2026-11822 - Resolves: RHEL-218273 - Fixes CVE-2026-11824 - Resolves: RHEL-218281 - Enable sqlite3_deserialize and sqlite3_serialize interfaces - Resolves: RHEL-155950 - Fixes CVE-2025-6965 - Enabled sqlite-session feature - Resolves: RHEL-89962 - Enable sqlite3_deserialize and sqlite3_serialize interfaces - Resolves: RHEL-155950 - Fixes CVE-2025-6965 - Enabled sqlite-session feature - Resolves: RHEL-89962 - Fixes CVE-2026-11822 - Resolves: RHEL-218273 - Fixes CVE-2026-11824 - Resolves: RHEL-218281 - Enable sqlite3_deserialize and sqlite3_serialize interfaces - Resolves: RHEL-155950 - Fixes CVE-2025-6965 - Enabled sqlite-session feature - Resolves: RHEL-89962 - Resolves: RHEL-160697 - squid: Squid: Denial of Service via heap Use-After-Free vulnerability in ICP handling (CVE-2026-33526) - Resolves: RHEL-160696 - squid: Squid: Denial of Service via crafted ICP traffic (CVE-2026-32748) - Resolves: RHEL-119047 - "ICAP_ERR_OTHER/408" occurs in icap.log when downloading a file on RHEL9 - Resolves: RHEL-122493 - squid: Squid vulnerable to information disclosure via authentication credential leakage in error handling (CVE-2025-62168) - Resolves: RHEL-77084 - squid crashes with noteDestinationsEnd check failed - Resolves: RHEL-50261 - Squid memory usage increases until OOM. - Resolves: RHEL-77282 - ”TCP connection to XX.XX.XX.XX/XXXX failed” message is output frequently on RHEL9 - Resolves: RHEL-57030 - squid aborts trying to access memory - Resolves: RHEL-67869 - Remove gopher mention from spec file - Disable ESI support - Resolves: RHEL-65080 - CVE-2024-45802 squid: Denial of Service processing ESI response content - Resolves: RHEL-12356 - TCP_MISS_ABORTED/100 erros when uploading - Fix issues discovered by OSCI tests - Update to SSCG 4.0.3 - Update to SSCG 4.0.1 - Restore creation of dhparams file by default - Fix IP address handling in CA certificate SAN constraints - Resolves: RHEL-107289 - Ensure 'critical' basicConstraint for CA cert - Resolves: RHEL-88119 - x509: Use proper version for CSR - Resolves: RHEL-85851 - New release - Regenerate with rust2rpm 22 - Remove Windows binaries from vendor tarball - New release - Vendor rust dependencies on el9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuild - Rebuild - Rebuild - Rebase to new upstream version - Use make macros - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make - Rebase to new upstream version - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation - Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root - Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c' - Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified - Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group - Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8 - Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites - Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name - Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none' - Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so - Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges - Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux - Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache - Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release - Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9] Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted. - Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9] - Resolves: RHEL-103434 - cache_credentials = true not working - Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release - Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7 - Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9] - Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID - Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9] - Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649 - Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c' - Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified - Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group - Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8 - Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites - Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name - Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none' - Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so - Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges - Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux - Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache - Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release - Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9] Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted. - Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9] - Resolves: RHEL-103434 - cache_credentials = true not working - Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release - Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7 - Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9] - Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID - Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9] - Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649 - Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9] - Rebase to stalld-1.26.3 - Build System Improvements and added riscv64 arch - Remove LTO build flags - Make queue_track the default backend - Remove the -m64 build option Resolves: RHEL-111528 RHEL-111526 RHEL-96207 RHEL-96205 RHEL-111803 - Rebase to stalld-1.20.4 - Remove duplicated ExecStart entry from the stalld.service file Resolves: RHEL-108827 - Rebase to stalld-1.20.3 - Make systemd start stalld with the SCHED_FIFO:10 priority Resolves: RHEL-109088 - Rebase to stalld-1.20.2 Resolves: RHEL-96213 RHEL-96227 RHEL-104106 - Check if sched_attr is in glibc Resolves: RHEL-92952 - Rebase to stalld-1.19.8 Resolves: RHEL-92952 - Makefile: add uninstall target - systemd: add BE environment variable to select backend Resolves: RHEL-33662 - Fix changelog to use RPMCFLAGS, allowing for bpf to be used Resolves: RHEL-33662 - Updated compile options for annocheck hardening - Ensure we resolve library symbols at load time (-z now) and are a Position Independent Executable (-pie). Refactored compile options to better deal with arch differences. - Added an 'annocheck' makefile target for local checking. - Makefile: change build to use FORTIFY_SOURCE=3 - src/utils.c: fix off-by-one error in buffer allocation Resolves: RHEL-33662 - Make fill_process_comm() open comm file as READ_ONLY Resolves: RHEL-25846 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 2.0.2-8 - Fix this spec file to build for F33+ - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 2.0.2-6 🐞 Workaround Fedora problems created by rpm commit 93604e2 - 2.0.2-5 💥 Actually rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are valid - 2.0.2-4 👻 Rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are valid - 2.0.2-3 ✅ Lint, lint, lint and lint again - 2.0.2-2 ✅ Rebuild with fonts-rpm-macros 2.0.2 - Update to 3.7.0 - Resolves: RHEL-59855 - Update to version 3.6.0 - Resolves: RHEL-2265 - Allow for inconsistent value in StoppedPools D-Bus property - Resolves: rhbz#2213325 - Update to version 3.5.2 - Resolves: rhbz#2167462 - send_uevent: remove strict parameter - Resolves: rhbz#2158914 - Update to version 3.4.0 - Resolves: rhbz#2124977 - Return no-op on overprovision command on error - Resolves: rhbz#2131934 - Return error on init-cache if cache is present - Resolves: rhbz#2141223 - Fix problem with FTBFS - Resolves: RHEL-120658 - Update to 3.7.3-2 - Resolves: RHEL-115006 - Update to 3.7.3 - Resolves: RHEL-59854 - Update to 3.6.7 - Resolves: RHEL-34250 - Ensure proper alignment of flex devices - Resolves: RHEL-16736 - Update to version 3.6.1 - Resolves: RHEL-2278 - Add filesystem growth limits - Resolves: RHEL-12898 - Fix problem with FTBFS - Resolves: RHEL-120658 - Update to 3.7.3-2 - Resolves: RHEL-115006 - Update to 3.7.3 - Resolves: RHEL-59854 - Update to 3.6.7 - Resolves: RHEL-34250 - Ensure proper alignment of flex devices - Resolves: RHEL-16736 - Update to version 3.6.1 - Resolves: RHEL-2278 - Add filesystem growth limits - Resolves: RHEL-12898 - Fix problem with FTBFS - Resolves: RHEL-120658 - Update to 3.7.3-2 - Resolves: RHEL-115006 - Update to 3.7.3 - Resolves: RHEL-59854 - Update to 3.6.7 - Resolves: RHEL-34250 - Ensure proper alignment of flex devices - Resolves: RHEL-16736 - Update to version 3.6.1 - Resolves: RHEL-2278 - Add filesystem growth limits - Resolves: RHEL-12898 - Rebase to stress-ng-0.19.03 upstream Resolves: RHEL-115230 - Rebase to stress-ng-0.19.01 upstream Resolves: RHEL-86707 - Update the stress-ng-0.18.06 upstream - Include some upstream patches after 0.18.06 Resolves: RHEL-65474 - Fix missing corresponding macro to apply patch Resolves: RHEL-33304 - Rebase to upstream V0.17.08 - ARM: Don't declare inlined yield helper if yield is not available Resolves: RHEL-33304 - mod_dav_svn: add conflicts to ensure compatible mod_dav Related: RHEL-79948 - mod_dav_svn: inherit DavBasePath from httpd Resolves: RHEL-79948 - mod_dav_svn: add conflicts to ensure compatible mod_dav Related: RHEL-79948 - mod_dav_svn: inherit DavBasePath from httpd Resolves: RHEL-79948 - mod_dav_svn: add conflicts to ensure compatible mod_dav Related: RHEL-79948 - mod_dav_svn: inherit DavBasePath from httpd Resolves: RHEL-79948 - mod_dav_svn: add conflicts to ensure compatible mod_dav Related: RHEL-79948 - mod_dav_svn: inherit DavBasePath from httpd Resolves: RHEL-79948 - mod_dav_svn: add conflicts to ensure compatible mod_dav Related: RHEL-79948 - mod_dav_svn: inherit DavBasePath from httpd Resolves: RHEL-79948 - mod_dav_svn: add conflicts to ensure compatible mod_dav Related: RHEL-79948 - mod_dav_svn: inherit DavBasePath from httpd Resolves: RHEL-79948 - CVE-2026-82474 sudo: execveat(2) intercept/log_subcmds bypass Resolves: RHEL-255647 - CVE-2026-35535 sudo: Privilege escalation due to failure in privilege drop calls Resolves: RHEL-166069 - Request to backport support for regex in sudo [rhel-9] Resolves: RHEL-1376 - Rebase of sudo to 1.9.17p2 [rhel-9] Resolves: RHEL-128623 - sudo passes SHELL environment variable twice to the shell being executed [rhel-9] Resolves: RHEL-127359 RHEL: 9.7.0 ERRATUM - sudo missing spacing and separator in log when using "--preserve-env=list" Resolves: RHEL-71916 - CVE-2025-32462 sudo: LPE via host option Resolves: RHEL-100020 - CVE-2026-96512 sudo: TZ environment variable allows bypass of NOTBEFORE/NOTAFTER time-based authorization [rhel-9.8.z] Resolves: RHEL-267328 - CVE-2026-82474 sudo: execveat(2) intercept/log_subcmds bypass Resolves: RHEL-255647 - CVE-2026-35535 sudo: Privilege escalation due to failure in privilege drop calls Resolves: RHEL-166069 - Request to backport support for regex in sudo [rhel-9] Resolves: RHEL-1376 - Rebase of sudo to 1.9.17p2 [rhel-9] Resolves: RHEL-128623 - sudo passes SHELL environment variable twice to the shell being executed [rhel-9] Resolves: RHEL-127359 RHEL: 9.7.0 ERRATUM - sudo missing spacing and separator in log when using "--preserve-env=list" Resolves: RHEL-71916 - CVE-2025-32462 sudo: LPE via host option Resolves: RHEL-100020 - CVE-2026-35535 sudo: Privilege escalation due to failure in privilege drop calls Resolves: RHEL-166069 - Request to backport support for regex in sudo [rhel-9] Resolves: RHEL-1376 - Rebase of sudo to 1.9.17p2 [rhel-9] Resolves: RHEL-128623 - sudo passes SHELL environment variable twice to the shell being executed [rhel-9] Resolves: RHEL-127359 RHEL: 9.7.0 ERRATUM - sudo missing spacing and separator in log when using "--preserve-env=list" Resolves: RHEL-71916 - CVE-2025-32462 sudo: LPE via host option Resolves: RHEL-100020 - Disable lazy binding (#2044892) - Remove RPATH (#2056604) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - drop metis Resolves: #1977815 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - https://fedoraproject.org/wiki/Changes/FlexiBLAS_as_BLAS/LAPACK_manager - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Enable building for ppc64le - Rebase to Fedora Rawhide resolves: RHEL-56805 - Allow running without WebKitGTK installed Resolves: RHEL-26698 - Enable web process sandbox Resolves: #2070670 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild + switcheroo-control-2.4-1 - Update to 2.4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild + switcheroo-control-2.2-1 - Update to 2.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild + switcheroo-control-2.1-1 - Update to 2.1 - Fix crasher on startup (#1786846) + switcheroo-control-2.0-2 - Fix post scripts not reloading service file + switcheroo-control-2.0-1 - Update to 2.0 - Fix SHA-1 algorithm availability Resolves: RHEL-46788 - Update to v0.8.0 release Resolves: rhbz#2092944 - Fix SHA-1 algorithm availability Resolves: RHEL-46788 - Update to v0.8.0 release Resolves: rhbz#2092944 - Fix SHA-1 algorithm availability Resolves: RHEL-46788 - Update to v0.8.0 release Resolves: rhbz#2092944 - fix requested thread stack size on aarch64 (RHEL-54121) - update to 1.1.0 (RHEL-52089 RHEL-52090 RHEL-52091 RHEL-52197) - update to 1.0.0 (RHEL-10089 RHEL-1645 RHEL-17948 RHEL-17949) - update to 20221122git9564b5 (#2143264) - update to 20221114gitca51d5 (#2141038) - fix compiler warning (#2141038) - add simple test (#2141038) - make initial release - Fix erroneous my_strncat implementation Resolves: RHEL-83777 - Bump release number - Resolves: #RHEL-96214 - isohybrid: Make GPT GUIDs reproducible with --uefi and --id - Resolves: #RHEL-96214 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 3.40.1 - Update to 3.40.0 - Add explicit conflicts to help with upgrades - Update to 3.39.94 - Split sysprof-capture library and header files out to sysprof-capture-devel - Update minimum required glib2 version - Update to 3.39.92 - Specify pic for static libsysprof-capture - Update to 3.39.90 - make the sadf -s/-e documentation more accurate (RHEL-123483) - fix creation of /var/log/sa in image mode (RHEL-129980) - don't cap SVG graph output at 100% (RHEL-39002) - fix allocation errors with malformed sa files (RHEL-35684) - reorder patches to prevent errors during their application - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 1.5.15, apply eln changes - 1750156 - hangs on selection of change PPD (Make and Model) - set preferred driver for Dymo LabelWriter 400 - 1.15.13 - 1884866 - s-c-p: isAlive() is removed, use is_alive() - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - python3.9 - xml module removed elem.getchildren() method, use list(elem) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 1.5.15, apply eln changes - 1750156 - hangs on selection of change PPD (Make and Model) - set preferred driver for Dymo LabelWriter 400 - 1.15.13 - 1884866 - s-c-p: isAlive() is removed, use is_alive() - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - python3.9 - xml module removed elem.getchildren() method, use list(elem) - Update to 1.13.0 - https://github.com/bootc-dev/bootc/releases/tag/v1.13.0 - Resolves: RHEL-151443 - Update to 1.12.1 - Fix mount point check regression breaking bootc-image-builder - Resolves: RHEL-142112 - Update to 1.12.0 - Resolves: RHEL-140335 - Update to 1.10.0 - Resolves: #RHEL-125340 - Update to 1.8.0 - Update to 1.7.1 - Resolves: #RHEL-111339 - Update to 1.7.0 - Resolves: #RHEL-109555 - Update to 1.5.1 - Resolves: #RHEL-104335 - Update to 1.4.0 - Resolves: #RHEL-103125 - Update to 1.3.0 - Resolves: #RHEL-94597 - Update to 1.16.4 - Resolves: #RHEL-213807 - Update to 1.13.0 - https://github.com/bootc-dev/bootc/releases/tag/v1.13.0 - Resolves: RHEL-151443 - Update to 1.12.1 - Fix mount point check regression breaking bootc-image-builder - Resolves: RHEL-142112 - Update to 1.12.0 - Resolves: RHEL-140335 - Update to 1.10.0 - Resolves: #RHEL-125340 - Update to 1.8.0 - Update to 1.7.1 - Resolves: #RHEL-111339 - Update to 1.7.0 - Resolves: #RHEL-109555 - Update to 1.5.1 - Resolves: #RHEL-104335 - Update to 1.4.0 - Resolves: #RHEL-103125 - Make loader-entries unavailable when ostree lacks bootconfig-extra - Resolves: RHEL-267536 - Update to 1.16.4 - Resolves: #RHEL-213807 - Update to 1.13.0 - https://github.com/bootc-dev/bootc/releases/tag/v1.13.0 - Resolves: RHEL-151443 - Update to 1.12.1 - Fix mount point check regression breaking bootc-image-builder - Resolves: RHEL-142112 - Update to 1.12.0 - Resolves: RHEL-140335 - Update to 1.10.0 - Resolves: #RHEL-125340 - Update to 1.8.0 - Update to 1.7.1 - Resolves: #RHEL-111339 - Update to 1.7.0 - Resolves: #RHEL-109555 - Update to 1.5.1 - Resolves: #RHEL-104335 - Debrand for AlmaLinux - core: validate input cgroup path more prudently (RHEL-152082) - manager: fix scope for environment generators (RHEL-154262) - core: only activate transaction that contain useful jobs (RHEL-143727) - core/service: fix error cause in the log (RHEL-138414) - fstab-generator: drop assertions for mount opts (RHEL-92752) - fstab-generator: fix options in systemd.mount-extra= arg (RHEL-92752) - core: reorder systemd arguments on reexec (RHEL-111135) - basic: add RuntimeScope enum (RHEL-137252) - runtime-scope: add helper that turns RuntimeScope enum into --system/--user string (RHEL-137252) - sd-path: add support for XDG_STATE_HOME (RHEL-137252) - sd-path: bring spacing in sd-path.h and systemd-path tool in sync (RHEL-137252) - path tool: add some basic ansi highlighing (RHEL-137252) - execude: include RuntimeScope field in ExecParameters (RHEL-137252) - execute: remove redundant assignment (RHEL-137252) - execute: when recursively chowning StateDirectory= when spawning services, follow initial symlink (RHEL-137252) - execute: add support for XDG_STATE_HOME for placing service state data in --user mode (RHEL-137252) - execute: associate logs from setup_exec_directory() with the unit name (RHEL-137252) - execute: shorten some code by using RET_NERRNO() (RHEL-137252) - execute: shorten code by making use of laccess() return code properly (RHEL-137252) - execute: don't bother with chowning StateDirectory= and friends in user mode (RHEL-137252) - test: add test for new XDG_STATE_HOME handling (RHEL-137252) - man: mention the newly-added XDG_STATE_HOME (RHEL-137252) - man: rebreak lines in file-hierarchy(7) a bit (RHEL-137252) - man: properly close XML tags (RHEL-137252) - tmpfiles: teach tmpfiles the new XDG_STATE_HOME variable too (RHEL-137252) - test: use XDG_STATE_HOME for %S and %L (RHEL-137252) - man: fully adopt ~/.local/state/ (RHEL-137252) - update specfile and sources after renaming rhel-net-naming-sysattrs to net-naming-sysattrs (RHEL-150622) - core: fix array size in unit_log_resources() (RHEL-131338) - pid1: add env var to override default mount rate limit burst (RHEL-129153) - pid1: add env var to override default mount rate limit interval (RHEL-129153) - cryptsetup-generator: refactor add_crypttab_devices() (RHEL-127859) - cryptsetup-generator: continue parsing after error (RHEL-127859) - cryptsetup-generator: parse all cmdline devices too (RHEL-127859) - cryptsetup-generator: always process cmdline devices (RHEL-127859) - logind: add "background-light" session class (RHEL-109833) - pam_systemd: honor session class provided via PAM environment (RHEL-109833) - ukify: rstrip and escape binary null characters from 'inspect' output (#38607) (RHEL-109558) - timer: rebase last_trigger timestamp if needed (RHEL-118215) - timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118215) - strv: introduce string_strv_hashmap_remove() (RHEL-14112) - unit-file: introduce unit_file_remove_from_name_map() (RHEL-14112) - core/unit: remove path to transient unit file from unit name maps on stop (RHEL-14112) - TEST-07-PID1: add reprudcer for issue #35190 (RHEL-14112) - coredump: handle ENOBUFS and EMSGSIZE the same way (RHEL-103801) - Debrand for AlmaLinux - fstab-generator: support swap on network block devices (RHEL-166186) - nspawn: apply BindUser/Ephemeral from settings file only if trusted (RHEL-163870) - nspawn: normalize pivot_root paths (RHEL-163870) - udev: check for invalid chars in various fields received from the kernel (RHEL-163876) - udev: fix review mixup (RHEL-163876) - udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-163876) - core: validate input cgroup path more prudently (RHEL-152082) - manager: fix scope for environment generators (RHEL-154262) - core: only activate transaction that contain useful jobs (RHEL-143727) - core/service: fix error cause in the log (RHEL-138414) - fstab-generator: drop assertions for mount opts (RHEL-92752) - fstab-generator: fix options in systemd.mount-extra= arg (RHEL-92752) - core: reorder systemd arguments on reexec (RHEL-111135) - basic: add RuntimeScope enum (RHEL-137252) - runtime-scope: add helper that turns RuntimeScope enum into --system/--user string (RHEL-137252) - sd-path: add support for XDG_STATE_HOME (RHEL-137252) - sd-path: bring spacing in sd-path.h and systemd-path tool in sync (RHEL-137252) - path tool: add some basic ansi highlighing (RHEL-137252) - execude: include RuntimeScope field in ExecParameters (RHEL-137252) - execute: remove redundant assignment (RHEL-137252) - execute: when recursively chowning StateDirectory= when spawning services, follow initial symlink (RHEL-137252) - execute: add support for XDG_STATE_HOME for placing service state data in --user mode (RHEL-137252) - execute: associate logs from setup_exec_directory() with the unit name (RHEL-137252) - execute: shorten some code by using RET_NERRNO() (RHEL-137252) - execute: shorten code by making use of laccess() return code properly (RHEL-137252) - execute: don't bother with chowning StateDirectory= and friends in user mode (RHEL-137252) - test: add test for new XDG_STATE_HOME handling (RHEL-137252) - man: mention the newly-added XDG_STATE_HOME (RHEL-137252) - man: rebreak lines in file-hierarchy(7) a bit (RHEL-137252) - man: properly close XML tags (RHEL-137252) - tmpfiles: teach tmpfiles the new XDG_STATE_HOME variable too (RHEL-137252) - test: use XDG_STATE_HOME for %S and %L (RHEL-137252) - man: fully adopt ~/.local/state/ (RHEL-137252) - update specfile and sources after renaming rhel-net-naming-sysattrs to net-naming-sysattrs (RHEL-150622) - core: fix array size in unit_log_resources() (RHEL-131338) - pid1: add env var to override default mount rate limit burst (RHEL-129153) - pid1: add env var to override default mount rate limit interval (RHEL-129153) - cryptsetup-generator: refactor add_crypttab_devices() (RHEL-127859) - cryptsetup-generator: continue parsing after error (RHEL-127859) - cryptsetup-generator: parse all cmdline devices too (RHEL-127859) - cryptsetup-generator: always process cmdline devices (RHEL-127859) - logind: add "background-light" session class (RHEL-109833) - pam_systemd: honor session class provided via PAM environment (RHEL-109833) - Debrand for AlmaLinux - test: rename the start limit subtest (RHEL-212086) - ci: install GPG keys for Fedora 42 (RHEL-212086) - core: increment start limit counter only when we can start the unit (RHEL-212086) - TEST-07-PID1: wait for systemd-resolved being stopped (RHEL-212086) - test: extend start limit interval (RHEL-212086) - ci: bump the mkosi job to Ubuntu Noble (RHEL-212086) - ci: bump super-linter to v8.7.0 (RHEL-212086) - ci: explicitly disable multi status for Super-Linter (RHEL-212086) - github/linter: disable ENABLE_GITHUB_PULL_REQUEST_SUMMARY_COMMENT for super-linter (RHEL-212086) - test: install iscsi-gen-initiatorname from iscsi-initiator-utils (RHEL-212086) - fstab-generator: support swap on network block devices (RHEL-166186) - nspawn: apply BindUser/Ephemeral from settings file only if trusted (RHEL-163870) - nspawn: normalize pivot_root paths (RHEL-163870) - udev: check for invalid chars in various fields received from the kernel (RHEL-163876) - udev: fix review mixup (RHEL-163876) - udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-163876) - core: validate input cgroup path more prudently (RHEL-152082) - manager: fix scope for environment generators (RHEL-154262) - core: only activate transaction that contain useful jobs (RHEL-143727) - core/service: fix error cause in the log (RHEL-138414) - fstab-generator: drop assertions for mount opts (RHEL-92752) - fstab-generator: fix options in systemd.mount-extra= arg (RHEL-92752) - core: reorder systemd arguments on reexec (RHEL-111135) - basic: add RuntimeScope enum (RHEL-137252) - runtime-scope: add helper that turns RuntimeScope enum into --system/--user string (RHEL-137252) - sd-path: add support for XDG_STATE_HOME (RHEL-137252) - sd-path: bring spacing in sd-path.h and systemd-path tool in sync (RHEL-137252) - path tool: add some basic ansi highlighing (RHEL-137252) - execude: include RuntimeScope field in ExecParameters (RHEL-137252) - execute: remove redundant assignment (RHEL-137252) - execute: when recursively chowning StateDirectory= when spawning services, follow initial symlink (RHEL-137252) - execute: add support for XDG_STATE_HOME for placing service state data in --user mode (RHEL-137252) - execute: associate logs from setup_exec_directory() with the unit name (RHEL-137252) - execute: shorten some code by using RET_NERRNO() (RHEL-137252) - execute: shorten code by making use of laccess() return code properly (RHEL-137252) - execute: don't bother with chowning StateDirectory= and friends in user mode (RHEL-137252) - test: add test for new XDG_STATE_HOME handling (RHEL-137252) - man: mention the newly-added XDG_STATE_HOME (RHEL-137252) - man: rebreak lines in file-hierarchy(7) a bit (RHEL-137252) - man: properly close XML tags (RHEL-137252) - tmpfiles: teach tmpfiles the new XDG_STATE_HOME variable too (RHEL-137252) - test: use XDG_STATE_HOME for %S and %L (RHEL-137252) - man: fully adopt ~/.local/state/ (RHEL-137252) - update specfile and sources after renaming rhel-net-naming-sysattrs to net-naming-sysattrs (RHEL-150622) - Debrand for AlmaLinux - core: validate input cgroup path more prudently (RHEL-152082) - manager: fix scope for environment generators (RHEL-154262) - core: only activate transaction that contain useful jobs (RHEL-143727) - core/service: fix error cause in the log (RHEL-138414) - fstab-generator: drop assertions for mount opts (RHEL-92752) - fstab-generator: fix options in systemd.mount-extra= arg (RHEL-92752) - core: reorder systemd arguments on reexec (RHEL-111135) - basic: add RuntimeScope enum (RHEL-137252) - runtime-scope: add helper that turns RuntimeScope enum into --system/--user string (RHEL-137252) - sd-path: add support for XDG_STATE_HOME (RHEL-137252) - sd-path: bring spacing in sd-path.h and systemd-path tool in sync (RHEL-137252) - path tool: add some basic ansi highlighing (RHEL-137252) - execude: include RuntimeScope field in ExecParameters (RHEL-137252) - execute: remove redundant assignment (RHEL-137252) - execute: when recursively chowning StateDirectory= when spawning services, follow initial symlink (RHEL-137252) - execute: add support for XDG_STATE_HOME for placing service state data in --user mode (RHEL-137252) - execute: associate logs from setup_exec_directory() with the unit name (RHEL-137252) - execute: shorten some code by using RET_NERRNO() (RHEL-137252) - execute: shorten code by making use of laccess() return code properly (RHEL-137252) - execute: don't bother with chowning StateDirectory= and friends in user mode (RHEL-137252) - test: add test for new XDG_STATE_HOME handling (RHEL-137252) - man: mention the newly-added XDG_STATE_HOME (RHEL-137252) - man: rebreak lines in file-hierarchy(7) a bit (RHEL-137252) - man: properly close XML tags (RHEL-137252) - tmpfiles: teach tmpfiles the new XDG_STATE_HOME variable too (RHEL-137252) - test: use XDG_STATE_HOME for %S and %L (RHEL-137252) - man: fully adopt ~/.local/state/ (RHEL-137252) - update specfile and sources after renaming rhel-net-naming-sysattrs to net-naming-sysattrs (RHEL-150622) - core: fix array size in unit_log_resources() (RHEL-131338) - pid1: add env var to override default mount rate limit burst (RHEL-129153) - pid1: add env var to override default mount rate limit interval (RHEL-129153) - cryptsetup-generator: refactor add_crypttab_devices() (RHEL-127859) - cryptsetup-generator: continue parsing after error (RHEL-127859) - cryptsetup-generator: parse all cmdline devices too (RHEL-127859) - cryptsetup-generator: always process cmdline devices (RHEL-127859) - logind: add "background-light" session class (RHEL-109833) - pam_systemd: honor session class provided via PAM environment (RHEL-109833) - ukify: rstrip and escape binary null characters from 'inspect' output (#38607) (RHEL-109558) - timer: rebase last_trigger timestamp if needed (RHEL-118215) - timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118215) - strv: introduce string_strv_hashmap_remove() (RHEL-14112) - unit-file: introduce unit_file_remove_from_name_map() (RHEL-14112) - core/unit: remove path to transient unit file from unit name maps on stop (RHEL-14112) - TEST-07-PID1: add reprudcer for issue #35190 (RHEL-14112) - coredump: handle ENOBUFS and EMSGSIZE the same way (RHEL-103801) - Debrand for AlmaLinux - fstab-generator: support swap on network block devices (RHEL-166186) - nspawn: apply BindUser/Ephemeral from settings file only if trusted (RHEL-163870) - nspawn: normalize pivot_root paths (RHEL-163870) - udev: check for invalid chars in various fields received from the kernel (RHEL-163876) - udev: fix review mixup (RHEL-163876) - udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-163876) - core: validate input cgroup path more prudently (RHEL-152082) - manager: fix scope for environment generators (RHEL-154262) - core: only activate transaction that contain useful jobs (RHEL-143727) - core/service: fix error cause in the log (RHEL-138414) - fstab-generator: drop assertions for mount opts (RHEL-92752) - fstab-generator: fix options in systemd.mount-extra= arg (RHEL-92752) - core: reorder systemd arguments on reexec (RHEL-111135) - basic: add RuntimeScope enum (RHEL-137252) - runtime-scope: add helper that turns RuntimeScope enum into --system/--user string (RHEL-137252) - sd-path: add support for XDG_STATE_HOME (RHEL-137252) - sd-path: bring spacing in sd-path.h and systemd-path tool in sync (RHEL-137252) - path tool: add some basic ansi highlighing (RHEL-137252) - execude: include RuntimeScope field in ExecParameters (RHEL-137252) - execute: remove redundant assignment (RHEL-137252) - execute: when recursively chowning StateDirectory= when spawning services, follow initial symlink (RHEL-137252) - execute: add support for XDG_STATE_HOME for placing service state data in --user mode (RHEL-137252) - execute: associate logs from setup_exec_directory() with the unit name (RHEL-137252) - execute: shorten some code by using RET_NERRNO() (RHEL-137252) - execute: shorten code by making use of laccess() return code properly (RHEL-137252) - execute: don't bother with chowning StateDirectory= and friends in user mode (RHEL-137252) - test: add test for new XDG_STATE_HOME handling (RHEL-137252) - man: mention the newly-added XDG_STATE_HOME (RHEL-137252) - man: rebreak lines in file-hierarchy(7) a bit (RHEL-137252) - man: properly close XML tags (RHEL-137252) - tmpfiles: teach tmpfiles the new XDG_STATE_HOME variable too (RHEL-137252) - test: use XDG_STATE_HOME for %S and %L (RHEL-137252) - man: fully adopt ~/.local/state/ (RHEL-137252) - update specfile and sources after renaming rhel-net-naming-sysattrs to net-naming-sysattrs (RHEL-150622) - core: fix array size in unit_log_resources() (RHEL-131338) - pid1: add env var to override default mount rate limit burst (RHEL-129153) - pid1: add env var to override default mount rate limit interval (RHEL-129153) - cryptsetup-generator: refactor add_crypttab_devices() (RHEL-127859) - cryptsetup-generator: continue parsing after error (RHEL-127859) - cryptsetup-generator: parse all cmdline devices too (RHEL-127859) - cryptsetup-generator: always process cmdline devices (RHEL-127859) - logind: add "background-light" session class (RHEL-109833) - pam_systemd: honor session class provided via PAM environment (RHEL-109833) - Debrand for AlmaLinux - test: rename the start limit subtest (RHEL-212086) - ci: install GPG keys for Fedora 42 (RHEL-212086) - core: increment start limit counter only when we can start the unit (RHEL-212086) - TEST-07-PID1: wait for systemd-resolved being stopped (RHEL-212086) - test: extend start limit interval (RHEL-212086) - ci: bump the mkosi job to Ubuntu Noble (RHEL-212086) - ci: bump super-linter to v8.7.0 (RHEL-212086) - ci: explicitly disable multi status for Super-Linter (RHEL-212086) - github/linter: disable ENABLE_GITHUB_PULL_REQUEST_SUMMARY_COMMENT for super-linter (RHEL-212086) - test: install iscsi-gen-initiatorname from iscsi-initiator-utils (RHEL-212086) - fstab-generator: support swap on network block devices (RHEL-166186) - nspawn: apply BindUser/Ephemeral from settings file only if trusted (RHEL-163870) - nspawn: normalize pivot_root paths (RHEL-163870) - udev: check for invalid chars in various fields received from the kernel (RHEL-163876) - udev: fix review mixup (RHEL-163876) - udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-163876) - core: validate input cgroup path more prudently (RHEL-152082) - manager: fix scope for environment generators (RHEL-154262) - core: only activate transaction that contain useful jobs (RHEL-143727) - core/service: fix error cause in the log (RHEL-138414) - fstab-generator: drop assertions for mount opts (RHEL-92752) - fstab-generator: fix options in systemd.mount-extra= arg (RHEL-92752) - core: reorder systemd arguments on reexec (RHEL-111135) - basic: add RuntimeScope enum (RHEL-137252) - runtime-scope: add helper that turns RuntimeScope enum into --system/--user string (RHEL-137252) - sd-path: add support for XDG_STATE_HOME (RHEL-137252) - sd-path: bring spacing in sd-path.h and systemd-path tool in sync (RHEL-137252) - path tool: add some basic ansi highlighing (RHEL-137252) - execude: include RuntimeScope field in ExecParameters (RHEL-137252) - execute: remove redundant assignment (RHEL-137252) - execute: when recursively chowning StateDirectory= when spawning services, follow initial symlink (RHEL-137252) - execute: add support for XDG_STATE_HOME for placing service state data in --user mode (RHEL-137252) - execute: associate logs from setup_exec_directory() with the unit name (RHEL-137252) - execute: shorten some code by using RET_NERRNO() (RHEL-137252) - execute: shorten code by making use of laccess() return code properly (RHEL-137252) - execute: don't bother with chowning StateDirectory= and friends in user mode (RHEL-137252) - test: add test for new XDG_STATE_HOME handling (RHEL-137252) - man: mention the newly-added XDG_STATE_HOME (RHEL-137252) - man: rebreak lines in file-hierarchy(7) a bit (RHEL-137252) - man: properly close XML tags (RHEL-137252) - tmpfiles: teach tmpfiles the new XDG_STATE_HOME variable too (RHEL-137252) - test: use XDG_STATE_HOME for %S and %L (RHEL-137252) - man: fully adopt ~/.local/state/ (RHEL-137252) - update specfile and sources after renaming rhel-net-naming-sysattrs to net-naming-sysattrs (RHEL-150622) - Debrand for AlmaLinux - core: validate input cgroup path more prudently (RHEL-152082) - manager: fix scope for environment generators (RHEL-154262) - core: only activate transaction that contain useful jobs (RHEL-143727) - core/service: fix error cause in the log (RHEL-138414) - fstab-generator: drop assertions for mount opts (RHEL-92752) - fstab-generator: fix options in systemd.mount-extra= arg (RHEL-92752) - core: reorder systemd arguments on reexec (RHEL-111135) - basic: add RuntimeScope enum (RHEL-137252) - runtime-scope: add helper that turns RuntimeScope enum into --system/--user string (RHEL-137252) - sd-path: add support for XDG_STATE_HOME (RHEL-137252) - sd-path: bring spacing in sd-path.h and systemd-path tool in sync (RHEL-137252) - path tool: add some basic ansi highlighing (RHEL-137252) - execude: include RuntimeScope field in ExecParameters (RHEL-137252) - execute: remove redundant assignment (RHEL-137252) - execute: when recursively chowning StateDirectory= when spawning services, follow initial symlink (RHEL-137252) - execute: add support for XDG_STATE_HOME for placing service state data in --user mode (RHEL-137252) - execute: associate logs from setup_exec_directory() with the unit name (RHEL-137252) - execute: shorten some code by using RET_NERRNO() (RHEL-137252) - execute: shorten code by making use of laccess() return code properly (RHEL-137252) - execute: don't bother with chowning StateDirectory= and friends in user mode (RHEL-137252) - test: add test for new XDG_STATE_HOME handling (RHEL-137252) - man: mention the newly-added XDG_STATE_HOME (RHEL-137252) - man: rebreak lines in file-hierarchy(7) a bit (RHEL-137252) - man: properly close XML tags (RHEL-137252) - tmpfiles: teach tmpfiles the new XDG_STATE_HOME variable too (RHEL-137252) - test: use XDG_STATE_HOME for %S and %L (RHEL-137252) - man: fully adopt ~/.local/state/ (RHEL-137252) - update specfile and sources after renaming rhel-net-naming-sysattrs to net-naming-sysattrs (RHEL-150622) - core: fix array size in unit_log_resources() (RHEL-131338) - pid1: add env var to override default mount rate limit burst (RHEL-129153) - pid1: add env var to override default mount rate limit interval (RHEL-129153) - cryptsetup-generator: refactor add_crypttab_devices() (RHEL-127859) - cryptsetup-generator: continue parsing after error (RHEL-127859) - cryptsetup-generator: parse all cmdline devices too (RHEL-127859) - cryptsetup-generator: always process cmdline devices (RHEL-127859) - logind: add "background-light" session class (RHEL-109833) - pam_systemd: honor session class provided via PAM environment (RHEL-109833) - ukify: rstrip and escape binary null characters from 'inspect' output (#38607) (RHEL-109558) - timer: rebase last_trigger timestamp if needed (RHEL-118215) - timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118215) - strv: introduce string_strv_hashmap_remove() (RHEL-14112) - unit-file: introduce unit_file_remove_from_name_map() (RHEL-14112) - core/unit: remove path to transient unit file from unit name maps on stop (RHEL-14112) - TEST-07-PID1: add reprudcer for issue #35190 (RHEL-14112) - coredump: handle ENOBUFS and EMSGSIZE the same way (RHEL-103801) - Debrand for AlmaLinux - fstab-generator: support swap on network block devices (RHEL-166186) - nspawn: apply BindUser/Ephemeral from settings file only if trusted (RHEL-163870) - nspawn: normalize pivot_root paths (RHEL-163870) - udev: check for invalid chars in various fields received from the kernel (RHEL-163876) - udev: fix review mixup (RHEL-163876) - udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-163876) - core: validate input cgroup path more prudently (RHEL-152082) - manager: fix scope for environment generators (RHEL-154262) - core: only activate transaction that contain useful jobs (RHEL-143727) - core/service: fix error cause in the log (RHEL-138414) - fstab-generator: drop assertions for mount opts (RHEL-92752) - fstab-generator: fix options in systemd.mount-extra= arg (RHEL-92752) - core: reorder systemd arguments on reexec (RHEL-111135) - basic: add RuntimeScope enum (RHEL-137252) - runtime-scope: add helper that turns RuntimeScope enum into --system/--user string (RHEL-137252) - sd-path: add support for XDG_STATE_HOME (RHEL-137252) - sd-path: bring spacing in sd-path.h and systemd-path tool in sync (RHEL-137252) - path tool: add some basic ansi highlighing (RHEL-137252) - execude: include RuntimeScope field in ExecParameters (RHEL-137252) - execute: remove redundant assignment (RHEL-137252) - execute: when recursively chowning StateDirectory= when spawning services, follow initial symlink (RHEL-137252) - execute: add support for XDG_STATE_HOME for placing service state data in --user mode (RHEL-137252) - execute: associate logs from setup_exec_directory() with the unit name (RHEL-137252) - execute: shorten some code by using RET_NERRNO() (RHEL-137252) - execute: shorten code by making use of laccess() return code properly (RHEL-137252) - execute: don't bother with chowning StateDirectory= and friends in user mode (RHEL-137252) - test: add test for new XDG_STATE_HOME handling (RHEL-137252) - man: mention the newly-added XDG_STATE_HOME (RHEL-137252) - man: rebreak lines in file-hierarchy(7) a bit (RHEL-137252) - man: properly close XML tags (RHEL-137252) - tmpfiles: teach tmpfiles the new XDG_STATE_HOME variable too (RHEL-137252) - test: use XDG_STATE_HOME for %S and %L (RHEL-137252) - man: fully adopt ~/.local/state/ (RHEL-137252) - update specfile and sources after renaming rhel-net-naming-sysattrs to net-naming-sysattrs (RHEL-150622) - core: fix array size in unit_log_resources() (RHEL-131338) - pid1: add env var to override default mount rate limit burst (RHEL-129153) - pid1: add env var to override default mount rate limit interval (RHEL-129153) - cryptsetup-generator: refactor add_crypttab_devices() (RHEL-127859) - cryptsetup-generator: continue parsing after error (RHEL-127859) - cryptsetup-generator: parse all cmdline devices too (RHEL-127859) - cryptsetup-generator: always process cmdline devices (RHEL-127859) - logind: add "background-light" session class (RHEL-109833) - pam_systemd: honor session class provided via PAM environment (RHEL-109833) - Debrand for AlmaLinux - test: rename the start limit subtest (RHEL-212086) - ci: install GPG keys for Fedora 42 (RHEL-212086) - core: increment start limit counter only when we can start the unit (RHEL-212086) - TEST-07-PID1: wait for systemd-resolved being stopped (RHEL-212086) - test: extend start limit interval (RHEL-212086) - ci: bump the mkosi job to Ubuntu Noble (RHEL-212086) - ci: bump super-linter to v8.7.0 (RHEL-212086) - ci: explicitly disable multi status for Super-Linter (RHEL-212086) - github/linter: disable ENABLE_GITHUB_PULL_REQUEST_SUMMARY_COMMENT for super-linter (RHEL-212086) - test: install iscsi-gen-initiatorname from iscsi-initiator-utils (RHEL-212086) - fstab-generator: support swap on network block devices (RHEL-166186) - nspawn: apply BindUser/Ephemeral from settings file only if trusted (RHEL-163870) - nspawn: normalize pivot_root paths (RHEL-163870) - udev: check for invalid chars in various fields received from the kernel (RHEL-163876) - udev: fix review mixup (RHEL-163876) - udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-163876) - core: validate input cgroup path more prudently (RHEL-152082) - manager: fix scope for environment generators (RHEL-154262) - core: only activate transaction that contain useful jobs (RHEL-143727) - core/service: fix error cause in the log (RHEL-138414) - fstab-generator: drop assertions for mount opts (RHEL-92752) - fstab-generator: fix options in systemd.mount-extra= arg (RHEL-92752) - core: reorder systemd arguments on reexec (RHEL-111135) - basic: add RuntimeScope enum (RHEL-137252) - runtime-scope: add helper that turns RuntimeScope enum into --system/--user string (RHEL-137252) - sd-path: add support for XDG_STATE_HOME (RHEL-137252) - sd-path: bring spacing in sd-path.h and systemd-path tool in sync (RHEL-137252) - path tool: add some basic ansi highlighing (RHEL-137252) - execude: include RuntimeScope field in ExecParameters (RHEL-137252) - execute: remove redundant assignment (RHEL-137252) - execute: when recursively chowning StateDirectory= when spawning services, follow initial symlink (RHEL-137252) - execute: add support for XDG_STATE_HOME for placing service state data in --user mode (RHEL-137252) - execute: associate logs from setup_exec_directory() with the unit name (RHEL-137252) - execute: shorten some code by using RET_NERRNO() (RHEL-137252) - execute: shorten code by making use of laccess() return code properly (RHEL-137252) - execute: don't bother with chowning StateDirectory= and friends in user mode (RHEL-137252) - test: add test for new XDG_STATE_HOME handling (RHEL-137252) - man: mention the newly-added XDG_STATE_HOME (RHEL-137252) - man: rebreak lines in file-hierarchy(7) a bit (RHEL-137252) - man: properly close XML tags (RHEL-137252) - tmpfiles: teach tmpfiles the new XDG_STATE_HOME variable too (RHEL-137252) - test: use XDG_STATE_HOME for %S and %L (RHEL-137252) - man: fully adopt ~/.local/state/ (RHEL-137252) - update specfile and sources after renaming rhel-net-naming-sysattrs to net-naming-sysattrs (RHEL-150622) - Debrand for AlmaLinux - core: validate input cgroup path more prudently (RHEL-152082) - manager: fix scope for environment generators (RHEL-154262) - core: only activate transaction that contain useful jobs (RHEL-143727) - core/service: fix error cause in the log (RHEL-138414) - fstab-generator: drop assertions for mount opts (RHEL-92752) - fstab-generator: fix options in systemd.mount-extra= arg (RHEL-92752) - core: reorder systemd arguments on reexec (RHEL-111135) - basic: add RuntimeScope enum (RHEL-137252) - runtime-scope: add helper that turns RuntimeScope enum into --system/--user string (RHEL-137252) - sd-path: add support for XDG_STATE_HOME (RHEL-137252) - sd-path: bring spacing in sd-path.h and systemd-path tool in sync (RHEL-137252) - path tool: add some basic ansi highlighing (RHEL-137252) - execude: include RuntimeScope field in ExecParameters (RHEL-137252) - execute: remove redundant assignment (RHEL-137252) - execute: when recursively chowning StateDirectory= when spawning services, follow initial symlink (RHEL-137252) - execute: add support for XDG_STATE_HOME for placing service state data in --user mode (RHEL-137252) - execute: associate logs from setup_exec_directory() with the unit name (RHEL-137252) - execute: shorten some code by using RET_NERRNO() (RHEL-137252) - execute: shorten code by making use of laccess() return code properly (RHEL-137252) - execute: don't bother with chowning StateDirectory= and friends in user mode (RHEL-137252) - test: add test for new XDG_STATE_HOME handling (RHEL-137252) - man: mention the newly-added XDG_STATE_HOME (RHEL-137252) - man: rebreak lines in file-hierarchy(7) a bit (RHEL-137252) - man: properly close XML tags (RHEL-137252) - tmpfiles: teach tmpfiles the new XDG_STATE_HOME variable too (RHEL-137252) - test: use XDG_STATE_HOME for %S and %L (RHEL-137252) - man: fully adopt ~/.local/state/ (RHEL-137252) - update specfile and sources after renaming rhel-net-naming-sysattrs to net-naming-sysattrs (RHEL-150622) - core: fix array size in unit_log_resources() (RHEL-131338) - pid1: add env var to override default mount rate limit burst (RHEL-129153) - pid1: add env var to override default mount rate limit interval (RHEL-129153) - cryptsetup-generator: refactor add_crypttab_devices() (RHEL-127859) - cryptsetup-generator: continue parsing after error (RHEL-127859) - cryptsetup-generator: parse all cmdline devices too (RHEL-127859) - cryptsetup-generator: always process cmdline devices (RHEL-127859) - logind: add "background-light" session class (RHEL-109833) - pam_systemd: honor session class provided via PAM environment (RHEL-109833) - ukify: rstrip and escape binary null characters from 'inspect' output (#38607) (RHEL-109558) - timer: rebase last_trigger timestamp if needed (RHEL-118215) - timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118215) - strv: introduce string_strv_hashmap_remove() (RHEL-14112) - unit-file: introduce unit_file_remove_from_name_map() (RHEL-14112) - core/unit: remove path to transient unit file from unit name maps on stop (RHEL-14112) - TEST-07-PID1: add reprudcer for issue #35190 (RHEL-14112) - coredump: handle ENOBUFS and EMSGSIZE the same way (RHEL-103801) - Debrand for AlmaLinux - fstab-generator: support swap on network block devices (RHEL-166186) - nspawn: apply BindUser/Ephemeral from settings file only if trusted (RHEL-163870) - nspawn: normalize pivot_root paths (RHEL-163870) - udev: check for invalid chars in various fields received from the kernel (RHEL-163876) - udev: fix review mixup (RHEL-163876) - udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-163876) - core: validate input cgroup path more prudently (RHEL-152082) - manager: fix scope for environment generators (RHEL-154262) - core: only activate transaction that contain useful jobs (RHEL-143727) - core/service: fix error cause in the log (RHEL-138414) - fstab-generator: drop assertions for mount opts (RHEL-92752) - fstab-generator: fix options in systemd.mount-extra= arg (RHEL-92752) - core: reorder systemd arguments on reexec (RHEL-111135) - basic: add RuntimeScope enum (RHEL-137252) - runtime-scope: add helper that turns RuntimeScope enum into --system/--user string (RHEL-137252) - sd-path: add support for XDG_STATE_HOME (RHEL-137252) - sd-path: bring spacing in sd-path.h and systemd-path tool in sync (RHEL-137252) - path tool: add some basic ansi highlighing (RHEL-137252) - execude: include RuntimeScope field in ExecParameters (RHEL-137252) - execute: remove redundant assignment (RHEL-137252) - execute: when recursively chowning StateDirectory= when spawning services, follow initial symlink (RHEL-137252) - execute: add support for XDG_STATE_HOME for placing service state data in --user mode (RHEL-137252) - execute: associate logs from setup_exec_directory() with the unit name (RHEL-137252) - execute: shorten some code by using RET_NERRNO() (RHEL-137252) - execute: shorten code by making use of laccess() return code properly (RHEL-137252) - execute: don't bother with chowning StateDirectory= and friends in user mode (RHEL-137252) - test: add test for new XDG_STATE_HOME handling (RHEL-137252) - man: mention the newly-added XDG_STATE_HOME (RHEL-137252) - man: rebreak lines in file-hierarchy(7) a bit (RHEL-137252) - man: properly close XML tags (RHEL-137252) - tmpfiles: teach tmpfiles the new XDG_STATE_HOME variable too (RHEL-137252) - test: use XDG_STATE_HOME for %S and %L (RHEL-137252) - man: fully adopt ~/.local/state/ (RHEL-137252) - update specfile and sources after renaming rhel-net-naming-sysattrs to net-naming-sysattrs (RHEL-150622) - core: fix array size in unit_log_resources() (RHEL-131338) - pid1: add env var to override default mount rate limit burst (RHEL-129153) - pid1: add env var to override default mount rate limit interval (RHEL-129153) - cryptsetup-generator: refactor add_crypttab_devices() (RHEL-127859) - cryptsetup-generator: continue parsing after error (RHEL-127859) - cryptsetup-generator: parse all cmdline devices too (RHEL-127859) - cryptsetup-generator: always process cmdline devices (RHEL-127859) - logind: add "background-light" session class (RHEL-109833) - pam_systemd: honor session class provided via PAM environment (RHEL-109833) - Debrand for AlmaLinux - test: rename the start limit subtest (RHEL-212086) - ci: install GPG keys for Fedora 42 (RHEL-212086) - core: increment start limit counter only when we can start the unit (RHEL-212086) - TEST-07-PID1: wait for systemd-resolved being stopped (RHEL-212086) - test: extend start limit interval (RHEL-212086) - ci: bump the mkosi job to Ubuntu Noble (RHEL-212086) - ci: bump super-linter to v8.7.0 (RHEL-212086) - ci: explicitly disable multi status for Super-Linter (RHEL-212086) - github/linter: disable ENABLE_GITHUB_PULL_REQUEST_SUMMARY_COMMENT for super-linter (RHEL-212086) - test: install iscsi-gen-initiatorname from iscsi-initiator-utils (RHEL-212086) - fstab-generator: support swap on network block devices (RHEL-166186) - nspawn: apply BindUser/Ephemeral from settings file only if trusted (RHEL-163870) - nspawn: normalize pivot_root paths (RHEL-163870) - udev: check for invalid chars in various fields received from the kernel (RHEL-163876) - udev: fix review mixup (RHEL-163876) - udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-163876) - core: validate input cgroup path more prudently (RHEL-152082) - manager: fix scope for environment generators (RHEL-154262) - core: only activate transaction that contain useful jobs (RHEL-143727) - core/service: fix error cause in the log (RHEL-138414) - fstab-generator: drop assertions for mount opts (RHEL-92752) - fstab-generator: fix options in systemd.mount-extra= arg (RHEL-92752) - core: reorder systemd arguments on reexec (RHEL-111135) - basic: add RuntimeScope enum (RHEL-137252) - runtime-scope: add helper that turns RuntimeScope enum into --system/--user string (RHEL-137252) - sd-path: add support for XDG_STATE_HOME (RHEL-137252) - sd-path: bring spacing in sd-path.h and systemd-path tool in sync (RHEL-137252) - path tool: add some basic ansi highlighing (RHEL-137252) - execude: include RuntimeScope field in ExecParameters (RHEL-137252) - execute: remove redundant assignment (RHEL-137252) - execute: when recursively chowning StateDirectory= when spawning services, follow initial symlink (RHEL-137252) - execute: add support for XDG_STATE_HOME for placing service state data in --user mode (RHEL-137252) - execute: associate logs from setup_exec_directory() with the unit name (RHEL-137252) - execute: shorten some code by using RET_NERRNO() (RHEL-137252) - execute: shorten code by making use of laccess() return code properly (RHEL-137252) - execute: don't bother with chowning StateDirectory= and friends in user mode (RHEL-137252) - test: add test for new XDG_STATE_HOME handling (RHEL-137252) - man: mention the newly-added XDG_STATE_HOME (RHEL-137252) - man: rebreak lines in file-hierarchy(7) a bit (RHEL-137252) - man: properly close XML tags (RHEL-137252) - tmpfiles: teach tmpfiles the new XDG_STATE_HOME variable too (RHEL-137252) - test: use XDG_STATE_HOME for %S and %L (RHEL-137252) - man: fully adopt ~/.local/state/ (RHEL-137252) - update specfile and sources after renaming rhel-net-naming-sysattrs to net-naming-sysattrs (RHEL-150622) - Fix RHEL-132676 - Fix RHEL-130244 - Backport upstream patch 53c48b550 imply kernel<vmlinux.h> check by file name. - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-90805: Update dev.stp tapset to handle RHEL-9.7 kernels. - RHEL-RHEL-89809: stap-server log owned by root - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-67586: supply /usr/bin/dtrace in sdt-devel subrpm too - Upstream release, see wiki page below for detailed notes. - https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-50107.patch: Make systemtap compatible with kernel commit 68cbd415dd4b . Related: RHEL-56962 . - Fix RHEL-132676 - Fix RHEL-130244 - Backport upstream patch 53c48b550 imply kernel<vmlinux.h> check by file name. - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-90805: Update dev.stp tapset to handle RHEL-9.7 kernels. - RHEL-RHEL-89809: stap-server log owned by root - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-67586: supply /usr/bin/dtrace in sdt-devel subrpm too - Upstream release, see wiki page below for detailed notes. - https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-50107.patch: Make systemtap compatible with kernel commit 68cbd415dd4b . Related: RHEL-56962 . - Fix RHEL-132676 - Fix RHEL-130244 - Backport upstream patch 53c48b550 imply kernel<vmlinux.h> check by file name. - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-90805: Update dev.stp tapset to handle RHEL-9.7 kernels. - RHEL-RHEL-89809: stap-server log owned by root - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-67586: supply /usr/bin/dtrace in sdt-devel subrpm too - Upstream release, see wiki page below for detailed notes. - https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-50107.patch: Make systemtap compatible with kernel commit 68cbd415dd4b . Related: RHEL-56962 . - Fix RHEL-132676 - Fix RHEL-130244 - Backport upstream patch 53c48b550 imply kernel<vmlinux.h> check by file name. - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-90805: Update dev.stp tapset to handle RHEL-9.7 kernels. - RHEL-RHEL-89809: stap-server log owned by root - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-67586: supply /usr/bin/dtrace in sdt-devel subrpm too - Upstream release, see wiki page below for detailed notes. - https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-50107.patch: Make systemtap compatible with kernel commit 68cbd415dd4b . Related: RHEL-56962 . - Fix RHEL-132676 - Fix RHEL-130244 - Backport upstream patch 53c48b550 imply kernel<vmlinux.h> check by file name. - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-90805: Update dev.stp tapset to handle RHEL-9.7 kernels. - RHEL-RHEL-89809: stap-server log owned by root - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-67586: supply /usr/bin/dtrace in sdt-devel subrpm too - Upstream release, see wiki page below for detailed notes. - https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-50107.patch: Make systemtap compatible with kernel commit 68cbd415dd4b . Related: RHEL-56962 . - Fix RHEL-132676 - Fix RHEL-130244 - Backport upstream patch 53c48b550 imply kernel<vmlinux.h> check by file name. - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-90805: Update dev.stp tapset to handle RHEL-9.7 kernels. - RHEL-RHEL-89809: stap-server log owned by root - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-67586: supply /usr/bin/dtrace in sdt-devel subrpm too - Upstream release, see wiki page below for detailed notes. - https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-50107.patch: Make systemtap compatible with kernel commit 68cbd415dd4b . Related: RHEL-56962 . - Fix RHEL-132676 - Fix RHEL-130244 - Backport upstream patch 53c48b550 imply kernel<vmlinux.h> check by file name. - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-90805: Update dev.stp tapset to handle RHEL-9.7 kernels. - RHEL-RHEL-89809: stap-server log owned by root - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-67586: supply /usr/bin/dtrace in sdt-devel subrpm too - Upstream release, see wiki page below for detailed notes. - https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-50107.patch: Make systemtap compatible with kernel commit 68cbd415dd4b . Related: RHEL-56962 . - Fix RHEL-132676 - Fix RHEL-130244 - Backport upstream patch 53c48b550 imply kernel<vmlinux.h> check by file name. - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-90805: Update dev.stp tapset to handle RHEL-9.7 kernels. - RHEL-RHEL-89809: stap-server log owned by root - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-67586: supply /usr/bin/dtrace in sdt-devel subrpm too - Upstream release, see wiki page below for detailed notes. - https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-50107.patch: Make systemtap compatible with kernel commit 68cbd415dd4b . Related: RHEL-56962 . - Fix RHEL-132676 - Fix RHEL-130244 - Backport upstream patch 53c48b550 imply kernel<vmlinux.h> check by file name. - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-90805: Update dev.stp tapset to handle RHEL-9.7 kernels. - RHEL-RHEL-89809: stap-server log owned by root - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-67586: supply /usr/bin/dtrace in sdt-devel subrpm too - Upstream release, see wiki page below for detailed notes. - https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-50107.patch: Make systemtap compatible with kernel commit 68cbd415dd4b . Related: RHEL-56962 . - Fix RHEL-132676 - Fix RHEL-130244 - Backport upstream patch 53c48b550 imply kernel<vmlinux.h> check by file name. - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-90805: Update dev.stp tapset to handle RHEL-9.7 kernels. - RHEL-RHEL-89809: stap-server log owned by root - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-67586: supply /usr/bin/dtrace in sdt-devel subrpm too - Upstream release, see wiki page below for detailed notes. - https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-50107.patch: Make systemtap compatible with kernel commit 68cbd415dd4b . Related: RHEL-56962 . - Fix RHEL-132676 - Fix RHEL-130244 - Backport upstream patch 53c48b550 imply kernel<vmlinux.h> check by file name. - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-90805: Update dev.stp tapset to handle RHEL-9.7 kernels. - RHEL-RHEL-89809: stap-server log owned by root - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-67586: supply /usr/bin/dtrace in sdt-devel subrpm too - Upstream release, see wiki page below for detailed notes. - https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-50107.patch: Make systemtap compatible with kernel commit 68cbd415dd4b . Related: RHEL-56962 . - Fix RHEL-132676 - Fix RHEL-130244 - Backport upstream patch 53c48b550 imply kernel<vmlinux.h> check by file name. - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-90805: Update dev.stp tapset to handle RHEL-9.7 kernels. - RHEL-RHEL-89809: stap-server log owned by root - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-67586: supply /usr/bin/dtrace in sdt-devel subrpm too - Upstream release, see wiki page below for detailed notes. - https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-50107.patch: Make systemtap compatible with kernel commit 68cbd415dd4b . Related: RHEL-56962 . - Fix RHEL-132676 - Fix RHEL-130244 - Backport upstream patch 53c48b550 imply kernel<vmlinux.h> check by file name. - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-90805: Update dev.stp tapset to handle RHEL-9.7 kernels. - RHEL-RHEL-89809: stap-server log owned by root - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-67586: supply /usr/bin/dtrace in sdt-devel subrpm too - Upstream release, see wiki page below for detailed notes. - https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-50107.patch: Make systemtap compatible with kernel commit 68cbd415dd4b . Related: RHEL-56962 . - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - fix multilib.patch (#1943870) - -devel: fix/drop -lz references in taglib-config, taglib.pc - use versioned obsoletes - Update to 1.12 (#1584870) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fix image mode deployment of directory keys Resolves: RHEL-105012 - Update to version 2.1.76 - Update to version 2.1.75 - restoreconfig: Do not return success if the file doesn't exist - Fix a regression in LUN creation and ACL mapping Jira: RHEL-23294 - Remove jQuery from Doxygen output (RHEL-77697) - Remove jQuery from Doxygen output (RHEL-77697) - Remove jQuery from Doxygen output (RHEL-77697) - Rebuilt for i686 release Resolves: rhbz#2099397 - Rebuild to pick up new build flags from redhat-rpm-config (#1984652) - Re-enable LTO - Rebuilt for i686 release Resolves: rhbz#2099397 - Rebuild to pick up new build flags from redhat-rpm-config (#1984652) - Re-enable LTO - Resolves: RHEL-21558 - tcpslice: use-after-free in extract_slice() - Resolves: RHEL-10714 - Fix PGM option printing - Resolves: #2188429 - enable GUESS_TSO for large packets - Modifiers no longer breaks history - rhbz#1997986 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Bump version number - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to tcsh-6.22.03 - Drop tcsh-6.22.02-avoid-gcc-to-fail.patch - applied by upstream - Drop tcsh-6.22.02-call-seterror-consistently-and-abort-quickly.patch - applied by upstream - Drop tcsh-6.22.02-avoid-crashing-when-loading-corrupted-history.patch - applied by upstream - Switch to stderror() when parsing history so that we stop processing immediately to avoid crashes - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Avoid gcc 10 to fail during build on "multiple definition of handle_interrupt" - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Modernize spec file - License corrected to ((LGPLv2+ or CPL) and (LGPLv2+ or GPLv2+ or MPLv2.0 or MPLv1.1)) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Changing LD_FLAGS to RPM_LD_FLAGS - Use make_build macro and remove hard-coded gcc - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make - Resolves: #1882606 - in.telnetd needs to tolerate temporary EIO errors - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Resolves: #1814478 - Arbitrary remote code execution in utility.c via short writes or urgent data - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Changing LD_FLAGS to RPM_LD_FLAGS - Use make_build macro and remove hard-coded gcc - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make - Resolves: #1882606 - in.telnetd needs to tolerate temporary EIO errors - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Resolves: #1814478 - Arbitrary remote code execution in utility.c via short writes or urgent data - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuild for ICU 67 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 4.1.1 - Rebuild for ICU 65 - Resolves: CVE-2026-73066 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fix build failure on CentOS Stream. Related: rhbz#1951306 - Revert patch for FSF addresses (it became obsolete with 12.2) - Remove Obsoletes and Provides tetex-preview - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - Resolves: #2209872, CVE-2023-32700 - Resolves: #2031879, fix invalid symlink to mktexmf - Related: #2014453, fixed dependencies - Resolves: #2014453, runtime requirement on python-unversioned-command - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Related: #1960650 - fixed license tags and rpath issue - tftp: propagate exit codes in non-interactive mode (RHEL-96947) - fix creation of /var/lib/tftpboot in image mode (RHEL-77491) - fix regression with too chatty syslog calls when IPv6 is disabled (RHEL-19588) - fix buffer overflow in remap genmatchstring() with inverse rules (CVE-2026-85234) (RHEL-260629) - tftp: propagate exit codes in non-interactive mode (RHEL-96947) - fix creation of /var/lib/tftpboot in image mode (RHEL-77491) - tftp: propagate exit codes in non-interactive mode (RHEL-96947) - fix creation of /var/lib/tftpboot in image mode (RHEL-77491) - fix regression with too chatty syslog calls when IPv6 is disabled (RHEL-19588) - fix buffer overflow in remap genmatchstring() with inverse rules (CVE-2026-85234) (RHEL-260629) - tftp: propagate exit codes in non-interactive mode (RHEL-96947) - fix creation of /var/lib/tftpboot in image mode (RHEL-77491) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 0.7.2 - Switch to use OpenType Font Format - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 0.7.2 - Switch to use OpenType Font Format - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 0.7.2 - Switch to use OpenType Font Format - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 0.7.2 - Switch to use OpenType Font Format - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 0.7.2 - Switch to use OpenType Font Format - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 0.7.2 - Switch to use OpenType Font Format - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 0.7.2 - Switch to use OpenType Font Format - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 0.7.2 - Switch to use OpenType Font Format - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 0.7.2 - Switch to use OpenType Font Format - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 0.7.2 - Switch to use OpenType Font Format - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 0.7.2 - Switch to use OpenType Font Format - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 0.7.2 - Switch to use OpenType Font Format - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 0.7.2 - Switch to use OpenType Font Format - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Use new macros, update config.\* locations - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - AlmaLinux changes - Add gcc-toolset-14-gcc-c++ to BR - Update to 140.10.1 ESR - Update to 140.10.0 ESR - Update to 140.9.1 ESR - Update to 140.9.0 ESR - Update to 140.8.0 ESR - Update to 140.7.0 ESR - Update to 140.6.0 ESR - Update to 140.5.0 ESR - Update to 140.4.0 ESR - AlmaLinux changes - Add gcc-toolset-14-gcc-c++ to BR - Update to 140.11.0 ESR - Update to 140.10.1 ESR - Update to 140.10.0 ESR - Update to 140.9.1 ESR - Update to 140.9.0 ESR - Update to 140.8.0 ESR - Update to 140.7.0 ESR - Update to 140.6.0 ESR - Update to 140.5.0 ESR - AlmaLinux changes - Add gcc-toolset-14-gcc-c++ to BR - Update to 140.12.0 ESR - Update to 140.11.0 ESR - Update to 140.10.1 ESR - Update to 140.10.0 ESR - Update to 140.9.1 ESR - Update to 140.9.0 ESR - Update to 140.8.0 ESR - Update to 140.7.0 ESR - Update to 140.6.0 ESR - AlmaLinux changes - Add gcc-toolset-14-gcc-c++ to BR - Update to 140.13.0 ESR - Update to 140.12.0 ESR - Update to 140.11.0 ESR - Update to 140.10.1 ESR - Update to 140.10.0 ESR - Update to 140.9.1 ESR - Update to 140.9.0 ESR - Update to 140.8.0 ESR - Update to 140.7.0 ESR - AlmaLinux changes - Add gcc-toolset-14-gcc-c++ to BR - Update to 140.14.0 ESR - Update to 140.13.0 ESR - Update to 140.12.0 ESR - Update to 140.11.0 ESR - Update to 140.10.1 ESR - Update to 140.10.0 ESR - Update to 140.9.1 ESR - Update to 140.9.0 ESR - Update to 140.8.0 ESR - AlmaLinux changes - Add gcc-toolset-14-gcc-c++ to BR - Update to 140.16.0 ESR - Update to 140.15.0 ESR - Fix ML-DSA certificate validation Resolves: RHEL-252227 - Update to 140.14.0 ESR - Update to 140.13.0 ESR - Update to 140.12.0 ESR - Update to 140.11.0 ESR - Update to 140.10.1 ESR - Update to 140.10.0 ESR - Update to 140.9.1 ESR - AlmaLinux changes - Add gcc-toolset-14-gcc-c++ to BR - Update to 140.17.0 ESR - Update to 140.16.0 ESR - Update to 140.15.0 ESR - Fix ML-DSA certificate validation Resolves: RHEL-252227 - Update to 140.14.0 ESR - Update to 140.13.0 ESR - Update to 140.12.0 ESR - Update to 140.11.0 ESR - Update to 140.10.1 ESR - Update to 140.10.0 ESR - AlmaLinux changes - Add gcc-toolset-14-gcc-c++ to BR - Update to 153.5.0 ESR - Update to 140.16.0 ESR - Update to 140.15.0 ESR - Fix ML-DSA certificate validation Resolves: RHEL-252227 - Update to 140.14.0 ESR - Update to 140.13.0 ESR - Update to 140.12.0 ESR - Update to 140.11.0 ESR - Update to 140.10.1 ESR - Update to 140.10.0 ESR - Fix CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003 xorg-x11-server: various XKB and XSYNC vulnerabilities Resolves: RHEL-163212 Resolves: RHEL-163280 Resolves: RHEL-163266 - Fix CVE-2026-34352 Resolves: RHEL-167769 - Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation Resolves: RHEL-119986 - Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal Resolves: RHEL-120007 - Fix CVE-2025-62231: xorg-x11-server: Value overflow in Xkb extension XkbSetCompatMap() Resolves: RHEL-120768 - Fix CVE-2025-49175: xorg-x11-server: Out-of-Bounds Read in X Rendering Extension Animated Cursors Resolves: RHEL-97284 - Fix CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension Resolves: RHEL-97303 - Fix CVE-2025-49178: xorg-x11-server: Unprocessed Client Request Due to Bytes to Ignore Resolves: RHEL-97379 - Fix CVE-2025-49179: xorg-x11-server: Integer overflow in X Record extension Resolves: RHEL-97414 - Fix CVE-2025-49180: xorg-x11-server: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension Resolves: RHEL-97429 - Fix broken authentication with x0vncserver Resolves: RHEL-93573 - Only warn about 8 characters limit, but let it proceed Resolves: RHEL-89432 - Fix inetd mode not working Resolves: RHEL-86511 - 1.15.0 Resolves: RHEL-78617 - Add SELinux policy rules allowing to access /proc/sys/fs/nr_open Resolves: RHEL-77973 - Add SELinux policy rules allowing to create directories under /root Resolves: RHEL-77975 - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor Resolves: RHEL-80208 - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText() Resolves: RHEL-80189 - Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms() Resolves: RHEL-80194 - Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey() Resolves: RHEL-80196 - Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient() Resolves: RHEL-80197 - Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow() Resolves: RHEL-80206 - Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents() Resolves: RHEL-80205 - Fix CVE-2025-26601 xorg-x11-server Use-after-free in SyncInitTrigger() Resolves: RHEL-80209 - Fix crash in clipboard support in x0vncserver Resolves: RHEL-74216 - Add clipboard support to x0vncserver Resolves: RHEL-74216 - Fix CVE-2024-9632: xorg-x11-server: heap-based buffer overflow privilege escalation vulnerability Resolves: RHEL-62001 - Fix CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003 xorg-x11-server: various XKB and XSYNC vulnerabilities Resolves: RHEL-163213 Resolves: RHEL-163281 Resolves: RHEL-163267 - Fix CVE-2026-34352 Resolves: RHEL-167986 - Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation Resolves: RHEL-119989 - Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal Resolves: RHEL-120009 - Fix CVE-2025-62231: xorg-x11-server: Value overflow in Xkb extension XkbSetCompatMap() Resolves: RHEL-120770 - Fix CVE-2025-49175: xorg-x11-server: Out-of-Bounds Read in X Rendering Extension Animated Cursors Resolves: RHEL-97284 - Fix CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension Resolves: RHEL-97303 - Fix CVE-2025-49178: xorg-x11-server: Unprocessed Client Request Due to Bytes to Ignore Resolves: RHEL-97379 - Fix CVE-2025-49179: xorg-x11-server: Integer overflow in X Record extension Resolves: RHEL-97414 - Fix CVE-2025-49180: xorg-x11-server: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension Resolves: RHEL-97429 - Fix broken authentication with x0vncserver Resolves: RHEL-93573 - Only warn about 8 characters limit, but let it proceed Resolves: RHEL-89432 - Fix inetd mode not working Resolves: RHEL-86511 - 1.15.0 Resolves: RHEL-78617 - Add SELinux policy rules allowing to access /proc/sys/fs/nr_open Resolves: RHEL-77973 - Add SELinux policy rules allowing to create directories under /root Resolves: RHEL-77975 - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor Resolves: RHEL-80208 - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText() Resolves: RHEL-80189 - Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms() Resolves: RHEL-80194 - Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey() Resolves: RHEL-80196 - Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient() Resolves: RHEL-80197 - Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow() Resolves: RHEL-80206 - Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents() Resolves: RHEL-80205 - Fix CVE-2025-26601 xorg-x11-server Use-after-free in SyncInitTrigger() Resolves: RHEL-80209 - Fix crash in clipboard support in x0vncserver Resolves: RHEL-74216 - Add clipboard support to x0vncserver Resolves: RHEL-74216 - Fix CVE-2024-9632: xorg-x11-server: heap-based buffer overflow privilege escalation vulnerability Resolves: RHEL-62001 - Rebuild for updated xorg-x11-server Resolves: RHEL-184003 - Fix CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003 xorg-x11-server: various XKB and XSYNC vulnerabilities Resolves: RHEL-163213 Resolves: RHEL-163281 Resolves: RHEL-163267 - Fix CVE-2026-34352 Resolves: RHEL-167986 - Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation Resolves: RHEL-119989 - Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal Resolves: RHEL-120009 - Fix CVE-2025-62231: xorg-x11-server: Value overflow in Xkb extension XkbSetCompatMap() Resolves: RHEL-120770 - Fix CVE-2025-49175: xorg-x11-server: Out-of-Bounds Read in X Rendering Extension Animated Cursors Resolves: RHEL-97284 - Fix CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension Resolves: RHEL-97303 - Fix CVE-2025-49178: xorg-x11-server: Unprocessed Client Request Due to Bytes to Ignore Resolves: RHEL-97379 - Fix CVE-2025-49179: xorg-x11-server: Integer overflow in X Record extension Resolves: RHEL-97414 - Fix CVE-2025-49180: xorg-x11-server: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension Resolves: RHEL-97429 - Fix broken authentication with x0vncserver Resolves: RHEL-93573 - Only warn about 8 characters limit, but let it proceed Resolves: RHEL-89432 - Fix inetd mode not working Resolves: RHEL-86511 - 1.15.0 Resolves: RHEL-78617 - Add SELinux policy rules allowing to access /proc/sys/fs/nr_open Resolves: RHEL-77973 - Add SELinux policy rules allowing to create directories under /root Resolves: RHEL-77975 - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor Resolves: RHEL-80208 - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText() Resolves: RHEL-80189 - Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms() Resolves: RHEL-80194 - Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey() Resolves: RHEL-80196 - Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient() Resolves: RHEL-80197 - Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow() Resolves: RHEL-80206 - Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents() Resolves: RHEL-80205 - Fix CVE-2025-26601 xorg-x11-server Use-after-free in SyncInitTrigger() Resolves: RHEL-80209 - Fix crash in clipboard support in x0vncserver Resolves: RHEL-74216 - Add clipboard support to x0vncserver Resolves: RHEL-74216 - Fix CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003 xorg-x11-server: various XKB and XSYNC vulnerabilities Resolves: RHEL-163212 Resolves: RHEL-163280 Resolves: RHEL-163266 - Fix CVE-2026-34352 Resolves: RHEL-167769 - Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation Resolves: RHEL-119986 - Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal Resolves: RHEL-120007 - Fix CVE-2025-62231: xorg-x11-server: Value overflow in Xkb extension XkbSetCompatMap() Resolves: RHEL-120768 - Fix CVE-2025-49175: xorg-x11-server: Out-of-Bounds Read in X Rendering Extension Animated Cursors Resolves: RHEL-97284 - Fix CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension Resolves: RHEL-97303 - Fix CVE-2025-49178: xorg-x11-server: Unprocessed Client Request Due to Bytes to Ignore Resolves: RHEL-97379 - Fix CVE-2025-49179: xorg-x11-server: Integer overflow in X Record extension Resolves: RHEL-97414 - Fix CVE-2025-49180: xorg-x11-server: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension Resolves: RHEL-97429 - Fix broken authentication with x0vncserver Resolves: RHEL-93573 - Only warn about 8 characters limit, but let it proceed Resolves: RHEL-89432 - Fix inetd mode not working Resolves: RHEL-86511 - 1.15.0 Resolves: RHEL-78617 - Add SELinux policy rules allowing to access /proc/sys/fs/nr_open Resolves: RHEL-77973 - Add SELinux policy rules allowing to create directories under /root Resolves: RHEL-77975 - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor Resolves: RHEL-80208 - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText() Resolves: RHEL-80189 - Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms() Resolves: RHEL-80194 - Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey() Resolves: RHEL-80196 - Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient() Resolves: RHEL-80197 - Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow() Resolves: RHEL-80206 - Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents() Resolves: RHEL-80205 - Fix CVE-2025-26601 xorg-x11-server Use-after-free in SyncInitTrigger() Resolves: RHEL-80209 - Fix crash in clipboard support in x0vncserver Resolves: RHEL-74216 - Add clipboard support to x0vncserver Resolves: RHEL-74216 - Fix CVE-2024-9632: xorg-x11-server: heap-based buffer overflow privilege escalation vulnerability Resolves: RHEL-62001 - Fix CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003 xorg-x11-server: various XKB and XSYNC vulnerabilities Resolves: RHEL-163213 Resolves: RHEL-163281 Resolves: RHEL-163267 - Fix CVE-2026-34352 Resolves: RHEL-167986 - Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation Resolves: RHEL-119989 - Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal Resolves: RHEL-120009 - Fix CVE-2025-62231: xorg-x11-server: Value overflow in Xkb extension XkbSetCompatMap() Resolves: RHEL-120770 - Fix CVE-2025-49175: xorg-x11-server: Out-of-Bounds Read in X Rendering Extension Animated Cursors Resolves: RHEL-97284 - Fix CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension Resolves: RHEL-97303 - Fix CVE-2025-49178: xorg-x11-server: Unprocessed Client Request Due to Bytes to Ignore Resolves: RHEL-97379 - Fix CVE-2025-49179: xorg-x11-server: Integer overflow in X Record extension Resolves: RHEL-97414 - Fix CVE-2025-49180: xorg-x11-server: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension Resolves: RHEL-97429 - Fix broken authentication with x0vncserver Resolves: RHEL-93573 - Only warn about 8 characters limit, but let it proceed Resolves: RHEL-89432 - Fix inetd mode not working Resolves: RHEL-86511 - 1.15.0 Resolves: RHEL-78617 - Add SELinux policy rules allowing to access /proc/sys/fs/nr_open Resolves: RHEL-77973 - Add SELinux policy rules allowing to create directories under /root Resolves: RHEL-77975 - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor Resolves: RHEL-80208 - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText() Resolves: RHEL-80189 - Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms() Resolves: RHEL-80194 - Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey() Resolves: RHEL-80196 - Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient() Resolves: RHEL-80197 - Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow() Resolves: RHEL-80206 - Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents() Resolves: RHEL-80205 - Fix CVE-2025-26601 xorg-x11-server Use-after-free in SyncInitTrigger() Resolves: RHEL-80209 - Fix crash in clipboard support in x0vncserver Resolves: RHEL-74216 - Add clipboard support to x0vncserver Resolves: RHEL-74216 - Fix CVE-2024-9632: xorg-x11-server: heap-based buffer overflow privilege escalation vulnerability Resolves: RHEL-62001 - Rebuild for updated xorg-x11-server Resolves: RHEL-184003 - Fix CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003 xorg-x11-server: various XKB and XSYNC vulnerabilities Resolves: RHEL-163213 Resolves: RHEL-163281 Resolves: RHEL-163267 - Fix CVE-2026-34352 Resolves: RHEL-167986 - Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation Resolves: RHEL-119989 - Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal Resolves: RHEL-120009 - Fix CVE-2025-62231: xorg-x11-server: Value overflow in Xkb extension XkbSetCompatMap() Resolves: RHEL-120770 - Fix CVE-2025-49175: xorg-x11-server: Out-of-Bounds Read in X Rendering Extension Animated Cursors Resolves: RHEL-97284 - Fix CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension Resolves: RHEL-97303 - Fix CVE-2025-49178: xorg-x11-server: Unprocessed Client Request Due to Bytes to Ignore Resolves: RHEL-97379 - Fix CVE-2025-49179: xorg-x11-server: Integer overflow in X Record extension Resolves: RHEL-97414 - Fix CVE-2025-49180: xorg-x11-server: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension Resolves: RHEL-97429 - Fix broken authentication with x0vncserver Resolves: RHEL-93573 - Only warn about 8 characters limit, but let it proceed Resolves: RHEL-89432 - Fix inetd mode not working Resolves: RHEL-86511 - 1.15.0 Resolves: RHEL-78617 - Add SELinux policy rules allowing to access /proc/sys/fs/nr_open Resolves: RHEL-77973 - Add SELinux policy rules allowing to create directories under /root Resolves: RHEL-77975 - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor Resolves: RHEL-80208 - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText() Resolves: RHEL-80189 - Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms() Resolves: RHEL-80194 - Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey() Resolves: RHEL-80196 - Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient() Resolves: RHEL-80197 - Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow() Resolves: RHEL-80206 - Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents() Resolves: RHEL-80205 - Fix CVE-2025-26601 xorg-x11-server Use-after-free in SyncInitTrigger() Resolves: RHEL-80209 - Fix crash in clipboard support in x0vncserver Resolves: RHEL-74216 - Add clipboard support to x0vncserver Resolves: RHEL-74216 - Fix CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003 xorg-x11-server: various XKB and XSYNC vulnerabilities Resolves: RHEL-163212 Resolves: RHEL-163280 Resolves: RHEL-163266 - Fix CVE-2026-34352 Resolves: RHEL-167769 - Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation Resolves: RHEL-119986 - Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal Resolves: RHEL-120007 - Fix CVE-2025-62231: xorg-x11-server: Value overflow in Xkb extension XkbSetCompatMap() Resolves: RHEL-120768 - Fix CVE-2025-49175: xorg-x11-server: Out-of-Bounds Read in X Rendering Extension Animated Cursors Resolves: RHEL-97284 - Fix CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension Resolves: RHEL-97303 - Fix CVE-2025-49178: xorg-x11-server: Unprocessed Client Request Due to Bytes to Ignore Resolves: RHEL-97379 - Fix CVE-2025-49179: xorg-x11-server: Integer overflow in X Record extension Resolves: RHEL-97414 - Fix CVE-2025-49180: xorg-x11-server: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension Resolves: RHEL-97429 - Fix broken authentication with x0vncserver Resolves: RHEL-93573 - Only warn about 8 characters limit, but let it proceed Resolves: RHEL-89432 - Fix inetd mode not working Resolves: RHEL-86511 - 1.15.0 Resolves: RHEL-78617 - Add SELinux policy rules allowing to access /proc/sys/fs/nr_open Resolves: RHEL-77973 - Add SELinux policy rules allowing to create directories under /root Resolves: RHEL-77975 - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor Resolves: RHEL-80208 - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText() Resolves: RHEL-80189 - Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms() Resolves: RHEL-80194 - Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey() Resolves: RHEL-80196 - Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient() Resolves: RHEL-80197 - Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow() Resolves: RHEL-80206 - Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents() Resolves: RHEL-80205 - Fix CVE-2025-26601 xorg-x11-server Use-after-free in SyncInitTrigger() Resolves: RHEL-80209 - Fix crash in clipboard support in x0vncserver Resolves: RHEL-74216 - Add clipboard support to x0vncserver Resolves: RHEL-74216 - Fix CVE-2024-9632: xorg-x11-server: heap-based buffer overflow privilege escalation vulnerability Resolves: RHEL-62001 - Fix CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003 xorg-x11-server: various XKB and XSYNC vulnerabilities Resolves: RHEL-163213 Resolves: RHEL-163281 Resolves: RHEL-163267 - Fix CVE-2026-34352 Resolves: RHEL-167986 - Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation Resolves: RHEL-119989 - Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal Resolves: RHEL-120009 - Fix CVE-2025-62231: xorg-x11-server: Value overflow in Xkb extension XkbSetCompatMap() Resolves: RHEL-120770 - Fix CVE-2025-49175: xorg-x11-server: Out-of-Bounds Read in X Rendering Extension Animated Cursors Resolves: RHEL-97284 - Fix CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension Resolves: RHEL-97303 - Fix CVE-2025-49178: xorg-x11-server: Unprocessed Client Request Due to Bytes to Ignore Resolves: RHEL-97379 - Fix CVE-2025-49179: xorg-x11-server: Integer overflow in X Record extension Resolves: RHEL-97414 - Fix CVE-2025-49180: xorg-x11-server: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension Resolves: RHEL-97429 - Fix broken authentication with x0vncserver Resolves: RHEL-93573 - Only warn about 8 characters limit, but let it proceed Resolves: RHEL-89432 - Fix inetd mode not working Resolves: RHEL-86511 - 1.15.0 Resolves: RHEL-78617 - Add SELinux policy rules allowing to access /proc/sys/fs/nr_open Resolves: RHEL-77973 - Add SELinux policy rules allowing to create directories under /root Resolves: RHEL-77975 - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor Resolves: RHEL-80208 - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText() Resolves: RHEL-80189 - Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms() Resolves: RHEL-80194 - Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey() Resolves: RHEL-80196 - Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient() Resolves: RHEL-80197 - Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow() Resolves: RHEL-80206 - Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents() Resolves: RHEL-80205 - Fix CVE-2025-26601 xorg-x11-server Use-after-free in SyncInitTrigger() Resolves: RHEL-80209 - Fix crash in clipboard support in x0vncserver Resolves: RHEL-74216 - Add clipboard support to x0vncserver Resolves: RHEL-74216 - Fix CVE-2024-9632: xorg-x11-server: heap-based buffer overflow privilege escalation vulnerability Resolves: RHEL-62001 - Rebuild for updated xorg-x11-server Resolves: RHEL-184003 - Fix CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003 xorg-x11-server: various XKB and XSYNC vulnerabilities Resolves: RHEL-163213 Resolves: RHEL-163281 Resolves: RHEL-163267 - Fix CVE-2026-34352 Resolves: RHEL-167986 - Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation Resolves: RHEL-119989 - Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal Resolves: RHEL-120009 - Fix CVE-2025-62231: xorg-x11-server: Value overflow in Xkb extension XkbSetCompatMap() Resolves: RHEL-120770 - Fix CVE-2025-49175: xorg-x11-server: Out-of-Bounds Read in X Rendering Extension Animated Cursors Resolves: RHEL-97284 - Fix CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension Resolves: RHEL-97303 - Fix CVE-2025-49178: xorg-x11-server: Unprocessed Client Request Due to Bytes to Ignore Resolves: RHEL-97379 - Fix CVE-2025-49179: xorg-x11-server: Integer overflow in X Record extension Resolves: RHEL-97414 - Fix CVE-2025-49180: xorg-x11-server: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension Resolves: RHEL-97429 - Fix broken authentication with x0vncserver Resolves: RHEL-93573 - Only warn about 8 characters limit, but let it proceed Resolves: RHEL-89432 - Fix inetd mode not working Resolves: RHEL-86511 - 1.15.0 Resolves: RHEL-78617 - Add SELinux policy rules allowing to access /proc/sys/fs/nr_open Resolves: RHEL-77973 - Add SELinux policy rules allowing to create directories under /root Resolves: RHEL-77975 - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor Resolves: RHEL-80208 - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText() Resolves: RHEL-80189 - Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms() Resolves: RHEL-80194 - Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey() Resolves: RHEL-80196 - Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient() Resolves: RHEL-80197 - Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow() Resolves: RHEL-80206 - Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents() Resolves: RHEL-80205 - Fix CVE-2025-26601 xorg-x11-server Use-after-free in SyncInitTrigger() Resolves: RHEL-80209 - Fix crash in clipboard support in x0vncserver Resolves: RHEL-74216 - Add clipboard support to x0vncserver Resolves: RHEL-74216 - Fix CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003 xorg-x11-server: various XKB and XSYNC vulnerabilities Resolves: RHEL-163212 Resolves: RHEL-163280 Resolves: RHEL-163266 - Fix CVE-2026-34352 Resolves: RHEL-167769 - Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation Resolves: RHEL-119986 - Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal Resolves: RHEL-120007 - Fix CVE-2025-62231: xorg-x11-server: Value overflow in Xkb extension XkbSetCompatMap() Resolves: RHEL-120768 - Fix CVE-2025-49175: xorg-x11-server: Out-of-Bounds Read in X Rendering Extension Animated Cursors Resolves: RHEL-97284 - Fix CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension Resolves: RHEL-97303 - Fix CVE-2025-49178: xorg-x11-server: Unprocessed Client Request Due to Bytes to Ignore Resolves: RHEL-97379 - Fix CVE-2025-49179: xorg-x11-server: Integer overflow in X Record extension Resolves: RHEL-97414 - Fix CVE-2025-49180: xorg-x11-server: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension Resolves: RHEL-97429 - Fix broken authentication with x0vncserver Resolves: RHEL-93573 - Only warn about 8 characters limit, but let it proceed Resolves: RHEL-89432 - Fix inetd mode not working Resolves: RHEL-86511 - 1.15.0 Resolves: RHEL-78617 - Add SELinux policy rules allowing to access /proc/sys/fs/nr_open Resolves: RHEL-77973 - Add SELinux policy rules allowing to create directories under /root Resolves: RHEL-77975 - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor Resolves: RHEL-80208 - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText() Resolves: RHEL-80189 - Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms() Resolves: RHEL-80194 - Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey() Resolves: RHEL-80196 - Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient() Resolves: RHEL-80197 - Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow() Resolves: RHEL-80206 - Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents() Resolves: RHEL-80205 - Fix CVE-2025-26601 xorg-x11-server Use-after-free in SyncInitTrigger() Resolves: RHEL-80209 - Fix crash in clipboard support in x0vncserver Resolves: RHEL-74216 - Add clipboard support to x0vncserver Resolves: RHEL-74216 - Fix CVE-2024-9632: xorg-x11-server: heap-based buffer overflow privilege escalation vulnerability Resolves: RHEL-62001 - Fix CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003 xorg-x11-server: various XKB and XSYNC vulnerabilities Resolves: RHEL-163213 Resolves: RHEL-163281 Resolves: RHEL-163267 - Fix CVE-2026-34352 Resolves: RHEL-167986 - Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation Resolves: RHEL-119989 - Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal Resolves: RHEL-120009 - Fix CVE-2025-62231: xorg-x11-server: Value overflow in Xkb extension XkbSetCompatMap() Resolves: RHEL-120770 - Fix CVE-2025-49175: xorg-x11-server: Out-of-Bounds Read in X Rendering Extension Animated Cursors Resolves: RHEL-97284 - Fix CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension Resolves: RHEL-97303 - Fix CVE-2025-49178: xorg-x11-server: Unprocessed Client Request Due to Bytes to Ignore Resolves: RHEL-97379 - Fix CVE-2025-49179: xorg-x11-server: Integer overflow in X Record extension Resolves: RHEL-97414 - Fix CVE-2025-49180: xorg-x11-server: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension Resolves: RHEL-97429 - Fix broken authentication with x0vncserver Resolves: RHEL-93573 - Only warn about 8 characters limit, but let it proceed Resolves: RHEL-89432 - Fix inetd mode not working Resolves: RHEL-86511 - 1.15.0 Resolves: RHEL-78617 - Add SELinux policy rules allowing to access /proc/sys/fs/nr_open Resolves: RHEL-77973 - Add SELinux policy rules allowing to create directories under /root Resolves: RHEL-77975 - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor Resolves: RHEL-80208 - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText() Resolves: RHEL-80189 - Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms() Resolves: RHEL-80194 - Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey() Resolves: RHEL-80196 - Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient() Resolves: RHEL-80197 - Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow() Resolves: RHEL-80206 - Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents() Resolves: RHEL-80205 - Fix CVE-2025-26601 xorg-x11-server Use-after-free in SyncInitTrigger() Resolves: RHEL-80209 - Fix crash in clipboard support in x0vncserver Resolves: RHEL-74216 - Add clipboard support to x0vncserver Resolves: RHEL-74216 - Fix CVE-2024-9632: xorg-x11-server: heap-based buffer overflow privilege escalation vulnerability Resolves: RHEL-62001 - Rebuild for updated xorg-x11-server Resolves: RHEL-184003 - Fix CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003 xorg-x11-server: various XKB and XSYNC vulnerabilities Resolves: RHEL-163213 Resolves: RHEL-163281 Resolves: RHEL-163267 - Fix CVE-2026-34352 Resolves: RHEL-167986 - Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation Resolves: RHEL-119989 - Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal Resolves: RHEL-120009 - Fix CVE-2025-62231: xorg-x11-server: Value overflow in Xkb extension XkbSetCompatMap() Resolves: RHEL-120770 - Fix CVE-2025-49175: xorg-x11-server: Out-of-Bounds Read in X Rendering Extension Animated Cursors Resolves: RHEL-97284 - Fix CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension Resolves: RHEL-97303 - Fix CVE-2025-49178: xorg-x11-server: Unprocessed Client Request Due to Bytes to Ignore Resolves: RHEL-97379 - Fix CVE-2025-49179: xorg-x11-server: Integer overflow in X Record extension Resolves: RHEL-97414 - Fix CVE-2025-49180: xorg-x11-server: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension Resolves: RHEL-97429 - Fix broken authentication with x0vncserver Resolves: RHEL-93573 - Only warn about 8 characters limit, but let it proceed Resolves: RHEL-89432 - Fix inetd mode not working Resolves: RHEL-86511 - 1.15.0 Resolves: RHEL-78617 - Add SELinux policy rules allowing to access /proc/sys/fs/nr_open Resolves: RHEL-77973 - Add SELinux policy rules allowing to create directories under /root Resolves: RHEL-77975 - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor Resolves: RHEL-80208 - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText() Resolves: RHEL-80189 - Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms() Resolves: RHEL-80194 - Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey() Resolves: RHEL-80196 - Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient() Resolves: RHEL-80197 - Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow() Resolves: RHEL-80206 - Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents() Resolves: RHEL-80205 - Fix CVE-2025-26601 xorg-x11-server Use-after-free in SyncInitTrigger() Resolves: RHEL-80209 - Fix crash in clipboard support in x0vncserver Resolves: RHEL-74216 - Add clipboard support to x0vncserver Resolves: RHEL-74216 - Fix CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003 xorg-x11-server: various XKB and XSYNC vulnerabilities Resolves: RHEL-163212 Resolves: RHEL-163280 Resolves: RHEL-163266 - Fix CVE-2026-34352 Resolves: RHEL-167769 - Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation Resolves: RHEL-119986 - Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal Resolves: RHEL-120007 - Fix CVE-2025-62231: xorg-x11-server: Value overflow in Xkb extension XkbSetCompatMap() Resolves: RHEL-120768 - Fix CVE-2025-49175: xorg-x11-server: Out-of-Bounds Read in X Rendering Extension Animated Cursors Resolves: RHEL-97284 - Fix CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension Resolves: RHEL-97303 - Fix CVE-2025-49178: xorg-x11-server: Unprocessed Client Request Due to Bytes to Ignore Resolves: RHEL-97379 - Fix CVE-2025-49179: xorg-x11-server: Integer overflow in X Record extension Resolves: RHEL-97414 - Fix CVE-2025-49180: xorg-x11-server: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension Resolves: RHEL-97429 - Fix broken authentication with x0vncserver Resolves: RHEL-93573 - Only warn about 8 characters limit, but let it proceed Resolves: RHEL-89432 - Fix inetd mode not working Resolves: RHEL-86511 - 1.15.0 Resolves: RHEL-78617 - Add SELinux policy rules allowing to access /proc/sys/fs/nr_open Resolves: RHEL-77973 - Add SELinux policy rules allowing to create directories under /root Resolves: RHEL-77975 - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor Resolves: RHEL-80208 - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText() Resolves: RHEL-80189 - Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms() Resolves: RHEL-80194 - Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey() Resolves: RHEL-80196 - Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient() Resolves: RHEL-80197 - Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow() Resolves: RHEL-80206 - Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents() Resolves: RHEL-80205 - Fix CVE-2025-26601 xorg-x11-server Use-after-free in SyncInitTrigger() Resolves: RHEL-80209 - Fix crash in clipboard support in x0vncserver Resolves: RHEL-74216 - Add clipboard support to x0vncserver Resolves: RHEL-74216 - Fix CVE-2024-9632: xorg-x11-server: heap-based buffer overflow privilege escalation vulnerability Resolves: RHEL-62001 - Fix CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003 xorg-x11-server: various XKB and XSYNC vulnerabilities Resolves: RHEL-163213 Resolves: RHEL-163281 Resolves: RHEL-163267 - Fix CVE-2026-34352 Resolves: RHEL-167986 - Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation Resolves: RHEL-119989 - Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal Resolves: RHEL-120009 - Fix CVE-2025-62231: xorg-x11-server: Value overflow in Xkb extension XkbSetCompatMap() Resolves: RHEL-120770 - Fix CVE-2025-49175: xorg-x11-server: Out-of-Bounds Read in X Rendering Extension Animated Cursors Resolves: RHEL-97284 - Fix CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension Resolves: RHEL-97303 - Fix CVE-2025-49178: xorg-x11-server: Unprocessed Client Request Due to Bytes to Ignore Resolves: RHEL-97379 - Fix CVE-2025-49179: xorg-x11-server: Integer overflow in X Record extension Resolves: RHEL-97414 - Fix CVE-2025-49180: xorg-x11-server: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension Resolves: RHEL-97429 - Fix broken authentication with x0vncserver Resolves: RHEL-93573 - Only warn about 8 characters limit, but let it proceed Resolves: RHEL-89432 - Fix inetd mode not working Resolves: RHEL-86511 - 1.15.0 Resolves: RHEL-78617 - Add SELinux policy rules allowing to access /proc/sys/fs/nr_open Resolves: RHEL-77973 - Add SELinux policy rules allowing to create directories under /root Resolves: RHEL-77975 - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor Resolves: RHEL-80208 - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText() Resolves: RHEL-80189 - Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms() Resolves: RHEL-80194 - Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey() Resolves: RHEL-80196 - Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient() Resolves: RHEL-80197 - Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow() Resolves: RHEL-80206 - Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents() Resolves: RHEL-80205 - Fix CVE-2025-26601 xorg-x11-server Use-after-free in SyncInitTrigger() Resolves: RHEL-80209 - Fix crash in clipboard support in x0vncserver Resolves: RHEL-74216 - Add clipboard support to x0vncserver Resolves: RHEL-74216 - Fix CVE-2024-9632: xorg-x11-server: heap-based buffer overflow privilege escalation vulnerability Resolves: RHEL-62001 - Rebuild for updated xorg-x11-server Resolves: RHEL-184003 - Fix CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003 xorg-x11-server: various XKB and XSYNC vulnerabilities Resolves: RHEL-163213 Resolves: RHEL-163281 Resolves: RHEL-163267 - Fix CVE-2026-34352 Resolves: RHEL-167986 - Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation Resolves: RHEL-119989 - Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal Resolves: RHEL-120009 - Fix CVE-2025-62231: xorg-x11-server: Value overflow in Xkb extension XkbSetCompatMap() Resolves: RHEL-120770 - Fix CVE-2025-49175: xorg-x11-server: Out-of-Bounds Read in X Rendering Extension Animated Cursors Resolves: RHEL-97284 - Fix CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension Resolves: RHEL-97303 - Fix CVE-2025-49178: xorg-x11-server: Unprocessed Client Request Due to Bytes to Ignore Resolves: RHEL-97379 - Fix CVE-2025-49179: xorg-x11-server: Integer overflow in X Record extension Resolves: RHEL-97414 - Fix CVE-2025-49180: xorg-x11-server: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension Resolves: RHEL-97429 - Fix broken authentication with x0vncserver Resolves: RHEL-93573 - Only warn about 8 characters limit, but let it proceed Resolves: RHEL-89432 - Fix inetd mode not working Resolves: RHEL-86511 - 1.15.0 Resolves: RHEL-78617 - Add SELinux policy rules allowing to access /proc/sys/fs/nr_open Resolves: RHEL-77973 - Add SELinux policy rules allowing to create directories under /root Resolves: RHEL-77975 - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor Resolves: RHEL-80208 - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText() Resolves: RHEL-80189 - Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms() Resolves: RHEL-80194 - Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey() Resolves: RHEL-80196 - Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient() Resolves: RHEL-80197 - Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow() Resolves: RHEL-80206 - Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents() Resolves: RHEL-80205 - Fix CVE-2025-26601 xorg-x11-server Use-after-free in SyncInitTrigger() Resolves: RHEL-80209 - Fix crash in clipboard support in x0vncserver Resolves: RHEL-74216 - Add clipboard support to x0vncserver Resolves: RHEL-74216 - Fix CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003 xorg-x11-server: various XKB and XSYNC vulnerabilities Resolves: RHEL-163212 Resolves: RHEL-163280 Resolves: RHEL-163266 - Fix CVE-2026-34352 Resolves: RHEL-167769 - Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation Resolves: RHEL-119986 - Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal Resolves: RHEL-120007 - Fix CVE-2025-62231: xorg-x11-server: Value overflow in Xkb extension XkbSetCompatMap() Resolves: RHEL-120768 - Fix CVE-2025-49175: xorg-x11-server: Out-of-Bounds Read in X Rendering Extension Animated Cursors Resolves: RHEL-97284 - Fix CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension Resolves: RHEL-97303 - Fix CVE-2025-49178: xorg-x11-server: Unprocessed Client Request Due to Bytes to Ignore Resolves: RHEL-97379 - Fix CVE-2025-49179: xorg-x11-server: Integer overflow in X Record extension Resolves: RHEL-97414 - Fix CVE-2025-49180: xorg-x11-server: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension Resolves: RHEL-97429 - Fix broken authentication with x0vncserver Resolves: RHEL-93573 - Only warn about 8 characters limit, but let it proceed Resolves: RHEL-89432 - Fix inetd mode not working Resolves: RHEL-86511 - 1.15.0 Resolves: RHEL-78617 - Add SELinux policy rules allowing to access /proc/sys/fs/nr_open Resolves: RHEL-77973 - Add SELinux policy rules allowing to create directories under /root Resolves: RHEL-77975 - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor Resolves: RHEL-80208 - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText() Resolves: RHEL-80189 - Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms() Resolves: RHEL-80194 - Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey() Resolves: RHEL-80196 - Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient() Resolves: RHEL-80197 - Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow() Resolves: RHEL-80206 - Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents() Resolves: RHEL-80205 - Fix CVE-2025-26601 xorg-x11-server Use-after-free in SyncInitTrigger() Resolves: RHEL-80209 - Fix crash in clipboard support in x0vncserver Resolves: RHEL-74216 - Add clipboard support to x0vncserver Resolves: RHEL-74216 - Fix CVE-2024-9632: xorg-x11-server: heap-based buffer overflow privilege escalation vulnerability Resolves: RHEL-62001 - Fix CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003 xorg-x11-server: various XKB and XSYNC vulnerabilities Resolves: RHEL-163213 Resolves: RHEL-163281 Resolves: RHEL-163267 - Fix CVE-2026-34352 Resolves: RHEL-167986 - Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation Resolves: RHEL-119989 - Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal Resolves: RHEL-120009 - Fix CVE-2025-62231: xorg-x11-server: Value overflow in Xkb extension XkbSetCompatMap() Resolves: RHEL-120770 - Fix CVE-2025-49175: xorg-x11-server: Out-of-Bounds Read in X Rendering Extension Animated Cursors Resolves: RHEL-97284 - Fix CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension Resolves: RHEL-97303 - Fix CVE-2025-49178: xorg-x11-server: Unprocessed Client Request Due to Bytes to Ignore Resolves: RHEL-97379 - Fix CVE-2025-49179: xorg-x11-server: Integer overflow in X Record extension Resolves: RHEL-97414 - Fix CVE-2025-49180: xorg-x11-server: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension Resolves: RHEL-97429 - Fix broken authentication with x0vncserver Resolves: RHEL-93573 - Only warn about 8 characters limit, but let it proceed Resolves: RHEL-89432 - Fix inetd mode not working Resolves: RHEL-86511 - 1.15.0 Resolves: RHEL-78617 - Add SELinux policy rules allowing to access /proc/sys/fs/nr_open Resolves: RHEL-77973 - Add SELinux policy rules allowing to create directories under /root Resolves: RHEL-77975 - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor Resolves: RHEL-80208 - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText() Resolves: RHEL-80189 - Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms() Resolves: RHEL-80194 - Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey() Resolves: RHEL-80196 - Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient() Resolves: RHEL-80197 - Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow() Resolves: RHEL-80206 - Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents() Resolves: RHEL-80205 - Fix CVE-2025-26601 xorg-x11-server Use-after-free in SyncInitTrigger() Resolves: RHEL-80209 - Fix crash in clipboard support in x0vncserver Resolves: RHEL-74216 - Add clipboard support to x0vncserver Resolves: RHEL-74216 - Fix CVE-2024-9632: xorg-x11-server: heap-based buffer overflow privilege escalation vulnerability Resolves: RHEL-62001 - Rebuild for updated xorg-x11-server Resolves: RHEL-184003 - Fix CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003 xorg-x11-server: various XKB and XSYNC vulnerabilities Resolves: RHEL-163213 Resolves: RHEL-163281 Resolves: RHEL-163267 - Fix CVE-2026-34352 Resolves: RHEL-167986 - Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation Resolves: RHEL-119989 - Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal Resolves: RHEL-120009 - Fix CVE-2025-62231: xorg-x11-server: Value overflow in Xkb extension XkbSetCompatMap() Resolves: RHEL-120770 - Fix CVE-2025-49175: xorg-x11-server: Out-of-Bounds Read in X Rendering Extension Animated Cursors Resolves: RHEL-97284 - Fix CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension Resolves: RHEL-97303 - Fix CVE-2025-49178: xorg-x11-server: Unprocessed Client Request Due to Bytes to Ignore Resolves: RHEL-97379 - Fix CVE-2025-49179: xorg-x11-server: Integer overflow in X Record extension Resolves: RHEL-97414 - Fix CVE-2025-49180: xorg-x11-server: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension Resolves: RHEL-97429 - Fix broken authentication with x0vncserver Resolves: RHEL-93573 - Only warn about 8 characters limit, but let it proceed Resolves: RHEL-89432 - Fix inetd mode not working Resolves: RHEL-86511 - 1.15.0 Resolves: RHEL-78617 - Add SELinux policy rules allowing to access /proc/sys/fs/nr_open Resolves: RHEL-77973 - Add SELinux policy rules allowing to create directories under /root Resolves: RHEL-77975 - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor Resolves: RHEL-80208 - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText() Resolves: RHEL-80189 - Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms() Resolves: RHEL-80194 - Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey() Resolves: RHEL-80196 - Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient() Resolves: RHEL-80197 - Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow() Resolves: RHEL-80206 - Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents() Resolves: RHEL-80205 - Fix CVE-2025-26601 xorg-x11-server Use-after-free in SyncInitTrigger() Resolves: RHEL-80209 - Fix crash in clipboard support in x0vncserver Resolves: RHEL-74216 - Add clipboard support to x0vncserver Resolves: RHEL-74216 - Fix CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003 xorg-x11-server: various XKB and XSYNC vulnerabilities Resolves: RHEL-163212 Resolves: RHEL-163280 Resolves: RHEL-163266 - Fix CVE-2026-34352 Resolves: RHEL-167769 - Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation Resolves: RHEL-119986 - Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal Resolves: RHEL-120007 - Fix CVE-2025-62231: xorg-x11-server: Value overflow in Xkb extension XkbSetCompatMap() Resolves: RHEL-120768 - Fix CVE-2025-49175: xorg-x11-server: Out-of-Bounds Read in X Rendering Extension Animated Cursors Resolves: RHEL-97284 - Fix CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension Resolves: RHEL-97303 - Fix CVE-2025-49178: xorg-x11-server: Unprocessed Client Request Due to Bytes to Ignore Resolves: RHEL-97379 - Fix CVE-2025-49179: xorg-x11-server: Integer overflow in X Record extension Resolves: RHEL-97414 - Fix CVE-2025-49180: xorg-x11-server: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension Resolves: RHEL-97429 - Fix broken authentication with x0vncserver Resolves: RHEL-93573 - Only warn about 8 characters limit, but let it proceed Resolves: RHEL-89432 - Fix inetd mode not working Resolves: RHEL-86511 - 1.15.0 Resolves: RHEL-78617 - Add SELinux policy rules allowing to access /proc/sys/fs/nr_open Resolves: RHEL-77973 - Add SELinux policy rules allowing to create directories under /root Resolves: RHEL-77975 - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor Resolves: RHEL-80208 - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText() Resolves: RHEL-80189 - Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms() Resolves: RHEL-80194 - Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey() Resolves: RHEL-80196 - Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient() Resolves: RHEL-80197 - Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow() Resolves: RHEL-80206 - Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents() Resolves: RHEL-80205 - Fix CVE-2025-26601 xorg-x11-server Use-after-free in SyncInitTrigger() Resolves: RHEL-80209 - Fix crash in clipboard support in x0vncserver Resolves: RHEL-74216 - Add clipboard support to x0vncserver Resolves: RHEL-74216 - Fix CVE-2024-9632: xorg-x11-server: heap-based buffer overflow privilege escalation vulnerability Resolves: RHEL-62001 - Fix CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003 xorg-x11-server: various XKB and XSYNC vulnerabilities Resolves: RHEL-163213 Resolves: RHEL-163281 Resolves: RHEL-163267 - Fix CVE-2026-34352 Resolves: RHEL-167986 - Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation Resolves: RHEL-119989 - Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal Resolves: RHEL-120009 - Fix CVE-2025-62231: xorg-x11-server: Value overflow in Xkb extension XkbSetCompatMap() Resolves: RHEL-120770 - Fix CVE-2025-49175: xorg-x11-server: Out-of-Bounds Read in X Rendering Extension Animated Cursors Resolves: RHEL-97284 - Fix CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension Resolves: RHEL-97303 - Fix CVE-2025-49178: xorg-x11-server: Unprocessed Client Request Due to Bytes to Ignore Resolves: RHEL-97379 - Fix CVE-2025-49179: xorg-x11-server: Integer overflow in X Record extension Resolves: RHEL-97414 - Fix CVE-2025-49180: xorg-x11-server: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension Resolves: RHEL-97429 - Fix broken authentication with x0vncserver Resolves: RHEL-93573 - Only warn about 8 characters limit, but let it proceed Resolves: RHEL-89432 - Fix inetd mode not working Resolves: RHEL-86511 - 1.15.0 Resolves: RHEL-78617 - Add SELinux policy rules allowing to access /proc/sys/fs/nr_open Resolves: RHEL-77973 - Add SELinux policy rules allowing to create directories under /root Resolves: RHEL-77975 - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor Resolves: RHEL-80208 - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText() Resolves: RHEL-80189 - Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms() Resolves: RHEL-80194 - Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey() Resolves: RHEL-80196 - Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient() Resolves: RHEL-80197 - Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow() Resolves: RHEL-80206 - Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents() Resolves: RHEL-80205 - Fix CVE-2025-26601 xorg-x11-server Use-after-free in SyncInitTrigger() Resolves: RHEL-80209 - Fix crash in clipboard support in x0vncserver Resolves: RHEL-74216 - Add clipboard support to x0vncserver Resolves: RHEL-74216 - Fix CVE-2024-9632: xorg-x11-server: heap-based buffer overflow privilege escalation vulnerability Resolves: RHEL-62001 - Rebuild for updated xorg-x11-server Resolves: RHEL-184003 - Fix CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003 xorg-x11-server: various XKB and XSYNC vulnerabilities Resolves: RHEL-163213 Resolves: RHEL-163281 Resolves: RHEL-163267 - Fix CVE-2026-34352 Resolves: RHEL-167986 - Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation Resolves: RHEL-119989 - Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal Resolves: RHEL-120009 - Fix CVE-2025-62231: xorg-x11-server: Value overflow in Xkb extension XkbSetCompatMap() Resolves: RHEL-120770 - Fix CVE-2025-49175: xorg-x11-server: Out-of-Bounds Read in X Rendering Extension Animated Cursors Resolves: RHEL-97284 - Fix CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension Resolves: RHEL-97303 - Fix CVE-2025-49178: xorg-x11-server: Unprocessed Client Request Due to Bytes to Ignore Resolves: RHEL-97379 - Fix CVE-2025-49179: xorg-x11-server: Integer overflow in X Record extension Resolves: RHEL-97414 - Fix CVE-2025-49180: xorg-x11-server: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension Resolves: RHEL-97429 - Fix broken authentication with x0vncserver Resolves: RHEL-93573 - Only warn about 8 characters limit, but let it proceed Resolves: RHEL-89432 - Fix inetd mode not working Resolves: RHEL-86511 - 1.15.0 Resolves: RHEL-78617 - Add SELinux policy rules allowing to access /proc/sys/fs/nr_open Resolves: RHEL-77973 - Add SELinux policy rules allowing to create directories under /root Resolves: RHEL-77975 - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor Resolves: RHEL-80208 - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText() Resolves: RHEL-80189 - Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms() Resolves: RHEL-80194 - Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey() Resolves: RHEL-80196 - Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient() Resolves: RHEL-80197 - Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow() Resolves: RHEL-80206 - Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents() Resolves: RHEL-80205 - Fix CVE-2025-26601 xorg-x11-server Use-after-free in SyncInitTrigger() Resolves: RHEL-80209 - Fix crash in clipboard support in x0vncserver Resolves: RHEL-74216 - Add clipboard support to x0vncserver Resolves: RHEL-74216 - Honoured distribution LDFLAGS Resolves: rhbz#2044894 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for i686 release Resolves: rhbz#2099398 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for i686 release Resolves: rhbz#2099398 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Release v14 - configure: correctly handle systemd versions before 245 - Provide a sysusers.d file to get user() and group() provides (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format). - Update the Fedora license - MAN: Add missing comma in tlog-rec-session.conf - Exit transfer loop when output fd is closed - Revert "Prevent infinite transfer loop on GDM login" - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fix multilib issue with systemd-sysusers config Related: RHEL-90737 - Add support for post-quantum cryptography Resolves: RHEL-127514 - Use systemd-sysusers for the 'pegasus' user and group creation - Fix Requires of subpackages Related: RHEL-90737 - Add support for Image Mode Resolves: RHEL-90737 - Update OpenSSL certificates set up Resolves: RHEL-81721 - Remove deprecated path from systemd service file Resolves: RHEL-81716 - Fix multilib issue with systemd-sysusers config Related: RHEL-90737 - Add support for post-quantum cryptography Resolves: RHEL-127514 - Use systemd-sysusers for the 'pegasus' user and group creation - Fix Requires of subpackages Related: RHEL-90737 - Add support for Image Mode Resolves: RHEL-90737 - Update OpenSSL certificates set up Resolves: RHEL-81721 - Remove deprecated path from systemd service file Resolves: RHEL-81716 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Resolves: RHEL-168081 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-154364 Tomcat fails to respond to client connections when using Java 8 - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124516 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132561 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102201 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108489 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108497 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108505 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108513 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108529 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108523 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-91763 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-71985 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-82945 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-71723 tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) - Resolves: RHEL-46163 tomcat: Improper Handling of Exceptional Conditions (CVE-2024-34750) - Resolves: RHEL-18245 - OpenJDK 21 support for RHEL Tomcat - Resolves: RHEL-35812 - Rebase tomcat to version 9.0.87 - Resolves: RHEL-29257 tomcat: Apache Tomcat: WebSocket DoS with incomplete closing handshake (CVE-2024-23672) - Resolves: RHEL-29252 tomcat: : Apache Tomcat: HTTP/2 header handling DoS (CVE-2024-24549) - Resolves: RHEL-53001 - Amend tomcat's changelog (CVE-2023-46589, CVE-2023-45648, CVE-2023-42795, CVE-2023-42794, CVE-2023-44487, CVE-2023-41080) - Resolves: RHEL-150714 Certificate revocation bypass due to improper OCSP response validation - Resolves: Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled (CVE-2026-34500) - Resolves: Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token (CVE-2026-34487) - Resolves: Tomcat: The fix for CVE-2026-29146 allowed the bypass of the EncryptInterceptor (CVE-2026-34486) - Resolves: Tomcat: Incomplete escaping of JSON access logs (CVE-2026-34483) - Resolves: Tomcat: The fix for CVE-2025-66614 was incomplete (CVE-2026-32990) - Resolves: Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default (CVE-2026-29146) - Resolves: Tomcat: OCSP checks sometimes soft-fail even when soft-fail is disabled (CVE-2026-29145) - Resolves: Tomcat: Configured TLS cipher preference order not preserved (CVE-2026-29129) - Resolves: Tomcat: Occasionally open redirect (CVE-2026-25854) - Resolves: Tomcat: Request smuggling via invalid chunk extension (CVE-2026-24880) - Resolves: Tomcat: Incomplete OCSP verification checks (CVE-2026-24734) - Resolves: Tomcat: Security constraint bypass (CVE-2026-24733) - Resolves: Tomcat: Client certificate verification bypass due to virtual host mapping (CVE-2025-66614) - Resolves: RHEL-168081 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-154364 Tomcat fails to respond to client connections when using Java 8 - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124516 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132561 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102201 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108489 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108497 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108505 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108513 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108529 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108523 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-91763 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-71985 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-82945 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-71723 tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) - Resolves: RHEL-46163 tomcat: Improper Handling of Exceptional Conditions (CVE-2024-34750) - Resolves: RHEL-18245 - OpenJDK 21 support for RHEL Tomcat - Resolves: RHEL-183992 Remove tomcat clustering JAR from RPM builds - Exclude i686 architecture from build - Resolves: RHEL-150714 Certificate revocation bypass due to improper OCSP response validation - Resolves: Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled (CVE-2026-34500) - Resolves: Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token (CVE-2026-34487) - Resolves: Tomcat: The fix for CVE-2026-29146 allowed the bypass of the EncryptInterceptor (CVE-2026-34486) - Resolves: Tomcat: Incomplete escaping of JSON access logs (CVE-2026-34483) - Resolves: Tomcat: The fix for CVE-2025-66614 was incomplete (CVE-2026-32990) - Resolves: Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default (CVE-2026-29146) - Resolves: Tomcat: OCSP checks sometimes soft-fail even when soft-fail is disabled (CVE-2026-29145) - Resolves: Tomcat: Configured TLS cipher preference order not preserved (CVE-2026-29129) - Resolves: Tomcat: Occasionally open redirect (CVE-2026-25854) - Resolves: Tomcat: Request smuggling via invalid chunk extension (CVE-2026-24880) - Resolves: Tomcat: Incomplete OCSP verification checks (CVE-2026-24734) - Resolves: Tomcat: Security constraint bypass (CVE-2026-24733) - Resolves: Tomcat: Client certificate verification bypass due to virtual host mapping (CVE-2025-66614) - Resolves: RHEL-168081 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-154364 Tomcat fails to respond to client connections when using Java 8 - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124516 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132561 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102201 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108489 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108497 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108505 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108513 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108529 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108523 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-91763 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-71985 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-82945 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-71723 tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) - Resolves: RHEL-192825 HTTP/2 request headers not validated (CVE-2026-41293) - Resolves: RHEL-192659 Improper Input Validation vulnerability due to incomplete fix (CVE-2026-32990) - Resolves: RHEL-219565 Security constraint bypass via improper URL encoding in rewrite valve (CVE-2026-59083) - Resolves: RHEL-219573 Insufficient documentation for EncryptInterceptor may lead to insecure configurations (CVE-2026-59084) - Resolves: RHEL-238189 tomcat: Information disclosure due to HTTP Authentication Header exposure during WebSocket authentication (CVE-2026-42498) - Resolves: RHEL-238247 tomcat: Improper Handling of Case Sensitivity in LockOutRealm (CVE-2026-43513) - Resolves: RHEL-238277 tomcat: Improper Authorization allows security bypass (CVE-2026-43515) - Resolves: RHEL-238302 tomcat: Authentication bypass via digest authentication (CVE-2026-43512) - Related: RHEL-183992 Remove tomcat clustering JAR from RPM builds - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124516 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132561 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102201 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108489 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108497 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108505 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108513 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108529 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108523 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-91763 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-71985 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-82945 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-71723 tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) - Resolves: RHEL-46163 tomcat: Improper Handling of Exceptional Conditions (CVE-2024-34750) - Resolves: RHEL-18245 - OpenJDK 21 support for RHEL Tomcat - Resolves: RHEL-168081 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-154364 Tomcat fails to respond to client connections when using Java 8 - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124516 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132561 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102201 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108489 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108497 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108505 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108513 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108529 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108523 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-91763 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-71985 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-82945 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-71723 tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) - Resolves: RHEL-46163 tomcat: Improper Handling of Exceptional Conditions (CVE-2024-34750) - Resolves: RHEL-18245 - OpenJDK 21 support for RHEL Tomcat - Resolves: RHEL-35812 - Rebase tomcat to version 9.0.87 - Resolves: RHEL-29257 tomcat: Apache Tomcat: WebSocket DoS with incomplete closing handshake (CVE-2024-23672) - Resolves: RHEL-29252 tomcat: : Apache Tomcat: HTTP/2 header handling DoS (CVE-2024-24549) - Resolves: RHEL-53001 - Amend tomcat's changelog (CVE-2023-46589, CVE-2023-45648, CVE-2023-42795, CVE-2023-42794, CVE-2023-44487, CVE-2023-41080) - Resolves: RHEL-150714 Certificate revocation bypass due to improper OCSP response validation - Resolves: Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled (CVE-2026-34500) - Resolves: Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token (CVE-2026-34487) - Resolves: Tomcat: The fix for CVE-2026-29146 allowed the bypass of the EncryptInterceptor (CVE-2026-34486) - Resolves: Tomcat: Incomplete escaping of JSON access logs (CVE-2026-34483) - Resolves: Tomcat: The fix for CVE-2025-66614 was incomplete (CVE-2026-32990) - Resolves: Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default (CVE-2026-29146) - Resolves: Tomcat: OCSP checks sometimes soft-fail even when soft-fail is disabled (CVE-2026-29145) - Resolves: Tomcat: Configured TLS cipher preference order not preserved (CVE-2026-29129) - Resolves: Tomcat: Occasionally open redirect (CVE-2026-25854) - Resolves: Tomcat: Request smuggling via invalid chunk extension (CVE-2026-24880) - Resolves: Tomcat: Incomplete OCSP verification checks (CVE-2026-24734) - Resolves: Tomcat: Security constraint bypass (CVE-2026-24733) - Resolves: Tomcat: Client certificate verification bypass due to virtual host mapping (CVE-2025-66614) - Resolves: RHEL-168081 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-154364 Tomcat fails to respond to client connections when using Java 8 - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124516 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132561 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102201 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108489 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108497 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108505 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108513 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108529 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108523 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-91763 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-71985 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-82945 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-71723 tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) - Resolves: RHEL-46163 tomcat: Improper Handling of Exceptional Conditions (CVE-2024-34750) - Resolves: RHEL-18245 - OpenJDK 21 support for RHEL Tomcat - Resolves: RHEL-183992 Remove tomcat clustering JAR from RPM builds - Exclude i686 architecture from build - Resolves: RHEL-150714 Certificate revocation bypass due to improper OCSP response validation - Resolves: Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled (CVE-2026-34500) - Resolves: Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token (CVE-2026-34487) - Resolves: Tomcat: The fix for CVE-2026-29146 allowed the bypass of the EncryptInterceptor (CVE-2026-34486) - Resolves: Tomcat: Incomplete escaping of JSON access logs (CVE-2026-34483) - Resolves: Tomcat: The fix for CVE-2025-66614 was incomplete (CVE-2026-32990) - Resolves: Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default (CVE-2026-29146) - Resolves: Tomcat: OCSP checks sometimes soft-fail even when soft-fail is disabled (CVE-2026-29145) - Resolves: Tomcat: Configured TLS cipher preference order not preserved (CVE-2026-29129) - Resolves: Tomcat: Occasionally open redirect (CVE-2026-25854) - Resolves: Tomcat: Request smuggling via invalid chunk extension (CVE-2026-24880) - Resolves: Tomcat: Incomplete OCSP verification checks (CVE-2026-24734) - Resolves: Tomcat: Security constraint bypass (CVE-2026-24733) - Resolves: Tomcat: Client certificate verification bypass due to virtual host mapping (CVE-2025-66614) - Resolves: RHEL-168081 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-154364 Tomcat fails to respond to client connections when using Java 8 - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124516 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132561 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102201 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108489 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108497 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108505 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108513 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108529 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108523 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-91763 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-71985 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-82945 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-71723 tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) - Resolves: RHEL-192825 HTTP/2 request headers not validated (CVE-2026-41293) - Resolves: RHEL-192659 Improper Input Validation vulnerability due to incomplete fix (CVE-2026-32990) - Resolves: RHEL-219565 Security constraint bypass via improper URL encoding in rewrite valve (CVE-2026-59083) - Resolves: RHEL-219573 Insufficient documentation for EncryptInterceptor may lead to insecure configurations (CVE-2026-59084) - Resolves: RHEL-238189 tomcat: Information disclosure due to HTTP Authentication Header exposure during WebSocket authentication (CVE-2026-42498) - Resolves: RHEL-238247 tomcat: Improper Handling of Case Sensitivity in LockOutRealm (CVE-2026-43513) - Resolves: RHEL-238277 tomcat: Improper Authorization allows security bypass (CVE-2026-43515) - Resolves: RHEL-238302 tomcat: Authentication bypass via digest authentication (CVE-2026-43512) - Related: RHEL-183992 Remove tomcat clustering JAR from RPM builds - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124516 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132561 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102201 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108489 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108497 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108505 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108513 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108529 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108523 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-91763 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-71985 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-82945 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-71723 tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) - Resolves: RHEL-46163 tomcat: Improper Handling of Exceptional Conditions (CVE-2024-34750) - Resolves: RHEL-18245 - OpenJDK 21 support for RHEL Tomcat - Resolves: RHEL-168081 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-154364 Tomcat fails to respond to client connections when using Java 8 - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124516 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132561 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102201 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108489 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108497 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108505 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108513 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108529 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108523 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-91763 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-71985 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-82945 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-71723 tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) - Resolves: RHEL-46163 tomcat: Improper Handling of Exceptional Conditions (CVE-2024-34750) - Resolves: RHEL-18245 - OpenJDK 21 support for RHEL Tomcat - Resolves: RHEL-35812 - Rebase tomcat to version 9.0.87 - Resolves: RHEL-29257 tomcat: Apache Tomcat: WebSocket DoS with incomplete closing handshake (CVE-2024-23672) - Resolves: RHEL-29252 tomcat: : Apache Tomcat: HTTP/2 header handling DoS (CVE-2024-24549) - Resolves: RHEL-53001 - Amend tomcat's changelog (CVE-2023-46589, CVE-2023-45648, CVE-2023-42795, CVE-2023-42794, CVE-2023-44487, CVE-2023-41080) - Resolves: RHEL-150714 Certificate revocation bypass due to improper OCSP response validation - Resolves: Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled (CVE-2026-34500) - Resolves: Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token (CVE-2026-34487) - Resolves: Tomcat: The fix for CVE-2026-29146 allowed the bypass of the EncryptInterceptor (CVE-2026-34486) - Resolves: Tomcat: Incomplete escaping of JSON access logs (CVE-2026-34483) - Resolves: Tomcat: The fix for CVE-2025-66614 was incomplete (CVE-2026-32990) - Resolves: Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default (CVE-2026-29146) - Resolves: Tomcat: OCSP checks sometimes soft-fail even when soft-fail is disabled (CVE-2026-29145) - Resolves: Tomcat: Configured TLS cipher preference order not preserved (CVE-2026-29129) - Resolves: Tomcat: Occasionally open redirect (CVE-2026-25854) - Resolves: Tomcat: Request smuggling via invalid chunk extension (CVE-2026-24880) - Resolves: Tomcat: Incomplete OCSP verification checks (CVE-2026-24734) - Resolves: Tomcat: Security constraint bypass (CVE-2026-24733) - Resolves: Tomcat: Client certificate verification bypass due to virtual host mapping (CVE-2025-66614) - Resolves: RHEL-168081 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-154364 Tomcat fails to respond to client connections when using Java 8 - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124516 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132561 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102201 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108489 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108497 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108505 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108513 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108529 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108523 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-91763 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-71985 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-82945 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-71723 tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) - Resolves: RHEL-46163 tomcat: Improper Handling of Exceptional Conditions (CVE-2024-34750) - Resolves: RHEL-18245 - OpenJDK 21 support for RHEL Tomcat - Resolves: RHEL-183992 Remove tomcat clustering JAR from RPM builds - Exclude i686 architecture from build - Resolves: RHEL-150714 Certificate revocation bypass due to improper OCSP response validation - Resolves: Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled (CVE-2026-34500) - Resolves: Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token (CVE-2026-34487) - Resolves: Tomcat: The fix for CVE-2026-29146 allowed the bypass of the EncryptInterceptor (CVE-2026-34486) - Resolves: Tomcat: Incomplete escaping of JSON access logs (CVE-2026-34483) - Resolves: Tomcat: The fix for CVE-2025-66614 was incomplete (CVE-2026-32990) - Resolves: Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default (CVE-2026-29146) - Resolves: Tomcat: OCSP checks sometimes soft-fail even when soft-fail is disabled (CVE-2026-29145) - Resolves: Tomcat: Configured TLS cipher preference order not preserved (CVE-2026-29129) - Resolves: Tomcat: Occasionally open redirect (CVE-2026-25854) - Resolves: Tomcat: Request smuggling via invalid chunk extension (CVE-2026-24880) - Resolves: Tomcat: Incomplete OCSP verification checks (CVE-2026-24734) - Resolves: Tomcat: Security constraint bypass (CVE-2026-24733) - Resolves: Tomcat: Client certificate verification bypass due to virtual host mapping (CVE-2025-66614) - Resolves: RHEL-168081 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-154364 Tomcat fails to respond to client connections when using Java 8 - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124516 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132561 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102201 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108489 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108497 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108505 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108513 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108529 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108523 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-91763 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-71985 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-82945 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-71723 tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) - Resolves: RHEL-192825 HTTP/2 request headers not validated (CVE-2026-41293) - Resolves: RHEL-192659 Improper Input Validation vulnerability due to incomplete fix (CVE-2026-32990) - Resolves: RHEL-219565 Security constraint bypass via improper URL encoding in rewrite valve (CVE-2026-59083) - Resolves: RHEL-219573 Insufficient documentation for EncryptInterceptor may lead to insecure configurations (CVE-2026-59084) - Resolves: RHEL-238189 tomcat: Information disclosure due to HTTP Authentication Header exposure during WebSocket authentication (CVE-2026-42498) - Resolves: RHEL-238247 tomcat: Improper Handling of Case Sensitivity in LockOutRealm (CVE-2026-43513) - Resolves: RHEL-238277 tomcat: Improper Authorization allows security bypass (CVE-2026-43515) - Resolves: RHEL-238302 tomcat: Authentication bypass via digest authentication (CVE-2026-43512) - Related: RHEL-183992 Remove tomcat clustering JAR from RPM builds - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124516 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132561 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102201 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108489 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108497 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108505 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108513 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108529 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108523 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-91763 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-71985 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-82945 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-71723 tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) - Resolves: RHEL-46163 tomcat: Improper Handling of Exceptional Conditions (CVE-2024-34750) - Resolves: RHEL-18245 - OpenJDK 21 support for RHEL Tomcat - Resolves: RHEL-168081 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-154364 Tomcat fails to respond to client connections when using Java 8 - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124516 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132561 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102201 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108489 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108497 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108505 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108513 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108529 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108523 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-91763 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-71985 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-82945 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-71723 tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) - Resolves: RHEL-46163 tomcat: Improper Handling of Exceptional Conditions (CVE-2024-34750) - Resolves: RHEL-18245 - OpenJDK 21 support for RHEL Tomcat - Resolves: RHEL-35812 - Rebase tomcat to version 9.0.87 - Resolves: RHEL-29257 tomcat: Apache Tomcat: WebSocket DoS with incomplete closing handshake (CVE-2024-23672) - Resolves: RHEL-29252 tomcat: : Apache Tomcat: HTTP/2 header handling DoS (CVE-2024-24549) - Resolves: RHEL-53001 - Amend tomcat's changelog (CVE-2023-46589, CVE-2023-45648, CVE-2023-42795, CVE-2023-42794, CVE-2023-44487, CVE-2023-41080) - Resolves: RHEL-150714 Certificate revocation bypass due to improper OCSP response validation - Resolves: Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled (CVE-2026-34500) - Resolves: Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token (CVE-2026-34487) - Resolves: Tomcat: The fix for CVE-2026-29146 allowed the bypass of the EncryptInterceptor (CVE-2026-34486) - Resolves: Tomcat: Incomplete escaping of JSON access logs (CVE-2026-34483) - Resolves: Tomcat: The fix for CVE-2025-66614 was incomplete (CVE-2026-32990) - Resolves: Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default (CVE-2026-29146) - Resolves: Tomcat: OCSP checks sometimes soft-fail even when soft-fail is disabled (CVE-2026-29145) - Resolves: Tomcat: Configured TLS cipher preference order not preserved (CVE-2026-29129) - Resolves: Tomcat: Occasionally open redirect (CVE-2026-25854) - Resolves: Tomcat: Request smuggling via invalid chunk extension (CVE-2026-24880) - Resolves: Tomcat: Incomplete OCSP verification checks (CVE-2026-24734) - Resolves: Tomcat: Security constraint bypass (CVE-2026-24733) - Resolves: Tomcat: Client certificate verification bypass due to virtual host mapping (CVE-2025-66614) - Resolves: RHEL-168081 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-154364 Tomcat fails to respond to client connections when using Java 8 - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124516 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132561 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102201 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108489 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108497 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108505 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108513 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108529 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108523 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-91763 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-71985 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-82945 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-71723 tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) - Resolves: RHEL-46163 tomcat: Improper Handling of Exceptional Conditions (CVE-2024-34750) - Resolves: RHEL-18245 - OpenJDK 21 support for RHEL Tomcat - Resolves: RHEL-183992 Remove tomcat clustering JAR from RPM builds - Exclude i686 architecture from build - Resolves: RHEL-150714 Certificate revocation bypass due to improper OCSP response validation - Resolves: Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled (CVE-2026-34500) - Resolves: Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token (CVE-2026-34487) - Resolves: Tomcat: The fix for CVE-2026-29146 allowed the bypass of the EncryptInterceptor (CVE-2026-34486) - Resolves: Tomcat: Incomplete escaping of JSON access logs (CVE-2026-34483) - Resolves: Tomcat: The fix for CVE-2025-66614 was incomplete (CVE-2026-32990) - Resolves: Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default (CVE-2026-29146) - Resolves: Tomcat: OCSP checks sometimes soft-fail even when soft-fail is disabled (CVE-2026-29145) - Resolves: Tomcat: Configured TLS cipher preference order not preserved (CVE-2026-29129) - Resolves: Tomcat: Occasionally open redirect (CVE-2026-25854) - Resolves: Tomcat: Request smuggling via invalid chunk extension (CVE-2026-24880) - Resolves: Tomcat: Incomplete OCSP verification checks (CVE-2026-24734) - Resolves: Tomcat: Security constraint bypass (CVE-2026-24733) - Resolves: Tomcat: Client certificate verification bypass due to virtual host mapping (CVE-2025-66614) - Resolves: RHEL-168081 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-154364 Tomcat fails to respond to client connections when using Java 8 - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124516 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132561 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102201 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108489 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108497 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108505 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108513 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108529 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108523 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-91763 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-71985 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-82945 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-71723 tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) - Resolves: RHEL-192825 HTTP/2 request headers not validated (CVE-2026-41293) - Resolves: RHEL-192659 Improper Input Validation vulnerability due to incomplete fix (CVE-2026-32990) - Resolves: RHEL-219565 Security constraint bypass via improper URL encoding in rewrite valve (CVE-2026-59083) - Resolves: RHEL-219573 Insufficient documentation for EncryptInterceptor may lead to insecure configurations (CVE-2026-59084) - Resolves: RHEL-238189 tomcat: Information disclosure due to HTTP Authentication Header exposure during WebSocket authentication (CVE-2026-42498) - Resolves: RHEL-238247 tomcat: Improper Handling of Case Sensitivity in LockOutRealm (CVE-2026-43513) - Resolves: RHEL-238277 tomcat: Improper Authorization allows security bypass (CVE-2026-43515) - Resolves: RHEL-238302 tomcat: Authentication bypass via digest authentication (CVE-2026-43512) - Related: RHEL-183992 Remove tomcat clustering JAR from RPM builds - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124516 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132561 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102201 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108489 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108497 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108505 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108513 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108529 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108523 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-91763 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-71985 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-82945 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-71723 tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) - Resolves: RHEL-46163 tomcat: Improper Handling of Exceptional Conditions (CVE-2024-34750) - Resolves: RHEL-18245 - OpenJDK 21 support for RHEL Tomcat - Resolves: RHEL-168081 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-154364 Tomcat fails to respond to client connections when using Java 8 - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124516 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132561 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102201 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108489 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108497 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108505 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108513 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108529 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108523 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-91763 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-71985 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-82945 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-71723 tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) - Resolves: RHEL-46163 tomcat: Improper Handling of Exceptional Conditions (CVE-2024-34750) - Resolves: RHEL-18245 - OpenJDK 21 support for RHEL Tomcat - Resolves: RHEL-35812 - Rebase tomcat to version 9.0.87 - Resolves: RHEL-29257 tomcat: Apache Tomcat: WebSocket DoS with incomplete closing handshake (CVE-2024-23672) - Resolves: RHEL-29252 tomcat: : Apache Tomcat: HTTP/2 header handling DoS (CVE-2024-24549) - Resolves: RHEL-53001 - Amend tomcat's changelog (CVE-2023-46589, CVE-2023-45648, CVE-2023-42795, CVE-2023-42794, CVE-2023-44487, CVE-2023-41080) - Resolves: RHEL-150714 Certificate revocation bypass due to improper OCSP response validation - Resolves: Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled (CVE-2026-34500) - Resolves: Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token (CVE-2026-34487) - Resolves: Tomcat: The fix for CVE-2026-29146 allowed the bypass of the EncryptInterceptor (CVE-2026-34486) - Resolves: Tomcat: Incomplete escaping of JSON access logs (CVE-2026-34483) - Resolves: Tomcat: The fix for CVE-2025-66614 was incomplete (CVE-2026-32990) - Resolves: Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default (CVE-2026-29146) - Resolves: Tomcat: OCSP checks sometimes soft-fail even when soft-fail is disabled (CVE-2026-29145) - Resolves: Tomcat: Configured TLS cipher preference order not preserved (CVE-2026-29129) - Resolves: Tomcat: Occasionally open redirect (CVE-2026-25854) - Resolves: Tomcat: Request smuggling via invalid chunk extension (CVE-2026-24880) - Resolves: Tomcat: Incomplete OCSP verification checks (CVE-2026-24734) - Resolves: Tomcat: Security constraint bypass (CVE-2026-24733) - Resolves: Tomcat: Client certificate verification bypass due to virtual host mapping (CVE-2025-66614) - Resolves: RHEL-168081 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-154364 Tomcat fails to respond to client connections when using Java 8 - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124516 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132561 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102201 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108489 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108497 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108505 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108513 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108529 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108523 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-91763 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-71985 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-82945 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-71723 tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) - Resolves: RHEL-46163 tomcat: Improper Handling of Exceptional Conditions (CVE-2024-34750) - Resolves: RHEL-18245 - OpenJDK 21 support for RHEL Tomcat - Resolves: RHEL-183992 Remove tomcat clustering JAR from RPM builds - Exclude i686 architecture from build - Resolves: RHEL-150714 Certificate revocation bypass due to improper OCSP response validation - Resolves: Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled (CVE-2026-34500) - Resolves: Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token (CVE-2026-34487) - Resolves: Tomcat: The fix for CVE-2026-29146 allowed the bypass of the EncryptInterceptor (CVE-2026-34486) - Resolves: Tomcat: Incomplete escaping of JSON access logs (CVE-2026-34483) - Resolves: Tomcat: The fix for CVE-2025-66614 was incomplete (CVE-2026-32990) - Resolves: Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default (CVE-2026-29146) - Resolves: Tomcat: OCSP checks sometimes soft-fail even when soft-fail is disabled (CVE-2026-29145) - Resolves: Tomcat: Configured TLS cipher preference order not preserved (CVE-2026-29129) - Resolves: Tomcat: Occasionally open redirect (CVE-2026-25854) - Resolves: Tomcat: Request smuggling via invalid chunk extension (CVE-2026-24880) - Resolves: Tomcat: Incomplete OCSP verification checks (CVE-2026-24734) - Resolves: Tomcat: Security constraint bypass (CVE-2026-24733) - Resolves: Tomcat: Client certificate verification bypass due to virtual host mapping (CVE-2025-66614) - Resolves: RHEL-168081 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-154364 Tomcat fails to respond to client connections when using Java 8 - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124516 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132561 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102201 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108489 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108497 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108505 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108513 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108529 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108523 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-91763 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-71985 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-82945 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-71723 tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) - Resolves: RHEL-192825 HTTP/2 request headers not validated (CVE-2026-41293) - Resolves: RHEL-192659 Improper Input Validation vulnerability due to incomplete fix (CVE-2026-32990) - Resolves: RHEL-219565 Security constraint bypass via improper URL encoding in rewrite valve (CVE-2026-59083) - Resolves: RHEL-219573 Insufficient documentation for EncryptInterceptor may lead to insecure configurations (CVE-2026-59084) - Resolves: RHEL-238189 tomcat: Information disclosure due to HTTP Authentication Header exposure during WebSocket authentication (CVE-2026-42498) - Resolves: RHEL-238247 tomcat: Improper Handling of Case Sensitivity in LockOutRealm (CVE-2026-43513) - Resolves: RHEL-238277 tomcat: Improper Authorization allows security bypass (CVE-2026-43515) - Resolves: RHEL-238302 tomcat: Authentication bypass via digest authentication (CVE-2026-43512) - Related: RHEL-183992 Remove tomcat clustering JAR from RPM builds - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124516 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132561 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102201 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108489 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108497 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108505 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108513 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108529 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108523 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-91763 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-71985 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-82945 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-71723 tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) - Resolves: RHEL-46163 tomcat: Improper Handling of Exceptional Conditions (CVE-2024-34750) - Resolves: RHEL-18245 - OpenJDK 21 support for RHEL Tomcat - Resolves: RHEL-168081 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-154364 Tomcat fails to respond to client connections when using Java 8 - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124516 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132561 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102201 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108489 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108497 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108505 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108513 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108529 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108523 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-91763 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-71985 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-82945 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-71723 tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) - Resolves: RHEL-46163 tomcat: Improper Handling of Exceptional Conditions (CVE-2024-34750) - Resolves: RHEL-18245 - OpenJDK 21 support for RHEL Tomcat - Resolves: RHEL-35812 - Rebase tomcat to version 9.0.87 - Resolves: RHEL-29257 tomcat: Apache Tomcat: WebSocket DoS with incomplete closing handshake (CVE-2024-23672) - Resolves: RHEL-29252 tomcat: : Apache Tomcat: HTTP/2 header handling DoS (CVE-2024-24549) - Resolves: RHEL-53001 - Amend tomcat's changelog (CVE-2023-46589, CVE-2023-45648, CVE-2023-42795, CVE-2023-42794, CVE-2023-44487, CVE-2023-41080) - Resolves: RHEL-150714 Certificate revocation bypass due to improper OCSP response validation - Resolves: Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled (CVE-2026-34500) - Resolves: Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token (CVE-2026-34487) - Resolves: Tomcat: The fix for CVE-2026-29146 allowed the bypass of the EncryptInterceptor (CVE-2026-34486) - Resolves: Tomcat: Incomplete escaping of JSON access logs (CVE-2026-34483) - Resolves: Tomcat: The fix for CVE-2025-66614 was incomplete (CVE-2026-32990) - Resolves: Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default (CVE-2026-29146) - Resolves: Tomcat: OCSP checks sometimes soft-fail even when soft-fail is disabled (CVE-2026-29145) - Resolves: Tomcat: Configured TLS cipher preference order not preserved (CVE-2026-29129) - Resolves: Tomcat: Occasionally open redirect (CVE-2026-25854) - Resolves: Tomcat: Request smuggling via invalid chunk extension (CVE-2026-24880) - Resolves: Tomcat: Incomplete OCSP verification checks (CVE-2026-24734) - Resolves: Tomcat: Security constraint bypass (CVE-2026-24733) - Resolves: Tomcat: Client certificate verification bypass due to virtual host mapping (CVE-2025-66614) - Resolves: RHEL-168081 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-154364 Tomcat fails to respond to client connections when using Java 8 - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124516 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132561 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102201 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108489 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108497 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108505 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108513 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108529 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108523 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-91763 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-71985 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-82945 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-71723 tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) - Resolves: RHEL-46163 tomcat: Improper Handling of Exceptional Conditions (CVE-2024-34750) - Resolves: RHEL-18245 - OpenJDK 21 support for RHEL Tomcat - Resolves: RHEL-183992 Remove tomcat clustering JAR from RPM builds - Exclude i686 architecture from build - Resolves: RHEL-150714 Certificate revocation bypass due to improper OCSP response validation - Resolves: Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled (CVE-2026-34500) - Resolves: Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token (CVE-2026-34487) - Resolves: Tomcat: The fix for CVE-2026-29146 allowed the bypass of the EncryptInterceptor (CVE-2026-34486) - Resolves: Tomcat: Incomplete escaping of JSON access logs (CVE-2026-34483) - Resolves: Tomcat: The fix for CVE-2025-66614 was incomplete (CVE-2026-32990) - Resolves: Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default (CVE-2026-29146) - Resolves: Tomcat: OCSP checks sometimes soft-fail even when soft-fail is disabled (CVE-2026-29145) - Resolves: Tomcat: Configured TLS cipher preference order not preserved (CVE-2026-29129) - Resolves: Tomcat: Occasionally open redirect (CVE-2026-25854) - Resolves: Tomcat: Request smuggling via invalid chunk extension (CVE-2026-24880) - Resolves: Tomcat: Incomplete OCSP verification checks (CVE-2026-24734) - Resolves: Tomcat: Security constraint bypass (CVE-2026-24733) - Resolves: Tomcat: Client certificate verification bypass due to virtual host mapping (CVE-2025-66614) - Resolves: RHEL-168081 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-154364 Tomcat fails to respond to client connections when using Java 8 - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124516 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132561 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102201 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108489 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108497 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108505 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108513 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108529 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108523 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-91763 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-71985 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-82945 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-71723 tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) - Resolves: RHEL-192825 HTTP/2 request headers not validated (CVE-2026-41293) - Resolves: RHEL-192659 Improper Input Validation vulnerability due to incomplete fix (CVE-2026-32990) - Resolves: RHEL-219565 Security constraint bypass via improper URL encoding in rewrite valve (CVE-2026-59083) - Resolves: RHEL-219573 Insufficient documentation for EncryptInterceptor may lead to insecure configurations (CVE-2026-59084) - Resolves: RHEL-238189 tomcat: Information disclosure due to HTTP Authentication Header exposure during WebSocket authentication (CVE-2026-42498) - Resolves: RHEL-238247 tomcat: Improper Handling of Case Sensitivity in LockOutRealm (CVE-2026-43513) - Resolves: RHEL-238277 tomcat: Improper Authorization allows security bypass (CVE-2026-43515) - Resolves: RHEL-238302 tomcat: Authentication bypass via digest authentication (CVE-2026-43512) - Related: RHEL-183992 Remove tomcat clustering JAR from RPM builds - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124516 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132561 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102201 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108489 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108497 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108505 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108513 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108529 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108523 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-91763 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-71985 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-82945 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-71723 tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) - Resolves: RHEL-46163 tomcat: Improper Handling of Exceptional Conditions (CVE-2024-34750) - Resolves: RHEL-18245 - OpenJDK 21 support for RHEL Tomcat - Resolves: RHEL-168081 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-154364 Tomcat fails to respond to client connections when using Java 8 - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124516 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132561 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102201 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108489 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108497 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108505 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108513 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108529 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108523 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-91763 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-71985 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-82945 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-71723 tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) - Resolves: RHEL-46163 tomcat: Improper Handling of Exceptional Conditions (CVE-2024-34750) - Resolves: RHEL-18245 - OpenJDK 21 support for RHEL Tomcat - Resolves: RHEL-35812 - Rebase tomcat to version 9.0.87 - Resolves: RHEL-29257 tomcat: Apache Tomcat: WebSocket DoS with incomplete closing handshake (CVE-2024-23672) - Resolves: RHEL-29252 tomcat: : Apache Tomcat: HTTP/2 header handling DoS (CVE-2024-24549) - Resolves: RHEL-53001 - Amend tomcat's changelog (CVE-2023-46589, CVE-2023-45648, CVE-2023-42795, CVE-2023-42794, CVE-2023-44487, CVE-2023-41080) - Resolves: RHEL-150714 Certificate revocation bypass due to improper OCSP response validation - Resolves: Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled (CVE-2026-34500) - Resolves: Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token (CVE-2026-34487) - Resolves: Tomcat: The fix for CVE-2026-29146 allowed the bypass of the EncryptInterceptor (CVE-2026-34486) - Resolves: Tomcat: Incomplete escaping of JSON access logs (CVE-2026-34483) - Resolves: Tomcat: The fix for CVE-2025-66614 was incomplete (CVE-2026-32990) - Resolves: Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default (CVE-2026-29146) - Resolves: Tomcat: OCSP checks sometimes soft-fail even when soft-fail is disabled (CVE-2026-29145) - Resolves: Tomcat: Configured TLS cipher preference order not preserved (CVE-2026-29129) - Resolves: Tomcat: Occasionally open redirect (CVE-2026-25854) - Resolves: Tomcat: Request smuggling via invalid chunk extension (CVE-2026-24880) - Resolves: Tomcat: Incomplete OCSP verification checks (CVE-2026-24734) - Resolves: Tomcat: Security constraint bypass (CVE-2026-24733) - Resolves: Tomcat: Client certificate verification bypass due to virtual host mapping (CVE-2025-66614) - Resolves: RHEL-168081 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-154364 Tomcat fails to respond to client connections when using Java 8 - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124516 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132561 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102201 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108489 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108497 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108505 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108513 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108529 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108523 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-91763 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-71985 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-82945 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-71723 tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) - Resolves: RHEL-46163 tomcat: Improper Handling of Exceptional Conditions (CVE-2024-34750) - Resolves: RHEL-18245 - OpenJDK 21 support for RHEL Tomcat - Resolves: RHEL-183992 Remove tomcat clustering JAR from RPM builds - Exclude i686 architecture from build - Resolves: RHEL-150714 Certificate revocation bypass due to improper OCSP response validation - Resolves: Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled (CVE-2026-34500) - Resolves: Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token (CVE-2026-34487) - Resolves: Tomcat: The fix for CVE-2026-29146 allowed the bypass of the EncryptInterceptor (CVE-2026-34486) - Resolves: Tomcat: Incomplete escaping of JSON access logs (CVE-2026-34483) - Resolves: Tomcat: The fix for CVE-2025-66614 was incomplete (CVE-2026-32990) - Resolves: Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default (CVE-2026-29146) - Resolves: Tomcat: OCSP checks sometimes soft-fail even when soft-fail is disabled (CVE-2026-29145) - Resolves: Tomcat: Configured TLS cipher preference order not preserved (CVE-2026-29129) - Resolves: Tomcat: Occasionally open redirect (CVE-2026-25854) - Resolves: Tomcat: Request smuggling via invalid chunk extension (CVE-2026-24880) - Resolves: Tomcat: Incomplete OCSP verification checks (CVE-2026-24734) - Resolves: Tomcat: Security constraint bypass (CVE-2026-24733) - Resolves: Tomcat: Client certificate verification bypass due to virtual host mapping (CVE-2025-66614) - Resolves: RHEL-168081 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-154364 Tomcat fails to respond to client connections when using Java 8 - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124516 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132561 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102201 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108489 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108497 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108505 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108513 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108529 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108523 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-91763 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-71985 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-82945 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-71723 tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) - Resolves: RHEL-192825 HTTP/2 request headers not validated (CVE-2026-41293) - Resolves: RHEL-192659 Improper Input Validation vulnerability due to incomplete fix (CVE-2026-32990) - Resolves: RHEL-219565 Security constraint bypass via improper URL encoding in rewrite valve (CVE-2026-59083) - Resolves: RHEL-219573 Insufficient documentation for EncryptInterceptor may lead to insecure configurations (CVE-2026-59084) - Resolves: RHEL-238189 tomcat: Information disclosure due to HTTP Authentication Header exposure during WebSocket authentication (CVE-2026-42498) - Resolves: RHEL-238247 tomcat: Improper Handling of Case Sensitivity in LockOutRealm (CVE-2026-43513) - Resolves: RHEL-238277 tomcat: Improper Authorization allows security bypass (CVE-2026-43515) - Resolves: RHEL-238302 tomcat: Authentication bypass via digest authentication (CVE-2026-43512) - Related: RHEL-183992 Remove tomcat clustering JAR from RPM builds - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124516 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132561 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102201 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108489 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108497 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108505 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108513 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108529 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108523 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-91763 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-71985 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-82945 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-71723 tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) - Resolves: RHEL-46163 tomcat: Improper Handling of Exceptional Conditions (CVE-2024-34750) - Resolves: RHEL-18245 - OpenJDK 21 support for RHEL Tomcat - Resolves: RHEL-168081 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-154364 Tomcat fails to respond to client connections when using Java 8 - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124516 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132561 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102201 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108489 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108497 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108505 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108513 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108529 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108523 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-91763 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-71985 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-82945 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-71723 tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) - Resolves: RHEL-46163 tomcat: Improper Handling of Exceptional Conditions (CVE-2024-34750) - Resolves: RHEL-18245 - OpenJDK 21 support for RHEL Tomcat - Resolves: RHEL-35812 - Rebase tomcat to version 9.0.87 - Resolves: RHEL-29257 tomcat: Apache Tomcat: WebSocket DoS with incomplete closing handshake (CVE-2024-23672) - Resolves: RHEL-29252 tomcat: : Apache Tomcat: HTTP/2 header handling DoS (CVE-2024-24549) - Resolves: RHEL-53001 - Amend tomcat's changelog (CVE-2023-46589, CVE-2023-45648, CVE-2023-42795, CVE-2023-42794, CVE-2023-44487, CVE-2023-41080) - Resolves: RHEL-150714 Certificate revocation bypass due to improper OCSP response validation - Resolves: Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled (CVE-2026-34500) - Resolves: Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token (CVE-2026-34487) - Resolves: Tomcat: The fix for CVE-2026-29146 allowed the bypass of the EncryptInterceptor (CVE-2026-34486) - Resolves: Tomcat: Incomplete escaping of JSON access logs (CVE-2026-34483) - Resolves: Tomcat: The fix for CVE-2025-66614 was incomplete (CVE-2026-32990) - Resolves: Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default (CVE-2026-29146) - Resolves: Tomcat: OCSP checks sometimes soft-fail even when soft-fail is disabled (CVE-2026-29145) - Resolves: Tomcat: Configured TLS cipher preference order not preserved (CVE-2026-29129) - Resolves: Tomcat: Occasionally open redirect (CVE-2026-25854) - Resolves: Tomcat: Request smuggling via invalid chunk extension (CVE-2026-24880) - Resolves: Tomcat: Incomplete OCSP verification checks (CVE-2026-24734) - Resolves: Tomcat: Security constraint bypass (CVE-2026-24733) - Resolves: Tomcat: Client certificate verification bypass due to virtual host mapping (CVE-2025-66614) - Resolves: RHEL-168081 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-154364 Tomcat fails to respond to client connections when using Java 8 - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124516 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132561 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102201 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108489 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108497 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108505 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108513 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108529 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108523 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-91763 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-71985 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-82945 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-71723 tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) - Resolves: RHEL-46163 tomcat: Improper Handling of Exceptional Conditions (CVE-2024-34750) - Resolves: RHEL-18245 - OpenJDK 21 support for RHEL Tomcat - Resolves: RHEL-183992 Remove tomcat clustering JAR from RPM builds - Exclude i686 architecture from build - Resolves: RHEL-150714 Certificate revocation bypass due to improper OCSP response validation - Resolves: Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled (CVE-2026-34500) - Resolves: Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token (CVE-2026-34487) - Resolves: Tomcat: The fix for CVE-2026-29146 allowed the bypass of the EncryptInterceptor (CVE-2026-34486) - Resolves: Tomcat: Incomplete escaping of JSON access logs (CVE-2026-34483) - Resolves: Tomcat: The fix for CVE-2025-66614 was incomplete (CVE-2026-32990) - Resolves: Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default (CVE-2026-29146) - Resolves: Tomcat: OCSP checks sometimes soft-fail even when soft-fail is disabled (CVE-2026-29145) - Resolves: Tomcat: Configured TLS cipher preference order not preserved (CVE-2026-29129) - Resolves: Tomcat: Occasionally open redirect (CVE-2026-25854) - Resolves: Tomcat: Request smuggling via invalid chunk extension (CVE-2026-24880) - Resolves: Tomcat: Incomplete OCSP verification checks (CVE-2026-24734) - Resolves: Tomcat: Security constraint bypass (CVE-2026-24733) - Resolves: Tomcat: Client certificate verification bypass due to virtual host mapping (CVE-2025-66614) - Resolves: RHEL-168081 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-154364 Tomcat fails to respond to client connections when using Java 8 - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124516 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132561 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102201 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108489 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108497 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108505 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108513 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108529 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108523 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-91763 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-71985 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-82945 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-71723 tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) - Resolves: RHEL-192825 HTTP/2 request headers not validated (CVE-2026-41293) - Resolves: RHEL-192659 Improper Input Validation vulnerability due to incomplete fix (CVE-2026-32990) - Resolves: RHEL-219565 Security constraint bypass via improper URL encoding in rewrite valve (CVE-2026-59083) - Resolves: RHEL-219573 Insufficient documentation for EncryptInterceptor may lead to insecure configurations (CVE-2026-59084) - Resolves: RHEL-238189 tomcat: Information disclosure due to HTTP Authentication Header exposure during WebSocket authentication (CVE-2026-42498) - Resolves: RHEL-238247 tomcat: Improper Handling of Case Sensitivity in LockOutRealm (CVE-2026-43513) - Resolves: RHEL-238277 tomcat: Improper Authorization allows security bypass (CVE-2026-43515) - Resolves: RHEL-238302 tomcat: Authentication bypass via digest authentication (CVE-2026-43512) - Related: RHEL-183992 Remove tomcat clustering JAR from RPM builds - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-124516 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132561 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-102201 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-108489 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108497 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108505 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108513 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108529 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108523 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-91763 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-71985 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-82945 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-71723 tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) - Resolves: RHEL-46163 tomcat: Improper Handling of Exceptional Conditions (CVE-2024-34750) - Resolves: RHEL-18245 - OpenJDK 21 support for RHEL Tomcat - Fall back to 'getent passwd' when SHELL is unset Resolves: RHEL-152801 - Update to 0.3 Resolves: RHEL-117475 - Update to 0.2 - Fix CVE-2025-23266, CVE-2025-23267, and GHSA-fv92-fjc5-jj9h or GO-2025-3787 Resolves: RHEL-104455 - Update to 0.1.2 Resolves: RHEL-95209 - Add 'Requires: flatpak-session-helper' Resolves: RHEL-97099 - Update to 0.1.1 Resolves: RHEL-61907 - Update to 0.0.99.6 Resolves: RHEL-61578 - Rebuild for CVE-2024-24791 Resolves: RHEL-47194 - Rebuild for CVE-2024-24788 Resolves: RHEL-35942 - Rebuild for CVE-2023-45290 and CVE-2024-24785 Resolves: RHEL-28393, RHEL-28485 - Fall back to 'getent passwd' when SHELL is unset Resolves: RHEL-152801 - Update to 0.3 Resolves: RHEL-117475 - Update to 0.2 - Fix CVE-2025-23266, CVE-2025-23267, and GHSA-fv92-fjc5-jj9h or GO-2025-3787 Resolves: RHEL-104455 - Update to 0.1.2 Resolves: RHEL-95209 - Add 'Requires: flatpak-session-helper' Resolves: RHEL-97099 - Update to 0.1.1 Resolves: RHEL-61907 - Update to 0.0.99.6 Resolves: RHEL-61578 - Rebuild for CVE-2024-24791 Resolves: RHEL-47194 - Rebuild for CVE-2024-24788 Resolves: RHEL-35942 - Rebuild for CVE-2023-45290 and CVE-2024-24785 Resolves: RHEL-28393, RHEL-28485 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 + totem-pl-parser-3.26.6-1 - Update to 3.26.6 - Resolves: rhbz#1976722 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild + totem-pl-parser-3.26.5-3 - Disable quvi, upstream is dead, and it doesn't compile with lua 5.4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild + totem-pl-parser-3.26.5-1 - Update to 3.26.5 + totem-pl-parser-3.26.4-3 - Disable quvi support on RHEL - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild + totem-pl-parser-3.26.4-1 - Update to 3.26.4 - Remove user-creation code that is already handled by a requirement. Resolves: RHEL-8814 - Include interface for Keylime Resolves: rhbz#2157894 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Fix dependency. Resolves: rhbz#1929701 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix product version for gating Resolves: rhbz#1972907 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Work around for openssl 3.0 update. Related: rhbz#1958030 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Unbreak the build on s390x (#1923383) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Avoid stringop-overflow diagnostic in testsuite - New upstream release - Fix two source over-reads detected by gcc-11 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix product version for gating Resolves: rhbz#1972907 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Work around for openssl 3.0 update. Related: rhbz#1958030 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Unbreak the build on s390x (#1923383) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Avoid stringop-overflow diagnostic in testsuite - New upstream release - Fix two source over-reads detected by gcc-11 - Fix endianity issues. Resolves: RHEL-79885 Resolves: RHEL-94933 Resolves: RHEL-113400 - Backport upstream fixes. Resolves: RHEL-72772 - Backport upstream bugfix for tpm2_eventlog Resolves: RHEL-83453 - Backport upstream fixes. - tpm2_checkquote: Fix check of magic number. (CVE-2024-29038) - tpm2_checkquote: Add comparison of pcr selection. (CVE-2024-29039) - Fix check of magic number. Resolves: RHEL-23198 Resolves: RHEL-41031 Resolves: RHEL-41035 - Rebuild with gating.yaml - Fix parameters for specifying the target user (frostyx@email.cz) - Resolves: RHEL-6988 - Fix querying RPM files on EPEL7 (frostyx@email.cz) - Use backported lru_cache on EPEL7 (frostyx@email.cz) - Don't hang forever when executed via SSH (frostyx@email.cz) - Don't check if package is installed before listing its files (frostyx@email.cz) - Replace regexes where they are not needed (frostyx@email.cz) - Query all packages at once, its faster than one by one (frostyx@email.cz) - Cache some properties for a massive performance boost (frostyx@email.cz) - Refactor unnecessary condition (frostyx@email.cz) - Fix weird indentation (frostyx@email.cz) - Pass the whole application to the provided_by function, not just its name (frostyx@email.cz) - Stop using deprecated rpm.fi (frostyx@email.cz) - Attempt to fix readthedocs deprecation error (frostyx@email.cz) - More reliable check if /usr/lib/sysimage/dnf/ database should be used (frostyx@email.cz) - Rather create a /run/reboot-required not /var/run/reboot-required (frostyx@email.cz) - Update license to SPDX (frostyx@email.cz) - Update tito releasers (frostyx@email.cz) - Create /var/run/reboot-required file (frostyx@email.cz) - Recommend the correct command for restarting auditd (frostyx@email.cz) - Add python3-setuptools dependency (frostyx@email.cz) - Fix argument passed to print_helper() (ferdnyc@gmail.com) - Add similar software to the readme (frostyx@email.cz) - Update url references to point to tracer.readthedocs.io (dcampano@gmail.com) - Oracle Linux 8 uses dnf, too (suttner@atix.de) - Drop python-setuptools runtime dependency (frostyx@email.cz) - Fix Python DeprecationWarning: invalid escape sequence (jvanderwaa@redhat.com) - Add readthedocs configuration file (frostyx@email.cz) - Backport module-based libsoup support Resolves: rhbz#2137366 - Ship tracker-devel in CRB - Update to 3.1.2 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 3.1.1 - Update to 3.1.0 - Obsolete libtracker-control and libtracker-miner - Add conflicts with tracker3 packages to help with the upgrade path - Update to 3.1.0.rc, based on earlier tracker3 packaging - Obsolete separate tracker3 packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Backport stricter seccomp jail Resolves: RHEL-12469 - Do not include RSS miner service on RHEL Resolves: rhbz#2041633 - Backport seccomp rules from recent releases Resolves: rhbz#2130143 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Pass -pie separately to %{make_build} - Pass --tag=CC to libtool invocations - Use make_build and make_install macros - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_why_the_makeinstall_macro_should_not_be_used - Avoid hardcoding /usr prefix - Use globs for man page compression - new release - rebased tuned to latest upstream related: RHEL-123607 - new release - rebased tuned to latest upstream resolves: RHEL-123607 - cpu-partitioning: autodetect dracut hook directory, systemd workaround - openshift: optimize TCP settings for high throughput and low latency - profiles: Set boost=1 in *-performance profiles - sap-hana: force latency to 70 us, not to C-states - man: fixed instance_acquire_devices example in tuned-adm man - spec: use correct python interpreter for documentation installation - sysctl: add reapply_sysctl_exclude option - ppd: ask tuned recommend for base profile - new release - rebased tuned to latest upstream related: RHEL-94808 - new release - rebased tuned to latest upstream resolves: RHEL-94808 - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor - tuned-ppd: enabled sysfs_acpi_monitor by default - tuned-ppd: fixed inotify watch for performance degradation - tuned-ppd: pinned virtual files in memory for inotify - fixed instance priority inheritance - hotplug: added fixes for device remove race condition - tuned-main.conf: added startup_udev_settle_wait option - functions: silenced errors if module kvm_intel does not exist resolves: RHEL-79943 - functions: make calc_isolated_cores return CPU ranges resolves: RHEL-75751 - scsi: used 'med_power_with_dipm' for SATA ALPM - scsi: do not set ALPM on external SATA ports - network_latency: Set non-zero rcutree.nohz_full_patience_delay - realtime: Disable appropriate P-State drivers resolves: RHEL-85637 - plugin_disk: added support for MMC (MultiMediaCard) devices - udev: fix possible traceback in device matcher - udev-settle: obey udev buffer size and handle possible tracebacks - daemon: re-raise daemon init exception in no-daemon mode resolves: RHEL-71304 - vm: deprecate dirty_ratio in favour of dirty_bytes with percents resolves: RHEL-101578 - gui: fix the profile deleter script - Fix handling of kernel arguments on bootc systems resolves: RHEL-45836 resolves: RHEL-86814 - new release - rebased tuned to latest upstream related: RHEL-70457 - plugins: added missing instance parameters - disk: added missing remove parameter - plugin_scheduler: added switch to disable processing of kthreads - Makefile: added support for installation to custom LIBEXECDIR - functions: create a new parser object for each string expansion resolves: RHEL-75773 - new release - rebased tuned to latest upstream related: RHEL-70457 - sap-hana: Set transparent_hugepages to madvise - plugin_bootloader: export Grub variables to make them available in submenus - utils.commands: fixed CPU online detection when not present - plugin_net: handled cqe-mode-rx ethtool option - profiles: correct CPU governor settings - new release - rebased tuned to latest upstream resolves: RHEL-70457 - tuned-ppd: removed the use of StrEnum - tuned-ppd: fixed traceback - tuned-ppd: multiple fixes and updates - docs: plugins docs are now automatically generated from the docstrings - plugin_cpu: fixed no_turbo boolean option parsing resolves: RHEL-51760 - plugin_cpu: allowed raw energy_performance_preference values - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters resolves: RHEL-58820 - plugin_bootloader: added variables to BLS entries only if grub is used - plugin_scheduler: do not assume that perf events have type attribute - plugin_scheduler: updated sched knobs for kernels 6.6+ - plugin_scheduler: log process info when its affinity cannot be changed - plugin_scheduler: postpone cgroup blacklist check, double-check after fail resolves: RHEL-72981 - plugin_scheduler: made perf support optional - plugin_net: added support for hotplug and rename resolves: RHEL-60906 - makefile: added support for installation to custom $BINDIR/$SBINDIR - functions: dropped cpuspeed support - Fixed privileged execution of arbitrary scripts by active local user, (CVE-2024-52336) Resolves: RHEL-66638 - Added sanity checks for API methods parameters, (CVE-2024-52337) Resolves: RHEL-66615 - new release - rebased tuned to latest upstream related: RHEL-50568 - clear plugin repository when stopping tuning - man: add description of the balanced-battery profile - net: added more coalescing options, filter out unsupported ones resolves: RHEL-181668 - new release - rebased tuned to latest upstream related: RHEL-123607 - new release - rebased tuned to latest upstream resolves: RHEL-123607 - cpu-partitioning: autodetect dracut hook directory, systemd workaround - openshift: optimize TCP settings for high throughput and low latency - profiles: Set boost=1 in *-performance profiles - sap-hana: force latency to 70 us, not to C-states - man: fixed instance_acquire_devices example in tuned-adm man - spec: use correct python interpreter for documentation installation - sysctl: add reapply_sysctl_exclude option - ppd: ask tuned recommend for base profile - new release - rebased tuned to latest upstream related: RHEL-94808 - new release - rebased tuned to latest upstream resolves: RHEL-94808 - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor - tuned-ppd: enabled sysfs_acpi_monitor by default - tuned-ppd: fixed inotify watch for performance degradation - tuned-ppd: pinned virtual files in memory for inotify - fixed instance priority inheritance - hotplug: added fixes for device remove race condition - tuned-main.conf: added startup_udev_settle_wait option - functions: silenced errors if module kvm_intel does not exist resolves: RHEL-79943 - functions: make calc_isolated_cores return CPU ranges resolves: RHEL-75751 - scsi: used 'med_power_with_dipm' for SATA ALPM - scsi: do not set ALPM on external SATA ports - network_latency: Set non-zero rcutree.nohz_full_patience_delay - realtime: Disable appropriate P-State drivers resolves: RHEL-85637 - plugin_disk: added support for MMC (MultiMediaCard) devices - udev: fix possible traceback in device matcher - udev-settle: obey udev buffer size and handle possible tracebacks - daemon: re-raise daemon init exception in no-daemon mode resolves: RHEL-71304 - vm: deprecate dirty_ratio in favour of dirty_bytes with percents resolves: RHEL-101578 - gui: fix the profile deleter script - Fix handling of kernel arguments on bootc systems resolves: RHEL-45836 resolves: RHEL-86814 - new release - rebased tuned to latest upstream related: RHEL-70457 - plugins: added missing instance parameters - disk: added missing remove parameter - plugin_scheduler: added switch to disable processing of kthreads - Makefile: added support for installation to custom LIBEXECDIR - functions: create a new parser object for each string expansion resolves: RHEL-75773 - new release - rebased tuned to latest upstream related: RHEL-70457 - sap-hana: Set transparent_hugepages to madvise - plugin_bootloader: export Grub variables to make them available in submenus - utils.commands: fixed CPU online detection when not present - plugin_net: handled cqe-mode-rx ethtool option - profiles: correct CPU governor settings - new release - rebased tuned to latest upstream resolves: RHEL-70457 - tuned-ppd: removed the use of StrEnum - tuned-ppd: fixed traceback - tuned-ppd: multiple fixes and updates - docs: plugins docs are now automatically generated from the docstrings - plugin_cpu: fixed no_turbo boolean option parsing resolves: RHEL-51760 - plugin_cpu: allowed raw energy_performance_preference values - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters resolves: RHEL-58820 - plugin_bootloader: added variables to BLS entries only if grub is used - plugin_scheduler: do not assume that perf events have type attribute - plugin_scheduler: updated sched knobs for kernels 6.6+ - plugin_scheduler: log process info when its affinity cannot be changed - plugin_scheduler: postpone cgroup blacklist check, double-check after fail resolves: RHEL-72981 - plugin_scheduler: made perf support optional - plugin_net: added support for hotplug and rename resolves: RHEL-60906 - makefile: added support for installation to custom $BINDIR/$SBINDIR - functions: dropped cpuspeed support - Fixed privileged execution of arbitrary scripts by active local user, (CVE-2024-52336) Resolves: RHEL-66638 - Added sanity checks for API methods parameters, (CVE-2024-52337) Resolves: RHEL-66615 - new release - rebased tuned to latest upstream related: RHEL-123607 - new release - rebased tuned to latest upstream resolves: RHEL-123607 - cpu-partitioning: autodetect dracut hook directory, systemd workaround - openshift: optimize TCP settings for high throughput and low latency - profiles: Set boost=1 in *-performance profiles - sap-hana: force latency to 70 us, not to C-states - man: fixed instance_acquire_devices example in tuned-adm man - spec: use correct python interpreter for documentation installation - sysctl: add reapply_sysctl_exclude option - ppd: ask tuned recommend for base profile - new release - rebased tuned to latest upstream related: RHEL-94808 - new release - rebased tuned to latest upstream resolves: RHEL-94808 - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor - tuned-ppd: enabled sysfs_acpi_monitor by default - tuned-ppd: fixed inotify watch for performance degradation - tuned-ppd: pinned virtual files in memory for inotify - fixed instance priority inheritance - hotplug: added fixes for device remove race condition - tuned-main.conf: added startup_udev_settle_wait option - functions: silenced errors if module kvm_intel does not exist resolves: RHEL-79943 - functions: make calc_isolated_cores return CPU ranges resolves: RHEL-75751 - scsi: used 'med_power_with_dipm' for SATA ALPM - scsi: do not set ALPM on external SATA ports - network_latency: Set non-zero rcutree.nohz_full_patience_delay - realtime: Disable appropriate P-State drivers resolves: RHEL-85637 - plugin_disk: added support for MMC (MultiMediaCard) devices - udev: fix possible traceback in device matcher - udev-settle: obey udev buffer size and handle possible tracebacks - daemon: re-raise daemon init exception in no-daemon mode resolves: RHEL-71304 - vm: deprecate dirty_ratio in favour of dirty_bytes with percents resolves: RHEL-101578 - gui: fix the profile deleter script - Fix handling of kernel arguments on bootc systems resolves: RHEL-45836 resolves: RHEL-86814 - new release - rebased tuned to latest upstream related: RHEL-70457 - plugins: added missing instance parameters - disk: added missing remove parameter - plugin_scheduler: added switch to disable processing of kthreads - Makefile: added support for installation to custom LIBEXECDIR - functions: create a new parser object for each string expansion resolves: RHEL-75773 - new release - rebased tuned to latest upstream related: RHEL-70457 - sap-hana: Set transparent_hugepages to madvise - plugin_bootloader: export Grub variables to make them available in submenus - utils.commands: fixed CPU online detection when not present - plugin_net: handled cqe-mode-rx ethtool option - profiles: correct CPU governor settings - new release - rebased tuned to latest upstream resolves: RHEL-70457 - tuned-ppd: removed the use of StrEnum - tuned-ppd: fixed traceback - tuned-ppd: multiple fixes and updates - docs: plugins docs are now automatically generated from the docstrings - plugin_cpu: fixed no_turbo boolean option parsing resolves: RHEL-51760 - plugin_cpu: allowed raw energy_performance_preference values - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters resolves: RHEL-58820 - plugin_bootloader: added variables to BLS entries only if grub is used - plugin_scheduler: do not assume that perf events have type attribute - plugin_scheduler: updated sched knobs for kernels 6.6+ - plugin_scheduler: log process info when its affinity cannot be changed - plugin_scheduler: postpone cgroup blacklist check, double-check after fail resolves: RHEL-72981 - plugin_scheduler: made perf support optional - plugin_net: added support for hotplug and rename resolves: RHEL-60906 - makefile: added support for installation to custom $BINDIR/$SBINDIR - functions: dropped cpuspeed support - Fixed privileged execution of arbitrary scripts by active local user, (CVE-2024-52336) Resolves: RHEL-66638 - Added sanity checks for API methods parameters, (CVE-2024-52337) Resolves: RHEL-66615 - new release - rebased tuned to latest upstream related: RHEL-50568 - clear plugin repository when stopping tuning - man: add description of the balanced-battery profile - net: added more coalescing options, filter out unsupported ones resolves: RHEL-181668 - new release - rebased tuned to latest upstream related: RHEL-123607 - new release - rebased tuned to latest upstream resolves: RHEL-123607 - cpu-partitioning: autodetect dracut hook directory, systemd workaround - openshift: optimize TCP settings for high throughput and low latency - profiles: Set boost=1 in *-performance profiles - sap-hana: force latency to 70 us, not to C-states - man: fixed instance_acquire_devices example in tuned-adm man - spec: use correct python interpreter for documentation installation - sysctl: add reapply_sysctl_exclude option - ppd: ask tuned recommend for base profile - new release - rebased tuned to latest upstream related: RHEL-94808 - new release - rebased tuned to latest upstream resolves: RHEL-94808 - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor - tuned-ppd: enabled sysfs_acpi_monitor by default - tuned-ppd: fixed inotify watch for performance degradation - tuned-ppd: pinned virtual files in memory for inotify - fixed instance priority inheritance - hotplug: added fixes for device remove race condition - tuned-main.conf: added startup_udev_settle_wait option - functions: silenced errors if module kvm_intel does not exist resolves: RHEL-79943 - functions: make calc_isolated_cores return CPU ranges resolves: RHEL-75751 - scsi: used 'med_power_with_dipm' for SATA ALPM - scsi: do not set ALPM on external SATA ports - network_latency: Set non-zero rcutree.nohz_full_patience_delay - realtime: Disable appropriate P-State drivers resolves: RHEL-85637 - plugin_disk: added support for MMC (MultiMediaCard) devices - udev: fix possible traceback in device matcher - udev-settle: obey udev buffer size and handle possible tracebacks - daemon: re-raise daemon init exception in no-daemon mode resolves: RHEL-71304 - vm: deprecate dirty_ratio in favour of dirty_bytes with percents resolves: RHEL-101578 - gui: fix the profile deleter script - Fix handling of kernel arguments on bootc systems resolves: RHEL-45836 resolves: RHEL-86814 - new release - rebased tuned to latest upstream related: RHEL-70457 - plugins: added missing instance parameters - disk: added missing remove parameter - plugin_scheduler: added switch to disable processing of kthreads - Makefile: added support for installation to custom LIBEXECDIR - functions: create a new parser object for each string expansion resolves: RHEL-75773 - new release - rebased tuned to latest upstream related: RHEL-70457 - sap-hana: Set transparent_hugepages to madvise - plugin_bootloader: export Grub variables to make them available in submenus - utils.commands: fixed CPU online detection when not present - plugin_net: handled cqe-mode-rx ethtool option - profiles: correct CPU governor settings - new release - rebased tuned to latest upstream resolves: RHEL-70457 - tuned-ppd: removed the use of StrEnum - tuned-ppd: fixed traceback - tuned-ppd: multiple fixes and updates - docs: plugins docs are now automatically generated from the docstrings - plugin_cpu: fixed no_turbo boolean option parsing resolves: RHEL-51760 - plugin_cpu: allowed raw energy_performance_preference values - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters resolves: RHEL-58820 - plugin_bootloader: added variables to BLS entries only if grub is used - plugin_scheduler: do not assume that perf events have type attribute - plugin_scheduler: updated sched knobs for kernels 6.6+ - plugin_scheduler: log process info when its affinity cannot be changed - plugin_scheduler: postpone cgroup blacklist check, double-check after fail resolves: RHEL-72981 - plugin_scheduler: made perf support optional - plugin_net: added support for hotplug and rename resolves: RHEL-60906 - makefile: added support for installation to custom $BINDIR/$SBINDIR - functions: dropped cpuspeed support - Fixed privileged execution of arbitrary scripts by active local user, (CVE-2024-52336) Resolves: RHEL-66638 - Added sanity checks for API methods parameters, (CVE-2024-52337) Resolves: RHEL-66615 - new release - rebased tuned to latest upstream related: RHEL-123607 - new release - rebased tuned to latest upstream resolves: RHEL-123607 - cpu-partitioning: autodetect dracut hook directory, systemd workaround - openshift: optimize TCP settings for high throughput and low latency - profiles: Set boost=1 in *-performance profiles - sap-hana: force latency to 70 us, not to C-states - man: fixed instance_acquire_devices example in tuned-adm man - spec: use correct python interpreter for documentation installation - sysctl: add reapply_sysctl_exclude option - ppd: ask tuned recommend for base profile - new release - rebased tuned to latest upstream related: RHEL-94808 - new release - rebased tuned to latest upstream resolves: RHEL-94808 - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor - tuned-ppd: enabled sysfs_acpi_monitor by default - tuned-ppd: fixed inotify watch for performance degradation - tuned-ppd: pinned virtual files in memory for inotify - fixed instance priority inheritance - hotplug: added fixes for device remove race condition - tuned-main.conf: added startup_udev_settle_wait option - functions: silenced errors if module kvm_intel does not exist resolves: RHEL-79943 - functions: make calc_isolated_cores return CPU ranges resolves: RHEL-75751 - scsi: used 'med_power_with_dipm' for SATA ALPM - scsi: do not set ALPM on external SATA ports - network_latency: Set non-zero rcutree.nohz_full_patience_delay - realtime: Disable appropriate P-State drivers resolves: RHEL-85637 - plugin_disk: added support for MMC (MultiMediaCard) devices - udev: fix possible traceback in device matcher - udev-settle: obey udev buffer size and handle possible tracebacks - daemon: re-raise daemon init exception in no-daemon mode resolves: RHEL-71304 - vm: deprecate dirty_ratio in favour of dirty_bytes with percents resolves: RHEL-101578 - gui: fix the profile deleter script - Fix handling of kernel arguments on bootc systems resolves: RHEL-45836 resolves: RHEL-86814 - new release - rebased tuned to latest upstream related: RHEL-70457 - plugins: added missing instance parameters - disk: added missing remove parameter - plugin_scheduler: added switch to disable processing of kthreads - Makefile: added support for installation to custom LIBEXECDIR - functions: create a new parser object for each string expansion resolves: RHEL-75773 - new release - rebased tuned to latest upstream related: RHEL-70457 - sap-hana: Set transparent_hugepages to madvise - plugin_bootloader: export Grub variables to make them available in submenus - utils.commands: fixed CPU online detection when not present - plugin_net: handled cqe-mode-rx ethtool option - profiles: correct CPU governor settings - new release - rebased tuned to latest upstream resolves: RHEL-70457 - tuned-ppd: removed the use of StrEnum - tuned-ppd: fixed traceback - tuned-ppd: multiple fixes and updates - docs: plugins docs are now automatically generated from the docstrings - plugin_cpu: fixed no_turbo boolean option parsing resolves: RHEL-51760 - plugin_cpu: allowed raw energy_performance_preference values - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters resolves: RHEL-58820 - plugin_bootloader: added variables to BLS entries only if grub is used - plugin_scheduler: do not assume that perf events have type attribute - plugin_scheduler: updated sched knobs for kernels 6.6+ - plugin_scheduler: log process info when its affinity cannot be changed - plugin_scheduler: postpone cgroup blacklist check, double-check after fail resolves: RHEL-72981 - plugin_scheduler: made perf support optional - plugin_net: added support for hotplug and rename resolves: RHEL-60906 - makefile: added support for installation to custom $BINDIR/$SBINDIR - functions: dropped cpuspeed support - Fixed privileged execution of arbitrary scripts by active local user, (CVE-2024-52336) Resolves: RHEL-66638 - Added sanity checks for API methods parameters, (CVE-2024-52337) Resolves: RHEL-66615 - new release - rebased tuned to latest upstream related: RHEL-50568 - clear plugin repository when stopping tuning - man: add description of the balanced-battery profile - net: added more coalescing options, filter out unsupported ones resolves: RHEL-181668 - new release - rebased tuned to latest upstream related: RHEL-123607 - new release - rebased tuned to latest upstream resolves: RHEL-123607 - cpu-partitioning: autodetect dracut hook directory, systemd workaround - openshift: optimize TCP settings for high throughput and low latency - profiles: Set boost=1 in *-performance profiles - sap-hana: force latency to 70 us, not to C-states - man: fixed instance_acquire_devices example in tuned-adm man - spec: use correct python interpreter for documentation installation - sysctl: add reapply_sysctl_exclude option - ppd: ask tuned recommend for base profile - new release - rebased tuned to latest upstream related: RHEL-94808 - new release - rebased tuned to latest upstream resolves: RHEL-94808 - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor - tuned-ppd: enabled sysfs_acpi_monitor by default - tuned-ppd: fixed inotify watch for performance degradation - tuned-ppd: pinned virtual files in memory for inotify - fixed instance priority inheritance - hotplug: added fixes for device remove race condition - tuned-main.conf: added startup_udev_settle_wait option - functions: silenced errors if module kvm_intel does not exist resolves: RHEL-79943 - functions: make calc_isolated_cores return CPU ranges resolves: RHEL-75751 - scsi: used 'med_power_with_dipm' for SATA ALPM - scsi: do not set ALPM on external SATA ports - network_latency: Set non-zero rcutree.nohz_full_patience_delay - realtime: Disable appropriate P-State drivers resolves: RHEL-85637 - plugin_disk: added support for MMC (MultiMediaCard) devices - udev: fix possible traceback in device matcher - udev-settle: obey udev buffer size and handle possible tracebacks - daemon: re-raise daemon init exception in no-daemon mode resolves: RHEL-71304 - vm: deprecate dirty_ratio in favour of dirty_bytes with percents resolves: RHEL-101578 - gui: fix the profile deleter script - Fix handling of kernel arguments on bootc systems resolves: RHEL-45836 resolves: RHEL-86814 - new release - rebased tuned to latest upstream related: RHEL-70457 - plugins: added missing instance parameters - disk: added missing remove parameter - plugin_scheduler: added switch to disable processing of kthreads - Makefile: added support for installation to custom LIBEXECDIR - functions: create a new parser object for each string expansion resolves: RHEL-75773 - new release - rebased tuned to latest upstream related: RHEL-70457 - sap-hana: Set transparent_hugepages to madvise - plugin_bootloader: export Grub variables to make them available in submenus - utils.commands: fixed CPU online detection when not present - plugin_net: handled cqe-mode-rx ethtool option - profiles: correct CPU governor settings - new release - rebased tuned to latest upstream resolves: RHEL-70457 - tuned-ppd: removed the use of StrEnum - tuned-ppd: fixed traceback - tuned-ppd: multiple fixes and updates - docs: plugins docs are now automatically generated from the docstrings - plugin_cpu: fixed no_turbo boolean option parsing resolves: RHEL-51760 - plugin_cpu: allowed raw energy_performance_preference values - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters resolves: RHEL-58820 - plugin_bootloader: added variables to BLS entries only if grub is used - plugin_scheduler: do not assume that perf events have type attribute - plugin_scheduler: updated sched knobs for kernels 6.6+ - plugin_scheduler: log process info when its affinity cannot be changed - plugin_scheduler: postpone cgroup blacklist check, double-check after fail resolves: RHEL-72981 - plugin_scheduler: made perf support optional - plugin_net: added support for hotplug and rename resolves: RHEL-60906 - makefile: added support for installation to custom $BINDIR/$SBINDIR - functions: dropped cpuspeed support - Fixed privileged execution of arbitrary scripts by active local user, (CVE-2024-52336) Resolves: RHEL-66638 - Added sanity checks for API methods parameters, (CVE-2024-52337) Resolves: RHEL-66615 - new release - rebased tuned to latest upstream related: RHEL-123607 - new release - rebased tuned to latest upstream resolves: RHEL-123607 - cpu-partitioning: autodetect dracut hook directory, systemd workaround - openshift: optimize TCP settings for high throughput and low latency - profiles: Set boost=1 in *-performance profiles - sap-hana: force latency to 70 us, not to C-states - man: fixed instance_acquire_devices example in tuned-adm man - spec: use correct python interpreter for documentation installation - sysctl: add reapply_sysctl_exclude option - ppd: ask tuned recommend for base profile - new release - rebased tuned to latest upstream related: RHEL-94808 - new release - rebased tuned to latest upstream resolves: RHEL-94808 - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor - tuned-ppd: enabled sysfs_acpi_monitor by default - tuned-ppd: fixed inotify watch for performance degradation - tuned-ppd: pinned virtual files in memory for inotify - fixed instance priority inheritance - hotplug: added fixes for device remove race condition - tuned-main.conf: added startup_udev_settle_wait option - functions: silenced errors if module kvm_intel does not exist resolves: RHEL-79943 - functions: make calc_isolated_cores return CPU ranges resolves: RHEL-75751 - scsi: used 'med_power_with_dipm' for SATA ALPM - scsi: do not set ALPM on external SATA ports - network_latency: Set non-zero rcutree.nohz_full_patience_delay - realtime: Disable appropriate P-State drivers resolves: RHEL-85637 - plugin_disk: added support for MMC (MultiMediaCard) devices - udev: fix possible traceback in device matcher - udev-settle: obey udev buffer size and handle possible tracebacks - daemon: re-raise daemon init exception in no-daemon mode resolves: RHEL-71304 - vm: deprecate dirty_ratio in favour of dirty_bytes with percents resolves: RHEL-101578 - gui: fix the profile deleter script - Fix handling of kernel arguments on bootc systems resolves: RHEL-45836 resolves: RHEL-86814 - new release - rebased tuned to latest upstream related: RHEL-70457 - plugins: added missing instance parameters - disk: added missing remove parameter - plugin_scheduler: added switch to disable processing of kthreads - Makefile: added support for installation to custom LIBEXECDIR - functions: create a new parser object for each string expansion resolves: RHEL-75773 - new release - rebased tuned to latest upstream related: RHEL-70457 - sap-hana: Set transparent_hugepages to madvise - plugin_bootloader: export Grub variables to make them available in submenus - utils.commands: fixed CPU online detection when not present - plugin_net: handled cqe-mode-rx ethtool option - profiles: correct CPU governor settings - new release - rebased tuned to latest upstream resolves: RHEL-70457 - tuned-ppd: removed the use of StrEnum - tuned-ppd: fixed traceback - tuned-ppd: multiple fixes and updates - docs: plugins docs are now automatically generated from the docstrings - plugin_cpu: fixed no_turbo boolean option parsing resolves: RHEL-51760 - plugin_cpu: allowed raw energy_performance_preference values - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters resolves: RHEL-58820 - plugin_bootloader: added variables to BLS entries only if grub is used - plugin_scheduler: do not assume that perf events have type attribute - plugin_scheduler: updated sched knobs for kernels 6.6+ - plugin_scheduler: log process info when its affinity cannot be changed - plugin_scheduler: postpone cgroup blacklist check, double-check after fail resolves: RHEL-72981 - plugin_scheduler: made perf support optional - plugin_net: added support for hotplug and rename resolves: RHEL-60906 - makefile: added support for installation to custom $BINDIR/$SBINDIR - functions: dropped cpuspeed support - Fixed privileged execution of arbitrary scripts by active local user, (CVE-2024-52336) Resolves: RHEL-66638 - Added sanity checks for API methods parameters, (CVE-2024-52337) Resolves: RHEL-66615 - new release - rebased tuned to latest upstream related: RHEL-50568 - clear plugin repository when stopping tuning - man: add description of the balanced-battery profile - net: added more coalescing options, filter out unsupported ones resolves: RHEL-181668 - new release - rebased tuned to latest upstream related: RHEL-123607 - new release - rebased tuned to latest upstream resolves: RHEL-123607 - cpu-partitioning: autodetect dracut hook directory, systemd workaround - openshift: optimize TCP settings for high throughput and low latency - profiles: Set boost=1 in *-performance profiles - sap-hana: force latency to 70 us, not to C-states - man: fixed instance_acquire_devices example in tuned-adm man - spec: use correct python interpreter for documentation installation - sysctl: add reapply_sysctl_exclude option - ppd: ask tuned recommend for base profile - new release - rebased tuned to latest upstream related: RHEL-94808 - new release - rebased tuned to latest upstream resolves: RHEL-94808 - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor - tuned-ppd: enabled sysfs_acpi_monitor by default - tuned-ppd: fixed inotify watch for performance degradation - tuned-ppd: pinned virtual files in memory for inotify - fixed instance priority inheritance - hotplug: added fixes for device remove race condition - tuned-main.conf: added startup_udev_settle_wait option - functions: silenced errors if module kvm_intel does not exist resolves: RHEL-79943 - functions: make calc_isolated_cores return CPU ranges resolves: RHEL-75751 - scsi: used 'med_power_with_dipm' for SATA ALPM - scsi: do not set ALPM on external SATA ports - network_latency: Set non-zero rcutree.nohz_full_patience_delay - realtime: Disable appropriate P-State drivers resolves: RHEL-85637 - plugin_disk: added support for MMC (MultiMediaCard) devices - udev: fix possible traceback in device matcher - udev-settle: obey udev buffer size and handle possible tracebacks - daemon: re-raise daemon init exception in no-daemon mode resolves: RHEL-71304 - vm: deprecate dirty_ratio in favour of dirty_bytes with percents resolves: RHEL-101578 - gui: fix the profile deleter script - Fix handling of kernel arguments on bootc systems resolves: RHEL-45836 resolves: RHEL-86814 - new release - rebased tuned to latest upstream related: RHEL-70457 - plugins: added missing instance parameters - disk: added missing remove parameter - plugin_scheduler: added switch to disable processing of kthreads - Makefile: added support for installation to custom LIBEXECDIR - functions: create a new parser object for each string expansion resolves: RHEL-75773 - new release - rebased tuned to latest upstream related: RHEL-70457 - sap-hana: Set transparent_hugepages to madvise - plugin_bootloader: export Grub variables to make them available in submenus - utils.commands: fixed CPU online detection when not present - plugin_net: handled cqe-mode-rx ethtool option - profiles: correct CPU governor settings - new release - rebased tuned to latest upstream resolves: RHEL-70457 - tuned-ppd: removed the use of StrEnum - tuned-ppd: fixed traceback - tuned-ppd: multiple fixes and updates - docs: plugins docs are now automatically generated from the docstrings - plugin_cpu: fixed no_turbo boolean option parsing resolves: RHEL-51760 - plugin_cpu: allowed raw energy_performance_preference values - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters resolves: RHEL-58820 - plugin_bootloader: added variables to BLS entries only if grub is used - plugin_scheduler: do not assume that perf events have type attribute - plugin_scheduler: updated sched knobs for kernels 6.6+ - plugin_scheduler: log process info when its affinity cannot be changed - plugin_scheduler: postpone cgroup blacklist check, double-check after fail resolves: RHEL-72981 - plugin_scheduler: made perf support optional - plugin_net: added support for hotplug and rename resolves: RHEL-60906 - makefile: added support for installation to custom $BINDIR/$SBINDIR - functions: dropped cpuspeed support - Fixed privileged execution of arbitrary scripts by active local user, (CVE-2024-52336) Resolves: RHEL-66638 - Added sanity checks for API methods parameters, (CVE-2024-52337) Resolves: RHEL-66615 - new release - rebased tuned to latest upstream related: RHEL-123607 - new release - rebased tuned to latest upstream resolves: RHEL-123607 - cpu-partitioning: autodetect dracut hook directory, systemd workaround - openshift: optimize TCP settings for high throughput and low latency - profiles: Set boost=1 in *-performance profiles - sap-hana: force latency to 70 us, not to C-states - man: fixed instance_acquire_devices example in tuned-adm man - spec: use correct python interpreter for documentation installation - sysctl: add reapply_sysctl_exclude option - ppd: ask tuned recommend for base profile - new release - rebased tuned to latest upstream related: RHEL-94808 - new release - rebased tuned to latest upstream resolves: RHEL-94808 - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor - tuned-ppd: enabled sysfs_acpi_monitor by default - tuned-ppd: fixed inotify watch for performance degradation - tuned-ppd: pinned virtual files in memory for inotify - fixed instance priority inheritance - hotplug: added fixes for device remove race condition - tuned-main.conf: added startup_udev_settle_wait option - functions: silenced errors if module kvm_intel does not exist resolves: RHEL-79943 - functions: make calc_isolated_cores return CPU ranges resolves: RHEL-75751 - scsi: used 'med_power_with_dipm' for SATA ALPM - scsi: do not set ALPM on external SATA ports - network_latency: Set non-zero rcutree.nohz_full_patience_delay - realtime: Disable appropriate P-State drivers resolves: RHEL-85637 - plugin_disk: added support for MMC (MultiMediaCard) devices - udev: fix possible traceback in device matcher - udev-settle: obey udev buffer size and handle possible tracebacks - daemon: re-raise daemon init exception in no-daemon mode resolves: RHEL-71304 - vm: deprecate dirty_ratio in favour of dirty_bytes with percents resolves: RHEL-101578 - gui: fix the profile deleter script - Fix handling of kernel arguments on bootc systems resolves: RHEL-45836 resolves: RHEL-86814 - new release - rebased tuned to latest upstream related: RHEL-70457 - plugins: added missing instance parameters - disk: added missing remove parameter - plugin_scheduler: added switch to disable processing of kthreads - Makefile: added support for installation to custom LIBEXECDIR - functions: create a new parser object for each string expansion resolves: RHEL-75773 - new release - rebased tuned to latest upstream related: RHEL-70457 - sap-hana: Set transparent_hugepages to madvise - plugin_bootloader: export Grub variables to make them available in submenus - utils.commands: fixed CPU online detection when not present - plugin_net: handled cqe-mode-rx ethtool option - profiles: correct CPU governor settings - new release - rebased tuned to latest upstream resolves: RHEL-70457 - tuned-ppd: removed the use of StrEnum - tuned-ppd: fixed traceback - tuned-ppd: multiple fixes and updates - docs: plugins docs are now automatically generated from the docstrings - plugin_cpu: fixed no_turbo boolean option parsing resolves: RHEL-51760 - plugin_cpu: allowed raw energy_performance_preference values - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters resolves: RHEL-58820 - plugin_bootloader: added variables to BLS entries only if grub is used - plugin_scheduler: do not assume that perf events have type attribute - plugin_scheduler: updated sched knobs for kernels 6.6+ - plugin_scheduler: log process info when its affinity cannot be changed - plugin_scheduler: postpone cgroup blacklist check, double-check after fail resolves: RHEL-72981 - plugin_scheduler: made perf support optional - plugin_net: added support for hotplug and rename resolves: RHEL-60906 - makefile: added support for installation to custom $BINDIR/$SBINDIR - functions: dropped cpuspeed support - Fixed privileged execution of arbitrary scripts by active local user, (CVE-2024-52336) Resolves: RHEL-66638 - Added sanity checks for API methods parameters, (CVE-2024-52337) Resolves: RHEL-66615 - new release - rebased tuned to latest upstream related: RHEL-50568 - clear plugin repository when stopping tuning - man: add description of the balanced-battery profile - net: added more coalescing options, filter out unsupported ones resolves: RHEL-181668 - new release - rebased tuned to latest upstream related: RHEL-123607 - new release - rebased tuned to latest upstream resolves: RHEL-123607 - cpu-partitioning: autodetect dracut hook directory, systemd workaround - openshift: optimize TCP settings for high throughput and low latency - profiles: Set boost=1 in *-performance profiles - sap-hana: force latency to 70 us, not to C-states - man: fixed instance_acquire_devices example in tuned-adm man - spec: use correct python interpreter for documentation installation - sysctl: add reapply_sysctl_exclude option - ppd: ask tuned recommend for base profile - new release - rebased tuned to latest upstream related: RHEL-94808 - new release - rebased tuned to latest upstream resolves: RHEL-94808 - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor - tuned-ppd: enabled sysfs_acpi_monitor by default - tuned-ppd: fixed inotify watch for performance degradation - tuned-ppd: pinned virtual files in memory for inotify - fixed instance priority inheritance - hotplug: added fixes for device remove race condition - tuned-main.conf: added startup_udev_settle_wait option - functions: silenced errors if module kvm_intel does not exist resolves: RHEL-79943 - functions: make calc_isolated_cores return CPU ranges resolves: RHEL-75751 - scsi: used 'med_power_with_dipm' for SATA ALPM - scsi: do not set ALPM on external SATA ports - network_latency: Set non-zero rcutree.nohz_full_patience_delay - realtime: Disable appropriate P-State drivers resolves: RHEL-85637 - plugin_disk: added support for MMC (MultiMediaCard) devices - udev: fix possible traceback in device matcher - udev-settle: obey udev buffer size and handle possible tracebacks - daemon: re-raise daemon init exception in no-daemon mode resolves: RHEL-71304 - vm: deprecate dirty_ratio in favour of dirty_bytes with percents resolves: RHEL-101578 - gui: fix the profile deleter script - Fix handling of kernel arguments on bootc systems resolves: RHEL-45836 resolves: RHEL-86814 - new release - rebased tuned to latest upstream related: RHEL-70457 - plugins: added missing instance parameters - disk: added missing remove parameter - plugin_scheduler: added switch to disable processing of kthreads - Makefile: added support for installation to custom LIBEXECDIR - functions: create a new parser object for each string expansion resolves: RHEL-75773 - new release - rebased tuned to latest upstream related: RHEL-70457 - sap-hana: Set transparent_hugepages to madvise - plugin_bootloader: export Grub variables to make them available in submenus - utils.commands: fixed CPU online detection when not present - plugin_net: handled cqe-mode-rx ethtool option - profiles: correct CPU governor settings - new release - rebased tuned to latest upstream resolves: RHEL-70457 - tuned-ppd: removed the use of StrEnum - tuned-ppd: fixed traceback - tuned-ppd: multiple fixes and updates - docs: plugins docs are now automatically generated from the docstrings - plugin_cpu: fixed no_turbo boolean option parsing resolves: RHEL-51760 - plugin_cpu: allowed raw energy_performance_preference values - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters resolves: RHEL-58820 - plugin_bootloader: added variables to BLS entries only if grub is used - plugin_scheduler: do not assume that perf events have type attribute - plugin_scheduler: updated sched knobs for kernels 6.6+ - plugin_scheduler: log process info when its affinity cannot be changed - plugin_scheduler: postpone cgroup blacklist check, double-check after fail resolves: RHEL-72981 - plugin_scheduler: made perf support optional - plugin_net: added support for hotplug and rename resolves: RHEL-60906 - makefile: added support for installation to custom $BINDIR/$SBINDIR - functions: dropped cpuspeed support - Fixed privileged execution of arbitrary scripts by active local user, (CVE-2024-52336) Resolves: RHEL-66638 - Added sanity checks for API methods parameters, (CVE-2024-52337) Resolves: RHEL-66615 - new release - rebased tuned to latest upstream related: RHEL-123607 - new release - rebased tuned to latest upstream resolves: RHEL-123607 - cpu-partitioning: autodetect dracut hook directory, systemd workaround - openshift: optimize TCP settings for high throughput and low latency - profiles: Set boost=1 in *-performance profiles - sap-hana: force latency to 70 us, not to C-states - man: fixed instance_acquire_devices example in tuned-adm man - spec: use correct python interpreter for documentation installation - sysctl: add reapply_sysctl_exclude option - ppd: ask tuned recommend for base profile - new release - rebased tuned to latest upstream related: RHEL-94808 - new release - rebased tuned to latest upstream resolves: RHEL-94808 - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor - tuned-ppd: enabled sysfs_acpi_monitor by default - tuned-ppd: fixed inotify watch for performance degradation - tuned-ppd: pinned virtual files in memory for inotify - fixed instance priority inheritance - hotplug: added fixes for device remove race condition - tuned-main.conf: added startup_udev_settle_wait option - functions: silenced errors if module kvm_intel does not exist resolves: RHEL-79943 - functions: make calc_isolated_cores return CPU ranges resolves: RHEL-75751 - scsi: used 'med_power_with_dipm' for SATA ALPM - scsi: do not set ALPM on external SATA ports - network_latency: Set non-zero rcutree.nohz_full_patience_delay - realtime: Disable appropriate P-State drivers resolves: RHEL-85637 - plugin_disk: added support for MMC (MultiMediaCard) devices - udev: fix possible traceback in device matcher - udev-settle: obey udev buffer size and handle possible tracebacks - daemon: re-raise daemon init exception in no-daemon mode resolves: RHEL-71304 - vm: deprecate dirty_ratio in favour of dirty_bytes with percents resolves: RHEL-101578 - gui: fix the profile deleter script - Fix handling of kernel arguments on bootc systems resolves: RHEL-45836 resolves: RHEL-86814 - new release - rebased tuned to latest upstream related: RHEL-70457 - plugins: added missing instance parameters - disk: added missing remove parameter - plugin_scheduler: added switch to disable processing of kthreads - Makefile: added support for installation to custom LIBEXECDIR - functions: create a new parser object for each string expansion resolves: RHEL-75773 - new release - rebased tuned to latest upstream related: RHEL-70457 - sap-hana: Set transparent_hugepages to madvise - plugin_bootloader: export Grub variables to make them available in submenus - utils.commands: fixed CPU online detection when not present - plugin_net: handled cqe-mode-rx ethtool option - profiles: correct CPU governor settings - new release - rebased tuned to latest upstream resolves: RHEL-70457 - tuned-ppd: removed the use of StrEnum - tuned-ppd: fixed traceback - tuned-ppd: multiple fixes and updates - docs: plugins docs are now automatically generated from the docstrings - plugin_cpu: fixed no_turbo boolean option parsing resolves: RHEL-51760 - plugin_cpu: allowed raw energy_performance_preference values - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters resolves: RHEL-58820 - plugin_bootloader: added variables to BLS entries only if grub is used - plugin_scheduler: do not assume that perf events have type attribute - plugin_scheduler: updated sched knobs for kernels 6.6+ - plugin_scheduler: log process info when its affinity cannot be changed - plugin_scheduler: postpone cgroup blacklist check, double-check after fail resolves: RHEL-72981 - plugin_scheduler: made perf support optional - plugin_net: added support for hotplug and rename resolves: RHEL-60906 - makefile: added support for installation to custom $BINDIR/$SBINDIR - functions: dropped cpuspeed support - Fixed privileged execution of arbitrary scripts by active local user, (CVE-2024-52336) Resolves: RHEL-66638 - Added sanity checks for API methods parameters, (CVE-2024-52337) Resolves: RHEL-66615 - new release - rebased tuned to latest upstream related: RHEL-50568 - clear plugin repository when stopping tuning - man: add description of the balanced-battery profile - net: added more coalescing options, filter out unsupported ones resolves: RHEL-181668 - new release - rebased tuned to latest upstream related: RHEL-123607 - new release - rebased tuned to latest upstream resolves: RHEL-123607 - cpu-partitioning: autodetect dracut hook directory, systemd workaround - openshift: optimize TCP settings for high throughput and low latency - profiles: Set boost=1 in *-performance profiles - sap-hana: force latency to 70 us, not to C-states - man: fixed instance_acquire_devices example in tuned-adm man - spec: use correct python interpreter for documentation installation - sysctl: add reapply_sysctl_exclude option - ppd: ask tuned recommend for base profile - new release - rebased tuned to latest upstream related: RHEL-94808 - new release - rebased tuned to latest upstream resolves: RHEL-94808 - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor - tuned-ppd: enabled sysfs_acpi_monitor by default - tuned-ppd: fixed inotify watch for performance degradation - tuned-ppd: pinned virtual files in memory for inotify - fixed instance priority inheritance - hotplug: added fixes for device remove race condition - tuned-main.conf: added startup_udev_settle_wait option - functions: silenced errors if module kvm_intel does not exist resolves: RHEL-79943 - functions: make calc_isolated_cores return CPU ranges resolves: RHEL-75751 - scsi: used 'med_power_with_dipm' for SATA ALPM - scsi: do not set ALPM on external SATA ports - network_latency: Set non-zero rcutree.nohz_full_patience_delay - realtime: Disable appropriate P-State drivers resolves: RHEL-85637 - plugin_disk: added support for MMC (MultiMediaCard) devices - udev: fix possible traceback in device matcher - udev-settle: obey udev buffer size and handle possible tracebacks - daemon: re-raise daemon init exception in no-daemon mode resolves: RHEL-71304 - vm: deprecate dirty_ratio in favour of dirty_bytes with percents resolves: RHEL-101578 - gui: fix the profile deleter script - Fix handling of kernel arguments on bootc systems resolves: RHEL-45836 resolves: RHEL-86814 - new release - rebased tuned to latest upstream related: RHEL-70457 - plugins: added missing instance parameters - disk: added missing remove parameter - plugin_scheduler: added switch to disable processing of kthreads - Makefile: added support for installation to custom LIBEXECDIR - functions: create a new parser object for each string expansion resolves: RHEL-75773 - new release - rebased tuned to latest upstream related: RHEL-70457 - sap-hana: Set transparent_hugepages to madvise - plugin_bootloader: export Grub variables to make them available in submenus - utils.commands: fixed CPU online detection when not present - plugin_net: handled cqe-mode-rx ethtool option - profiles: correct CPU governor settings - new release - rebased tuned to latest upstream resolves: RHEL-70457 - tuned-ppd: removed the use of StrEnum - tuned-ppd: fixed traceback - tuned-ppd: multiple fixes and updates - docs: plugins docs are now automatically generated from the docstrings - plugin_cpu: fixed no_turbo boolean option parsing resolves: RHEL-51760 - plugin_cpu: allowed raw energy_performance_preference values - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters resolves: RHEL-58820 - plugin_bootloader: added variables to BLS entries only if grub is used - plugin_scheduler: do not assume that perf events have type attribute - plugin_scheduler: updated sched knobs for kernels 6.6+ - plugin_scheduler: log process info when its affinity cannot be changed - plugin_scheduler: postpone cgroup blacklist check, double-check after fail resolves: RHEL-72981 - plugin_scheduler: made perf support optional - plugin_net: added support for hotplug and rename resolves: RHEL-60906 - makefile: added support for installation to custom $BINDIR/$SBINDIR - functions: dropped cpuspeed support - Fixed privileged execution of arbitrary scripts by active local user, (CVE-2024-52336) Resolves: RHEL-66638 - Added sanity checks for API methods parameters, (CVE-2024-52337) Resolves: RHEL-66615 - new release - rebased tuned to latest upstream related: RHEL-123607 - new release - rebased tuned to latest upstream resolves: RHEL-123607 - cpu-partitioning: autodetect dracut hook directory, systemd workaround - openshift: optimize TCP settings for high throughput and low latency - profiles: Set boost=1 in *-performance profiles - sap-hana: force latency to 70 us, not to C-states - man: fixed instance_acquire_devices example in tuned-adm man - spec: use correct python interpreter for documentation installation - sysctl: add reapply_sysctl_exclude option - ppd: ask tuned recommend for base profile - new release - rebased tuned to latest upstream related: RHEL-94808 - new release - rebased tuned to latest upstream resolves: RHEL-94808 - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor - tuned-ppd: enabled sysfs_acpi_monitor by default - tuned-ppd: fixed inotify watch for performance degradation - tuned-ppd: pinned virtual files in memory for inotify - fixed instance priority inheritance - hotplug: added fixes for device remove race condition - tuned-main.conf: added startup_udev_settle_wait option - functions: silenced errors if module kvm_intel does not exist resolves: RHEL-79943 - functions: make calc_isolated_cores return CPU ranges resolves: RHEL-75751 - scsi: used 'med_power_with_dipm' for SATA ALPM - scsi: do not set ALPM on external SATA ports - network_latency: Set non-zero rcutree.nohz_full_patience_delay - realtime: Disable appropriate P-State drivers resolves: RHEL-85637 - plugin_disk: added support for MMC (MultiMediaCard) devices - udev: fix possible traceback in device matcher - udev-settle: obey udev buffer size and handle possible tracebacks - daemon: re-raise daemon init exception in no-daemon mode resolves: RHEL-71304 - vm: deprecate dirty_ratio in favour of dirty_bytes with percents resolves: RHEL-101578 - gui: fix the profile deleter script - Fix handling of kernel arguments on bootc systems resolves: RHEL-45836 resolves: RHEL-86814 - new release - rebased tuned to latest upstream related: RHEL-70457 - plugins: added missing instance parameters - disk: added missing remove parameter - plugin_scheduler: added switch to disable processing of kthreads - Makefile: added support for installation to custom LIBEXECDIR - functions: create a new parser object for each string expansion resolves: RHEL-75773 - new release - rebased tuned to latest upstream related: RHEL-70457 - sap-hana: Set transparent_hugepages to madvise - plugin_bootloader: export Grub variables to make them available in submenus - utils.commands: fixed CPU online detection when not present - plugin_net: handled cqe-mode-rx ethtool option - profiles: correct CPU governor settings - new release - rebased tuned to latest upstream resolves: RHEL-70457 - tuned-ppd: removed the use of StrEnum - tuned-ppd: fixed traceback - tuned-ppd: multiple fixes and updates - docs: plugins docs are now automatically generated from the docstrings - plugin_cpu: fixed no_turbo boolean option parsing resolves: RHEL-51760 - plugin_cpu: allowed raw energy_performance_preference values - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters resolves: RHEL-58820 - plugin_bootloader: added variables to BLS entries only if grub is used - plugin_scheduler: do not assume that perf events have type attribute - plugin_scheduler: updated sched knobs for kernels 6.6+ - plugin_scheduler: log process info when its affinity cannot be changed - plugin_scheduler: postpone cgroup blacklist check, double-check after fail resolves: RHEL-72981 - plugin_scheduler: made perf support optional - plugin_net: added support for hotplug and rename resolves: RHEL-60906 - makefile: added support for installation to custom $BINDIR/$SBINDIR - functions: dropped cpuspeed support - Fixed privileged execution of arbitrary scripts by active local user, (CVE-2024-52336) Resolves: RHEL-66638 - Added sanity checks for API methods parameters, (CVE-2024-52337) Resolves: RHEL-66615 - new release - rebased tuned to latest upstream related: RHEL-50568 - clear plugin repository when stopping tuning - man: add description of the balanced-battery profile - net: added more coalescing options, filter out unsupported ones resolves: RHEL-181668 - new release - rebased tuned to latest upstream related: RHEL-123607 - new release - rebased tuned to latest upstream resolves: RHEL-123607 - cpu-partitioning: autodetect dracut hook directory, systemd workaround - openshift: optimize TCP settings for high throughput and low latency - profiles: Set boost=1 in *-performance profiles - sap-hana: force latency to 70 us, not to C-states - man: fixed instance_acquire_devices example in tuned-adm man - spec: use correct python interpreter for documentation installation - sysctl: add reapply_sysctl_exclude option - ppd: ask tuned recommend for base profile - new release - rebased tuned to latest upstream related: RHEL-94808 - new release - rebased tuned to latest upstream resolves: RHEL-94808 - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor - tuned-ppd: enabled sysfs_acpi_monitor by default - tuned-ppd: fixed inotify watch for performance degradation - tuned-ppd: pinned virtual files in memory for inotify - fixed instance priority inheritance - hotplug: added fixes for device remove race condition - tuned-main.conf: added startup_udev_settle_wait option - functions: silenced errors if module kvm_intel does not exist resolves: RHEL-79943 - functions: make calc_isolated_cores return CPU ranges resolves: RHEL-75751 - scsi: used 'med_power_with_dipm' for SATA ALPM - scsi: do not set ALPM on external SATA ports - network_latency: Set non-zero rcutree.nohz_full_patience_delay - realtime: Disable appropriate P-State drivers resolves: RHEL-85637 - plugin_disk: added support for MMC (MultiMediaCard) devices - udev: fix possible traceback in device matcher - udev-settle: obey udev buffer size and handle possible tracebacks - daemon: re-raise daemon init exception in no-daemon mode resolves: RHEL-71304 - vm: deprecate dirty_ratio in favour of dirty_bytes with percents resolves: RHEL-101578 - gui: fix the profile deleter script - Fix handling of kernel arguments on bootc systems resolves: RHEL-45836 resolves: RHEL-86814 - new release - rebased tuned to latest upstream related: RHEL-70457 - plugins: added missing instance parameters - disk: added missing remove parameter - plugin_scheduler: added switch to disable processing of kthreads - Makefile: added support for installation to custom LIBEXECDIR - functions: create a new parser object for each string expansion resolves: RHEL-75773 - new release - rebased tuned to latest upstream related: RHEL-70457 - sap-hana: Set transparent_hugepages to madvise - plugin_bootloader: export Grub variables to make them available in submenus - utils.commands: fixed CPU online detection when not present - plugin_net: handled cqe-mode-rx ethtool option - profiles: correct CPU governor settings - new release - rebased tuned to latest upstream resolves: RHEL-70457 - tuned-ppd: removed the use of StrEnum - tuned-ppd: fixed traceback - tuned-ppd: multiple fixes and updates - docs: plugins docs are now automatically generated from the docstrings - plugin_cpu: fixed no_turbo boolean option parsing resolves: RHEL-51760 - plugin_cpu: allowed raw energy_performance_preference values - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters resolves: RHEL-58820 - plugin_bootloader: added variables to BLS entries only if grub is used - plugin_scheduler: do not assume that perf events have type attribute - plugin_scheduler: updated sched knobs for kernels 6.6+ - plugin_scheduler: log process info when its affinity cannot be changed - plugin_scheduler: postpone cgroup blacklist check, double-check after fail resolves: RHEL-72981 - plugin_scheduler: made perf support optional - plugin_net: added support for hotplug and rename resolves: RHEL-60906 - makefile: added support for installation to custom $BINDIR/$SBINDIR - functions: dropped cpuspeed support - Fixed privileged execution of arbitrary scripts by active local user, (CVE-2024-52336) Resolves: RHEL-66638 - Added sanity checks for API methods parameters, (CVE-2024-52337) Resolves: RHEL-66615 - new release - rebased tuned to latest upstream related: RHEL-123607 - new release - rebased tuned to latest upstream resolves: RHEL-123607 - cpu-partitioning: autodetect dracut hook directory, systemd workaround - openshift: optimize TCP settings for high throughput and low latency - profiles: Set boost=1 in *-performance profiles - sap-hana: force latency to 70 us, not to C-states - man: fixed instance_acquire_devices example in tuned-adm man - spec: use correct python interpreter for documentation installation - sysctl: add reapply_sysctl_exclude option - ppd: ask tuned recommend for base profile - new release - rebased tuned to latest upstream related: RHEL-94808 - new release - rebased tuned to latest upstream resolves: RHEL-94808 - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor - tuned-ppd: enabled sysfs_acpi_monitor by default - tuned-ppd: fixed inotify watch for performance degradation - tuned-ppd: pinned virtual files in memory for inotify - fixed instance priority inheritance - hotplug: added fixes for device remove race condition - tuned-main.conf: added startup_udev_settle_wait option - functions: silenced errors if module kvm_intel does not exist resolves: RHEL-79943 - functions: make calc_isolated_cores return CPU ranges resolves: RHEL-75751 - scsi: used 'med_power_with_dipm' for SATA ALPM - scsi: do not set ALPM on external SATA ports - network_latency: Set non-zero rcutree.nohz_full_patience_delay - realtime: Disable appropriate P-State drivers resolves: RHEL-85637 - plugin_disk: added support for MMC (MultiMediaCard) devices - udev: fix possible traceback in device matcher - udev-settle: obey udev buffer size and handle possible tracebacks - daemon: re-raise daemon init exception in no-daemon mode resolves: RHEL-71304 - vm: deprecate dirty_ratio in favour of dirty_bytes with percents resolves: RHEL-101578 - gui: fix the profile deleter script - Fix handling of kernel arguments on bootc systems resolves: RHEL-45836 resolves: RHEL-86814 - new release - rebased tuned to latest upstream related: RHEL-70457 - plugins: added missing instance parameters - disk: added missing remove parameter - plugin_scheduler: added switch to disable processing of kthreads - Makefile: added support for installation to custom LIBEXECDIR - functions: create a new parser object for each string expansion resolves: RHEL-75773 - new release - rebased tuned to latest upstream related: RHEL-70457 - sap-hana: Set transparent_hugepages to madvise - plugin_bootloader: export Grub variables to make them available in submenus - utils.commands: fixed CPU online detection when not present - plugin_net: handled cqe-mode-rx ethtool option - profiles: correct CPU governor settings - new release - rebased tuned to latest upstream resolves: RHEL-70457 - tuned-ppd: removed the use of StrEnum - tuned-ppd: fixed traceback - tuned-ppd: multiple fixes and updates - docs: plugins docs are now automatically generated from the docstrings - plugin_cpu: fixed no_turbo boolean option parsing resolves: RHEL-51760 - plugin_cpu: allowed raw energy_performance_preference values - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters resolves: RHEL-58820 - plugin_bootloader: added variables to BLS entries only if grub is used - plugin_scheduler: do not assume that perf events have type attribute - plugin_scheduler: updated sched knobs for kernels 6.6+ - plugin_scheduler: log process info when its affinity cannot be changed - plugin_scheduler: postpone cgroup blacklist check, double-check after fail resolves: RHEL-72981 - plugin_scheduler: made perf support optional - plugin_net: added support for hotplug and rename resolves: RHEL-60906 - makefile: added support for installation to custom $BINDIR/$SBINDIR - functions: dropped cpuspeed support - Fixed privileged execution of arbitrary scripts by active local user, (CVE-2024-52336) Resolves: RHEL-66638 - Added sanity checks for API methods parameters, (CVE-2024-52337) Resolves: RHEL-66615 - new release - rebased tuned to latest upstream related: RHEL-50568 - clear plugin repository when stopping tuning - man: add description of the balanced-battery profile - net: added more coalescing options, filter out unsupported ones resolves: RHEL-181668 - new release - rebased tuned to latest upstream related: RHEL-123607 - new release - rebased tuned to latest upstream resolves: RHEL-123607 - cpu-partitioning: autodetect dracut hook directory, systemd workaround - openshift: optimize TCP settings for high throughput and low latency - profiles: Set boost=1 in *-performance profiles - sap-hana: force latency to 70 us, not to C-states - man: fixed instance_acquire_devices example in tuned-adm man - spec: use correct python interpreter for documentation installation - sysctl: add reapply_sysctl_exclude option - ppd: ask tuned recommend for base profile - new release - rebased tuned to latest upstream related: RHEL-94808 - new release - rebased tuned to latest upstream resolves: RHEL-94808 - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor - tuned-ppd: enabled sysfs_acpi_monitor by default - tuned-ppd: fixed inotify watch for performance degradation - tuned-ppd: pinned virtual files in memory for inotify - fixed instance priority inheritance - hotplug: added fixes for device remove race condition - tuned-main.conf: added startup_udev_settle_wait option - functions: silenced errors if module kvm_intel does not exist resolves: RHEL-79943 - functions: make calc_isolated_cores return CPU ranges resolves: RHEL-75751 - scsi: used 'med_power_with_dipm' for SATA ALPM - scsi: do not set ALPM on external SATA ports - network_latency: Set non-zero rcutree.nohz_full_patience_delay - realtime: Disable appropriate P-State drivers resolves: RHEL-85637 - plugin_disk: added support for MMC (MultiMediaCard) devices - udev: fix possible traceback in device matcher - udev-settle: obey udev buffer size and handle possible tracebacks - daemon: re-raise daemon init exception in no-daemon mode resolves: RHEL-71304 - vm: deprecate dirty_ratio in favour of dirty_bytes with percents resolves: RHEL-101578 - gui: fix the profile deleter script - Fix handling of kernel arguments on bootc systems resolves: RHEL-45836 resolves: RHEL-86814 - new release - rebased tuned to latest upstream related: RHEL-70457 - plugins: added missing instance parameters - disk: added missing remove parameter - plugin_scheduler: added switch to disable processing of kthreads - Makefile: added support for installation to custom LIBEXECDIR - functions: create a new parser object for each string expansion resolves: RHEL-75773 - new release - rebased tuned to latest upstream related: RHEL-70457 - sap-hana: Set transparent_hugepages to madvise - plugin_bootloader: export Grub variables to make them available in submenus - utils.commands: fixed CPU online detection when not present - plugin_net: handled cqe-mode-rx ethtool option - profiles: correct CPU governor settings - new release - rebased tuned to latest upstream resolves: RHEL-70457 - tuned-ppd: removed the use of StrEnum - tuned-ppd: fixed traceback - tuned-ppd: multiple fixes and updates - docs: plugins docs are now automatically generated from the docstrings - plugin_cpu: fixed no_turbo boolean option parsing resolves: RHEL-51760 - plugin_cpu: allowed raw energy_performance_preference values - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters resolves: RHEL-58820 - plugin_bootloader: added variables to BLS entries only if grub is used - plugin_scheduler: do not assume that perf events have type attribute - plugin_scheduler: updated sched knobs for kernels 6.6+ - plugin_scheduler: log process info when its affinity cannot be changed - plugin_scheduler: postpone cgroup blacklist check, double-check after fail resolves: RHEL-72981 - plugin_scheduler: made perf support optional - plugin_net: added support for hotplug and rename resolves: RHEL-60906 - makefile: added support for installation to custom $BINDIR/$SBINDIR - functions: dropped cpuspeed support - Fixed privileged execution of arbitrary scripts by active local user, (CVE-2024-52336) Resolves: RHEL-66638 - Added sanity checks for API methods parameters, (CVE-2024-52337) Resolves: RHEL-66615 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to tzdata-2026a (RHEL-154025) - Correct the transition times for Moldova. - The POSIXRULES option is now obsolete. - Update to tzdata-2025c (RHEL-135158) - Update leap seconds file expiration date - Included NEWS file with docs. (RHEL-105043) - Update to tzdata-2025b (RHEL-84741) - Chile's Aysén Region moves from -04/-03 to -03 year-round, diverging from America/Santiago and creating a new zone America/Coyhaique. Update to tzdata-2025a (RHEL-74308) - Paraguay is now permanently at -03. This impacts timestamps starting on 2025-03-22. - Includes improvements to pre-1991 data for the Philippines. - Etc/Unknown is now reserved. - Don't use -source 1.6 and -target 1.6 with javac. (RHEL-70308) - Harden against links to removed zones (RHEL-60063) - Update to tzdata-2024b - Improve historical data for Mexico, Mongolia, and Portugal. - System V names are now obsolescent. - The main data form now uses %z. - The code now conforms to RFC 8536 for early timestamps. - Support POSIX.1-2024, which removes asctime_r and ctime_r. - Assume POSIX.2-1992 or later for shell scripts. - SUPPORT_C89 now defaults to 1. - Include two upstream patches for month names as in April vs Apr. - Add java patch to fix incorrect calculations for Africa/Casablanca starting in 2027. (RHEL-26860) - Update to tzdata-2026b (RHEL-170784) - British Columbia’s 2026-03-08 spring forward is expected to be its last transition as it moves to permanent -07. - Update to tzdata-2026a (RHEL-154025) - Correct the transition times for Moldova. - The POSIXRULES option is now obsolete. - Update to tzdata-2025c (RHEL-135158) - Update leap seconds file expiration date - Included NEWS file with docs. (RHEL-105043) - Update to tzdata-2025b (RHEL-84741) - Chile's Aysén Region moves from -04/-03 to -03 year-round, diverging from America/Santiago and creating a new zone America/Coyhaique. Update to tzdata-2025a (RHEL-74308) - Paraguay is now permanently at -03. This impacts timestamps starting on 2025-03-22. - Includes improvements to pre-1991 data for the Philippines. - Etc/Unknown is now reserved. - Don't use -source 1.6 and -target 1.6 with javac. (RHEL-70308) - Harden against links to removed zones (RHEL-60063) - Update to tzdata-2024b - Improve historical data for Mexico, Mongolia, and Portugal. - System V names are now obsolescent. - The main data form now uses %z. - The code now conforms to RFC 8536 for early timestamps. - Support POSIX.1-2024, which removes asctime_r and ctime_r. - Assume POSIX.2-1992 or later for shell scripts. - SUPPORT_C89 now defaults to 1. - Include two upstream patches for month names as in April vs Apr. - Update to tzdata-2026c (RHEL-194098) - Alberta moved to permanent -06 on 2026-06-18. - Morocco moves to permanent +00 on 2026-09-20. - Update to tzdata-2026b (RHEL-170784) - British Columbia’s 2026-03-08 spring forward is expected to be its last transition as it moves to permanent -07. - Update to tzdata-2026a (RHEL-154025) - Correct the transition times for Moldova. - The POSIXRULES option is now obsolete. - Update to tzdata-2025c (RHEL-135158) - Update leap seconds file expiration date - Included NEWS file with docs. (RHEL-105043) - Update to tzdata-2025b (RHEL-84741) - Chile's Aysén Region moves from -04/-03 to -03 year-round, diverging from America/Santiago and creating a new zone America/Coyhaique. Update to tzdata-2025a (RHEL-74308) - Paraguay is now permanently at -03. This impacts timestamps starting on 2025-03-22. - Includes improvements to pre-1991 data for the Philippines. - Etc/Unknown is now reserved. - Don't use -source 1.6 and -target 1.6 with javac. (RHEL-70308) - Harden against links to removed zones (RHEL-60063) - Update to tzdata-2024b - Improve historical data for Mexico, Mongolia, and Portugal. - System V names are now obsolescent. - The main data form now uses %z. - The code now conforms to RFC 8536 for early timestamps. - Support POSIX.1-2024, which removes asctime_r and ctime_r. - Assume POSIX.2-1992 or later for shell scripts. - SUPPORT_C89 now defaults to 1. - Include two upstream patches for month names as in April vs Apr. - Update to tzdata-2026e (RHEL-262032) - Manitoba moves to permanent -05 on 2026-10-31. - Update to tzdata-2026d (RHEL-262032) - Canada's Northwest Territories moved to permanent -06 on 2026-08-21. - Obsolescent settings like TZ="EST5EDT" now conform better to POSIX. - Update to tzdata-2026c (RHEL-194098) - Alberta moved to permanent -06 on 2026-06-18. - Morocco moves to permanent +00 on 2026-09-20. - Update to tzdata-2026b (RHEL-170784) - British Columbia’s 2026-03-08 spring forward is expected to be its last transition as it moves to permanent -07. - Update to tzdata-2026a (RHEL-154025) - Correct the transition times for Moldova. - The POSIXRULES option is now obsolete. - Update to tzdata-2025c (RHEL-135158) - Update leap seconds file expiration date - Included NEWS file with docs. (RHEL-105043) - Update to tzdata-2025b (RHEL-84741) - Chile's Aysén Region moves from -04/-03 to -03 year-round, diverging from America/Santiago and creating a new zone America/Coyhaique. Update to tzdata-2025a (RHEL-74308) - Paraguay is now permanently at -03. This impacts timestamps starting on 2025-03-22. - Includes improvements to pre-1991 data for the Philippines. - Etc/Unknown is now reserved. - Don't use -source 1.6 and -target 1.6 with javac. (RHEL-70308) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves:rhbz#1962002 - Add gating tests - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Resolves: rhbz#1933581 - Don't BuildRequires xorg-x11-font-utils - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt with fonttosfnt 1.2.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Provide OpenType Bitmap fonts - Add ucs-miscfixed-opentype-fonts sub package - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for RHEL-9.8 - Resolves: RHEL-98268 - Update to upstream release 1.19.1 - Resolves: RHEL-98268 - bump release to rebuild in sidetag - Resolves: RHEL-98268 - Update to upstream release 1.19.0 - Resolves: RHEL-98268 - Update to upstream release 1.18.1 - Resolves: RHEL-94447 - Fix build for ppc64le - Resolves: RHEL-52883 - Update to upstream release 1.17.0 - Resolves: RHEL-52883 - Update to upstream release 1.16.0 - Resolves: RHEL-24468, RHEL-31249 - Rebuilt for RHEL-9.8 - Resolves: RHEL-98268 - Update to upstream release 1.19.1 - Resolves: RHEL-98268 - bump release to rebuild in sidetag - Resolves: RHEL-98268 - Update to upstream release 1.19.0 - Resolves: RHEL-98268 - Update to upstream release 1.18.1 - Resolves: RHEL-94447 - Fix build for ppc64le - Resolves: RHEL-52883 - Update to upstream release 1.17.0 - Resolves: RHEL-52883 - Update to upstream release 1.16.0 - Resolves: RHEL-24468, RHEL-31249 - Rebuilt for RHEL-9.8 - Resolves: RHEL-98268 - Update to upstream release 1.19.1 - Resolves: RHEL-98268 - bump release to rebuild in sidetag - Resolves: RHEL-98268 - Update to upstream release 1.19.0 - Resolves: RHEL-98268 - Update to upstream release 1.18.1 - Resolves: RHEL-94447 - Fix build for ppc64le - Resolves: RHEL-52883 - Update to upstream release 1.17.0 - Resolves: RHEL-52883 - Update to upstream release 1.16.0 - Resolves: RHEL-24468, RHEL-31249 - Rebuilt for RHEL-9.8 - Resolves: RHEL-98268 - Update to upstream release 1.19.1 - Resolves: RHEL-98268 - bump release to rebuild in sidetag - Resolves: RHEL-98268 - Update to upstream release 1.19.0 - Resolves: RHEL-98268 - Update to upstream release 1.18.1 - Resolves: RHEL-94447 - Fix build for ppc64le - Resolves: RHEL-52883 - Update to upstream release 1.17.0 - Resolves: RHEL-52883 - Update to upstream release 1.16.0 - Resolves: RHEL-24468, RHEL-31249 - Rebuilt for RHEL-9.8 - Resolves: RHEL-98268 - Update to upstream release 1.19.1 - Resolves: RHEL-98268 - bump release to rebuild in sidetag - Resolves: RHEL-98268 - Update to upstream release 1.19.0 - Resolves: RHEL-98268 - Update to upstream release 1.18.1 - Resolves: RHEL-94447 - Fix build for ppc64le - Resolves: RHEL-52883 - Update to upstream release 1.17.0 - Resolves: RHEL-52883 - Update to upstream release 1.16.0 - Resolves: RHEL-24468, RHEL-31249 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Import to c9s Resolves: #1949905 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 2.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Add option to generate custom policy for a confined user (RHEL-28166) - Add tests covering confined user policy generation - confined: make "-l" non optional - confined: allow asynchronous I/O operations - Improve code readability based on lint and black findings - Fix generating policy for Crio mounts - Add --devices option - v0.2.7 release changes: - Improve label collection for mounts and devices (RHEL-16245) - Add support for containerd via "nerdctl inspect" - Avoid duplicate rules for accessing mounts and devices - Bump release to preserve upgrade path (#2160401) - udiskslinuxmanager: Add lower bounds check to fd_index (CVE-2025-8067) (RHEL-109413) - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder - lvm2: Refactor udisks_daemon_util_lvm2_wipe_block() - tests: Fix targetcli_config.json (RHEL-16229) - udiskslinuxmanager: Add lower bounds check to fd_index (CVE-2025-8067) (RHEL-109413) - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder - lvm2: Refactor udisks_daemon_util_lvm2_wipe_block() - tests: Fix targetcli_config.json (RHEL-16229) - udiskslinuxmanager: Add lower bounds check to fd_index (CVE-2025-8067) (RHEL-109413) - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder - lvm2: Refactor udisks_daemon_util_lvm2_wipe_block() - tests: Fix targetcli_config.json (RHEL-16229) - udiskslinuxmanager: Add lower bounds check to fd_index (CVE-2025-8067) (RHEL-109413) - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder - lvm2: Refactor udisks_daemon_util_lvm2_wipe_block() - tests: Fix targetcli_config.json (RHEL-16229) - backport bootctl fix for 99-uki-uefi-setup.install - Resolves: RHEL-84984 - update to version 24.11 - Resolves: RHEL-69507 - update to version 24.7 - update to version 24.4 - update to version 24.2 - update to version 24.1.1 - update to version 24.1 - Resolves: RHEL-21090 - add "obsoletes: rhel-cvm-update-tool" to uki-direct - add uki-direct subpackage - Resolves: RHEL-19383 - update to version 23.11 - Switch TLS configuration to follow TLS sockets by crypto-policy again (RHEL-147860) - Change the default of tls-use-system-policy-versions at build-time - Add new root key 38696 (RHEL-77716) - Do not verify root.key in libs (RHEL-64339) - Create root key if missing automatically (RHEL-127540) - Fix RebirthDay Attack (CVE-2025-5994) - Resolves: RHEL-104129 - Fix verification of unbound-control key files - Resolves: RHEL-65396 - Fix regression on update introduced by local-root symlink - Resolves: RHEL-92255 - Prevent unbounded name compression (CVE-2024-8508) - Add as112 networks config file - Resolves: RHEL-78696 - Add possibility to disable unbound-anchor by file presence - Resolves: RHEL-78694 - Fix CVE-2026-33278 (RHEL‑177822) Fix CVE-2026-42944 (RHEL-177936) Fix CVE-2026-42959 (RHEL-177797) - Install correct trust anchor source in Image Mode (RHEL-127540) - Switch TLS configuration to follow TLS sockets by crypto-policy again (RHEL-147860) - Change the default of tls-use-system-policy-versions at build-time - Add new root key 38696 (RHEL-77716) - Do not verify root.key in libs (RHEL-64339) - Create root key if missing automatically (RHEL-127540) - Fix RebirthDay Attack (CVE-2025-5994) - Resolves: RHEL-104129 - Fix verification of unbound-control key files - Resolves: RHEL-65396 - Fix regression on update introduced by local-root symlink - Resolves: RHEL-92255 - Prevent unbounded name compression (CVE-2024-8508) - Fix CVE-2026-40622 (RHEL-184840) Fix CVE-2026-44390 (RHEL-186688) Fix CVE-2026-41292 (RHEL-187352) Fix CVE-2026-42534 (RHEL-187095) - Fix CVE-2026-33278 (RHEL-177822) Fix CVE-2026-42944 (RHEL-177936) Fix CVE-2026-42959 (RHEL-177797) - Install correct trust anchor source in Image Mode (RHEL-127540) - Switch TLS configuration to follow TLS sockets by crypto-policy again (RHEL-147860) - Change the default of tls-use-system-policy-versions at build-time - Add new root key 38696 (RHEL-77716) - Do not verify root.key in libs (RHEL-64339) - Create root key if missing automatically (RHEL-127540) - Fix RebirthDay Attack (CVE-2025-5994) - Resolves: RHEL-104129 - Fix verification of unbound-control key files - Resolves: RHEL-65396 - Fix regression on update introduced by local-root symlink - Resolves: RHEL-92255 - Fix CVE-2026-55973 (RHEL-212809) - Backport additional fix from 1.26.0 (CVE-2026-50252) - Fix CVE-2026-50252 (RHEL-243479) - Fix CVE-2026-55973 (RHEL-212809) - Prevent heap corruption during CNAME synthesis (CVE-2026-82717) - Prevent heap buffer overflow when digesting DNSKEY (CVE-2026-81642) - Prevent heap buffer overflow during DNSSEC canonicalization (CVE-2026-81634) - Add unit tests for vulnerabilities too - Backport additional fix from 1.26.0 (CVE-2026-50252) - Fix CVE-2026-50252 (RHEL-243479) - Fix CVE-2026-55973 (RHEL-212809) - Switch TLS configuration to follow TLS sockets by crypto-policy again (RHEL-147860) - Change the default of tls-use-system-policy-versions at build-time - Add new root key 38696 (RHEL-77716) - Do not verify root.key in libs (RHEL-64339) - Create root key if missing automatically (RHEL-127540) - Fix RebirthDay Attack (CVE-2025-5994) - Resolves: RHEL-104129 - Fix verification of unbound-control key files - Resolves: RHEL-65396 - Fix regression on update introduced by local-root symlink - Resolves: RHEL-92255 - Prevent unbounded name compression (CVE-2024-8508) - Add as112 networks config file - Resolves: RHEL-78696 - Add possibility to disable unbound-anchor by file presence - Resolves: RHEL-78694 - Fix CVE-2026-33278 (RHEL‑177822) Fix CVE-2026-42944 (RHEL-177936) Fix CVE-2026-42959 (RHEL-177797) - Install correct trust anchor source in Image Mode (RHEL-127540) - Switch TLS configuration to follow TLS sockets by crypto-policy again (RHEL-147860) - Change the default of tls-use-system-policy-versions at build-time - Add new root key 38696 (RHEL-77716) - Do not verify root.key in libs (RHEL-64339) - Create root key if missing automatically (RHEL-127540) - Fix RebirthDay Attack (CVE-2025-5994) - Resolves: RHEL-104129 - Fix verification of unbound-control key files - Resolves: RHEL-65396 - Fix regression on update introduced by local-root symlink - Resolves: RHEL-92255 - Prevent unbounded name compression (CVE-2024-8508) - Fix CVE-2026-40622 (RHEL-184840) Fix CVE-2026-44390 (RHEL-186688) Fix CVE-2026-41292 (RHEL-187352) Fix CVE-2026-42534 (RHEL-187095) - Fix CVE-2026-33278 (RHEL-177822) Fix CVE-2026-42944 (RHEL-177936) Fix CVE-2026-42959 (RHEL-177797) - Install correct trust anchor source in Image Mode (RHEL-127540) - Switch TLS configuration to follow TLS sockets by crypto-policy again (RHEL-147860) - Change the default of tls-use-system-policy-versions at build-time - Add new root key 38696 (RHEL-77716) - Do not verify root.key in libs (RHEL-64339) - Create root key if missing automatically (RHEL-127540) - Fix RebirthDay Attack (CVE-2025-5994) - Resolves: RHEL-104129 - Fix verification of unbound-control key files - Resolves: RHEL-65396 - Fix regression on update introduced by local-root symlink - Resolves: RHEL-92255 - Fix CVE-2026-55973 (RHEL-212809) - Backport additional fix from 1.26.0 (CVE-2026-50252) - Fix CVE-2026-50252 (RHEL-243479) - Fix CVE-2026-55973 (RHEL-212809) - Prevent heap corruption during CNAME synthesis (CVE-2026-82717) - Prevent heap buffer overflow when digesting DNSKEY (CVE-2026-81642) - Prevent heap buffer overflow during DNSSEC canonicalization (CVE-2026-81634) - Add unit tests for vulnerabilities too - Backport additional fix from 1.26.0 (CVE-2026-50252) - Fix CVE-2026-50252 (RHEL-243479) - Fix CVE-2026-55973 (RHEL-212809) - Switch TLS configuration to follow TLS sockets by crypto-policy again (RHEL-147860) - Change the default of tls-use-system-policy-versions at build-time - Add new root key 38696 (RHEL-77716) - Do not verify root.key in libs (RHEL-64339) - Create root key if missing automatically (RHEL-127540) - Fix RebirthDay Attack (CVE-2025-5994) - Resolves: RHEL-104129 - Fix verification of unbound-control key files - Resolves: RHEL-65396 - Fix regression on update introduced by local-root symlink - Resolves: RHEL-92255 - Prevent unbounded name compression (CVE-2024-8508) - Add as112 networks config file - Resolves: RHEL-78696 - Add possibility to disable unbound-anchor by file presence - Resolves: RHEL-78694 - Fix CVE-2026-33278 (RHEL‑177822) Fix CVE-2026-42944 (RHEL-177936) Fix CVE-2026-42959 (RHEL-177797) - Install correct trust anchor source in Image Mode (RHEL-127540) - Switch TLS configuration to follow TLS sockets by crypto-policy again (RHEL-147860) - Change the default of tls-use-system-policy-versions at build-time - Add new root key 38696 (RHEL-77716) - Do not verify root.key in libs (RHEL-64339) - Create root key if missing automatically (RHEL-127540) - Fix RebirthDay Attack (CVE-2025-5994) - Resolves: RHEL-104129 - Fix verification of unbound-control key files - Resolves: RHEL-65396 - Fix regression on update introduced by local-root symlink - Resolves: RHEL-92255 - Prevent unbounded name compression (CVE-2024-8508) - Fix CVE-2026-40622 (RHEL-184840) Fix CVE-2026-44390 (RHEL-186688) Fix CVE-2026-41292 (RHEL-187352) Fix CVE-2026-42534 (RHEL-187095) - Fix CVE-2026-33278 (RHEL-177822) Fix CVE-2026-42944 (RHEL-177936) Fix CVE-2026-42959 (RHEL-177797) - Install correct trust anchor source in Image Mode (RHEL-127540) - Switch TLS configuration to follow TLS sockets by crypto-policy again (RHEL-147860) - Change the default of tls-use-system-policy-versions at build-time - Add new root key 38696 (RHEL-77716) - Do not verify root.key in libs (RHEL-64339) - Create root key if missing automatically (RHEL-127540) - Fix RebirthDay Attack (CVE-2025-5994) - Resolves: RHEL-104129 - Fix verification of unbound-control key files - Resolves: RHEL-65396 - Fix regression on update introduced by local-root symlink - Resolves: RHEL-92255 - Fix CVE-2026-55973 (RHEL-212809) - Backport additional fix from 1.26.0 (CVE-2026-50252) - Fix CVE-2026-50252 (RHEL-243479) - Fix CVE-2026-55973 (RHEL-212809) - Prevent heap corruption during CNAME synthesis (CVE-2026-82717) - Prevent heap buffer overflow when digesting DNSKEY (CVE-2026-81642) - Prevent heap buffer overflow during DNSSEC canonicalization (CVE-2026-81634) - Add unit tests for vulnerabilities too - Backport additional fix from 1.26.0 (CVE-2026-50252) - Fix CVE-2026-50252 (RHEL-243479) - Fix CVE-2026-55973 (RHEL-212809) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - update to Unicode 13 - https://www.unicode.org/versions/Unicode13.0.0/ - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Add noarch to ExclusiveArch - Disable building on i686 - Rebuild with regenerated Requires on Java - Rebase to version 2.3.12 - Add unixODBC-c89.patch for GCC 14 compatibility - Update so-version-bump.patch for new version - Fix multilib_fix_c_header path to match actual header location - Resolves: RHEL-94798 - Fix multilib conflict for 'unixodbc.h' header - Rebase to version 2.3.12 - Add unixODBC-c89.patch for GCC 14 compatibility - Update so-version-bump.patch for new version - Fix multilib_fix_c_header path to match actual header location - Resolves: RHEL-94798 - Rebuild with updated test dependencies Related: #1994639 - Update to 0.99.13 Resolves: #1994639 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild + upower-0.99.11-8 - Remove USB dependency + upower-0.99.11-7 - Disable libimobiledevice integration on RHEL - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild + upower-0.99.11-5 - Use upstreamed libplist patch - Add support for iPhone XS,XR - Fix imobiledevice support with new libplist, rebuild for soname bumps - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - New upstream release including cgroupify Resolves: #1931938 Resolves: #1931934 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - New upstream release fixing various issues - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - New upstream release enabling CPU/IO controllers for applications - Initial package (rhbz#1854898) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Require mkfontscale and mkfontdir directly (#1937125) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Fix some X11-related packaging bugs (#1918947) - Rebase to 20200910 version (#1877974) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - do not mention specific OS in description - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Require mkfontscale and mkfontdir directly (#1937125) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Fix some X11-related packaging bugs (#1918947) - Rebase to 20200910 version (#1877974) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - do not mention specific OS in description - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Require mkfontscale and mkfontdir directly (#1937125) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Fix some X11-related packaging bugs (#1918947) - Rebase to 20200910 version (#1877974) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - do not mention specific OS in description - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Require mkfontscale and mkfontdir directly (#1937125) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Fix some X11-related packaging bugs (#1918947) - Rebase to 20200910 version (#1877974) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - do not mention specific OS in description - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Require mkfontscale and mkfontdir directly (#1937125) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Fix some X11-related packaging bugs (#1918947) - Rebase to 20200910 version (#1877974) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - do not mention specific OS in description - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Require mkfontscale and mkfontdir directly (#1937125) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Fix some X11-related packaging bugs (#1918947) - Rebase to 20200910 version (#1877974) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - do not mention specific OS in description - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Require mkfontscale and mkfontdir directly (#1937125) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Fix some X11-related packaging bugs (#1918947) - Rebase to 20200910 version (#1877974) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - do not mention specific OS in description - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Require mkfontscale and mkfontdir directly (#1937125) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Fix some X11-related packaging bugs (#1918947) - Rebase to 20200910 version (#1877974) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - do not mention specific OS in description - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Require mkfontscale and mkfontdir directly (#1937125) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Fix some X11-related packaging bugs (#1918947) - Rebase to 20200910 version (#1877974) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - do not mention specific OS in description - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Require mkfontscale and mkfontdir directly (#1937125) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Fix some X11-related packaging bugs (#1918947) - Rebase to 20200910 version (#1877974) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - do not mention specific OS in description - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Require mkfontscale and mkfontdir directly (#1937125) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Fix some X11-related packaging bugs (#1918947) - Rebase to 20200910 version (#1877974) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - do not mention specific OS in description - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Require mkfontscale and mkfontdir directly (#1937125) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Fix some X11-related packaging bugs (#1918947) - Rebase to 20200910 version (#1877974) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - do not mention specific OS in description - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - restore permissions of usbguard files Resolves: RHEL-126440 - rebase to 1.1.4 - restore permissions of usbguard files Resolves: RHEL-126440 - Install usbguard-tmpfles.conf Resolves: RHEL-78188 - restore permissions of usbguard files Resolves: RHEL-126440 - rebase to 1.1.4 - restore permissions of usbguard files Resolves: RHEL-126440 - Install usbguard-tmpfles.conf Resolves: RHEL-78188 - restore permissions of usbguard files Resolves: RHEL-126440 - rebase to 1.1.4 - restore permissions of usbguard files Resolves: RHEL-126440 - Install usbguard-tmpfles.conf Resolves: RHEL-78188 - restore permissions of usbguard files Resolves: RHEL-126440 - rebase to 1.1.4 - restore permissions of usbguard files Resolves: RHEL-126440 - Install usbguard-tmpfles.conf Resolves: RHEL-78188 - restore permissions of usbguard files Resolves: RHEL-126440 - rebase to 1.1.4 - restore permissions of usbguard files Resolves: RHEL-126440 - Install usbguard-tmpfles.conf Resolves: RHEL-78188 - Fixes 100% CPU usage when usbredirect used as TCP server Related: rhbz#2157520 - Fixes USB redirection of identical devices Resolves: rhbz#2157520 - Rebase to latest upstream: 0.13.0 - Keeps usbredirserver binary (removed upstream) Related: rhbz#2135760 - Fix unserialization (migration regression) Related: rhbz#2111368 - Fix gating process Related: rhbz#2020215 - Rebase to latest upstream: 0.12.0 Related: rhbz#2020215 - Avoid use-after-free in serialization Related: rhbz#1992873 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Fixes 100% CPU usage when usbredirect used as TCP server Related: rhbz#2157520 - Fixes USB redirection of identical devices Resolves: rhbz#2157520 - Rebase to latest upstream: 0.13.0 - Keeps usbredirserver binary (removed upstream) Related: rhbz#2135760 - Fix unserialization (migration regression) Related: rhbz#2111368 - Fix gating process Related: rhbz#2020215 - Rebase to latest upstream: 0.12.0 Related: rhbz#2020215 - Avoid use-after-free in serialization Related: rhbz#1992873 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - do not crash when missing action argument (RHEL-90414) - do not (double) free environ as glibc may want to do that (RHEL-76332) - fix static analysis findings (RHEL-27043) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - New upstream release. - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - fix build flags (#2044896) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild to pick up new build flags from redhat-rpm-config (#1984652) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Specify all perl dependencies - fix build flags (#2044896) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild to pick up new build flags from redhat-rpm-config (#1984652) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Specify all perl dependencies - fix build flags (#2044896) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild to pick up new build flags from redhat-rpm-config (#1984652) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Perl 5.32 rebuild - Specify all perl dependencies - fix RHEL-132706 - use sysusers.d for uuidd - fix RHEL-133956 - login-utils: fix setpwnam() buffer use [CVE-2025-14104] - fix RHEL-123527 - mount: improve --all documentation - fix RHEL-123531 - libblkid: use snprintf() instead of sprintf() - fix RHEL-123536 - libfdisk: (dos) fix off-by-one in maximum last sector calculation - fix RHEL-113638 - lscpu: update ARM identifiers - fix RHEL-108386 - libblkid: (jmicron_raid) backport checksum verification - fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing - fix RHEL-56983 - sulogin: fix POSIX locale use - fix RHEL-25559 - more: make sure we have data on stderr - fix RHEL-34165 - lsipc: fix semaphore USED counter - fix RHEL-25265 - libblkid: Check offset in LUKS2 header - fix RHEL-25559 - more: fix poll() use - lscpu: another tests update (RHEL-12783) - lscpu: update tests, follow max freq for scaling (RHEL-12783) - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1) - fix RHEL-21257 - logger sending process start time not current time with log messages - fix RHEL-16071 - issues in libblkid - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value - fix RHEL-14612 - Userspace mount options are not preserved for NFS - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163369 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to 22.22.0 Resolves: RHEL-141879 - Update to 22.19.0 Resolves: RHEL-100426 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Update to 22.15.0 - Drop upstream patches - Patch fix for sqlite CVE-2025-31498 Resolves: RHEL-87320 - Update c-ares to newest version with fix for CVE-2025-31498 Resolves: RHEL-86587 - Remove obsolete lua pretransaction script from spec file Resolves: RHEL-81119 - Disable npm update notifications for users Resolves: RHEL-81079 - Update to version 22.13.1 Fixes CVE-2025-23083 CVE-2025-23085 CVE-2025-22150 Resolves: RHEL-76354 - Update to version 22.23.1 Resolves: RHEL-186622 RHEL-185998 RHEL-183669 Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-2026-48931 CVE-2026-48935 CVE-2026-42338 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163370 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to 22.22.0 Resolves: RHEL-118153 - Update to 22.19.0 Resolves: RHEL-111913 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Update to 22.15.0 - Drop upstream patches - Patch fix for sqlite CVE-2025-31498 Resolves: RHEL-87320 - Update c-ares to newest version with fix for CVE-2025-31498 Resolves: RHEL-86587 - Remove obsolete lua pretransaction script from spec file Resolves: RHEL-81119 - Disable npm update notifications for users Resolves: RHEL-81079 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) by rebasing npm's bundled tar to 7.5.19 - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion Fixes: CVE-2026-59873 CVE-2026-59874 CVE-2026-13149 Resolves: RHEL-212550 RHEL-193849 RHEL-193891 RHEL-208680 - Update to version 22.23.1 Resolves: RHEL-186622 RHEL-185998 RHEL-183669 Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-2026-48931 CVE-2026-48935 CVE-2026-42338 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163370 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to 22.22.0 Resolves: RHEL-118153 - Update to 22.19.0 Resolves: RHEL-111913 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Update to 22.15.0 - Drop upstream patches - Patch fix for sqlite CVE-2025-31498 Resolves: RHEL-87320 - Update c-ares to newest version with fix for CVE-2025-31498 Resolves: RHEL-86587 - deps: update npm/ip-address to 10.4.0 - deps: update npm/brace-expansion to 2.1.4 Fix: CVE-2026-69192 & CVE-2026-54272 CVE-2026-69152 Resolves: RHEL-223914 RHEL-223798 - deps: update sqlite to 3.53.4 Fix: CVE-2026-11824, CVE-2026-11822 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) by rebasing npm's bundled tar to 7.5.19 - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion Fixes: CVE-2026-59873 CVE-2026-59874 CVE-2026-13149 Resolves: RHEL-212550 RHEL-193849 RHEL-193891 RHEL-208680 - Update to version 22.23.1 Resolves: RHEL-186622 RHEL-185998 RHEL-183669 Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-2026-48931 CVE-2026-48935 CVE-2026-42338 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163370 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to 22.22.0 Resolves: RHEL-118153 - Update to 22.19.0 Resolves: RHEL-111913 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Update to 22.15.0 - Drop upstream patches - Update to version 22.23.2 Fixes: CVE-2026-56846 CVE-2026-56848 CVE-2026-58043 Resolves: RHEL-234381 RHEL-234831 RHEL-234896 - deps: update npm/ip-address to 10.4.0 - deps: update npm/brace-expansion to 2.1.4 Fix: CVE-2026-69192 & CVE-2026-54272 CVE-2026-69152 Resolves: RHEL-223914 RHEL-223798 - deps: update sqlite to 3.53.4 Fix: CVE-2026-11824, CVE-2026-11822 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) by rebasing npm's bundled tar to 7.5.19 - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion Fixes: CVE-2026-59873 CVE-2026-59874 CVE-2026-13149 Resolves: RHEL-212550 RHEL-193849 RHEL-193891 RHEL-208680 - Update to version 22.23.1 Resolves: RHEL-186622 RHEL-185998 RHEL-183669 Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-2026-48931 CVE-2026-48935 CVE-2026-42338 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163370 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to 22.22.0 Resolves: RHEL-118153 - Update to 22.19.0 Resolves: RHEL-111913 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Patches Pacote CVE and update undici to 6.28.1 Fixes: CVE-2026-9496 CVE-2026-19534 Resolves: RHEL-259889 RHEL-255272 - Update to version 22.23.2 Fixes: CVE-2026-56846 CVE-2026-56848 CVE-2026-58043 Resolves: RHEL-234381 RHEL-234831 RHEL-234896 - deps: update npm/ip-address to 10.4.0 - deps: update npm/brace-expansion to 2.1.4 Fix: CVE-2026-69192 & CVE-2026-54272 CVE-2026-69152 Resolves: RHEL-223914 RHEL-223798 - deps: update sqlite to 3.53.4 Fix: CVE-2026-11824, CVE-2026-11822 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) by rebasing npm's bundled tar to 7.5.19 - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion Fixes: CVE-2026-59873 CVE-2026-59874 CVE-2026-13149 Resolves: RHEL-212550 RHEL-193849 RHEL-193891 RHEL-208680 - Update to version 22.23.1 Resolves: RHEL-186622 RHEL-185998 RHEL-183669 Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-2026-48931 CVE-2026-48935 CVE-2026-42338 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163370 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to 22.22.0 Resolves: RHEL-118153 - Update to 22.19.0 Resolves: RHEL-111913 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Update to version 24.13.0 - Disable test-tls-session-cache.js as its not currently compatiable with RHEL environment - Update to version 24.11.1 - Add patch to prevent fips usage segfault - Rename nodejs-npm back to npm - Make nodejs-npm provide npm as well - Remove sqlite extension test - Switch to compilation using gcc-toolset-12 - Update to version 24.18.0 - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Update to version 24.13.0 - Disable test-tls-session-cache.js as its not currently compatiable with RHEL environment - Update to version 24.11.1 - Add patch to prevent fips usage segfault - Rename nodejs-npm back to npm - Make nodejs-npm provide npm as well - Remove sqlite extension test - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) in npm's bundled tar - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion - Update to version 24.18.0 - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Update to version 24.13.0 - Disable test-tls-session-cache.js as its not currently compatiable with RHEL environment - Update to version 24.11.1 - Add patch to prevent fips usage segfault - Rename nodejs-npm back to npm - Update brace-expansion from 5.0.6 to 5.0.9 to address CVE-2026-13149 (memory exhaustion via deeply chained brace groups). as well as CVE-2026-14257 (fixed in 5.0.8). - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - deps: update sqlite to 3.53.4 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) in npm's bundled tar - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion - Update to version 24.18.0 - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Update to version 24.13.0 - Disable test-tls-session-cache.js as its not currently compatiable with RHEL environment - Update to version 24.19.0 - Update brace-expansion from 5.0.6 to 5.0.9 to address CVE-2026-13149 (memory exhaustion via deeply chained brace groups). as well as CVE-2026-14257 (fixed in 5.0.8). - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - deps: update sqlite to 3.53.4 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) in npm's bundled tar - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion - Update to version 24.18.0 - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Update to version 24.13.0 - Update to version 24.21.0 - Update to version 24.19.0 - Update brace-expansion from 5.0.6 to 5.0.9 to address CVE-2026-13149 (memory exhaustion via deeply chained brace groups). as well as CVE-2026-14257 (fixed in 5.0.8). - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - deps: update sqlite to 3.53.4 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) in npm's bundled tar - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion - Update to version 24.18.0 - Update bundled nghttp2 to 1.68.1 - Update to version 24.14.1 - Add 0001-Refix-still_reachable-xml-closing-tag-and-add-testca.patch - Add VALGRIND_3_26_BRANCH patches - 0001-Prepare-NEWS-for-branch-3.26-fixes.patch - 0002-Bug-511972-valgrind-3.26.0-tests-fail-to-build-on-up.patch - 0003-readlink-proc-self-exe-overwrites-buffer-beyond-its-.patch - 0004-Linux-DRD-suppression-add-an-entry-for-__is_decorate.patch - 0005-Linux-Helgrind-add-a-suppression-for-_dl_allocate_tl.patch - 0006-Disable-linux-madvise-MADV_GUARD_INSTALL.patch - 0007-Bug-514613-Unclosed-leak_summary-still_reachable-tag.patch - 0008-Bug-514206-Assertion-sr_isError-sr-failed-mmap-fd-po.patch - Valgrind 3.26.0 final - Remove all VALGRIND_3_25_BRANCH and proposed upstream patches - Refresh some-stack-protector and some-Wl-z-now patches. - Add vgstack to valgrind-gdb. - Update License to GPL-3.0-or-later - Add ppc64-strcmp-ld.patch - Add 0003-Add-several-missing-syscall-hooks-to-ppc64-linux.patch - Add VALGRIND_3_25_BRANCH patches - 0001-Prepare-NEWS-for-branch-3.25.x-fixes.patch - 0002-Bug-503241-s390x-Support-z17-changes-to-the-NNPA-ins.patch - Valgrind 3.25.1 final - Valgrind 3.25.0 final - Split main valgrind package into several subpackages: - valgrind now contains just the core tools. - valgrind-scripts contains the post-processing scripts for callgrind, cachegrind, massif and dhat which depend on perl and python. - valgrind-gdb contains the debuginfo client/server and (v)gdb support. - valgrind-docs contains the man pages, html and pdf manual. - Adjust Requires/Recommends to subpackages can be installed independently. - valgrind-devel now Recommends, instead of Requires, valgrind. - valgrind-gdb Requires valgrind - valgrind-scripts Recommends valgrind-gdb - valgrind-gdb Recommends gdb - Add more VALGRIND_3_24_BRANCH patches 0012-Recognize-new-DWARF5-DW_LANG-constants.patch 0013-Bug-498317-FdBadUse-is-not-a-valid-CoreError-type-in.patch 0014-linux-support-EVIOCGRAB-ioctl.patch - Add VALGRIND_3_24_BRANCH patches 0001-Prepare-NEWS-for-branch-3.24-fixes.patch 0002-vgdb.c-fork_and_exec_valgrind-Fix-off-by-one-error-w.patch 0003-vgdb.c-fork_and_exec_valgrind-Fix-another-off-by-one.patch 0004-regtest-add-a-fdleak-filter-for-write-on-write-on-li.patch 0005-Add-exp-and-supp-patterns-for-missing-main-frame-for.patch 0006-Add-additional-exp-ppc64le-files-to-EXTRA_DIST.patch 0007-Add-support-for-landlock_create_ruleset-444-landlock.patch 0008-helgrind-tests-tc17_sembar.c-Remove-bool-typedef.patch 0009-drd-tests-swapcontext.c-Rename-typedef-struct-thread.patch 0010-none-tests-bug234814.c-sa_handler-take-an-int-as-arg.patch 0011-Add-open_tree-move_mount-fsopen-fsconfig-fsmount-fsp.patch - Add 0001-Refix-still_reachable-xml-closing-tag-and-add-testca.patch - Add VALGRIND_3_26_BRANCH patches - 0001-Prepare-NEWS-for-branch-3.26-fixes.patch - 0002-Bug-511972-valgrind-3.26.0-tests-fail-to-build-on-up.patch - 0003-readlink-proc-self-exe-overwrites-buffer-beyond-its-.patch - 0004-Linux-DRD-suppression-add-an-entry-for-__is_decorate.patch - 0005-Linux-Helgrind-add-a-suppression-for-_dl_allocate_tl.patch - 0006-Disable-linux-madvise-MADV_GUARD_INSTALL.patch - 0007-Bug-514613-Unclosed-leak_summary-still_reachable-tag.patch - 0008-Bug-514206-Assertion-sr_isError-sr-failed-mmap-fd-po.patch - Valgrind 3.26.0 final - Remove all VALGRIND_3_25_BRANCH and proposed upstream patches - Refresh some-stack-protector and some-Wl-z-now patches. - Add vgstack to valgrind-gdb. - Update License to GPL-3.0-or-later - Add ppc64-strcmp-ld.patch - Add 0003-Add-several-missing-syscall-hooks-to-ppc64-linux.patch - Add VALGRIND_3_25_BRANCH patches - 0001-Prepare-NEWS-for-branch-3.25.x-fixes.patch - 0002-Bug-503241-s390x-Support-z17-changes-to-the-NNPA-ins.patch - Valgrind 3.25.1 final - Valgrind 3.25.0 final - Split main valgrind package into several subpackages: - valgrind now contains just the core tools. - valgrind-scripts contains the post-processing scripts for callgrind, cachegrind, massif and dhat which depend on perl and python. - valgrind-gdb contains the debuginfo client/server and (v)gdb support. - valgrind-docs contains the man pages, html and pdf manual. - Adjust Requires/Recommends to subpackages can be installed independently. - valgrind-devel now Recommends, instead of Requires, valgrind. - valgrind-gdb Requires valgrind - valgrind-scripts Recommends valgrind-gdb - valgrind-gdb Recommends gdb - Add more VALGRIND_3_24_BRANCH patches 0012-Recognize-new-DWARF5-DW_LANG-constants.patch 0013-Bug-498317-FdBadUse-is-not-a-valid-CoreError-type-in.patch 0014-linux-support-EVIOCGRAB-ioctl.patch - Add VALGRIND_3_24_BRANCH patches 0001-Prepare-NEWS-for-branch-3.24-fixes.patch 0002-vgdb.c-fork_and_exec_valgrind-Fix-off-by-one-error-w.patch 0003-vgdb.c-fork_and_exec_valgrind-Fix-another-off-by-one.patch 0004-regtest-add-a-fdleak-filter-for-write-on-write-on-li.patch 0005-Add-exp-and-supp-patterns-for-missing-main-frame-for.patch 0006-Add-additional-exp-ppc64le-files-to-EXTRA_DIST.patch 0007-Add-support-for-landlock_create_ruleset-444-landlock.patch 0008-helgrind-tests-tc17_sembar.c-Remove-bool-typedef.patch 0009-drd-tests-swapcontext.c-Rename-typedef-struct-thread.patch 0010-none-tests-bug234814.c-sa_handler-take-an-int-as-arg.patch 0011-Add-open_tree-move_mount-fsopen-fsconfig-fsmount-fsp.patch - Add 0001-Refix-still_reachable-xml-closing-tag-and-add-testca.patch - Add VALGRIND_3_26_BRANCH patches - 0001-Prepare-NEWS-for-branch-3.26-fixes.patch - 0002-Bug-511972-valgrind-3.26.0-tests-fail-to-build-on-up.patch - 0003-readlink-proc-self-exe-overwrites-buffer-beyond-its-.patch - 0004-Linux-DRD-suppression-add-an-entry-for-__is_decorate.patch - 0005-Linux-Helgrind-add-a-suppression-for-_dl_allocate_tl.patch - 0006-Disable-linux-madvise-MADV_GUARD_INSTALL.patch - 0007-Bug-514613-Unclosed-leak_summary-still_reachable-tag.patch - 0008-Bug-514206-Assertion-sr_isError-sr-failed-mmap-fd-po.patch - Valgrind 3.26.0 final - Remove all VALGRIND_3_25_BRANCH and proposed upstream patches - Refresh some-stack-protector and some-Wl-z-now patches. - Add vgstack to valgrind-gdb. - Update License to GPL-3.0-or-later - Add ppc64-strcmp-ld.patch - Add 0003-Add-several-missing-syscall-hooks-to-ppc64-linux.patch - Add VALGRIND_3_25_BRANCH patches - 0001-Prepare-NEWS-for-branch-3.25.x-fixes.patch - 0002-Bug-503241-s390x-Support-z17-changes-to-the-NNPA-ins.patch - Valgrind 3.25.1 final - Valgrind 3.25.0 final - Split main valgrind package into several subpackages: - valgrind now contains just the core tools. - valgrind-scripts contains the post-processing scripts for callgrind, cachegrind, massif and dhat which depend on perl and python. - valgrind-gdb contains the debuginfo client/server and (v)gdb support. - valgrind-docs contains the man pages, html and pdf manual. - Adjust Requires/Recommends to subpackages can be installed independently. - valgrind-devel now Recommends, instead of Requires, valgrind. - valgrind-gdb Requires valgrind - valgrind-scripts Recommends valgrind-gdb - valgrind-gdb Recommends gdb - Add more VALGRIND_3_24_BRANCH patches 0012-Recognize-new-DWARF5-DW_LANG-constants.patch 0013-Bug-498317-FdBadUse-is-not-a-valid-CoreError-type-in.patch 0014-linux-support-EVIOCGRAB-ioctl.patch - Add VALGRIND_3_24_BRANCH patches 0001-Prepare-NEWS-for-branch-3.24-fixes.patch 0002-vgdb.c-fork_and_exec_valgrind-Fix-off-by-one-error-w.patch 0003-vgdb.c-fork_and_exec_valgrind-Fix-another-off-by-one.patch 0004-regtest-add-a-fdleak-filter-for-write-on-write-on-li.patch 0005-Add-exp-and-supp-patterns-for-missing-main-frame-for.patch 0006-Add-additional-exp-ppc64le-files-to-EXTRA_DIST.patch 0007-Add-support-for-landlock_create_ruleset-444-landlock.patch 0008-helgrind-tests-tc17_sembar.c-Remove-bool-typedef.patch 0009-drd-tests-swapcontext.c-Rename-typedef-struct-thread.patch 0010-none-tests-bug234814.c-sa_handler-take-an-int-as-arg.patch 0011-Add-open_tree-move_mount-fsopen-fsconfig-fsmount-fsp.patch - Add 0001-Refix-still_reachable-xml-closing-tag-and-add-testca.patch - Add VALGRIND_3_26_BRANCH patches - 0001-Prepare-NEWS-for-branch-3.26-fixes.patch - 0002-Bug-511972-valgrind-3.26.0-tests-fail-to-build-on-up.patch - 0003-readlink-proc-self-exe-overwrites-buffer-beyond-its-.patch - 0004-Linux-DRD-suppression-add-an-entry-for-__is_decorate.patch - 0005-Linux-Helgrind-add-a-suppression-for-_dl_allocate_tl.patch - 0006-Disable-linux-madvise-MADV_GUARD_INSTALL.patch - 0007-Bug-514613-Unclosed-leak_summary-still_reachable-tag.patch - 0008-Bug-514206-Assertion-sr_isError-sr-failed-mmap-fd-po.patch - Valgrind 3.26.0 final - Remove all VALGRIND_3_25_BRANCH and proposed upstream patches - Refresh some-stack-protector and some-Wl-z-now patches. - Add vgstack to valgrind-gdb. - Update License to GPL-3.0-or-later - Add ppc64-strcmp-ld.patch - Add 0003-Add-several-missing-syscall-hooks-to-ppc64-linux.patch - Add VALGRIND_3_25_BRANCH patches - 0001-Prepare-NEWS-for-branch-3.25.x-fixes.patch - 0002-Bug-503241-s390x-Support-z17-changes-to-the-NNPA-ins.patch - Valgrind 3.25.1 final - Valgrind 3.25.0 final - Split main valgrind package into several subpackages: - valgrind now contains just the core tools. - valgrind-scripts contains the post-processing scripts for callgrind, cachegrind, massif and dhat which depend on perl and python. - valgrind-gdb contains the debuginfo client/server and (v)gdb support. - valgrind-docs contains the man pages, html and pdf manual. - Adjust Requires/Recommends to subpackages can be installed independently. - valgrind-devel now Recommends, instead of Requires, valgrind. - valgrind-gdb Requires valgrind - valgrind-scripts Recommends valgrind-gdb - valgrind-gdb Recommends gdb - Add more VALGRIND_3_24_BRANCH patches 0012-Recognize-new-DWARF5-DW_LANG-constants.patch 0013-Bug-498317-FdBadUse-is-not-a-valid-CoreError-type-in.patch 0014-linux-support-EVIOCGRAB-ioctl.patch - Add VALGRIND_3_24_BRANCH patches 0001-Prepare-NEWS-for-branch-3.24-fixes.patch 0002-vgdb.c-fork_and_exec_valgrind-Fix-off-by-one-error-w.patch 0003-vgdb.c-fork_and_exec_valgrind-Fix-another-off-by-one.patch 0004-regtest-add-a-fdleak-filter-for-write-on-write-on-li.patch 0005-Add-exp-and-supp-patterns-for-missing-main-frame-for.patch 0006-Add-additional-exp-ppc64le-files-to-EXTRA_DIST.patch 0007-Add-support-for-landlock_create_ruleset-444-landlock.patch 0008-helgrind-tests-tc17_sembar.c-Remove-bool-typedef.patch 0009-drd-tests-swapcontext.c-Rename-typedef-struct-thread.patch 0010-none-tests-bug234814.c-sa_handler-take-an-int-as-arg.patch 0011-Add-open_tree-move_mount-fsopen-fsconfig-fsmount-fsp.patch - Add 0001-Refix-still_reachable-xml-closing-tag-and-add-testca.patch - Add VALGRIND_3_26_BRANCH patches - 0001-Prepare-NEWS-for-branch-3.26-fixes.patch - 0002-Bug-511972-valgrind-3.26.0-tests-fail-to-build-on-up.patch - 0003-readlink-proc-self-exe-overwrites-buffer-beyond-its-.patch - 0004-Linux-DRD-suppression-add-an-entry-for-__is_decorate.patch - 0005-Linux-Helgrind-add-a-suppression-for-_dl_allocate_tl.patch - 0006-Disable-linux-madvise-MADV_GUARD_INSTALL.patch - 0007-Bug-514613-Unclosed-leak_summary-still_reachable-tag.patch - 0008-Bug-514206-Assertion-sr_isError-sr-failed-mmap-fd-po.patch - Valgrind 3.26.0 final - Remove all VALGRIND_3_25_BRANCH and proposed upstream patches - Refresh some-stack-protector and some-Wl-z-now patches. - Add vgstack to valgrind-gdb. - Update License to GPL-3.0-or-later - Add ppc64-strcmp-ld.patch - Add 0003-Add-several-missing-syscall-hooks-to-ppc64-linux.patch - Add VALGRIND_3_25_BRANCH patches - 0001-Prepare-NEWS-for-branch-3.25.x-fixes.patch - 0002-Bug-503241-s390x-Support-z17-changes-to-the-NNPA-ins.patch - Valgrind 3.25.1 final - Valgrind 3.25.0 final - Split main valgrind package into several subpackages: - valgrind now contains just the core tools. - valgrind-scripts contains the post-processing scripts for callgrind, cachegrind, massif and dhat which depend on perl and python. - valgrind-gdb contains the debuginfo client/server and (v)gdb support. - valgrind-docs contains the man pages, html and pdf manual. - Adjust Requires/Recommends to subpackages can be installed independently. - valgrind-devel now Recommends, instead of Requires, valgrind. - valgrind-gdb Requires valgrind - valgrind-scripts Recommends valgrind-gdb - valgrind-gdb Recommends gdb - Add more VALGRIND_3_24_BRANCH patches 0012-Recognize-new-DWARF5-DW_LANG-constants.patch 0013-Bug-498317-FdBadUse-is-not-a-valid-CoreError-type-in.patch 0014-linux-support-EVIOCGRAB-ioctl.patch - Add VALGRIND_3_24_BRANCH patches 0001-Prepare-NEWS-for-branch-3.24-fixes.patch 0002-vgdb.c-fork_and_exec_valgrind-Fix-off-by-one-error-w.patch 0003-vgdb.c-fork_and_exec_valgrind-Fix-another-off-by-one.patch 0004-regtest-add-a-fdleak-filter-for-write-on-write-on-li.patch 0005-Add-exp-and-supp-patterns-for-missing-main-frame-for.patch 0006-Add-additional-exp-ppc64le-files-to-EXTRA_DIST.patch 0007-Add-support-for-landlock_create_ruleset-444-landlock.patch 0008-helgrind-tests-tc17_sembar.c-Remove-bool-typedef.patch 0009-drd-tests-swapcontext.c-Rename-typedef-struct-thread.patch 0010-none-tests-bug234814.c-sa_handler-take-an-int-as-arg.patch 0011-Add-open_tree-move_mount-fsopen-fsconfig-fsmount-fsp.patch - Rebase to 8.0.10 for CVE-2026-56684 CVE-2026-63639 (CVE-2026-66373 in redis) - Rebase to 8.0.9 for CVE-2026-23479 CVE-2026-25243 CVE-2026-23631 - Rebase to 8.0.7 for CVE-2026-21863 CVE-2025-67733 - rebase to 8.0.6 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 - fix ImageMode: ensure ownership of /etc/valkey - fix ImageMode: add tmpfiles.d entries for directories below /var - rebase to 8.0.4 for CVE-2025-27151 CVE-2025-48367 and CVE-2025-32023 - rebase to 8.0.3 - rebase to 8.0.2 Resolves: RHEL-73273 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.0.7 for CVE-2026-21863 CVE-2025-67733 - rebase to 8.0.6 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 - fix ImageMode: ensure ownership of /etc/valkey - fix ImageMode: add tmpfiles.d entries for directories below /var - rebase to 8.0.4 for CVE-2025-27151 CVE-2025-48367 and CVE-2025-32023 - rebase to 8.0.3 - rebase to 8.0.2 Resolves: RHEL-73273 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 7.2.6 - merge limit.conf in main service files - drop /etc/sysconfig/valkey - rename compat package - fix working dir - partially enable upstream test suite - Bump release for June 2024 mass rebuild - Rebase to 8.0.9 for CVE-2026-23479 CVE-2026-25243 CVE-2026-23631 - Rebase to 8.0.7 for CVE-2026-21863 CVE-2025-67733 - rebase to 8.0.6 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 - fix ImageMode: ensure ownership of /etc/valkey - fix ImageMode: add tmpfiles.d entries for directories below /var - rebase to 8.0.4 for CVE-2025-27151 CVE-2025-48367 and CVE-2025-32023 - rebase to 8.0.3 - rebase to 8.0.2 Resolves: RHEL-73273 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 7.2.6 - merge limit.conf in main service files - drop /etc/sysconfig/valkey - rename compat package - fix working dir - partially enable upstream test suite - Rebase to 8.0.10 for CVE-2026-56684 CVE-2026-63639 (CVE-2026-66373 in redis) - Rebase to 8.0.9 for CVE-2026-23479 CVE-2026-25243 CVE-2026-23631 - Rebase to 8.0.7 for CVE-2026-21863 CVE-2025-67733 - rebase to 8.0.6 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 - fix ImageMode: ensure ownership of /etc/valkey - fix ImageMode: add tmpfiles.d entries for directories below /var - rebase to 8.0.4 for CVE-2025-27151 CVE-2025-48367 and CVE-2025-32023 - rebase to 8.0.3 - rebase to 8.0.2 Resolves: RHEL-73273 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.0.7 for CVE-2026-21863 CVE-2025-67733 - rebase to 8.0.6 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 - fix ImageMode: ensure ownership of /etc/valkey - fix ImageMode: add tmpfiles.d entries for directories below /var - rebase to 8.0.4 for CVE-2025-27151 CVE-2025-48367 and CVE-2025-32023 - rebase to 8.0.3 - rebase to 8.0.2 Resolves: RHEL-73273 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 7.2.6 - merge limit.conf in main service files - drop /etc/sysconfig/valkey - rename compat package - fix working dir - partially enable upstream test suite - Bump release for June 2024 mass rebuild - Rebase to 8.0.9 for CVE-2026-23479 CVE-2026-25243 CVE-2026-23631 - Rebase to 8.0.7 for CVE-2026-21863 CVE-2025-67733 - rebase to 8.0.6 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 - fix ImageMode: ensure ownership of /etc/valkey - fix ImageMode: add tmpfiles.d entries for directories below /var - rebase to 8.0.4 for CVE-2025-27151 CVE-2025-48367 and CVE-2025-32023 - rebase to 8.0.3 - rebase to 8.0.2 Resolves: RHEL-73273 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 7.2.6 - merge limit.conf in main service files - drop /etc/sysconfig/valkey - rename compat package - fix working dir - partially enable upstream test suite - Resolves: RHEL-121819 - Image mode: fix creation of /var files - Resolves: RHEL-89702 - varnish: request smuggling attacks (CVE-2025-47905) - Resolves: RHEL-30337 - varnish: HTTP/2 Broken Window Attack may result in denial of service (CVE-2024-30156) - Resolves: RHEL-121819 - Image mode: fix creation of /var files - Resolves: RHEL-89702 - varnish: request smuggling attacks (CVE-2025-47905) - Resolves: RHEL-30337 - varnish: HTTP/2 Broken Window Attack may result in denial of service (CVE-2024-30156) - Resolves: #2056622 - rebase varnish-modules to 18.0 - new version 18.0 - Resolves: #1995450 - rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #1986346 - Rebase varnish-modules to the latest release - Rebuild for varnish 6.5.2 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - New upstream release - Switched back to original varnish github upstream, as it has catched up - Includes fix for CVE-2021-28543, VSV00006, bz#1939669 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for varnish-6.5.1 - Switched upstream to Nils Goroll's fork which is the defacto current upstream - Synced description to reality - This is a snapshot build that needs autotools for building - Rebuilt for varnish-6.5.0 - Rebuilt for varnish-6.4.0 - RHEL-186659 CVE-2026-47162 vim: code injection via NetrwBookHistSave() - RHEL-186646 CVE-2026-52858 vim: possible code execution with python3complete - RHEL-185874 CVE-2026-47167 vim: Code Injection in cucumber filetype plugin - RHEL-178243 CVE-2026-46483 vim: command injection in tar plugin - CVE-2026-41411 vim: Command injection via backticks in tag files - RHEL-170136 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass - Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass - Related: RHEL-159630 rebuild to build with exception target - remove -O0 from flags - RHEL-159630 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function - RHEL-203985 CVE-2026-59858 vim: arbitrary Ex command execution in C omni-completion - RHEL-201197 CVE-2026-59856 vim: potential command execution in PHP omni-completion - RHEL-191367 CVE-2026-57455 vim: Out-of-bounds write with soundfold() - RHEL-192113 CVE-2026-57456 vim: possible code execution with python complete via crafted docstrings - RHEL-194062 CVE-2026-55693 vim: out-of-bounds write in tree_count_words() and sug_filltree() - RHEL-186659 CVE-2026-47162 vim: code injection via NetrwBookHistSave() - RHEL-186646 CVE-2026-52858 vim: possible code execution with python3complete - RHEL-185874 CVE-2026-47167 vim: Code Injection in cucumber filetype plugin - RHEL-178243 CVE-2026-46483 vim: command injection in tar plugin - CVE-2026-41411 vim: Command injection via backticks in tag files - RHEL-170136 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass - Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass - RHEL-253669 CVE-2026-28420 vim: buffer overflow in terminal emulator - RHEL-215664 CVE-2026-55892 vim: stack out-of-bounds write in dump_prefixes() - RHEL-215684 CVE-2026-59857 vim: stack out-of-bounds write in spell_soundfold_sal() - RHEL-215659 CVE-2026-52859 vim: out-of-bounds read in update_snapshot() - RHEL-244500 CVE-2026-73077 vim: arbitrary code execution via keyword lookup in zsh.vim ftplugin - RHEL-242475 CVE-2026-73072 vim: heap buffer overflow in set_sofo() - RHEL-240370 CVE-2026-73078 vim: code injection in netrw via bookmarks - RHEL-242114 CVE-2026-73076 vim: code execution via .VimballRecord file - RHEL-203985 CVE-2026-59858 vim: arbitrary Ex command execution in C omni-completion - RHEL-201197 CVE-2026-59856 vim: potential command execution in PHP omni-completion - RHEL-191367 CVE-2026-57455 vim: Out-of-bounds write with soundfold() - RHEL-192113 CVE-2026-57456 vim: possible code execution with python complete via crafted docstrings - RHEL-271037 vim: ex command injection via crafted filename in sign_jump() - RHEL-257027 CVE-2026-73073 vim: arbitrary Ex command execution during C omni-completion via crafted typeref - RHEL-253669 CVE-2026-28420 vim: buffer overflow in terminal emulator - RHEL-215664 CVE-2026-55892 vim: stack out-of-bounds write in dump_prefixes() - RHEL-215684 CVE-2026-59857 vim: stack out-of-bounds write in spell_soundfold_sal() - RHEL-215659 CVE-2026-52859 vim: out-of-bounds read in update_snapshot() - RHEL-244500 CVE-2026-73077 vim: arbitrary code execution via keyword lookup in zsh.vim ftplugin - RHEL-242475 CVE-2026-73072 vim: heap buffer overflow in set_sofo() - RHEL-240370 CVE-2026-73078 vim: code injection in netrw via bookmarks - RHEL-242114 CVE-2026-73076 vim: code execution via .VimballRecord file - Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass - Related: RHEL-159630 rebuild to build with exception target - remove -O0 from flags - RHEL-159630 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function - RHEL-155438 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin - RHEL-155423 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file - RHEL-147941 CVE-2026-25749 vim: Heap Overflow in Vim - RHEL-143726 sudo not able to spawn "vi" command when NOEXEC is used to prevent escaping to shell - RHEL-112005 CVE-2025-53905 vim: Vim path traversial - RHEL-112009 CVE-2025-53906 vim: Vim path traversal - RHEL-2159 vim: Heap Use After Free in function ins_compl_get_exp in vim/vim - RHEL-40602 CVE-2021-3903 vim: heap-based buffer overflow vulnerability - RHEL-170136 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass - Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass - Related: RHEL-159630 rebuild to build with exception target - remove -O0 from flags - RHEL-159630 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function - RHEL-155438 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin - RHEL-155423 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file - RHEL-147941 CVE-2026-25749 vim: Heap Overflow in Vim - RHEL-143726 sudo not able to spawn "vi" command when NOEXEC is used to prevent escaping to shell - RHEL-112005 CVE-2025-53905 vim: Vim path traversial - RHEL-112009 CVE-2025-53906 vim: Vim path traversal - RHEL-2159 vim: Heap Use After Free in function ins_compl_get_exp in vim/vim - CVE-2026-41411 vim: Command injection via backticks in tag files - RHEL-170136 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass - Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass - Related: RHEL-159630 rebuild to build with exception target - remove -O0 from flags - RHEL-159630 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function - RHEL-155438 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin - RHEL-155423 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file - RHEL-147941 CVE-2026-25749 vim: Heap Overflow in Vim - RHEL-143726 sudo not able to spawn "vi" command when NOEXEC is used to prevent escaping to shell - RHEL-112005 CVE-2025-53905 vim: Vim path traversial - RHEL-112009 CVE-2025-53906 vim: Vim path traversal - RHEL-186659 CVE-2026-47162 vim: code injection via NetrwBookHistSave() - RHEL-186646 CVE-2026-52858 vim: possible code execution with python3complete - RHEL-185874 CVE-2026-47167 vim: Code Injection in cucumber filetype plugin - RHEL-178243 CVE-2026-46483 vim: command injection in tar plugin - CVE-2026-41411 vim: Command injection via backticks in tag files - RHEL-170136 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass - Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass - Related: RHEL-159630 rebuild to build with exception target - remove -O0 from flags - RHEL-159630 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function - RHEL-203985 CVE-2026-59858 vim: arbitrary Ex command execution in C omni-completion - RHEL-201197 CVE-2026-59856 vim: potential command execution in PHP omni-completion - RHEL-191367 CVE-2026-57455 vim: Out-of-bounds write with soundfold() - RHEL-192113 CVE-2026-57456 vim: possible code execution with python complete via crafted docstrings - RHEL-194062 CVE-2026-55693 vim: out-of-bounds write in tree_count_words() and sug_filltree() - RHEL-186659 CVE-2026-47162 vim: code injection via NetrwBookHistSave() - RHEL-186646 CVE-2026-52858 vim: possible code execution with python3complete - RHEL-185874 CVE-2026-47167 vim: Code Injection in cucumber filetype plugin - RHEL-178243 CVE-2026-46483 vim: command injection in tar plugin - CVE-2026-41411 vim: Command injection via backticks in tag files - RHEL-170136 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass - Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass - RHEL-253669 CVE-2026-28420 vim: buffer overflow in terminal emulator - RHEL-215664 CVE-2026-55892 vim: stack out-of-bounds write in dump_prefixes() - RHEL-215684 CVE-2026-59857 vim: stack out-of-bounds write in spell_soundfold_sal() - RHEL-215659 CVE-2026-52859 vim: out-of-bounds read in update_snapshot() - RHEL-244500 CVE-2026-73077 vim: arbitrary code execution via keyword lookup in zsh.vim ftplugin - RHEL-242475 CVE-2026-73072 vim: heap buffer overflow in set_sofo() - RHEL-240370 CVE-2026-73078 vim: code injection in netrw via bookmarks - RHEL-242114 CVE-2026-73076 vim: code execution via .VimballRecord file - RHEL-203985 CVE-2026-59858 vim: arbitrary Ex command execution in C omni-completion - RHEL-201197 CVE-2026-59856 vim: potential command execution in PHP omni-completion - RHEL-191367 CVE-2026-57455 vim: Out-of-bounds write with soundfold() - RHEL-192113 CVE-2026-57456 vim: possible code execution with python complete via crafted docstrings - RHEL-271037 vim: ex command injection via crafted filename in sign_jump() - RHEL-257027 CVE-2026-73073 vim: arbitrary Ex command execution during C omni-completion via crafted typeref - RHEL-253669 CVE-2026-28420 vim: buffer overflow in terminal emulator - RHEL-215664 CVE-2026-55892 vim: stack out-of-bounds write in dump_prefixes() - RHEL-215684 CVE-2026-59857 vim: stack out-of-bounds write in spell_soundfold_sal() - RHEL-215659 CVE-2026-52859 vim: out-of-bounds read in update_snapshot() - RHEL-244500 CVE-2026-73077 vim: arbitrary code execution via keyword lookup in zsh.vim ftplugin - RHEL-242475 CVE-2026-73072 vim: heap buffer overflow in set_sofo() - RHEL-240370 CVE-2026-73078 vim: code injection in netrw via bookmarks - RHEL-242114 CVE-2026-73076 vim: code execution via .VimballRecord file - Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass - Related: RHEL-159630 rebuild to build with exception target - remove -O0 from flags - RHEL-159630 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function - RHEL-155438 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin - RHEL-155423 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file - RHEL-147941 CVE-2026-25749 vim: Heap Overflow in Vim - RHEL-143726 sudo not able to spawn "vi" command when NOEXEC is used to prevent escaping to shell - RHEL-112005 CVE-2025-53905 vim: Vim path traversial - RHEL-112009 CVE-2025-53906 vim: Vim path traversal - RHEL-2159 vim: Heap Use After Free in function ins_compl_get_exp in vim/vim - RHEL-40602 CVE-2021-3903 vim: heap-based buffer overflow vulnerability - RHEL-170136 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass - Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass - Related: RHEL-159630 rebuild to build with exception target - remove -O0 from flags - RHEL-159630 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function - RHEL-155438 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin - RHEL-155423 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file - RHEL-147941 CVE-2026-25749 vim: Heap Overflow in Vim - RHEL-143726 sudo not able to spawn "vi" command when NOEXEC is used to prevent escaping to shell - RHEL-112005 CVE-2025-53905 vim: Vim path traversial - RHEL-112009 CVE-2025-53906 vim: Vim path traversal - RHEL-2159 vim: Heap Use After Free in function ins_compl_get_exp in vim/vim - CVE-2026-41411 vim: Command injection via backticks in tag files - RHEL-170136 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass - Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass - Related: RHEL-159630 rebuild to build with exception target - remove -O0 from flags - RHEL-159630 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function - RHEL-155438 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin - RHEL-155423 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file - RHEL-147941 CVE-2026-25749 vim: Heap Overflow in Vim - RHEL-143726 sudo not able to spawn "vi" command when NOEXEC is used to prevent escaping to shell - RHEL-112005 CVE-2025-53905 vim: Vim path traversial - RHEL-112009 CVE-2025-53906 vim: Vim path traversal - RHEL-186659 CVE-2026-47162 vim: code injection via NetrwBookHistSave() - RHEL-186646 CVE-2026-52858 vim: possible code execution with python3complete - RHEL-185874 CVE-2026-47167 vim: Code Injection in cucumber filetype plugin - RHEL-178243 CVE-2026-46483 vim: command injection in tar plugin - CVE-2026-41411 vim: Command injection via backticks in tag files - RHEL-170136 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass - Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass - Related: RHEL-159630 rebuild to build with exception target - remove -O0 from flags - RHEL-159630 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function - RHEL-203985 CVE-2026-59858 vim: arbitrary Ex command execution in C omni-completion - RHEL-201197 CVE-2026-59856 vim: potential command execution in PHP omni-completion - RHEL-191367 CVE-2026-57455 vim: Out-of-bounds write with soundfold() - RHEL-192113 CVE-2026-57456 vim: possible code execution with python complete via crafted docstrings - RHEL-194062 CVE-2026-55693 vim: out-of-bounds write in tree_count_words() and sug_filltree() - RHEL-186659 CVE-2026-47162 vim: code injection via NetrwBookHistSave() - RHEL-186646 CVE-2026-52858 vim: possible code execution with python3complete - RHEL-185874 CVE-2026-47167 vim: Code Injection in cucumber filetype plugin - RHEL-178243 CVE-2026-46483 vim: command injection in tar plugin - CVE-2026-41411 vim: Command injection via backticks in tag files - RHEL-170136 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass - Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass - RHEL-253669 CVE-2026-28420 vim: buffer overflow in terminal emulator - RHEL-215664 CVE-2026-55892 vim: stack out-of-bounds write in dump_prefixes() - RHEL-215684 CVE-2026-59857 vim: stack out-of-bounds write in spell_soundfold_sal() - RHEL-215659 CVE-2026-52859 vim: out-of-bounds read in update_snapshot() - RHEL-244500 CVE-2026-73077 vim: arbitrary code execution via keyword lookup in zsh.vim ftplugin - RHEL-242475 CVE-2026-73072 vim: heap buffer overflow in set_sofo() - RHEL-240370 CVE-2026-73078 vim: code injection in netrw via bookmarks - RHEL-242114 CVE-2026-73076 vim: code execution via .VimballRecord file - RHEL-203985 CVE-2026-59858 vim: arbitrary Ex command execution in C omni-completion - RHEL-201197 CVE-2026-59856 vim: potential command execution in PHP omni-completion - RHEL-191367 CVE-2026-57455 vim: Out-of-bounds write with soundfold() - RHEL-192113 CVE-2026-57456 vim: possible code execution with python complete via crafted docstrings - RHEL-271037 vim: ex command injection via crafted filename in sign_jump() - RHEL-257027 CVE-2026-73073 vim: arbitrary Ex command execution during C omni-completion via crafted typeref - RHEL-253669 CVE-2026-28420 vim: buffer overflow in terminal emulator - RHEL-215664 CVE-2026-55892 vim: stack out-of-bounds write in dump_prefixes() - RHEL-215684 CVE-2026-59857 vim: stack out-of-bounds write in spell_soundfold_sal() - RHEL-215659 CVE-2026-52859 vim: out-of-bounds read in update_snapshot() - RHEL-244500 CVE-2026-73077 vim: arbitrary code execution via keyword lookup in zsh.vim ftplugin - RHEL-242475 CVE-2026-73072 vim: heap buffer overflow in set_sofo() - RHEL-240370 CVE-2026-73078 vim: code injection in netrw via bookmarks - RHEL-242114 CVE-2026-73076 vim: code execution via .VimballRecord file - Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass - Related: RHEL-159630 rebuild to build with exception target - remove -O0 from flags - RHEL-159630 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function - RHEL-155438 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin - RHEL-155423 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file - RHEL-147941 CVE-2026-25749 vim: Heap Overflow in Vim - RHEL-143726 sudo not able to spawn "vi" command when NOEXEC is used to prevent escaping to shell - RHEL-112005 CVE-2025-53905 vim: Vim path traversial - RHEL-112009 CVE-2025-53906 vim: Vim path traversal - RHEL-2159 vim: Heap Use After Free in function ins_compl_get_exp in vim/vim - RHEL-40602 CVE-2021-3903 vim: heap-based buffer overflow vulnerability - RHEL-170136 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass - Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass - Related: RHEL-159630 rebuild to build with exception target - remove -O0 from flags - RHEL-159630 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function - RHEL-155438 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin - RHEL-155423 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file - RHEL-147941 CVE-2026-25749 vim: Heap Overflow in Vim - RHEL-143726 sudo not able to spawn "vi" command when NOEXEC is used to prevent escaping to shell - RHEL-112005 CVE-2025-53905 vim: Vim path traversial - RHEL-112009 CVE-2025-53906 vim: Vim path traversal - RHEL-2159 vim: Heap Use After Free in function ins_compl_get_exp in vim/vim - CVE-2026-41411 vim: Command injection via backticks in tag files - RHEL-170136 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass - Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass - Related: RHEL-159630 rebuild to build with exception target - remove -O0 from flags - RHEL-159630 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function - RHEL-155438 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin - RHEL-155423 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file - RHEL-147941 CVE-2026-25749 vim: Heap Overflow in Vim - RHEL-143726 sudo not able to spawn "vi" command when NOEXEC is used to prevent escaping to shell - RHEL-112005 CVE-2025-53905 vim: Vim path traversial - RHEL-112009 CVE-2025-53906 vim: Vim path traversal - Rebased to virt-manager-5.1.0 (RHEL-119340) - The rebase also fixes the following bugs: RHEL-105819 - Rebased to virt-manager-5.0.0 (RHEL-34607) - The rebase also fixes the following bugs: RHEL-7124, RHEL-741, RHEL-10468, RHEL-17436, RHEL-1126 RHEL-62959, RHEL-65264 - Rebased to virt-manager-5.1.0 (RHEL-119340) - The rebase also fixes the following bugs: RHEL-105819 - Rebased to virt-manager-5.0.0 (RHEL-34607) - The rebase also fixes the following bugs: RHEL-7124, RHEL-741, RHEL-10468, RHEL-17436, RHEL-1126 RHEL-62959, RHEL-65264 - Rebased to virt-manager-5.1.0 (RHEL-119340) - The rebase also fixes the following bugs: RHEL-105819 - Rebased to virt-manager-5.0.0 (RHEL-34607) - The rebase also fixes the following bugs: RHEL-7124, RHEL-741, RHEL-10468, RHEL-17436, RHEL-1126 RHEL-62959, RHEL-65264 - Bring qemu-kvm to AlmaLinux 9 ppc64le - Rebase to 11.0 release - Add missing dep on libvirt-client for bash completion - Resolves: rhbz#2028604, rhbz#2000528 - Show OS-ID when running 'remote-viewer -V' Resolves: rhbz#1953282 - Clear auth entry fields Resolves: rhbz#1953933 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 10.0 release - Resolves: rhbz#1949526 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 9.0 release - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Enable building for ppc64le - Update guestfs-tools firstboot.bat to match virt-v2v resolves: RHEL-109521 - builder: Update link to templates to use https resolves: RHEL-94874 - mlcustomize: Remove dnf --verbose option resolves: RHEL-83200 - Fix virt-drivers fails on opensuse guest if kernel-source is installed resolves: RHEL-80214 - Rebase to guestfs-tools 1.52.2 resolves: RHEL-56811 - Replace Jansson with json-c resolves: RHEL-65294 - Reboot Windows between each firstboot script to improve reliability resolves: RHEL-55759 - Add support for nbd+unix:// URIs resolves: RHEL-33956 - customize: Implement --inject-blnsvr operation resolves: RHEL-36634 - Rebase to guestfs-tools 1.51.6 - Implement --key all:... resolves: RHEL-19030 - Fix crash because of off-by-one error resolves: RHEL-19062 - Fix virt-customize --chown invalid format resolves: RHEL-21899 - Update installer 1.9.61.1 with the latest agents RHEL-10.3 - Related: #232802 - Update installer 1.9.45.1 with the latest agents RHEL-10.0.0 - Related: #37523 - Update installer 1.9.44.1 with the latest agents RHEL-9.5.0.Z - Related: #37523 - Update installer 1.9.44.0 with the latest agents RHEL-9.5.0.Z - Related: #37523 - Enable build on ppc64le - Rebase to 1.13.3 [RHEL-133032] - Resolves: RHEL-133032 (Rebase virtiofsd to latest version for RHEL 9.8) - Rebase to 1.13.2 [RHEL-96976] - Resolves: RHEL-96976 (Rebase virtiofsd to latest version for RHEL 9.6.z) - Update to upstream version 1.13.0 [RHEL-69134] - Resolves: RHEL-69134 (Rebase virtiofsd to latest version for RHEL 9.6) - Update to upstream version 1.11.1 [RHEL-47989] - Resolves: RHEL-47989 (Rebase virtiofsd to latest version for RHEL 9.5) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - More review fixes: - BuildRequire python3-devel - Review fixes: - Fix Obsoletes - Use the prefix macro in the dictionary path - Use the license macro - Do not own the whole data directory, just the version 5 subdirectory - Initial package - ake getting password from backed up secret FIPS compatible (RHEL-113757) - make volume_key FIPS compliant (RHEL-78044) - ake getting password from backed up secret FIPS compatible (RHEL-113757) - make volume_key FIPS compliant (RHEL-78044) - Fix CVE-2025-14242 - Resolves: RHEL-134170 - Add a tmpfiles.d config. - Resolves: RHEL-133075 - Fix FEAT command to list AUTH TLS when TLSv1.3 is enabled - Resolves: RHEL-45022 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 0.64.2 - Add missing _VTE_CXX_NOEXCEPT to downstream patches (#1973174) - Fix the License fields and ship the correct license texts (#1973299) - Update to 0.64.1 Resolves: #1957970 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Revert a change that limited select all, as decided by Workstation WG - Update to 0.62.3 - Use https URLs for upstream - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 0.62.2 - Accommodate 'sudo toolbox' when tracking the active container - Fix bogus volatile caught by gcc-11 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 0.64.2 - Add missing _VTE_CXX_NOEXCEPT to downstream patches (#1973174) - Fix the License fields and ship the correct license texts (#1973299) - Update to 0.64.1 Resolves: #1957970 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Revert a change that limited select all, as decided by Workstation WG - Update to 0.62.3 - Use https URLs for upstream - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 0.62.2 - Accommodate 'sudo toolbox' when tracking the active container - Fix bogus volatile caught by gcc-11 - Update to 1.4.328.1 SDK - Update to 1.4.304.0 SDK - Update to 1.3.283.0 SDK - Update to 1.3.268.0 SDK - fix memory leak when verbose mode is on (#1997755) - New upstream release 5.16 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - bump for gating.yaml file - Rebuild for import to RHEL9 (#1978263) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Clean up old SysV-init related files - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - CVE-2021-44269 wavpack: heap Out-of-bounds Read - Resolves: CVE-2021-44269 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update wavpack to 5.4.0 (#1915740) - Security fix for CVE-2020-35738 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.21.0 Resolves: rhbz#2063522 - Rebuilt for libffi 3.4.2 SONAME transition. Related: rhbz#1891914 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 1.19.0 - Switch to meson build system - Drop old provides - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.37 Resolves: RHEL-129827 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Initial package - Update to 0.8.2 (#2071907) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 0.8.0 - Provide a pre-built man page on RHEL to avoid pulling scdoc - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 0.7.1 - Update to version 0.7.0 - Re-enable LTO as upstream GCC target/96939 has been fixed - Disable LTO for now. - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 2.52.3 - Update to 2.50.4 - Update to 2.50.3 - Update to 2.50.1 - Update to 2.50.0 - Update to 2.48.5 - Update to 2.48.3 - Update to 2.48.2 - Reenable JIT - Update to 2.48.1 - Update to 2.48.0 - Update to 2.52.4 - Update to 2.52.3 - Update to 2.50.4 - Update to 2.50.3 - Update to 2.50.1 - Update to 2.50.0 - Update to 2.48.5 - Update to 2.48.3 - Update to 2.48.2 - Reenable JIT - Update to 2.48.1 - Update to 2.52.5 - Update to 2.52.4 - Update to 2.52.3 - Update to 2.50.4 - Update to 2.50.3 - Update to 2.50.1 - Update to 2.50.0 - Update to 2.48.5 - Update to 2.48.3 - Update to 2.48.2 - Reenable JIT - Update to 2.54.0 - Update to 2.52.5 - Update to 2.52.4 - Update to 2.52.3 - Update to 2.50.4 - Update to 2.50.3 - Update to 2.50.1 - Update to 2.50.0 - Update to 2.48.5 - Update to 2.48.3 - Update to 2.54.1 - Add patch to update ANGLE even further - Update to 2.54.0 - Update to 2.52.5 - Update to 2.52.4 - Update to 2.52.3 - Update to 2.50.4 - Update to 2.50.3 - Update to 2.50.1 - Update to 2.50.0 - Update to 2.48.5 - Update to 2.52.3 - Update to 2.50.4 - Update to 2.50.3 - Update to 2.50.1 - Update to 2.50.0 - Update to 2.48.5 - Update to 2.48.3 - Update to 2.48.2 - Reenable JIT - Update to 2.48.1 - Update to 2.48.0 - Update to 2.52.4 - Update to 2.52.3 - Update to 2.50.4 - Update to 2.50.3 - Update to 2.50.1 - Update to 2.50.0 - Update to 2.48.5 - Update to 2.48.3 - Update to 2.48.2 - Reenable JIT - Update to 2.48.1 - Update to 2.52.5 - Update to 2.52.4 - Update to 2.52.3 - Update to 2.50.4 - Update to 2.50.3 - Update to 2.50.1 - Update to 2.50.0 - Update to 2.48.5 - Update to 2.48.3 - Update to 2.48.2 - Reenable JIT - Update to 2.54.0 - Update to 2.52.5 - Update to 2.52.4 - Update to 2.52.3 - Update to 2.50.4 - Update to 2.50.3 - Update to 2.50.1 - Update to 2.50.0 - Update to 2.48.5 - Update to 2.48.3 - Update to 2.54.1 - Add patch to update ANGLE even further - Update to 2.54.0 - Update to 2.52.5 - Update to 2.52.4 - Update to 2.52.3 - Update to 2.50.4 - Update to 2.50.3 - Update to 2.50.1 - Update to 2.50.0 - Update to 2.48.5 - Update to 2.52.3 - Update to 2.50.4 - Update to 2.50.3 - Update to 2.50.1 - Update to 2.50.0 - Update to 2.48.5 - Update to 2.48.3 - Update to 2.48.2 - Reenable JIT - Update to 2.48.1 - Update to 2.48.0 - Update to 2.52.4 - Update to 2.52.3 - Update to 2.50.4 - Update to 2.50.3 - Update to 2.50.1 - Update to 2.50.0 - Update to 2.48.5 - Update to 2.48.3 - Update to 2.48.2 - Reenable JIT - Update to 2.48.1 - Update to 2.52.5 - Update to 2.52.4 - Update to 2.52.3 - Update to 2.50.4 - Update to 2.50.3 - Update to 2.50.1 - Update to 2.50.0 - Update to 2.48.5 - Update to 2.48.3 - Update to 2.48.2 - Reenable JIT - Update to 2.54.0 - Update to 2.52.5 - Update to 2.52.4 - Update to 2.52.3 - Update to 2.50.4 - Update to 2.50.3 - Update to 2.50.1 - Update to 2.50.0 - Update to 2.48.5 - Update to 2.48.3 - Update to 2.54.1 - Add patch to update ANGLE even further - Update to 2.54.0 - Update to 2.52.5 - Update to 2.52.4 - Update to 2.52.3 - Update to 2.50.4 - Update to 2.50.3 - Update to 2.50.1 - Update to 2.50.0 - Update to 2.48.5 - Update to 2.52.3 - Update to 2.50.4 - Update to 2.50.3 - Update to 2.50.1 - Update to 2.50.0 - Update to 2.48.5 - Update to 2.48.3 - Update to 2.48.2 - Reenable JIT - Update to 2.48.1 - Update to 2.48.0 - Update to 2.52.4 - Update to 2.52.3 - Update to 2.50.4 - Update to 2.50.3 - Update to 2.50.1 - Update to 2.50.0 - Update to 2.48.5 - Update to 2.48.3 - Update to 2.48.2 - Reenable JIT - Update to 2.48.1 - Update to 2.52.5 - Update to 2.52.4 - Update to 2.52.3 - Update to 2.50.4 - Update to 2.50.3 - Update to 2.50.1 - Update to 2.50.0 - Update to 2.48.5 - Update to 2.48.3 - Update to 2.48.2 - Reenable JIT - Update to 2.54.0 - Update to 2.52.5 - Update to 2.52.4 - Update to 2.52.3 - Update to 2.50.4 - Update to 2.50.3 - Update to 2.50.1 - Update to 2.50.0 - Update to 2.48.5 - Update to 2.48.3 - Update to 2.54.1 - Add patch to update ANGLE even further - Update to 2.54.0 - Update to 2.52.5 - Update to 2.52.4 - Update to 2.52.3 - Update to 2.50.4 - Update to 2.50.3 - Update to 2.50.1 - Update to 2.50.0 - Update to 2.48.5 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Bump release for y-stream AND z-stream building using centpkg build --rhel-target=zstream Related: RHEL-89344 - tests: OSTree does not support the qcow2 image type - Add test repositories for RHEL 9.6 and 9.7 - Rebuild for CVE-2025-22871 Resolves: RHEL-89344 - Add centos 9 repos for testing Related: RHEL-1035 - Copy rhel-9.4.json test repository from osbuild-composer - New release: 35.12 (bcl) Resolves: RHEL-1035 - Add support for compose start warning messages (bcl) - Update documentation urls for new locations (bcl) - weldr: go fmt changes to a couple comments (bcl) - weldr: Update ostree test for parentid with no url (bcl) - Makefile: Turn off seccomp for build-in-podman (bcl) - composer-cli: Update doc links (simon.steinbeiss) - docs: fix typo/formatting in HACKING.md (idiez) - Add release creation documentation (bcl) - spec: Require createrepo_c for weldr-client-tests package (bcl) - spec: migrate the license field to SPDX (ondrej) - Go: Switch to go 1.19 (bcl) - CI: Update terraform hash (bcl) - Actions: add workflow for marking and closing stale issues and PRs (thozza) - workflows: Stop using golint (bcl) - workflows: Add Go 1.21 and 1.22 to test matrix (bcl) - workflows: Update to golangci-lint 1.56.2 (bcl) - workflow: Ignore govulncheck failures (bcl) - workflow: Switch to testing on go 1.18, 1.19, 1.20 (bcl) - build(deps): bump actions/setup-go from 3 to 5 (49699333+dependabot[bot]) - build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.8.0 (49699333+dependabot[bot]) - build(deps): bump actions/checkout from 3 to 4 (49699333+dependabot[bot]) - build(deps): bump github.com/BurntSushi/toml from 1.2.1 to 1.3.2 (49699333+dependabot[bot]) - build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.4 (49699333+dependabot[bot]) - Resolves: RHEL-220497 - async unsafe code in signal handler context - Fix CVE-2026-58471: buffer overflow in convert_fname() - Resolves: RHEL-194521 - Resolves: RHEL-210636 - Fix integer+buffer overflow in html_quote_string() - Resolves: RHEL-43226 - Misinterpretation of input may lead to improper behavior - Enable mkpasswd building (#2054043) - Remove changelog from mkpasswd, it has double size of actual tool - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - 5.5.9 bump - 5.5.8 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 5.5.7 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Enable mkpasswd building (#2054043) - Remove changelog from mkpasswd, it has double size of actual tool - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - 5.5.9 bump - 5.5.8 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 5.5.7 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Enable gating test in tmt (RHEL-137806) Resolves: RHEL-137806 - Update to version 0.5.12 Resolves: RHEL-123624 - Update to version 0.5.10 Resolves: DESKTOP-2313 - Update to version 0.5.12 Resolves: RHEL-123624 - Update to version 0.5.10 Resolves: DESKTOP-2313 - Resolves: RHEL-130438 - Access of Uninitialized Pointer in Wireshark - Resolves: RHEL-55554 - NFS packets decrypted via TLS are displayed as RPC - Resolves: RHEL-14596 - Wireshark hangs if dumpcap returned unexpected messages in sync pipe. - Fix DoS via heap-based buffer overflow in SPDY dissector (CVE-2026-95387) - Resolves: RHEL-272330 - Fix DoS vulnerability in H.245 protocol dissector (CVE-2026-76927) - Resolves: RHEL-257656 - Fix DoS vulnerability in ESS protocol dissector (CVE-2026-76919) - Resolves: RHEL-257615 - Fix DoS via C12.22 protocol dissector crash (CVE-2026-76886) - Resolves: RHEL-247390 - Fix DoS via RRC protocol dissector out-of-bounds write (CVE-2026-76880) - Resolves: RHEL-245617 - Resolves: RHEL-130440 - Access of Uninitialized Pointer in Wireshark - Resolves: RHEL-55554 - NFS packets decrypted via TLS are displayed as RPC - Resolves: RHEL-130438 - Access of Uninitialized Pointer in Wireshark - Resolves: RHEL-55554 - NFS packets decrypted via TLS are displayed as RPC - Resolves: RHEL-14596 - Wireshark hangs if dumpcap returned unexpected messages in sync pipe. - Fix DoS via heap-based buffer overflow in SPDY dissector (CVE-2026-95387) - Resolves: RHEL-272330 - Fix DoS vulnerability in H.245 protocol dissector (CVE-2026-76927) - Resolves: RHEL-257656 - Fix DoS vulnerability in ESS protocol dissector (CVE-2026-76919) - Resolves: RHEL-257615 - Fix DoS via C12.22 protocol dissector crash (CVE-2026-76886) - Resolves: RHEL-247390 - Fix DoS via RRC protocol dissector out-of-bounds write (CVE-2026-76880) - Resolves: RHEL-245617 - Resolves: RHEL-130440 - Access of Uninitialized Pointer in Wireshark - Resolves: RHEL-55554 - NFS packets decrypted via TLS are displayed as RPC - Fix 9.1.0 FTBFS - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add Coverity Scan fixes patch - Get rid of all things RPATH - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt to add -devel subpackage to CRB Resolves: #2059249 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 1.10.0 - Resolves: #1968640 - Update to 1.9.92 - Add GPG verification of source tarball - Resolves: #1961049 - Update to 1.9.91 - Resolves: #1947186 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 1.9.90 - Update to 1.9.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.8.0 - Move libWPEBackend-fdo-1.0.so back to -devel package - Fix script arguments section - oobe: don't append the user section to /etc/wsl.conf - Add Requires for utilities used in the OOBE script - oobe: wait for cloud-init to finish - oobe: message for enabled cloud-init - oobe: exit early for cloud-init - Change /usr/lib/wsl-distribution.conf to a ghost file - Make wsl-setup a script - Dynamically set DefaultName on package install - Expand variations for default_name - Improve handling of HTTP 401 Unauthorized Resolves: #2127416 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - update BRs (#1933647) - updated to 4.0ga14 (#1922848) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - updated to 4.0ga13 (#1911117) - updated to 4.0ga12 (#1882956) - updated to 4.0ga11 (#1869461) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - updated to 4.0ga10 (#1860639) - updated to 4.0ga9 (#1840492) - updated to 3.6ga12 (#1823121) - Rebuild to regenerate auto-requires - Remove proprietary data from source RPM - Resolves: RHEL-40891 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Bump NVR for el8->el9 upgrade path - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 1.4.18 - Spec file cleanups - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Fix missing #include for gcc-11 - Update to 1.4.17 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.4.14 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Bump NVR for el8->el9 upgrade path - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 1.4.18 - Spec file cleanups - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Fix missing #include for gcc-11 - Update to 1.4.17 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.4.14 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 0.1.4. - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Update to 0.1.4. - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 0.1.3 Resolves: #2060089 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.12.6 Resolves: RHEL-16451 - Update to 1.12.4 Resolves: #2068448, #2076812 - Update to 1.12.3 Resolves: #2068448, #2069328 - Update to 1.12.2 - Explicit library Requires should be arch-specific Resolves: #2068448 - Rebase to 1.12.1 Resolves: #2051488 - Add screencast stream restoration support Resolves: RHEL-4526 - Keep screen share window list up to date Resolves: #2148362 - Update to 41.2 Resolves: #2083018 - Recommend this portal backend for all GNOME users Resolves: #2051473 - Make the Supplements specific to Fedora to retain consistency with xdg-desktop-portal-gtk Resolves: #2051473 - Initial version Resolves: #2051473 - Play well with the GNOME portals Resolves: #2051495 - Recommend this portal backend for all GTK3 and GTK4 users Resolves: #2078624 - Rebase to 1.12.0 Resolves: #2051493 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.8.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Drop fuzzy translations patch, no longer necessary - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Use make macros - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update documentation for CVE-2022-4055 (RHEL-87487) - Fix CVE-2022-4055 (RHEL-87487) - Upstream version bump - Upstream version bump - Drop upstreamed patch - Upstream version bump - Add annocheck exceptions for BPF objects (Felix) - Re-enable debug builds (Felix) - Add libcap-ng-devel to BuildDepends - Upstream version bump - Fix build with Clang 20 - Upstream version bump - Upstream version bump - Upstream version bump - Fix incorrect permissions of xerces-j2-samples.jar - Add noarch to ExclusiveArch - Disable building on i686 - Fix patch usage - Rebuild with regenerated Requires on Java - xfs unrepairable filesystem if directory block not junked in phase 3 - more - fixes - Related: RHEL-54342 - xfs unrepairable filesystem if directory block not junked in phase 3 - Related: RHEL-54342 - Fix missing rpm db entry for: /usr/share/xfsprogs - Related: RHEL-39450 - xfs_repair: allow symlinks with short remote targets - Related: RHEL-54306 and RHEL-53164 - Fix coverity issue - Related: RHEL-39449 - Following is the patch list: - xfsprogs-6.5.0-xfs.8-xfs-fix-bounds-check-in-xfs_defer_agfl_block.patch - Fix various CVE issues. - Related: RHEL-32996 - Following is the patch list: - xfsprogs-6.5.0-xfs_db.xfs.8-xfs_db-fix-leak-in-flist_find_ftyp.patch - xfsprogs-6.5.0-xfs_repair.xfs.8-xfs_repair-make-duration-take-time_t.patch - xfsprogs-6.5.0-xfs_repair.xfs.8-xfs_scrub-don-t-call-phase_end-if-phase_rusage-was-n.patch - xfsprogs-6.5.0-xfs_fsr.xfs.8-xfs_fsr-convert-fsrallfs-to-use-time_t-instead-of-in.patch - xfsprogs-6.5.0-xfs_fsr.xfs.8-xfs_fsr-replace-atoi-with-strtol.patch - xfsprogs-6.5.0-xfs_db.xfs.8-xfs_db-add-helper-for-flist_find_type-for-clearer-fi.patch - xfsprogs-6.5.0-xfs_repair.xfs.8-xfs_repair-catch-strtol-errors.patch - xfsprogs-rhelonly-xfs_db-fix-unitialized-variable-in-check_parents-function.patch - Rebase to a more recent upstream release - Related: RHEL-28339 - Following is a list of dropped backported patches which - are contained in the current rebase: - xfsprogs-6.4.0-set-bnobt-cntbt-numrecs-correctly-when-formattin.patch - xfsprogs-6.4.0-mkfs-fix-man-s-default-value-for-sparse-option.patch - xfsprogs-6.4.0-xfs_repair-don-t-add-junked-entries-to-the-rebuilt-d.patch - xfsprogs-6.4.0-xfs_repair-fix-messaging-when-fixing-imap-due-to-spa.patch - xfsprogs-6.4.0-xfs_repair-don-t-spray-correcting-imap-all-by-itself.patch - xfsprogs-6.4.0-xfs_repair-fix-messaging-when-shortform_dir2_junk-is.patch - xfsprogs-6.4.0-xfs_db-move-obfuscate_name-assertion-to-callers.patch - xfsprogs-6.4.0-xfs_db-fix-metadump-name-obfuscation-for-ascii-ci-fi.patch - xfsprogs-6.4.0-xfs-stabilize-the-dirent-name-transformation-functio.patch - - Rename xfs_quota-fix-missing-mount-point-warning.patch to reflect upstream - version it was merged in. - Rebase to upstream version 6.3.0 - - Following is a list of dropped backported patches which - are contained in the current rebase: - xfsprogs-5.19.0-xfs-hoist-refcount-record-merge-predicates.patch (v6.2.0) - xfsprogs-5.19.0-xfs_db-fix-dir3-block-magic-check.patch (v6.1.0) - xfsprogs-5.19.0-xfs-estimate-post-merge-refcounts-correctly.patch (v6.2.0) - xfsprogs-5.19.0-xfs-get-rid-of-assert-from-xfs_btree_islastblock.patch (v6.2.0) - xfsprogs-5.19.0-xfs-fix-off-by-one-error-in-xfs_btree_space_to_heigh.patch (v6.2.0) - xfsprogs-5.19.0-xfs-fix-sb-write-verify-for-lazysbcount.patch (v6.1.0) - xfsprogs-5.19.0-xfs-removed-useless-condition-in-function-xfs_attr_n.patch (v6.0.0) - xfsprogs-5.19.0-xfs_repair-retain-superblock-buffer-to-avoid-write-h.patch (v6.1.0) - - Rename the remaining patches so the name contains upstream version in which - they are implemented, or "rhelonly". - - Drop Eric Sandeen's public key used to check tarball signature and replace it by - Carlos Maiolino's (current upstream xfsprogs maintainer). - - Following is a list of newly backported patches from versions released after 6.3 - which are fixing patches present in version 6.3: - xfsprogs-6.4.0-xfs_repair-don-t-add-junked-entries-to-the-rebuilt-d.patch - xfsprogs-6.4.0-xfs_repair-don-t-spray-correcting-imap-all-by-itself.patch - xfsprogs-6.4.0-xfs_repair-fix-messaging-when-fixing-imap-due-to-spa.patch - xfsprogs-6.4.0-xfs_repair-fix-messaging-when-shortform_dir2_junk-is.patch - - Backport: - xfsprogs-6.4.0-xfs_db-move-obfuscate_name-assertion-to-callers.patch - xfsprogs-6.4.0-xfs_db-fix-metadump-name-obfuscation-for-ascii-ci-fi.patch - xfsprogs-6.4.0-xfs-stabilize-the-dirent-name-transformation-functio.patch - to implement RHEL-RHEL-8284 - - Backport xfsprogs-rhelonly-xfs_quota-fix-missing-mount-point-warning.patch - to implement RHEL-7900 - - Related: RHEL-15399 - Related: RHEL-8284 - Related: RHEL-7900 - Fix man page, mkfs.xfs(8): Update section on dax+reflink - compatibility (#2226900) - Fix man page default for sparse mkfs option (#2216118) - xfs unrepairable filesystem if directory block not junked in phase 3 - more - fixes - Related: RHEL-54342 - xfs unrepairable filesystem if directory block not junked in phase 3 - Related: RHEL-54342 - Fix missing rpm db entry for: /usr/share/xfsprogs - Related: RHEL-39450 - xfs_repair: allow symlinks with short remote targets - Related: RHEL-54306 and RHEL-53164 - Fix coverity issue - Related: RHEL-39449 - Following is the patch list: - xfsprogs-6.5.0-xfs.8-xfs-fix-bounds-check-in-xfs_defer_agfl_block.patch - Fix various CVE issues. - Related: RHEL-32996 - Following is the patch list: - xfsprogs-6.5.0-xfs_db.xfs.8-xfs_db-fix-leak-in-flist_find_ftyp.patch - xfsprogs-6.5.0-xfs_repair.xfs.8-xfs_repair-make-duration-take-time_t.patch - xfsprogs-6.5.0-xfs_repair.xfs.8-xfs_scrub-don-t-call-phase_end-if-phase_rusage-was-n.patch - xfsprogs-6.5.0-xfs_fsr.xfs.8-xfs_fsr-convert-fsrallfs-to-use-time_t-instead-of-in.patch - xfsprogs-6.5.0-xfs_fsr.xfs.8-xfs_fsr-replace-atoi-with-strtol.patch - xfsprogs-6.5.0-xfs_db.xfs.8-xfs_db-add-helper-for-flist_find_type-for-clearer-fi.patch - xfsprogs-6.5.0-xfs_repair.xfs.8-xfs_repair-catch-strtol-errors.patch - xfsprogs-rhelonly-xfs_db-fix-unitialized-variable-in-check_parents-function.patch - Rebase to a more recent upstream release - Related: RHEL-28339 - Following is a list of dropped backported patches which - are contained in the current rebase: - xfsprogs-6.4.0-set-bnobt-cntbt-numrecs-correctly-when-formattin.patch - xfsprogs-6.4.0-mkfs-fix-man-s-default-value-for-sparse-option.patch - xfsprogs-6.4.0-xfs_repair-don-t-add-junked-entries-to-the-rebuilt-d.patch - xfsprogs-6.4.0-xfs_repair-fix-messaging-when-fixing-imap-due-to-spa.patch - xfsprogs-6.4.0-xfs_repair-don-t-spray-correcting-imap-all-by-itself.patch - xfsprogs-6.4.0-xfs_repair-fix-messaging-when-shortform_dir2_junk-is.patch - xfsprogs-6.4.0-xfs_db-move-obfuscate_name-assertion-to-callers.patch - xfsprogs-6.4.0-xfs_db-fix-metadump-name-obfuscation-for-ascii-ci-fi.patch - xfsprogs-6.4.0-xfs-stabilize-the-dirent-name-transformation-functio.patch - - Rename xfs_quota-fix-missing-mount-point-warning.patch to reflect upstream - version it was merged in. - Rebase to upstream version 6.3.0 - - Following is a list of dropped backported patches which - are contained in the current rebase: - xfsprogs-5.19.0-xfs-hoist-refcount-record-merge-predicates.patch (v6.2.0) - xfsprogs-5.19.0-xfs_db-fix-dir3-block-magic-check.patch (v6.1.0) - xfsprogs-5.19.0-xfs-estimate-post-merge-refcounts-correctly.patch (v6.2.0) - xfsprogs-5.19.0-xfs-get-rid-of-assert-from-xfs_btree_islastblock.patch (v6.2.0) - xfsprogs-5.19.0-xfs-fix-off-by-one-error-in-xfs_btree_space_to_heigh.patch (v6.2.0) - xfsprogs-5.19.0-xfs-fix-sb-write-verify-for-lazysbcount.patch (v6.1.0) - xfsprogs-5.19.0-xfs-removed-useless-condition-in-function-xfs_attr_n.patch (v6.0.0) - xfsprogs-5.19.0-xfs_repair-retain-superblock-buffer-to-avoid-write-h.patch (v6.1.0) - - Rename the remaining patches so the name contains upstream version in which - they are implemented, or "rhelonly". - - Drop Eric Sandeen's public key used to check tarball signature and replace it by - Carlos Maiolino's (current upstream xfsprogs maintainer). - - Following is a list of newly backported patches from versions released after 6.3 - which are fixing patches present in version 6.3: - xfsprogs-6.4.0-xfs_repair-don-t-add-junked-entries-to-the-rebuilt-d.patch - xfsprogs-6.4.0-xfs_repair-don-t-spray-correcting-imap-all-by-itself.patch - xfsprogs-6.4.0-xfs_repair-fix-messaging-when-fixing-imap-due-to-spa.patch - xfsprogs-6.4.0-xfs_repair-fix-messaging-when-shortform_dir2_junk-is.patch - - Backport: - xfsprogs-6.4.0-xfs_db-move-obfuscate_name-assertion-to-callers.patch - xfsprogs-6.4.0-xfs_db-fix-metadump-name-obfuscation-for-ascii-ci-fi.patch - xfsprogs-6.4.0-xfs-stabilize-the-dirent-name-transformation-functio.patch - to implement RHEL-RHEL-8284 - - Backport xfsprogs-rhelonly-xfs_quota-fix-missing-mount-point-warning.patch - to implement RHEL-7900 - - Related: RHEL-15399 - Related: RHEL-8284 - Related: RHEL-7900 - Fix man page, mkfs.xfs(8): Update section on dax+reflink - compatibility (#2226900) - Fix man page default for sparse mkfs option (#2216118) - Add %baserelease to help future mass rebuilds - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Split xkbcomp out from xorg-x11-xkb-utils into its own package (#1895770) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - xkeyboard-config 2.33 (#1972014) - Restore the xorg ruleset, console-setup and possibly others are still using those (#1951875) - Allow for a "custom" layout - Don't mark the DTD document as XML document (#1952283) - Remove a duplicate keyboard layout to prevent a crash in gnome-desktop's xkbinfo - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - xkeyboard-config 2.32 - build with meson now - drop the xorg ruleset, no longer in use. Everything is hardcoded to evdev these days. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add make to BuildRequires - Fix BuildRequires for git, we only need git-core - xkeyboard-config 2.31 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - xkeyboard-config 2.33 (#1972014) - Restore the xorg ruleset, console-setup and possibly others are still using those (#1951875) - Allow for a "custom" layout - Don't mark the DTD document as XML document (#1952283) - Remove a duplicate keyboard layout to prevent a crash in gnome-desktop's xkbinfo - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - xkeyboard-config 2.32 - build with meson now - drop the xorg ruleset, no longer in use. Everything is hardcoded to evdev these days. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add make to BuildRequires - Fix BuildRequires for git, we only need git-core - xkeyboard-config 2.31 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Add noarch to ExclusiveArch - Disable building on i686 - Rebuild with regenerated Requires on Java - Install license files in licensedir instead of docdir - Add noarch to ExclusiveArch - Disable building on i686 - Fix patch usage - Rebuild with regenerated Requires on Java - Rebuild with regenerated Requires on Java - Drop bundled expat and build against libxml2 - Resolves: CVE-2022-25235 - Resolves: CVE-2022-25236 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fix HTML injection in Abyss error responses and directory listings - Resolves: CVE-2026-15928 - Drop bundled expat and build against libxml2 - Resolves: CVE-2022-25235 - Resolves: CVE-2022-25236 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fix HTML injection in Abyss error responses and directory listings - Resolves: CVE-2026-15928 - Fix adopt function the same way as in upstream Related: RHEL-35381 - Fix double free in xmlSecGCryptAsymKeyDataGenerate Related: RHEL-35381 - Add xmlsec1-gnutls dependency on xmlsec1-gcrypt Related: RHEL-35381 - Fix memory leaks found by SAST Resolves: RHEL-35381 - Fix adopt function the same way as in upstream Related: RHEL-35381 - Fix double free in xmlSecGCryptAsymKeyDataGenerate Related: RHEL-35381 - Add xmlsec1-gnutls dependency on xmlsec1-gcrypt Related: RHEL-35381 - Fix memory leaks found by SAST Resolves: RHEL-35381 - Fix adopt function the same way as in upstream Related: RHEL-35381 - Fix double free in xmlSecGCryptAsymKeyDataGenerate Related: RHEL-35381 - Add xmlsec1-gnutls dependency on xmlsec1-gcrypt Related: RHEL-35381 - Fix memory leaks found by SAST Resolves: RHEL-35381 - Rebuild Related: #2069689 - Minor spec improvements - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change package version to year + build - Exclude most drivers from RHEL - Don't Require wacom on s390x, that's just silly - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Drop geode, since F31+ no longer supports the associated CPU - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Enable hardened build flags Resolves: rhbz#2044898 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Ship xorg-x11-drv-evdev-devel in CRB (#2050369) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Enable hardened build Resolves: rhbz#2044899 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Map some high keycodes into the FK20-FK23 range (RHEL-84833) - Enable hardened build Resolves: rhbz#2044900 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fix axis inversion on the first relative dial (RHEL-106467) - Map ABS_THROTTLE to ring2 on all dualring devices (RHEL-106467) - Add support for Wacom Intuos Pro 3rd Gen (RHEL-106467) - Emulate a zero axis events after REL_WHEEL (RHEL-153540) - Fix ToolSerials assignment for serials greater than INT_MAX (RHEL-153532) - Fix axis inversion on the first relative dial (RHEL-106467) - Map ABS_THROTTLE to ring2 on all dualring devices (RHEL-106467) - Add support for Wacom Intuos Pro 3rd Gen (RHEL-106467) - Fix axis inversion on the first relative dial (RHEL-106467) - Map ABS_THROTTLE to ring2 on all dualring devices (RHEL-106467) - Add support for Wacom Intuos Pro 3rd Gen (RHEL-106467) - Emulate a zero axis events after REL_WHEEL (RHEL-153540) - Fix ToolSerials assignment for serials greater than INT_MAX (RHEL-153532) - Fix axis inversion on the first relative dial (RHEL-106467) - Map ABS_THROTTLE to ring2 on all dualring devices (RHEL-106467) - Add support for Wacom Intuos Pro 3rd Gen (RHEL-106467) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Drop the daewoo-misc fonts, they have no upstream license terms and may be proprietary (#1952727) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Replace the external xorg-x11-fonts-update-dirs script with an rpm macro doing the same thing, removing our runtime reliance on xorg-x11-font-utils (#1938074) - BuildRequire mkfontscale now that it's separated out from xorg-x11-font-utils (#1938069) - Use the make_build rpm macro - Make scriptlets non-failable (#1926533) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Drop the daewoo-misc fonts, they have no upstream license terms and may be proprietary (#1952727) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Replace the external xorg-x11-fonts-update-dirs script with an rpm macro doing the same thing, removing our runtime reliance on xorg-x11-font-utils (#1938074) - BuildRequire mkfontscale now that it's separated out from xorg-x11-font-utils (#1938069) - Use the make_build rpm macro - Make scriptlets non-failable (#1926533) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Drop the daewoo-misc fonts, they have no upstream license terms and may be proprietary (#1952727) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Replace the external xorg-x11-fonts-update-dirs script with an rpm macro doing the same thing, removing our runtime reliance on xorg-x11-font-utils (#1938074) - BuildRequire mkfontscale now that it's separated out from xorg-x11-font-utils (#1938069) - Use the make_build rpm macro - Make scriptlets non-failable (#1926533) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Drop the daewoo-misc fonts, they have no upstream license terms and may be proprietary (#1952727) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Replace the external xorg-x11-fonts-update-dirs script with an rpm macro doing the same thing, removing our runtime reliance on xorg-x11-font-utils (#1938074) - BuildRequire mkfontscale now that it's separated out from xorg-x11-font-utils (#1938069) - Use the make_build rpm macro - Make scriptlets non-failable (#1926533) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Drop the daewoo-misc fonts, they have no upstream license terms and may be proprietary (#1952727) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Replace the external xorg-x11-fonts-update-dirs script with an rpm macro doing the same thing, removing our runtime reliance on xorg-x11-font-utils (#1938074) - BuildRequire mkfontscale now that it's separated out from xorg-x11-font-utils (#1938069) - Use the make_build rpm macro - Make scriptlets non-failable (#1926533) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Drop the daewoo-misc fonts, they have no upstream license terms and may be proprietary (#1952727) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Replace the external xorg-x11-fonts-update-dirs script with an rpm macro doing the same thing, removing our runtime reliance on xorg-x11-font-utils (#1938074) - BuildRequire mkfontscale now that it's separated out from xorg-x11-font-utils (#1938069) - Use the make_build rpm macro - Make scriptlets non-failable (#1926533) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Drop the daewoo-misc fonts, they have no upstream license terms and may be proprietary (#1952727) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Replace the external xorg-x11-fonts-update-dirs script with an rpm macro doing the same thing, removing our runtime reliance on xorg-x11-font-utils (#1938074) - BuildRequire mkfontscale now that it's separated out from xorg-x11-font-utils (#1938069) - Use the make_build rpm macro - Make scriptlets non-failable (#1926533) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Drop the daewoo-misc fonts, they have no upstream license terms and may be proprietary (#1952727) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Replace the external xorg-x11-fonts-update-dirs script with an rpm macro doing the same thing, removing our runtime reliance on xorg-x11-font-utils (#1938074) - BuildRequire mkfontscale now that it's separated out from xorg-x11-font-utils (#1938069) - Use the make_build rpm macro - Make scriptlets non-failable (#1926533) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Drop the daewoo-misc fonts, they have no upstream license terms and may be proprietary (#1952727) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Replace the external xorg-x11-fonts-update-dirs script with an rpm macro doing the same thing, removing our runtime reliance on xorg-x11-font-utils (#1938074) - BuildRequire mkfontscale now that it's separated out from xorg-x11-font-utils (#1938069) - Use the make_build rpm macro - Make scriptlets non-failable (#1926533) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Drop the daewoo-misc fonts, they have no upstream license terms and may be proprietary (#1952727) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Replace the external xorg-x11-fonts-update-dirs script with an rpm macro doing the same thing, removing our runtime reliance on xorg-x11-font-utils (#1938074) - BuildRequire mkfontscale now that it's separated out from xorg-x11-font-utils (#1938069) - Use the make_build rpm macro - Make scriptlets non-failable (#1926533) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Drop the daewoo-misc fonts, they have no upstream license terms and may be proprietary (#1952727) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Replace the external xorg-x11-fonts-update-dirs script with an rpm macro doing the same thing, removing our runtime reliance on xorg-x11-font-utils (#1938074) - BuildRequire mkfontscale now that it's separated out from xorg-x11-font-utils (#1938069) - Use the make_build rpm macro - Make scriptlets non-failable (#1926533) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Drop the daewoo-misc fonts, they have no upstream license terms and may be proprietary (#1952727) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Replace the external xorg-x11-fonts-update-dirs script with an rpm macro doing the same thing, removing our runtime reliance on xorg-x11-font-utils (#1938074) - BuildRequire mkfontscale now that it's separated out from xorg-x11-font-utils (#1938069) - Use the make_build rpm macro - Make scriptlets non-failable (#1926533) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Drop the daewoo-misc fonts, they have no upstream license terms and may be proprietary (#1952727) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Replace the external xorg-x11-fonts-update-dirs script with an rpm macro doing the same thing, removing our runtime reliance on xorg-x11-font-utils (#1938074) - BuildRequire mkfontscale now that it's separated out from xorg-x11-font-utils (#1938069) - Use the make_build rpm macro - Make scriptlets non-failable (#1926533) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Drop the daewoo-misc fonts, they have no upstream license terms and may be proprietary (#1952727) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Replace the external xorg-x11-fonts-update-dirs script with an rpm macro doing the same thing, removing our runtime reliance on xorg-x11-font-utils (#1938074) - BuildRequire mkfontscale now that it's separated out from xorg-x11-font-utils (#1938069) - Use the make_build rpm macro - Make scriptlets non-failable (#1926533) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Drop the daewoo-misc fonts, they have no upstream license terms and may be proprietary (#1952727) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Replace the external xorg-x11-fonts-update-dirs script with an rpm macro doing the same thing, removing our runtime reliance on xorg-x11-font-utils (#1938074) - BuildRequire mkfontscale now that it's separated out from xorg-x11-font-utils (#1938069) - Use the make_build rpm macro - Make scriptlets non-failable (#1926533) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Drop the daewoo-misc fonts, they have no upstream license terms and may be proprietary (#1952727) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Replace the external xorg-x11-fonts-update-dirs script with an rpm macro doing the same thing, removing our runtime reliance on xorg-x11-font-utils (#1938074) - BuildRequire mkfontscale now that it's separated out from xorg-x11-font-utils (#1938069) - Use the make_build rpm macro - Make scriptlets non-failable (#1926533) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - xorgproto 2024.1 (RHEL-36584) xorgproto 2022.2 (#2179319) - Other security related fixes Resolves: https://redhat.atlassian.net/browse/RHEL-184288 - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260, CVE-2026-50261, CVE-2026-50262, CVE-2026-50263, CVE-2026-50264 Resolves: https://redhat.atlassian.net/browse/RHEL-182435 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163226 Resolves: https://redhat.atlassian.net/browse/RHEL-163308 Resolves: https://redhat.atlassian.net/browse/RHEL-163239 - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117509 - CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035), CVE-2025-62231 (RHEL-125003) - CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308), CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409), CVE-2025-49180 (RHEL-97253) - xfree86: Fix potentially NULL reference to platform device's PCI device Resolves: https://issues.redhat.com/browse/RHEL-84253 - Fix LEDs state after suspend/resume Resolves: https://issues.redhat.com/browse/RHEL-82085 - CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186), CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191), CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199), CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200) - CVE fix for CVE-2024-9632 - Backport fix for invalid Unicode sequence - CVE fix for CVE-2026-55999 Resolves: https://redhat.atlassian.net/browse/RHEL-191493 - Other security related fixes Resolves: https://redhat.atlassian.net/browse/RHEL-184288 - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260, CVE-2026-50261, CVE-2026-50262, CVE-2026-50263, CVE-2026-50264 Resolves: https://redhat.atlassian.net/browse/RHEL-182435 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163226 Resolves: https://redhat.atlassian.net/browse/RHEL-163308 Resolves: https://redhat.atlassian.net/browse/RHEL-163239 - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117509 - CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035), CVE-2025-62231 (RHEL-125003) - CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308), CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409), CVE-2025-49180 (RHEL-97253) - xfree86: Fix potentially NULL reference to platform device's PCI device Resolves: https://issues.redhat.com/browse/RHEL-84253 - Fix LEDs state after suspend/resume Resolves: https://issues.redhat.com/browse/RHEL-82085 - CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186), CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191), CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199), CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200) - CVE fix for: CVE-2026-88812, CVE-2026-93521, CVE-2026-93523 Resolves: https://redhat.atlassian.net/browse/RHEL-278161 Resolves: https://redhat.atlassian.net/browse/RHEL-278164 Resolves: https://redhat.atlassian.net/browse/RHEL-278169 - CVE fix for CVE-2026-55999 Resolves: https://redhat.atlassian.net/browse/RHEL-191493 - Other security related fixes Resolves: https://redhat.atlassian.net/browse/RHEL-184288 - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260, CVE-2026-50261, CVE-2026-50262, CVE-2026-50263, CVE-2026-50264 Resolves: https://redhat.atlassian.net/browse/RHEL-182435 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163226 Resolves: https://redhat.atlassian.net/browse/RHEL-163308 Resolves: https://redhat.atlassian.net/browse/RHEL-163239 - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117509 - CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035), CVE-2025-62231 (RHEL-125003) - CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308), CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409), CVE-2025-49180 (RHEL-97253) - xfree86: Fix potentially NULL reference to platform device's PCI device Resolves: https://issues.redhat.com/browse/RHEL-84253 - Fix LEDs state after suspend/resume Resolves: https://issues.redhat.com/browse/RHEL-82085 - CVE fix for: CVE-2026-93516, CVE-2026-93517, CVE-2026-93518, CVE-2026-93519, CVE-2026-93520 Resolves: https://redhat.atlassian.net/browse/RHEL-282169 Resolves: https://redhat.atlassian.net/browse/RHEL-282173 Resolves: https://redhat.atlassian.net/browse/RHEL-282180 Resolves: https://redhat.atlassian.net/browse/RHEL-282184 Resolves: https://redhat.atlassian.net/browse/RHEL-282193 - CVE fix for: CVE-2026-88812, CVE-2026-93521, CVE-2026-93523 Resolves: https://redhat.atlassian.net/browse/RHEL-278161 Resolves: https://redhat.atlassian.net/browse/RHEL-278164 Resolves: https://redhat.atlassian.net/browse/RHEL-278169 - CVE fix for CVE-2026-55999 Resolves: https://redhat.atlassian.net/browse/RHEL-191493 - Other security related fixes Resolves: https://redhat.atlassian.net/browse/RHEL-184288 - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260, CVE-2026-50261, CVE-2026-50262, CVE-2026-50263, CVE-2026-50264 Resolves: https://redhat.atlassian.net/browse/RHEL-182435 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163226 Resolves: https://redhat.atlassian.net/browse/RHEL-163308 Resolves: https://redhat.atlassian.net/browse/RHEL-163239 - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117509 - CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035), CVE-2025-62231 (RHEL-125003) - CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308), CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409), CVE-2025-49180 (RHEL-97253) - xfree86: Fix potentially NULL reference to platform device's PCI device Resolves: https://issues.redhat.com/browse/RHEL-84253 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163227 Resolves: https://redhat.atlassian.net/browse/RHEL-163309 Resolves: https://redhat.atlassian.net/browse/RHEL-163240 - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117509 - CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035), CVE-2025-62231 (RHEL-125003) - CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308), CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409), CVE-2025-49180 (RHEL-97253) - xfree86: Fix potentially NULL reference to platform device's PCI device Resolves: https://issues.redhat.com/browse/RHEL-84253 - Fix LEDs state after suspend/resume Resolves: https://issues.redhat.com/browse/RHEL-82085 - CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186), CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191), CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199), CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200) - CVE fix for CVE-2024-9632 - Backport fix for invalid Unicode sequence - Other security related fixes Resolves: https://redhat.atlassian.net/browse/RHEL-184288 - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260, CVE-2026-50261, CVE-2026-50262, CVE-2026-50263, CVE-2026-50264 Resolves: https://redhat.atlassian.net/browse/RHEL-182435 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163226 Resolves: https://redhat.atlassian.net/browse/RHEL-163308 Resolves: https://redhat.atlassian.net/browse/RHEL-163239 - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117509 - CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035), CVE-2025-62231 (RHEL-125003) - CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308), CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409), CVE-2025-49180 (RHEL-97253) - xfree86: Fix potentially NULL reference to platform device's PCI device Resolves: https://issues.redhat.com/browse/RHEL-84253 - Fix LEDs state after suspend/resume Resolves: https://issues.redhat.com/browse/RHEL-82085 - CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186), CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191), CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199), CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200) - CVE fix for CVE-2024-9632 - Backport fix for invalid Unicode sequence - CVE fix for CVE-2026-55999 Resolves: https://redhat.atlassian.net/browse/RHEL-191493 - Other security related fixes Resolves: https://redhat.atlassian.net/browse/RHEL-184288 - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260, CVE-2026-50261, CVE-2026-50262, CVE-2026-50263, CVE-2026-50264 Resolves: https://redhat.atlassian.net/browse/RHEL-182435 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163226 Resolves: https://redhat.atlassian.net/browse/RHEL-163308 Resolves: https://redhat.atlassian.net/browse/RHEL-163239 - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117509 - CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035), CVE-2025-62231 (RHEL-125003) - CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308), CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409), CVE-2025-49180 (RHEL-97253) - xfree86: Fix potentially NULL reference to platform device's PCI device Resolves: https://issues.redhat.com/browse/RHEL-84253 - Fix LEDs state after suspend/resume Resolves: https://issues.redhat.com/browse/RHEL-82085 - CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186), CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191), CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199), CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200) - CVE fix for: CVE-2026-88812, CVE-2026-93521, CVE-2026-93523 Resolves: https://redhat.atlassian.net/browse/RHEL-278161 Resolves: https://redhat.atlassian.net/browse/RHEL-278164 Resolves: https://redhat.atlassian.net/browse/RHEL-278169 - CVE fix for CVE-2026-55999 Resolves: https://redhat.atlassian.net/browse/RHEL-191493 - Other security related fixes Resolves: https://redhat.atlassian.net/browse/RHEL-184288 - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260, CVE-2026-50261, CVE-2026-50262, CVE-2026-50263, CVE-2026-50264 Resolves: https://redhat.atlassian.net/browse/RHEL-182435 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163226 Resolves: https://redhat.atlassian.net/browse/RHEL-163308 Resolves: https://redhat.atlassian.net/browse/RHEL-163239 - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117509 - CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035), CVE-2025-62231 (RHEL-125003) - CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308), CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409), CVE-2025-49180 (RHEL-97253) - xfree86: Fix potentially NULL reference to platform device's PCI device Resolves: https://issues.redhat.com/browse/RHEL-84253 - Fix LEDs state after suspend/resume Resolves: https://issues.redhat.com/browse/RHEL-82085 - CVE fix for: CVE-2026-93516, CVE-2026-93517, CVE-2026-93518, CVE-2026-93519, CVE-2026-93520 Resolves: https://redhat.atlassian.net/browse/RHEL-282169 Resolves: https://redhat.atlassian.net/browse/RHEL-282173 Resolves: https://redhat.atlassian.net/browse/RHEL-282180 Resolves: https://redhat.atlassian.net/browse/RHEL-282184 Resolves: https://redhat.atlassian.net/browse/RHEL-282193 - CVE fix for: CVE-2026-88812, CVE-2026-93521, CVE-2026-93523 Resolves: https://redhat.atlassian.net/browse/RHEL-278161 Resolves: https://redhat.atlassian.net/browse/RHEL-278164 Resolves: https://redhat.atlassian.net/browse/RHEL-278169 - CVE fix for CVE-2026-55999 Resolves: https://redhat.atlassian.net/browse/RHEL-191493 - Other security related fixes Resolves: https://redhat.atlassian.net/browse/RHEL-184288 - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260, CVE-2026-50261, CVE-2026-50262, CVE-2026-50263, CVE-2026-50264 Resolves: https://redhat.atlassian.net/browse/RHEL-182435 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163226 Resolves: https://redhat.atlassian.net/browse/RHEL-163308 Resolves: https://redhat.atlassian.net/browse/RHEL-163239 - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117509 - CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035), CVE-2025-62231 (RHEL-125003) - CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308), CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409), CVE-2025-49180 (RHEL-97253) - xfree86: Fix potentially NULL reference to platform device's PCI device Resolves: https://issues.redhat.com/browse/RHEL-84253 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163227 Resolves: https://redhat.atlassian.net/browse/RHEL-163309 Resolves: https://redhat.atlassian.net/browse/RHEL-163240 - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117509 - CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035), CVE-2025-62231 (RHEL-125003) - CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308), CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409), CVE-2025-49180 (RHEL-97253) - xfree86: Fix potentially NULL reference to platform device's PCI device Resolves: https://issues.redhat.com/browse/RHEL-84253 - Fix LEDs state after suspend/resume Resolves: https://issues.redhat.com/browse/RHEL-82085 - CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186), CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191), CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199), CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200) - CVE fix for CVE-2024-9632 - Backport fix for invalid Unicode sequence - Other security related fixes Resolves: https://redhat.atlassian.net/browse/RHEL-184288 - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260, CVE-2026-50261, CVE-2026-50262, CVE-2026-50263, CVE-2026-50264 Resolves: https://redhat.atlassian.net/browse/RHEL-182435 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163226 Resolves: https://redhat.atlassian.net/browse/RHEL-163308 Resolves: https://redhat.atlassian.net/browse/RHEL-163239 - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117509 - CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035), CVE-2025-62231 (RHEL-125003) - CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308), CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409), CVE-2025-49180 (RHEL-97253) - xfree86: Fix potentially NULL reference to platform device's PCI device Resolves: https://issues.redhat.com/browse/RHEL-84253 - Fix LEDs state after suspend/resume Resolves: https://issues.redhat.com/browse/RHEL-82085 - CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186), CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191), CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199), CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200) - CVE fix for CVE-2024-9632 - Backport fix for invalid Unicode sequence - CVE fix for CVE-2026-55999 Resolves: https://redhat.atlassian.net/browse/RHEL-191493 - Other security related fixes Resolves: https://redhat.atlassian.net/browse/RHEL-184288 - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260, CVE-2026-50261, CVE-2026-50262, CVE-2026-50263, CVE-2026-50264 Resolves: https://redhat.atlassian.net/browse/RHEL-182435 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163226 Resolves: https://redhat.atlassian.net/browse/RHEL-163308 Resolves: https://redhat.atlassian.net/browse/RHEL-163239 - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117509 - CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035), CVE-2025-62231 (RHEL-125003) - CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308), CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409), CVE-2025-49180 (RHEL-97253) - xfree86: Fix potentially NULL reference to platform device's PCI device Resolves: https://issues.redhat.com/browse/RHEL-84253 - Fix LEDs state after suspend/resume Resolves: https://issues.redhat.com/browse/RHEL-82085 - CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186), CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191), CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199), CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200) - CVE fix for: CVE-2026-88812, CVE-2026-93521, CVE-2026-93523 Resolves: https://redhat.atlassian.net/browse/RHEL-278161 Resolves: https://redhat.atlassian.net/browse/RHEL-278164 Resolves: https://redhat.atlassian.net/browse/RHEL-278169 - CVE fix for CVE-2026-55999 Resolves: https://redhat.atlassian.net/browse/RHEL-191493 - Other security related fixes Resolves: https://redhat.atlassian.net/browse/RHEL-184288 - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260, CVE-2026-50261, CVE-2026-50262, CVE-2026-50263, CVE-2026-50264 Resolves: https://redhat.atlassian.net/browse/RHEL-182435 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163226 Resolves: https://redhat.atlassian.net/browse/RHEL-163308 Resolves: https://redhat.atlassian.net/browse/RHEL-163239 - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117509 - CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035), CVE-2025-62231 (RHEL-125003) - CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308), CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409), CVE-2025-49180 (RHEL-97253) - xfree86: Fix potentially NULL reference to platform device's PCI device Resolves: https://issues.redhat.com/browse/RHEL-84253 - Fix LEDs state after suspend/resume Resolves: https://issues.redhat.com/browse/RHEL-82085 - CVE fix for: CVE-2026-93516, CVE-2026-93517, CVE-2026-93518, CVE-2026-93519, CVE-2026-93520 Resolves: https://redhat.atlassian.net/browse/RHEL-282169 Resolves: https://redhat.atlassian.net/browse/RHEL-282173 Resolves: https://redhat.atlassian.net/browse/RHEL-282180 Resolves: https://redhat.atlassian.net/browse/RHEL-282184 Resolves: https://redhat.atlassian.net/browse/RHEL-282193 - CVE fix for: CVE-2026-88812, CVE-2026-93521, CVE-2026-93523 Resolves: https://redhat.atlassian.net/browse/RHEL-278161 Resolves: https://redhat.atlassian.net/browse/RHEL-278164 Resolves: https://redhat.atlassian.net/browse/RHEL-278169 - CVE fix for CVE-2026-55999 Resolves: https://redhat.atlassian.net/browse/RHEL-191493 - Other security related fixes Resolves: https://redhat.atlassian.net/browse/RHEL-184288 - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260, CVE-2026-50261, CVE-2026-50262, CVE-2026-50263, CVE-2026-50264 Resolves: https://redhat.atlassian.net/browse/RHEL-182435 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163226 Resolves: https://redhat.atlassian.net/browse/RHEL-163308 Resolves: https://redhat.atlassian.net/browse/RHEL-163239 - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117509 - CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035), CVE-2025-62231 (RHEL-125003) - CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308), CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409), CVE-2025-49180 (RHEL-97253) - xfree86: Fix potentially NULL reference to platform device's PCI device Resolves: https://issues.redhat.com/browse/RHEL-84253 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163227 Resolves: https://redhat.atlassian.net/browse/RHEL-163309 Resolves: https://redhat.atlassian.net/browse/RHEL-163240 - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117509 - CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035), CVE-2025-62231 (RHEL-125003) - CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308), CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409), CVE-2025-49180 (RHEL-97253) - xfree86: Fix potentially NULL reference to platform device's PCI device Resolves: https://issues.redhat.com/browse/RHEL-84253 - Fix LEDs state after suspend/resume Resolves: https://issues.redhat.com/browse/RHEL-82085 - CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186), CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191), CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199), CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200) - CVE fix for CVE-2024-9632 - Backport fix for invalid Unicode sequence - Other security related fixes Resolves: https://redhat.atlassian.net/browse/RHEL-184288 - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260, CVE-2026-50261, CVE-2026-50262, CVE-2026-50263, CVE-2026-50264 Resolves: https://redhat.atlassian.net/browse/RHEL-182435 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163226 Resolves: https://redhat.atlassian.net/browse/RHEL-163308 Resolves: https://redhat.atlassian.net/browse/RHEL-163239 - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117509 - CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035), CVE-2025-62231 (RHEL-125003) - CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308), CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409), CVE-2025-49180 (RHEL-97253) - xfree86: Fix potentially NULL reference to platform device's PCI device Resolves: https://issues.redhat.com/browse/RHEL-84253 - Fix LEDs state after suspend/resume Resolves: https://issues.redhat.com/browse/RHEL-82085 - CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186), CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191), CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199), CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200) - CVE fix for CVE-2024-9632 - Backport fix for invalid Unicode sequence - CVE fix for CVE-2026-55999 Resolves: https://redhat.atlassian.net/browse/RHEL-191493 - Other security related fixes Resolves: https://redhat.atlassian.net/browse/RHEL-184288 - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260, CVE-2026-50261, CVE-2026-50262, CVE-2026-50263, CVE-2026-50264 Resolves: https://redhat.atlassian.net/browse/RHEL-182435 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163226 Resolves: https://redhat.atlassian.net/browse/RHEL-163308 Resolves: https://redhat.atlassian.net/browse/RHEL-163239 - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117509 - CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035), CVE-2025-62231 (RHEL-125003) - CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308), CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409), CVE-2025-49180 (RHEL-97253) - xfree86: Fix potentially NULL reference to platform device's PCI device Resolves: https://issues.redhat.com/browse/RHEL-84253 - Fix LEDs state after suspend/resume Resolves: https://issues.redhat.com/browse/RHEL-82085 - CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186), CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191), CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199), CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200) - CVE fix for: CVE-2026-88812, CVE-2026-93521, CVE-2026-93523 Resolves: https://redhat.atlassian.net/browse/RHEL-278161 Resolves: https://redhat.atlassian.net/browse/RHEL-278164 Resolves: https://redhat.atlassian.net/browse/RHEL-278169 - CVE fix for CVE-2026-55999 Resolves: https://redhat.atlassian.net/browse/RHEL-191493 - Other security related fixes Resolves: https://redhat.atlassian.net/browse/RHEL-184288 - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260, CVE-2026-50261, CVE-2026-50262, CVE-2026-50263, CVE-2026-50264 Resolves: https://redhat.atlassian.net/browse/RHEL-182435 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163226 Resolves: https://redhat.atlassian.net/browse/RHEL-163308 Resolves: https://redhat.atlassian.net/browse/RHEL-163239 - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117509 - CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035), CVE-2025-62231 (RHEL-125003) - CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308), CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409), CVE-2025-49180 (RHEL-97253) - xfree86: Fix potentially NULL reference to platform device's PCI device Resolves: https://issues.redhat.com/browse/RHEL-84253 - Fix LEDs state after suspend/resume Resolves: https://issues.redhat.com/browse/RHEL-82085 - CVE fix for: CVE-2026-93516, CVE-2026-93517, CVE-2026-93518, CVE-2026-93519, CVE-2026-93520 Resolves: https://redhat.atlassian.net/browse/RHEL-282169 Resolves: https://redhat.atlassian.net/browse/RHEL-282173 Resolves: https://redhat.atlassian.net/browse/RHEL-282180 Resolves: https://redhat.atlassian.net/browse/RHEL-282184 Resolves: https://redhat.atlassian.net/browse/RHEL-282193 - CVE fix for: CVE-2026-88812, CVE-2026-93521, CVE-2026-93523 Resolves: https://redhat.atlassian.net/browse/RHEL-278161 Resolves: https://redhat.atlassian.net/browse/RHEL-278164 Resolves: https://redhat.atlassian.net/browse/RHEL-278169 - CVE fix for CVE-2026-55999 Resolves: https://redhat.atlassian.net/browse/RHEL-191493 - Other security related fixes Resolves: https://redhat.atlassian.net/browse/RHEL-184288 - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260, CVE-2026-50261, CVE-2026-50262, CVE-2026-50263, CVE-2026-50264 Resolves: https://redhat.atlassian.net/browse/RHEL-182435 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163226 Resolves: https://redhat.atlassian.net/browse/RHEL-163308 Resolves: https://redhat.atlassian.net/browse/RHEL-163239 - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117509 - CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035), CVE-2025-62231 (RHEL-125003) - CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308), CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409), CVE-2025-49180 (RHEL-97253) - xfree86: Fix potentially NULL reference to platform device's PCI device Resolves: https://issues.redhat.com/browse/RHEL-84253 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163227 Resolves: https://redhat.atlassian.net/browse/RHEL-163309 Resolves: https://redhat.atlassian.net/browse/RHEL-163240 - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117509 - CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035), CVE-2025-62231 (RHEL-125003) - CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308), CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409), CVE-2025-49180 (RHEL-97253) - xfree86: Fix potentially NULL reference to platform device's PCI device Resolves: https://issues.redhat.com/browse/RHEL-84253 - Fix LEDs state after suspend/resume Resolves: https://issues.redhat.com/browse/RHEL-82085 - CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186), CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191), CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199), CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200) - CVE fix for CVE-2024-9632 - Backport fix for invalid Unicode sequence - Other security related fixes Resolves: https://redhat.atlassian.net/browse/RHEL-184288 - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260, CVE-2026-50261, CVE-2026-50262, CVE-2026-50263, CVE-2026-50264 Resolves: https://redhat.atlassian.net/browse/RHEL-182435 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163226 Resolves: https://redhat.atlassian.net/browse/RHEL-163308 Resolves: https://redhat.atlassian.net/browse/RHEL-163239 - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117509 - CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035), CVE-2025-62231 (RHEL-125003) - CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308), CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409), CVE-2025-49180 (RHEL-97253) - xfree86: Fix potentially NULL reference to platform device's PCI device Resolves: https://issues.redhat.com/browse/RHEL-84253 - Fix LEDs state after suspend/resume Resolves: https://issues.redhat.com/browse/RHEL-82085 - CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186), CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191), CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199), CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200) - CVE fix for CVE-2024-9632 - Backport fix for invalid Unicode sequence - CVE fix for CVE-2026-55999 Resolves: https://redhat.atlassian.net/browse/RHEL-191493 - Other security related fixes Resolves: https://redhat.atlassian.net/browse/RHEL-184288 - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260, CVE-2026-50261, CVE-2026-50262, CVE-2026-50263, CVE-2026-50264 Resolves: https://redhat.atlassian.net/browse/RHEL-182435 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163226 Resolves: https://redhat.atlassian.net/browse/RHEL-163308 Resolves: https://redhat.atlassian.net/browse/RHEL-163239 - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117509 - CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035), CVE-2025-62231 (RHEL-125003) - CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308), CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409), CVE-2025-49180 (RHEL-97253) - xfree86: Fix potentially NULL reference to platform device's PCI device Resolves: https://issues.redhat.com/browse/RHEL-84253 - Fix LEDs state after suspend/resume Resolves: https://issues.redhat.com/browse/RHEL-82085 - CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186), CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191), CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199), CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200) - CVE fix for: CVE-2026-88812, CVE-2026-93521, CVE-2026-93523 Resolves: https://redhat.atlassian.net/browse/RHEL-278161 Resolves: https://redhat.atlassian.net/browse/RHEL-278164 Resolves: https://redhat.atlassian.net/browse/RHEL-278169 - CVE fix for CVE-2026-55999 Resolves: https://redhat.atlassian.net/browse/RHEL-191493 - Other security related fixes Resolves: https://redhat.atlassian.net/browse/RHEL-184288 - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260, CVE-2026-50261, CVE-2026-50262, CVE-2026-50263, CVE-2026-50264 Resolves: https://redhat.atlassian.net/browse/RHEL-182435 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163226 Resolves: https://redhat.atlassian.net/browse/RHEL-163308 Resolves: https://redhat.atlassian.net/browse/RHEL-163239 - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117509 - CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035), CVE-2025-62231 (RHEL-125003) - CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308), CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409), CVE-2025-49180 (RHEL-97253) - xfree86: Fix potentially NULL reference to platform device's PCI device Resolves: https://issues.redhat.com/browse/RHEL-84253 - Fix LEDs state after suspend/resume Resolves: https://issues.redhat.com/browse/RHEL-82085 - CVE fix for: CVE-2026-93516, CVE-2026-93517, CVE-2026-93518, CVE-2026-93519, CVE-2026-93520 Resolves: https://redhat.atlassian.net/browse/RHEL-282169 Resolves: https://redhat.atlassian.net/browse/RHEL-282173 Resolves: https://redhat.atlassian.net/browse/RHEL-282180 Resolves: https://redhat.atlassian.net/browse/RHEL-282184 Resolves: https://redhat.atlassian.net/browse/RHEL-282193 - CVE fix for: CVE-2026-88812, CVE-2026-93521, CVE-2026-93523 Resolves: https://redhat.atlassian.net/browse/RHEL-278161 Resolves: https://redhat.atlassian.net/browse/RHEL-278164 Resolves: https://redhat.atlassian.net/browse/RHEL-278169 - CVE fix for CVE-2026-55999 Resolves: https://redhat.atlassian.net/browse/RHEL-191493 - Other security related fixes Resolves: https://redhat.atlassian.net/browse/RHEL-184288 - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260, CVE-2026-50261, CVE-2026-50262, CVE-2026-50263, CVE-2026-50264 Resolves: https://redhat.atlassian.net/browse/RHEL-182435 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163226 Resolves: https://redhat.atlassian.net/browse/RHEL-163308 Resolves: https://redhat.atlassian.net/browse/RHEL-163239 - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117509 - CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035), CVE-2025-62231 (RHEL-125003) - CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308), CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409), CVE-2025-49180 (RHEL-97253) - xfree86: Fix potentially NULL reference to platform device's PCI device Resolves: https://issues.redhat.com/browse/RHEL-84253 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163227 Resolves: https://redhat.atlassian.net/browse/RHEL-163309 Resolves: https://redhat.atlassian.net/browse/RHEL-163240 - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117509 - CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035), CVE-2025-62231 (RHEL-125003) - CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308), CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409), CVE-2025-49180 (RHEL-97253) - xfree86: Fix potentially NULL reference to platform device's PCI device Resolves: https://issues.redhat.com/browse/RHEL-84253 - Fix LEDs state after suspend/resume Resolves: https://issues.redhat.com/browse/RHEL-82085 - CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186), CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191), CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199), CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200) - CVE fix for CVE-2024-9632 - Backport fix for invalid Unicode sequence - Other security related fixes Resolves: https://redhat.atlassian.net/browse/RHEL-184292 - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260, CVE-2026-50261, CVE-2026-50262, CVE-2026-50263 Resolves: https://redhat.atlassian.net/browse/RHEL-182426 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163199 Resolves: https://redhat.atlassian.net/browse/RHEL-163295 Resolves: https://redhat.atlassian.net/browse/RHEL-163253 - Fix a regression in Xwayland 24.1.9 with XTS test Xlib10 Resolves: https://redhat.atlassian.net/browse/RHEL-170368 - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117510 - Rebase to Xwayland 24.1.9 (RHEL-129828) - CVE fix for: CVE-2025-62229 (RHEL-119977), CVE-2025-62230 (RHEL-120023), CVE-2025-62231 (RHEL-125018) - CVE fix for: CVE-2025-49175 (RHEL-97288), CVE-2025-49176 (RHEL-97334), CVE-2025-49177 (RHEL-97357), CVE-2025-49178 (RHEL-97393), CVE-2025-49179 (RHEL-97404), CVE-2025-49180 (RHEL-97244) - CVE fix for: CVE-2025-26594 (RHEL-80204), CVE-2025-26595 (RHEL-80187), CVE-2025-26596 (RHEL-80190), CVE-2025-26597 (RHEL-80193), CVE-2025-26598 (RHEL-80195), CVE-2025-26599 (RHEL-80202), CVE-2025-26600 (RHEL-80203), CVE-2025-26601 (RHEL-80207) - Fix for CVE-2024-9632 - (RHEL-61997) - CVE fix for: CVE-2026-55999, CVE-2026-56000 Resolves: https://redhat.atlassian.net/browse/RHEL-191530 Resolves: https://redhat.atlassian.net/browse/RHEL-191519 - Other security related fixes Resolves: https://redhat.atlassian.net/browse/RHEL-184292 - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260, CVE-2026-50261, CVE-2026-50262, CVE-2026-50263 Resolves: https://redhat.atlassian.net/browse/RHEL-182426 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163199 Resolves: https://redhat.atlassian.net/browse/RHEL-163295 Resolves: https://redhat.atlassian.net/browse/RHEL-163253 - Fix a regression in Xwayland 24.1.9 with XTS test Xlib10 Resolves: https://redhat.atlassian.net/browse/RHEL-170368 - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117510 - Rebase to Xwayland 24.1.9 (RHEL-129828) - CVE fix for: CVE-2025-62229 (RHEL-119977), CVE-2025-62230 (RHEL-120023), CVE-2025-62231 (RHEL-125018) - CVE fix for: CVE-2025-49175 (RHEL-97288), CVE-2025-49176 (RHEL-97334), CVE-2025-49177 (RHEL-97357), CVE-2025-49178 (RHEL-97393), CVE-2025-49179 (RHEL-97404), CVE-2025-49180 (RHEL-97244) - CVE fix for: CVE-2025-26594 (RHEL-80204), CVE-2025-26595 (RHEL-80187), CVE-2025-26596 (RHEL-80190), CVE-2025-26597 (RHEL-80193), CVE-2025-26598 (RHEL-80195), CVE-2025-26599 (RHEL-80202), CVE-2025-26600 (RHEL-80203), CVE-2025-26601 (RHEL-80207) - CVE fix for: CVE-2026-88812, CVE-2026-93515, CVE-2026-93516 CVE-2026-93517, CVE-2026-93518, CVE-2026-93519, CVE-2026-93520, CVE-2026-93521, CVE-2026-93522, CVE-2026-93523, CVE-2026-93524, CVE-2026-93536 Resolves: https://redhat.atlassian.net/browse/RHEL-277909 Resolves: https://redhat.atlassian.net/browse/RHEL-277863 Resolves: https://redhat.atlassian.net/browse/RHEL-275777 Resolves: https://redhat.atlassian.net/browse/RHEL-276870 Resolves: https://redhat.atlassian.net/browse/RHEL-276424 Resolves: https://redhat.atlassian.net/browse/RHEL-277913 Resolves: https://redhat.atlassian.net/browse/RHEL-277892 Resolves: https://redhat.atlassian.net/browse/RHEL-277895 - CVE fix for: CVE-2026-55999, CVE-2026-56000 Resolves: https://redhat.atlassian.net/browse/RHEL-191532 Resolves: https://redhat.atlassian.net/browse/RHEL-191524 - Other security related fixes Resolves: https://redhat.atlassian.net/browse/RHEL-184292 - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260, CVE-2026-50261, CVE-2026-50262, CVE-2026-50263 Resolves: https://redhat.atlassian.net/browse/RHEL-182426 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163199 Resolves: https://redhat.atlassian.net/browse/RHEL-163295 Resolves: https://redhat.atlassian.net/browse/RHEL-163253 - Fix a regression in Xwayland 24.1.9 with XTS test Xlib10 Resolves: https://redhat.atlassian.net/browse/RHEL-170368 - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117510 - Rebase to Xwayland 24.1.9 (RHEL-129828) - CVE fix for: CVE-2025-62229 (RHEL-119977), CVE-2025-62230 (RHEL-120023), CVE-2025-62231 (RHEL-125018) - CVE fix for: CVE-2025-49175 (RHEL-97288), CVE-2025-49176 (RHEL-97334), CVE-2025-49177 (RHEL-97357), CVE-2025-49178 (RHEL-97393), CVE-2025-49179 (RHEL-97404), CVE-2025-49180 (RHEL-97244) - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163200 Resolves: https://redhat.atlassian.net/browse/RHEL-163296 Resolves: https://redhat.atlassian.net/browse/RHEL-163254 - Fix a regression in Xwayland 24.1.9 with XTS test Xlib10 Resolves: https://redhat.atlassian.net/browse/RHEL-169765 - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117510 - Rebase to Xwayland 24.1.9 (RHEL-129828) - CVE fix for: CVE-2025-62229 (RHEL-119977), CVE-2025-62230 (RHEL-120023), CVE-2025-62231 (RHEL-125018) - CVE fix for: CVE-2025-49175 (RHEL-97288), CVE-2025-49176 (RHEL-97334), CVE-2025-49177 (RHEL-97357), CVE-2025-49178 (RHEL-97393), CVE-2025-49179 (RHEL-97404), CVE-2025-49180 (RHEL-97244) - CVE fix for: CVE-2025-26594 (RHEL-80204), CVE-2025-26595 (RHEL-80187), CVE-2025-26596 (RHEL-80190), CVE-2025-26597 (RHEL-80193), CVE-2025-26598 (RHEL-80195), CVE-2025-26599 (RHEL-80202), CVE-2025-26600 (RHEL-80203), CVE-2025-26601 (RHEL-80207) - Fix for CVE-2024-9632 - (RHEL-61997) - xwayland 23.2.7 - (RHEL-29912) - Other security related fixes Resolves: https://redhat.atlassian.net/browse/RHEL-184288 - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260, CVE-2026-50261, CVE-2026-50262, CVE-2026-50263, CVE-2026-50264 Resolves: https://redhat.atlassian.net/browse/RHEL-182435 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163226 Resolves: https://redhat.atlassian.net/browse/RHEL-163308 Resolves: https://redhat.atlassian.net/browse/RHEL-163239 - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117509 - CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035), CVE-2025-62231 (RHEL-125003) - CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308), CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409), CVE-2025-49180 (RHEL-97253) - xfree86: Fix potentially NULL reference to platform device's PCI device Resolves: https://issues.redhat.com/browse/RHEL-84253 - Fix LEDs state after suspend/resume Resolves: https://issues.redhat.com/browse/RHEL-82085 - CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186), CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191), CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199), CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200) - CVE fix for CVE-2024-9632 - Backport fix for invalid Unicode sequence - CVE fix for CVE-2026-55999 Resolves: https://redhat.atlassian.net/browse/RHEL-191493 - Other security related fixes Resolves: https://redhat.atlassian.net/browse/RHEL-184288 - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260, CVE-2026-50261, CVE-2026-50262, CVE-2026-50263, CVE-2026-50264 Resolves: https://redhat.atlassian.net/browse/RHEL-182435 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163226 Resolves: https://redhat.atlassian.net/browse/RHEL-163308 Resolves: https://redhat.atlassian.net/browse/RHEL-163239 - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117509 - CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035), CVE-2025-62231 (RHEL-125003) - CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308), CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409), CVE-2025-49180 (RHEL-97253) - xfree86: Fix potentially NULL reference to platform device's PCI device Resolves: https://issues.redhat.com/browse/RHEL-84253 - Fix LEDs state after suspend/resume Resolves: https://issues.redhat.com/browse/RHEL-82085 - CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186), CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191), CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199), CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200) - CVE fix for: CVE-2026-88812, CVE-2026-93521, CVE-2026-93523 Resolves: https://redhat.atlassian.net/browse/RHEL-278161 Resolves: https://redhat.atlassian.net/browse/RHEL-278164 Resolves: https://redhat.atlassian.net/browse/RHEL-278169 - CVE fix for CVE-2026-55999 Resolves: https://redhat.atlassian.net/browse/RHEL-191493 - Other security related fixes Resolves: https://redhat.atlassian.net/browse/RHEL-184288 - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260, CVE-2026-50261, CVE-2026-50262, CVE-2026-50263, CVE-2026-50264 Resolves: https://redhat.atlassian.net/browse/RHEL-182435 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163226 Resolves: https://redhat.atlassian.net/browse/RHEL-163308 Resolves: https://redhat.atlassian.net/browse/RHEL-163239 - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117509 - CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035), CVE-2025-62231 (RHEL-125003) - CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308), CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409), CVE-2025-49180 (RHEL-97253) - xfree86: Fix potentially NULL reference to platform device's PCI device Resolves: https://issues.redhat.com/browse/RHEL-84253 - Fix LEDs state after suspend/resume Resolves: https://issues.redhat.com/browse/RHEL-82085 - CVE fix for: CVE-2026-93516, CVE-2026-93517, CVE-2026-93518, CVE-2026-93519, CVE-2026-93520 Resolves: https://redhat.atlassian.net/browse/RHEL-282169 Resolves: https://redhat.atlassian.net/browse/RHEL-282173 Resolves: https://redhat.atlassian.net/browse/RHEL-282180 Resolves: https://redhat.atlassian.net/browse/RHEL-282184 Resolves: https://redhat.atlassian.net/browse/RHEL-282193 - CVE fix for: CVE-2026-88812, CVE-2026-93521, CVE-2026-93523 Resolves: https://redhat.atlassian.net/browse/RHEL-278161 Resolves: https://redhat.atlassian.net/browse/RHEL-278164 Resolves: https://redhat.atlassian.net/browse/RHEL-278169 - CVE fix for CVE-2026-55999 Resolves: https://redhat.atlassian.net/browse/RHEL-191493 - Other security related fixes Resolves: https://redhat.atlassian.net/browse/RHEL-184288 - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260, CVE-2026-50261, CVE-2026-50262, CVE-2026-50263, CVE-2026-50264 Resolves: https://redhat.atlassian.net/browse/RHEL-182435 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163226 Resolves: https://redhat.atlassian.net/browse/RHEL-163308 Resolves: https://redhat.atlassian.net/browse/RHEL-163239 - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117509 - CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035), CVE-2025-62231 (RHEL-125003) - CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308), CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409), CVE-2025-49180 (RHEL-97253) - xfree86: Fix potentially NULL reference to platform device's PCI device Resolves: https://issues.redhat.com/browse/RHEL-84253 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163227 Resolves: https://redhat.atlassian.net/browse/RHEL-163309 Resolves: https://redhat.atlassian.net/browse/RHEL-163240 - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117509 - CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035), CVE-2025-62231 (RHEL-125003) - CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308), CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409), CVE-2025-49180 (RHEL-97253) - xfree86: Fix potentially NULL reference to platform device's PCI device Resolves: https://issues.redhat.com/browse/RHEL-84253 - Fix LEDs state after suspend/resume Resolves: https://issues.redhat.com/browse/RHEL-82085 - CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186), CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191), CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199), CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200) - CVE fix for CVE-2024-9632 - Backport fix for invalid Unicode sequence - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Recommends: cpp for xrdb (#1954350) - Prune obsolete/unused utilities (#1954355) - Clean up the .gitignore file - Drop mcpp from xrdb (#1954350) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Provide xisxwayland like all other utilities - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - xisxwayland 1 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Drop Provides for edid-decode, was removed in 7.7-33 (#1954354) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - xev 1.2.4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Drop edid-decode since upstream has moved away from X.org - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Fix RHBZ #1870201 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fix upgrades from non-alternativized versions/packages - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - remove gimp plugin for eln, put explicit requirement for GTK2 - make is no longer in buildroot by default - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - remove gimp plugin for eln, put explicit requirement for GTK2 - make is no longer in buildroot by default - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuild because of build failure - Resolves: RHEL-94699 - Resolves: RHEL-103430 - Fix CVE-2022-24130 - Resolves: RHEL-94699 - Resolves: RHEL-103430 - Fix CVE-2022-45063 - Resolves: RHEL-87485 - Rebuild because of build failure - Resolves: RHEL-94699 - Resolves: RHEL-103430 - Fix CVE-2022-24130 - Resolves: RHEL-94699 - Resolves: RHEL-103430 - Fix CVE-2022-45063 - Resolves: RHEL-87485 - Update to version 0.8.2 - Drop patch 1-fix-man-page-installation.patch - Use SPDX license identifiers - Fix broken manpages (upstream commit 836f4e735cf3) - Add OSCI testing harness - Packaging of xxhash v0.8.1 for CS and RHEL copied from Fedora 36 - Update to version 0.8.2 - Drop patch 1-fix-man-page-installation.patch - Use SPDX license identifiers - Fix broken manpages (upstream commit 836f4e735cf3) - Add OSCI testing harness - Packaging of xxhash v0.8.1 for CS and RHEL copied from Fedora 36 - Fix arbitrary file write vulnerability Resolves: CVE-2022-1271 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Enabled CET for i686 (#1910368) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fix location of German man pages (RHBZ#1844813). - Fix: a buffer overflow in lzma_index_append() - Add test for the issue above (needs a special build config to actually fail -> does not fail in our environment) - Resolves: CVE-2026-34743 - Add noarch to ExclusiveArch - Disable building on i686 - Rebuild - Rebuild - Rebuild - Rebuild with regenerated Requires on Java - Fix arbitrary file write vulnerability Resolves: CVE-2022-1271 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Enabled CET for i686 (#1910368) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fix location of German man pages (RHBZ#1844813). - Fix: a buffer overflow in lzma_index_append() - Add test for the issue above (needs a special build config to actually fail -> does not fail in our environment) - Resolves: CVE-2026-34743 - Add missing BuildRequires - Related: RHEL-60277 - spec file fixes - Related: RHEL-60277 - fix CVE-2022-24795 - Related: Jira:RHEL-2112 - fix CVE-2023-33460 - Resolves: #2221253 - bump to 4.5.2 - remove pcre build dependency - Fix CVE-2025-3155 (RHEL-85927) - Fix CVE-2026-13601 (RHEL-190224) - Fix CVE-2025-3155 (RHEL-85927) - Fix CVE-2025-3155 (RHEL-85927) - Fix CVE-2026-13601 (RHEL-190224) - Fix CVE-2025-3155 (RHEL-85927) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 40.0 - Update to 40.rc - Add Requires on python3-lxml (#1932011) - Update to 40.beta - Switch to meson build system - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 3.38.0 - Update to 3.37.90 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fix CVE-2025-3155 (RHEL-85926) - Fix message dialog label layout (#2078712) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fix the Crash in zlib deflateBound() function on s390x - Resolves: BZ#2193044 - Fix covscan issue CWE-681 - Resolve fuzzing issue for unknown memory access - Rebased Power 8 optimization patches - Fix for Unnecessary IFUNC resolver for crc32_z - Fix for python3.11 broken libxml2 and lxml on s390x - Inflate small window optimization for IBM z15 rhbz#2154775 - Fix for IBM strm.adler rhbz#2134074 - Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c - Resolves: CVE-2022-37434 - Fix CVE-2018-25032 Resolves: CVE-2018-25032 - Fix for IBM compressBound() rhbz#2056899 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebase to version 1.1.2 (RHEL-118397) - Fix a directory traversal issue in unzip-mem Resolves: RHEL-6266 - Fix CVE-2020-18770 Previous patch was causing segfault Resolves: RHEL-14967 - Fix CVE-2020-18770 Resolves: RHEL-14967 - Fix a directory traversal issue in unzip-mem Resolves: RHEL-6266 - Fix CVE-2020-18770 Previous patch was causing segfault Resolves: RHEL-14967 - Fix CVE-2020-18770 Resolves: RHEL-14967